$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/323030313a343531303a3430303a3a2f34302d3430203d3e2039333839.roa File: 323030313a343531303a3430303a3a2f34302d3430203d3e2039333839.roa (raw, json) Hash identifier: kR0k2qzxMHPkrX3QFX8/hgGoMLOgQv8DRMr2bd0bU/I= Subject key identifier: 78:E3:F9:01:30:95:D6:6E:F4:E0:F9:3B:3B:6E:20:A5:25:90:D1:2B Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Certificate serial: 02C2BD9E5D20C0D92BB65BC115FBE5F0B13C674B Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/323030313a343531303a3430303a3a2f34302d3430203d3e2039333839.roa Signing time: Thu 07 May 2026 02:33:20 +0000 ROA not before: Thu 07 May 2026 02:28:20 +0000 ROA not after: Thu 06 May 2027 02:33:20 +0000 asID: 9389 IP address blocks: 2001:4510:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c2:bd:9e:5d:20:c0:d9:2b:b6:5b:c1:15:fb:e5:f0:b1:3c:67:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Validity Not Before: May 7 02:28:20 2026 GMT Not After : May 6 02:33:20 2027 GMT Subject: CN=78E3F9013095D66EF4E0F93B3B6E20A52590D12B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:bd:31:36:32:aa:47:df:72:2c:f7:bd:6a: f2:cd:36:1e:94:f1:74:53:ad:87:69:86:aa:ca:4f: 79:4a:57:75:cf:d9:ed:ff:d6:98:a9:8b:e6:8a:6c: 94:df:6b:dc:9a:1f:17:f4:b5:02:d8:0d:bf:07:d4: d1:4c:1e:40:c7:f6:22:a8:d6:54:5d:fc:d8:a5:b3: 37:2f:16:ee:d7:23:9b:ac:bd:bb:26:51:a0:e2:ef: 40:97:e4:38:f2:9a:10:04:07:16:44:a8:23:1a:c2: bf:ac:a5:b5:58:2a:68:73:f5:e2:3e:0b:e7:2d:cd: 32:0f:fd:4f:2a:8a:e6:57:ba:ee:9b:4c:83:75:ba: 03:f8:ce:91:1a:0f:37:58:18:ae:a9:57:73:f6:6b: 12:cc:9b:08:26:84:52:ea:d7:45:8b:35:16:de:4a: 20:7d:6a:6e:95:03:07:0c:65:6e:89:d4:04:86:0b: 10:e1:7e:7f:60:37:94:99:e4:0c:d1:f5:e0:8d:c6: 7b:d5:33:5d:7d:6f:9b:d1:5c:0c:c8:d3:a7:e6:8d: 26:e5:c3:6e:93:1e:6e:5d:0f:c4:24:11:57:01:5c: e1:64:5e:5b:e8:d1:a5:dd:a2:45:27:a9:27:e1:e0: 8d:f1:e7:b6:f3:7c:31:ad:5c:aa:75:a1:2e:80:f9: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E3:F9:01:30:95:D6:6E:F4:E0:F9:3B:3B:6E:20:A5:25:90:D1:2B X509v3 Authority Key Identifier: keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/323030313a343531303a3430303a3a2f34302d3430203d3e2039333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:4510:400::/40 Signature Algorithm: sha256WithRSAEncryption 7a:ba:ea:99:4a:74:7d:ba:3b:8c:c3:c4:3d:1b:1f:82:4a:25: 67:f7:6d:5b:74:73:e4:06:54:ca:a0:c7:b6:56:4a:c8:72:1d: f1:dd:fc:7e:d5:6a:e0:dc:7a:f2:98:3a:f5:f9:b5:54:af:61: 76:f0:4c:1b:b8:8c:88:2b:43:48:da:77:23:d5:b7:f5:ed:c1: 38:a1:55:bf:bd:83:7f:9a:92:b2:78:84:cd:bb:5f:6c:81:67: b5:6f:b1:4b:6a:3b:0e:59:59:51:cb:1c:41:80:13:55:aa:a8: 5b:27:31:ec:ec:90:40:ca:3f:5d:a6:42:57:fd:b8:2f:18:ae: 90:40:6a:e7:37:09:c9:3b:d7:9d:ee:80:35:6c:cd:37:f6:ab: f2:56:53:d6:9f:13:8e:71:6a:01:cf:99:14:a2:0b:4c:d8:54: 7d:95:01:c4:03:9d:33:64:54:8b:b7:44:d6:b7:63:80:86:4b: 22:8d:5a:bc:f0:e3:c5:6e:40:d0:a2:38:79:2c:b6:31:7c:89: c6:7a:33:f0:c5:69:a3:36:c6:bc:72:f1:23:cb:c5:f8:d9:13: 26:b6:ca:05:42:06:98:6f:47:f0:c4:4e:98:93:a7:e3:1b:49: b4:94:b3:a9:ee:78:27:85:a1:46:ba:74:e5:a2:c5:72:3a:d3: 24:6b:4d:7b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUAsK9nl0gwNkrtlvBFfvl8LE8Z0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYz QTdGQ0IwOTAeFw0yNjA1MDcwMjI4MjBaFw0yNzA1MDYwMjMzMjBaMDMxMTAvBgNV BAMTKDc4RTNGOTAxMzA5NUQ2NkVGNEUwRjkzQjNCNkUyMEE1MjU5MEQxMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bL0xNjKqR99yLPe9avLNNh6U 8XRTrYdphqrKT3lKV3XP2e3/1pipi+aKbJTfa9yaHxf0tQLYDb8H1NFMHkDH9iKo 1lRd/NilszcvFu7XI5usvbsmUaDi70CX5DjymhAEBxZEqCMawr+spbVYKmhz9eI+ C+ctzTIP/U8qiuZXuu6bTIN1ugP4zpEaDzdYGK6pV3P2axLMmwgmhFLq10WLNRbe SiB9am6VAwcMZW6J1ASGCxDhfn9gN5SZ5AzR9eCNxnvVM119b5vRXAzI06fmjSbl w26THm5dD8QkEVcBXOFkXlvo0aXdokUnqSfh4I3x57bzfDGtXKp1oS6A+frVAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUeOP5ATCV1m704Pk7O24gpSWQ0SswHwYDVR0j BBgwFoAUOOQnl3SE828/CkUojW32Tzp/ywkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDU4NjM1ODA5NTA4NTU3Ny8wLzM4RTQyNzk3NzQ4NEYzNkYzRjBBNDUyODhENkRG NjRGM0E3RkNCMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYzQTdGQ0IwOS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA0NTg2MzU4MDk1MDg1NTc3LzAvMzIzMDMwMzEz YTM0MzUzMTMwM2EzNDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzOTMzMzgz OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwDgQCAAIwCAMGACABRRAEMA0GCSqGSIb3DQEBCwUAA4IBAQB6uuqZSnR9ujuM w8Q9Gx+CSiVn921bdHPkBlTKoMe2VkrIch3x3fx+1Wrg3HrymDr1+bVUr2F28Ewb uIyIK0NI2ncj1bf17cE4oVW/vYN/mpKyeITNu19sgWe1b7FLajsOWVlRyxxBgBNV qqhbJzHs7JBAyj9dpkJX/bgvGK6QQGrnNwnJO9ed7oA1bM039qvyVlPWnxOOcWoB z5kUogtM2FR9lQHEA50zZFSLt0TWt2OAhksijVq88OPFbkDQojh5LLYxfInGejPw xWmjNsa8cvEjy8X42RMmtsoFQgaYb0fwxE6Yk6fjG0m0lLOp7ngnhaFGunTlosVy OtMka017 -----END CERTIFICATE-----Generated at Wed May 13 14:25:16 2026 by rpki-client