$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/323030313a343531303a3a2f32392d3239203d3e2030.roa File: 323030313a343531303a3a2f32392d3239203d3e2030.roa (raw, json) Hash identifier: NIzc5Vp6P3bXMlV4h+4n9UnVuK9+klm+AsPZpcP3Z/A= Subject key identifier: 57:BE:74:71:6E:3A:91:A8:68:98:F0:ED:88:81:47:96:D2:1F:76:CB Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Certificate serial: 0BB70BDF8309B7BF058B400ACC478721144A1930 Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/323030313a343531303a3a2f32392d3239203d3e2030.roa Signing time: Thu 07 May 2026 02:33:20 +0000 ROA not before: Thu 07 May 2026 02:28:20 +0000 ROA not after: Thu 06 May 2027 02:33:20 +0000 asID: 0 IP address blocks: 2001:4510::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b7:0b:df:83:09:b7:bf:05:8b:40:0a:cc:47:87:21:14:4a:19:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Validity Not Before: May 7 02:28:20 2026 GMT Not After : May 6 02:33:20 2027 GMT Subject: CN=57BE74716E3A91A86898F0ED88814796D21F76CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:bc:5e:2a:42:53:d3:c2:3a:5e:99:67:6b: 47:5a:1c:ec:74:e7:1b:fb:5e:24:32:4d:4e:3d:f9: 71:44:25:2e:97:da:ea:91:8d:f7:22:e8:62:29:be: 05:9a:e5:67:28:3d:f0:0a:fc:cb:69:e9:29:9d:99: e9:87:92:26:2f:a1:35:a9:58:c9:71:72:0b:ba:c2: 4e:47:da:13:e8:32:20:b5:59:1c:da:75:d0:80:81: 85:d9:d7:ad:74:6e:29:e1:48:bb:fb:5e:ab:ac:3d: fd:43:96:5f:76:a3:21:d7:62:d8:ac:1b:bd:68:39: 3d:ec:7d:a6:3e:40:44:d0:a7:86:78:b6:3e:d4:4c: 37:d0:40:8f:dd:8b:93:db:b3:e2:68:8f:a7:78:d3: 06:f6:c3:21:17:27:1f:be:2b:02:c6:45:44:60:61: d5:bf:d5:7d:41:76:26:73:ad:28:3c:a5:2a:8e:1b: 0e:dc:61:c1:63:b6:63:6d:d2:18:be:2e:56:44:76: b4:ee:55:ee:b4:a2:b4:f1:61:11:bb:60:f6:b6:7c: bb:a0:ae:a5:be:95:ef:14:3a:36:60:b8:f1:1c:53: c3:8f:47:37:bb:9a:d9:99:a4:c3:af:f6:47:4f:10: c0:d3:8c:c4:8c:a2:5d:cf:78:16:aa:2a:ac:cd:42: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BE:74:71:6E:3A:91:A8:68:98:F0:ED:88:81:47:96:D2:1F:76:CB X509v3 Authority Key Identifier: keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/323030313a343531303a3a2f32392d3239203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:4510::/29 Signature Algorithm: sha256WithRSAEncryption 82:6f:d5:2b:4d:8e:5e:b0:29:2e:e5:d3:b4:c3:b8:81:f9:6d: 14:00:b8:93:a0:e4:13:27:50:4d:da:53:23:71:a0:54:e3:f5: 11:f6:38:75:a9:f1:1d:45:54:32:24:60:a9:9e:cf:cc:43:d1: 3a:6f:01:e2:e2:20:5e:33:e0:74:2c:6b:00:c6:2d:e3:01:cc: cc:81:60:3b:a4:cb:46:a1:6f:fd:4f:28:e5:83:89:cf:6a:7d: 1e:85:e7:2a:6a:b9:cb:10:ee:be:46:da:b8:68:df:78:66:4a: 70:68:66:18:bf:09:6d:76:35:b9:34:01:ec:1e:c3:fb:bb:5a: fe:b5:86:2a:a5:cf:4c:51:bb:31:60:df:a7:2a:87:23:89:69: 5d:1a:ca:8b:76:b1:2e:8f:0c:d0:88:27:8d:87:06:5e:fc:32: 86:81:98:6d:0f:f9:7e:87:48:17:17:a2:c6:b2:b0:d8:82:72: 5c:9d:37:08:d5:0a:c4:42:13:42:b7:1c:1e:13:7a:fa:03:5a: 48:19:5a:89:49:c7:a6:db:28:24:c9:e5:aa:bc:be:70:ca:2c: c1:c6:20:96:f7:5c:4e:8d:78:3a:33:71:d8:3a:52:a1:a3:b8: 24:c3:0b:53:39:33:86:f7:d5:02:d5:c9:ef:04:2e:cb:6e:18: 6d:fb:b1:7b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUC7cL34MJt78Fi0AKzEeHIRRKGTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYz QTdGQ0IwOTAeFw0yNjA1MDcwMjI4MjBaFw0yNzA1MDYwMjMzMjBaMDMxMTAvBgNV BAMTKDU3QkU3NDcxNkUzQTkxQTg2ODk4RjBFRDg4ODE0Nzk2RDIxRjc2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcMbxeKkJT08I6Xplna0daHOx0 5xv7XiQyTU49+XFEJS6X2uqRjfci6GIpvgWa5WcoPfAK/Mtp6SmdmemHkiYvoTWp WMlxcgu6wk5H2hPoMiC1WRzaddCAgYXZ1610binhSLv7XqusPf1Dll92oyHXYtis G71oOT3sfaY+QETQp4Z4tj7UTDfQQI/di5Pbs+Joj6d40wb2wyEXJx++KwLGRURg YdW/1X1BdiZzrSg8pSqOGw7cYcFjtmNt0hi+LlZEdrTuVe60orTxYRG7YPa2fLug rqW+le8UOjZguPEcU8OPRze7mtmZpMOv9kdPEMDTjMSMol3PeBaqKqzNQgYlAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUV750cW46kahomPDtiIFHltIfdsswHwYDVR0j BBgwFoAUOOQnl3SE828/CkUojW32Tzp/ywkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDU4NjM1ODA5NTA4NTU3Ny8wLzM4RTQyNzk3NzQ4NEYzNkYzRjBBNDUyODhENkRG NjRGM0E3RkNCMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYzQTdGQ0IwOS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA0NTg2MzU4MDk1MDg1NTc3LzAvMzIzMDMwMzEzYTM0 MzUzMTMwM2EzYTJmMzIzOTJkMzIzOTIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMgAUUQ MA0GCSqGSIb3DQEBCwUAA4IBAQCCb9UrTY5esCku5dO0w7iB+W0UALiToOQTJ1BN 2lMjcaBU4/UR9jh1qfEdRVQyJGCpns/MQ9E6bwHi4iBeM+B0LGsAxi3jAczMgWA7 pMtGoW/9Tyjlg4nPan0ehecqarnLEO6+Rtq4aN94ZkpwaGYYvwltdjW5NAHsHsP7 u1r+tYYqpc9MUbsxYN+nKocjiWldGsqLdrEujwzQiCeNhwZe/DKGgZhtD/l+h0gX F6LGsrDYgnJcnTcI1QrEQhNCtxweE3r6A1pIGVqJScem2ygkyeWqvL5wyizBxiCW 91xOjXg6M3HYOlKho7gkwwtTOTOG99UC1cnvBC7Lbhht+7F7 -----END CERTIFICATE-----Generated at Tue May 12 21:47:54 2026 by rpki-client