$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106035279619293197/0/323430363a353334303a383838383a3a2f34382d3438203d3e20313339313336.roa File: 323430363a353334303a383838383a3a2f34382d3438203d3e20313339313336.roa (raw, json) Hash identifier: zxF4XU+UOfSOXjCPiWH/E42CXAhpEyNIu3eRTX0S5UQ= Subject key identifier: FB:1A:8E:2A:A9:25:D1:81:02:FE:BF:24:35:06:5E:13:46:74:3A:89 Certificate issuer: /CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415 Certificate serial: 1DE9AF8B2E0E569F2B88A30015EC586D12C5600E Authority key identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/323430363a353334303a383838383a3a2f34382d3438203d3e20313339313336.roa Signing time: Wed 13 May 2026 09:08:28 +0000 ROA not before: Wed 13 May 2026 09:03:28 +0000 ROA not after: Wed 12 May 2027 09:08:28 +0000 asID: 139136 IP address blocks: 2406:5340:8888::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e9:af:8b:2e:0e:56:9f:2b:88:a3:00:15:ec:58:6d:12:c5:60:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415 Validity Not Before: May 13 09:03:28 2026 GMT Not After : May 12 09:08:28 2027 GMT Subject: CN=FB1A8E2AA925D18102FEBF2435065E1346743A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:d0:5e:d9:73:a2:99:4e:30:86:3c:2c:24: 16:43:41:0c:3e:0d:53:96:f2:e2:15:32:6e:57:05: ad:8a:1c:e2:5d:bf:7b:15:f7:c6:6f:f6:07:c7:53: 3e:e9:bd:0b:33:4c:ff:cd:15:37:29:2d:e3:e6:e4: 68:ca:88:f4:f0:54:6d:de:25:75:df:ea:fb:d2:5d: e5:be:18:53:4b:37:fd:5e:8d:20:c3:f2:47:58:a7: 82:0d:fd:eb:be:c2:97:89:86:64:e7:c3:79:f8:e7: a6:f2:bb:8b:92:c0:83:87:c1:da:bc:49:d3:54:da: 6a:89:44:37:4f:ec:9c:67:8e:f4:71:c9:c9:e1:45: 5b:37:f3:7b:4a:ea:36:1d:f6:10:44:54:68:f6:64: c7:63:b5:a6:ba:69:e6:20:3b:58:69:12:ca:c4:09: ab:c4:0f:39:39:8d:55:80:33:02:7f:b4:f7:b3:a3: 33:f2:f9:1a:e8:57:7c:97:4a:7f:4d:1c:bf:45:92: 91:b4:41:fe:33:85:9e:44:2c:69:10:25:15:2f:a9: 45:27:16:98:8e:62:66:54:11:bc:87:43:62:68:c0: 08:89:e1:ad:26:4c:5b:a9:cf:8f:53:45:44:7e:81: 7b:bd:11:7a:92:fa:38:90:83:5c:bd:9e:27:09:ad: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1A:8E:2A:A9:25:D1:81:02:FE:BF:24:35:06:5E:13:46:74:3A:89 X509v3 Authority Key Identifier: keyid:90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/323430363a353334303a383838383a3a2f34382d3438203d3e20313339313336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:5340:8888::/48 Signature Algorithm: sha256WithRSAEncryption 3a:01:67:f9:db:f7:05:ff:05:28:e6:3a:e1:d8:85:69:f9:86: f5:f1:d5:8b:2d:ee:cb:8b:a0:2c:78:19:48:30:7e:5b:4a:02: bb:6d:a6:e7:5d:41:22:20:3b:8c:0d:7a:96:c8:de:2b:9c:68: c1:93:44:30:45:79:a0:c3:56:31:62:3e:d9:de:ef:19:70:b8: 99:4d:be:f7:b9:f8:b1:d1:67:fc:bb:a3:dd:40:65:1a:cb:a2: bb:72:ee:0c:5a:f4:17:2c:60:a0:85:41:38:07:9b:31:42:b4: 05:ee:fb:96:ee:3c:53:c6:c8:5c:05:2e:bd:08:d8:87:76:41: 22:94:b3:59:39:c7:e1:0e:aa:ff:ff:80:04:ed:d2:ff:60:de: 56:f5:1a:d7:9a:08:fe:a2:9f:b5:79:77:95:58:9a:dd:26:0d: e3:7b:0c:51:db:a5:97:bb:3d:6d:aa:a6:66:60:4f:6f:27:7e: a2:d9:7f:af:dd:c7:6a:35:a5:3e:90:41:1b:14:bb:5e:6f:1e: 9e:21:88:d7:be:85:3b:6d:68:e1:f7:e0:65:b9:40:12:5b:4a: b3:30:e6:8b:6d:98:98:1f:86:6b:5e:a9:6f:8e:f1:da:57:1d: 91:2b:33:93:60:c2:28:91:7b:1f:55:fb:30:ab:6d:ff:01:a7: 9f:2e:d2:95 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUHemviy4OVp8riKMAFexYbRLFYA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBCOTBCNzAwM0M0NDk3QTBEODJDQjgxQTJCRDREQTRF RTlBQjQxNTAeFw0yNjA1MTMwOTAzMjhaFw0yNzA1MTIwOTA4MjhaMDMxMTAvBgNV BAMTKEZCMUE4RTJBQTkyNUQxODEwMkZFQkYyNDM1MDY1RTEzNDY3NDNBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6eNBe2XOimU4whjwsJBZDQQw+ DVOW8uIVMm5XBa2KHOJdv3sV98Zv9gfHUz7pvQszTP/NFTcpLePm5GjKiPTwVG3e JXXf6vvSXeW+GFNLN/1ejSDD8kdYp4IN/eu+wpeJhmTnw3n456byu4uSwIOHwdq8 SdNU2mqJRDdP7JxnjvRxycnhRVs383tK6jYd9hBEVGj2ZMdjtaa6aeYgO1hpEsrE CavEDzk5jVWAMwJ/tPezozPy+RroV3yXSn9NHL9FkpG0Qf4zhZ5ELGkQJRUvqUUn FpiOYmZUEbyHQ2JowAiJ4a0mTFupz49TRUR+gXu9EXqS+jiQg1y9nicJrWxtAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQU+xqOKqkl0YEC/r8kNQZeE0Z0OokwHwYDVR0j BBgwFoAUkLkLcAPESXoNgsuBor1NpO6atBUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjAzNTI3OTYxOTI5MzE5Ny8wLzkwQjkwQjcwMDNDNDQ5N0EwRDgyQ0I4MUEyQkQ0 REE0RUU5QUI0MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTBCOTBCNzAwM0M0NDk3QTBEODJDQjgxQTJCRDREQTRFRTlBQjQxNS5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA2MDM1Mjc5NjE5MjkzMTk3LzAvMzIzNDMwMzYz YTM1MzMzNDMwM2EzODM4MzgzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMz OTMxMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQGU0CIiDANBgkqhkiG9w0BAQsFAAOCAQEAOgFn +dv3Bf8FKOY64diFafmG9fHViy3uy4ugLHgZSDB+W0oCu22m511BIiA7jA16lsje K5xowZNEMEV5oMNWMWI+2d7vGXC4mU2+97n4sdFn/Luj3UBlGsuiu3LuDFr0Fyxg oIVBOAebMUK0Be77lu48U8bIXAUuvQjYh3ZBIpSzWTnH4Q6q//+ABO3S/2DeVvUa 15oI/qKftXl3lVia3SYN43sMUdull7s9baqmZmBPbyd+otl/r93HajWlPpBBGxS7 Xm8eniGI176FO21o4ffgZblAEltKszDmi22YmB+Ga16pb47x2lcdkSszk2DCKJF7 H1X7MKtt/wGnny7SlQ== -----END CERTIFICATE-----Generated at Wed May 13 21:32:31 2026 by rpki-client