$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a373030303a3a2f33362d3336203d3e203234313339.roa File: 323430363a363130303a373030303a3a2f33362d3336203d3e203234313339.roa (raw, json) Hash identifier: Be53bBYRJ3Fpj790gazG2H7V+LnaMLTPqrJR+W7OJ2Y= Subject key identifier: 94:03:24:D4:8F:4D:A7:61:FB:D8:92:93:14:71:E5:42:4E:F7:0D:62 Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204 Certificate serial: 324818ADF0F8D28639FEC91A38C35CE550259338 Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a373030303a3a2f33362d3336203d3e203234313339.roa Signing time: Tue 12 May 2026 07:24:50 +0000 ROA not before: Tue 12 May 2026 07:19:50 +0000 ROA not after: Tue 11 May 2027 07:24:50 +0000 asID: 24139 IP address blocks: 2406:6100:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:48:18:ad:f0:f8:d2:86:39:fe:c9:1a:38:c3:5c:e5:50:25:93:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204 Validity Not Before: May 12 07:19:50 2026 GMT Not After : May 11 07:24:50 2027 GMT Subject: CN=940324D48F4DA761FBD892931471E5424EF70D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9e:3c:20:1b:4e:4c:b2:55:24:b4:ce:17:42: 41:8b:46:77:68:f1:05:06:a1:eb:83:d7:9d:6e:4d: 5d:bc:56:3b:49:2b:38:6b:d6:f2:c1:de:94:81:9a: d2:ae:72:dd:c3:37:3e:3f:c8:96:8f:cf:ad:cf:e4: 85:f1:4f:bc:8d:0f:4f:e3:ac:2b:d3:af:86:48:24: d2:a2:19:63:23:0b:48:7e:b3:d5:fb:64:69:a0:12: 93:6b:b3:7c:31:39:38:3d:55:46:77:66:11:54:2a: 24:34:c0:ea:e8:e0:95:d9:87:25:21:bc:66:dc:ae: 4b:fe:5c:cb:5e:50:e0:15:7b:c4:8e:46:e8:eb:8d: 23:08:a0:a9:5d:e6:bc:e3:93:65:76:9b:c7:15:b9: eb:5b:84:d6:9a:71:e2:61:09:b5:6c:3c:61:16:7c: e1:a3:e5:f8:6a:27:f5:10:e6:37:e8:88:01:5d:9f: d8:ff:48:3e:5a:d8:e5:d7:71:e1:a0:db:ca:2f:2d: 09:c5:48:64:3e:c9:4b:2d:0a:5d:76:5c:69:bd:d3: 6b:ed:09:d0:fd:23:fc:2b:5d:c4:7e:16:0d:39:9d: 14:17:a6:6d:ec:aa:59:35:07:74:b7:ac:75:ea:0e: e4:1c:6a:35:eb:32:22:a9:06:69:aa:bb:e4:34:77: 1d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:03:24:D4:8F:4D:A7:61:FB:D8:92:93:14:71:E5:42:4E:F7:0D:62 X509v3 Authority Key Identifier: keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a373030303a3a2f33362d3336203d3e203234313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:6100:7000::/36 Signature Algorithm: sha256WithRSAEncryption 0f:ef:c4:4e:4c:bf:3f:db:e9:9f:ca:f3:84:01:02:27:62:b4: db:8a:77:26:c3:0f:3d:0d:3b:6f:5e:cc:1f:ac:b5:9f:f2:1c: 29:d5:dc:ff:db:e8:f8:6e:99:be:10:00:21:53:13:c6:3f:72: 91:e8:68:f4:3a:d3:bc:6a:79:14:c1:81:11:24:9c:bc:07:d6: bd:4a:ff:0e:49:b7:ec:58:61:2c:df:1c:37:8c:c0:e1:97:9f: cc:54:9b:8e:a5:39:0c:e4:fc:15:c8:1f:86:c7:c2:ae:d7:f2: 72:d1:e3:6d:b9:78:cd:e8:67:3e:98:a3:84:9c:04:50:f0:49: 3d:b7:a6:a4:b3:4d:ee:ec:4a:fe:90:76:7a:2a:0f:0d:f8:a7: 20:81:c5:f8:0f:0c:1b:81:99:2e:b9:92:48:4d:31:76:3e:7e: 8e:fc:b5:2a:6c:97:26:28:14:7e:84:90:a2:8b:6f:70:68:12: 71:19:db:c5:35:82:27:83:0f:63:ba:36:88:0f:06:0d:81:84: 43:67:16:87:a4:bf:b2:d5:52:c7:cf:1e:3d:94:de:e4:c9:09: fb:f0:e9:10:d3:28:91:fa:67:c3:18:52:f4:39:4b:9e:36:93: ec:83:5b:db:98:8f:34:99:f6:a3:a1:69:c7:30:5e:1b:92:78: 43:2c:f4:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUMkgYrfD40oY5/skaOMNc5VAlkzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4 NjkwNTIwNDAeFw0yNjA1MTIwNzE5NTBaFw0yNzA1MTEwNzI0NTBaMDMxMTAvBgNV BAMTKDk0MDMyNEQ0OEY0REE3NjFGQkQ4OTI5MzE0NzFFNTQyNEVGNzBENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWnjwgG05MslUktM4XQkGLRndo 8QUGoeuD151uTV28VjtJKzhr1vLB3pSBmtKuct3DNz4/yJaPz63P5IXxT7yND0/j rCvTr4ZIJNKiGWMjC0h+s9X7ZGmgEpNrs3wxOTg9VUZ3ZhFUKiQ0wOro4JXZhyUh vGbcrkv+XMteUOAVe8SORujrjSMIoKld5rzjk2V2m8cVuetbhNaaceJhCbVsPGEW fOGj5fhqJ/UQ5jfoiAFdn9j/SD5a2OXXceGg28ovLQnFSGQ+yUstCl12XGm902vt CdD9I/wrXcR+Fg05nRQXpm3sqlk1B3S3rHXqDuQcajXrMiKpBmmqu+Q0dx0nAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUlAMk1I9Np2H72JKTFHHlQk73DWIwHwYDVR0j BBgwFoAUqjmun8QXIZ1KhNd1n4KGn4aQUgQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjQ1MzA5OTEyNTQwNzc2My8wL0FBMzlBRTlGQzQxNzIxOUQ0QTg0RDc3NTlGODI4 NjlGODY5MDUyMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4NjkwNTIwNC5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA2NDUzMDk5MTI1NDA3NzYzLzAvMzIzNDMwMzYz YTM2MzEzMDMwM2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzQz MTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgQkBmEAcDANBgkqhkiG9w0BAQsFAAOCAQEAD+/ETky/ P9vpn8rzhAECJ2K024p3JsMPPQ07b17MH6y1n/IcKdXc/9vo+G6ZvhAAIVMTxj9y keho9DrTvGp5FMGBESScvAfWvUr/Dkm37FhhLN8cN4zA4ZefzFSbjqU5DOT8Fcgf hsfCrtfyctHjbbl4zehnPpijhJwEUPBJPbempLNN7uxK/pB2eioPDfinIIHF+A8M G4GZLrmSSE0xdj5+jvy1KmyXJigUfoSQootvcGgScRnbxTWCJ4MPY7o2iA8GDYGE Q2cWh6S/stVSx88ePZTe5MkJ+/DpENMokfpnwxhS9DlLnjaT7INb25iPNJn2o6Fp xzBeG5J4Qyz0rg== -----END CERTIFICATE-----Generated at Wed May 13 17:41:52 2026 by rpki-client