$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a613030303a3a2f33362d3336203d3e203234313339.roa File: 323430363a363130303a613030303a3a2f33362d3336203d3e203234313339.roa (raw, json) Hash identifier: uCVf0IR58lHW8JM2QosMidDxkjkeCVKFEmU0jlBsWbA= Subject key identifier: 14:E1:BB:9C:52:E3:67:C2:CF:16:8C:C1:A6:D2:B4:18:14:67:B5:CB Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204 Certificate serial: 2D076941D3096BEF608D993F950B2F0B44852FEF Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a613030303a3a2f33362d3336203d3e203234313339.roa Signing time: Tue 12 May 2026 07:24:49 +0000 ROA not before: Tue 12 May 2026 07:19:49 +0000 ROA not after: Tue 11 May 2027 07:24:49 +0000 asID: 24139 IP address blocks: 2406:6100:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:07:69:41:d3:09:6b:ef:60:8d:99:3f:95:0b:2f:0b:44:85:2f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204 Validity Not Before: May 12 07:19:49 2026 GMT Not After : May 11 07:24:49 2027 GMT Subject: CN=14E1BB9C52E367C2CF168CC1A6D2B4181467B5CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bf:f5:55:59:20:5a:45:e0:cf:f9:db:c1:49: e9:70:04:c0:62:71:bc:34:a4:c9:68:5a:18:c8:2e: 50:4a:61:f2:40:3c:74:e1:4f:0a:bb:59:17:c6:92: cf:9a:ac:48:a0:3e:8f:03:98:5d:dc:89:99:69:43: 9f:08:db:95:69:af:53:bf:3f:f4:13:33:5e:94:0f: f9:53:cb:5d:c1:43:8e:bd:d9:5a:b2:8d:0b:ce:7b: b3:1a:97:e6:d6:c5:44:c3:fa:99:be:02:7d:1f:1e: 2b:fd:55:96:e3:e5:03:f9:82:1b:33:89:1c:a3:95: 66:ea:cd:67:d4:68:dc:42:83:28:a2:9c:df:71:c8: 18:53:b8:c8:4d:a3:2a:a1:f1:07:99:1b:88:1c:69: 0a:06:65:f0:04:49:96:e0:56:ef:42:49:f3:84:1a: 0a:6a:3d:c3:7e:4f:bd:39:49:16:67:c6:44:fe:25: e9:10:fc:b2:2e:c7:47:26:87:70:63:dc:eb:ab:c2: 8f:41:d9:a8:27:01:d7:7c:b8:a3:b0:6b:8c:6d:e0: f3:7a:f2:80:4c:ba:6d:98:14:b5:16:98:e4:67:14: 26:2b:d9:67:83:1a:1e:e0:e8:fe:c1:db:a5:f1:94: 4d:21:dd:23:2a:66:b1:4c:0c:20:fb:9c:36:20:ce: e4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E1:BB:9C:52:E3:67:C2:CF:16:8C:C1:A6:D2:B4:18:14:67:B5:CB X509v3 Authority Key Identifier: keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a613030303a3a2f33362d3336203d3e203234313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:6100:a000::/36 Signature Algorithm: sha256WithRSAEncryption 08:e4:d3:02:ca:c1:2e:17:d9:e7:4f:3a:34:f1:51:63:6a:96: 4a:4a:13:69:d8:c0:de:4e:9d:8f:e8:11:08:67:31:0e:10:02: d5:23:3d:14:ed:1f:ec:b3:2b:ba:bc:58:c3:95:2e:d0:5d:81: ce:8f:3a:5f:5c:ec:a5:ab:a7:87:ef:15:95:f9:11:98:82:ec: e5:ab:ac:b1:1b:37:e4:4a:62:9c:85:ff:f9:79:eb:b0:21:af: f3:69:a8:0e:f9:20:24:37:ff:0e:72:d8:38:b4:f1:e8:b0:d9: fe:1d:42:88:a3:a3:94:ed:42:22:c1:be:30:98:60:7f:8a:ef: 88:e7:df:d9:93:80:a7:24:21:77:af:e5:35:dc:53:d9:1c:e6: 62:0f:ce:b0:c3:89:c0:f0:4f:6a:32:21:d3:4d:9b:2b:98:f8: 24:81:5b:4b:a0:2b:4c:8f:09:15:85:7a:2d:b0:fb:bb:e2:c2: 49:50:62:2b:92:03:61:1c:a5:ce:bd:76:c2:b3:10:c0:34:2e: 27:a2:da:48:c2:40:8b:a6:8e:dd:9e:42:36:0b:ee:8a:17:3b: 5b:32:60:cb:68:39:eb:72:30:8a:b4:40:56:11:63:3b:05:11: 1d:43:03:d5:32:89:01:5b:4a:64:cb:83:9a:87:5f:74:4f:3c: 36:71:c6:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIULQdpQdMJa+9gjZk/lQsvC0SFL+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4 NjkwNTIwNDAeFw0yNjA1MTIwNzE5NDlaFw0yNzA1MTEwNzI0NDlaMDMxMTAvBgNV BAMTKDE0RTFCQjlDNTJFMzY3QzJDRjE2OENDMUE2RDJCNDE4MTQ2N0I1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjv/VVWSBaReDP+dvBSelwBMBi cbw0pMloWhjILlBKYfJAPHThTwq7WRfGks+arEigPo8DmF3ciZlpQ58I25Vpr1O/ P/QTM16UD/lTy13BQ4692VqyjQvOe7Mal+bWxUTD+pm+An0fHiv9VZbj5QP5ghsz iRyjlWbqzWfUaNxCgyiinN9xyBhTuMhNoyqh8QeZG4gcaQoGZfAESZbgVu9CSfOE GgpqPcN+T705SRZnxkT+JekQ/LIux0cmh3Bj3Ourwo9B2agnAdd8uKOwa4xt4PN6 8oBMum2YFLUWmORnFCYr2WeDGh7g6P7B26XxlE0h3SMqZrFMDCD7nDYgzuQHAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUFOG7nFLjZ8LPFozBptK0GBRntcswHwYDVR0j BBgwFoAUqjmun8QXIZ1KhNd1n4KGn4aQUgQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjQ1MzA5OTEyNTQwNzc2My8wL0FBMzlBRTlGQzQxNzIxOUQ0QTg0RDc3NTlGODI4 NjlGODY5MDUyMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4NjkwNTIwNC5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA2NDUzMDk5MTI1NDA3NzYzLzAvMzIzNDMwMzYz YTM2MzEzMDMwM2E2MTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzQz MTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgQkBmEAoDANBgkqhkiG9w0BAQsFAAOCAQEACOTTAsrB LhfZ5086NPFRY2qWSkoTadjA3k6dj+gRCGcxDhAC1SM9FO0f7LMrurxYw5Uu0F2B zo86X1zspaunh+8VlfkRmILs5aussRs35EpinIX/+XnrsCGv82moDvkgJDf/DnLY OLTx6LDZ/h1CiKOjlO1CIsG+MJhgf4rviOff2ZOApyQhd6/lNdxT2RzmYg/OsMOJ wPBPajIh002bK5j4JIFbS6ArTI8JFYV6LbD7u+LCSVBiK5IDYRylzr12wrMQwDQu J6LaSMJAi6aO3Z5CNgvuihc7WzJgy2g563IwirRAVhFjOwURHUMD1TKJAVtKZMuD modfdE88NnHGXQ== -----END CERTIFICATE-----Generated at Wed May 13 17:41:42 2026 by rpki-client