$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a643030303a3a2f33362d3336203d3e203234313339.roa File: 323430363a363130303a643030303a3a2f33362d3336203d3e203234313339.roa (raw, json) Hash identifier: wqKR2OZj7TF30PoIDKbSL2mPIWb/uNK3lB7F9IauevM= Subject key identifier: A5:5F:C1:1C:F9:64:30:AE:8F:35:6C:43:3E:7E:77:30:85:49:3A:41 Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204 Certificate serial: 0406D38810D528DB6F593522C0153E2B5664A22F Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a643030303a3a2f33362d3336203d3e203234313339.roa Signing time: Tue 12 May 2026 07:24:50 +0000 ROA not before: Tue 12 May 2026 07:19:50 +0000 ROA not after: Tue 11 May 2027 07:24:50 +0000 asID: 24139 IP address blocks: 2406:6100:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:06:d3:88:10:d5:28:db:6f:59:35:22:c0:15:3e:2b:56:64:a2:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204 Validity Not Before: May 12 07:19:50 2026 GMT Not After : May 11 07:24:50 2027 GMT Subject: CN=A55FC11CF96430AE8F356C433E7E773085493A41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d5:b2:b2:8f:ff:5e:28:eb:b0:9a:cf:bc:3d: d8:81:78:3c:23:c9:75:ab:1e:a1:1d:1a:af:b9:d9: e3:1e:26:59:8f:e1:7d:fa:ba:20:51:c5:2e:d1:9d: cd:d6:00:d3:26:73:ec:16:8a:05:3d:47:cb:39:30: b6:56:dc:0c:a4:e7:41:c8:34:7d:10:c4:88:e1:75: 6c:1e:ca:4e:82:b2:26:81:98:12:43:43:54:03:28: 1a:13:33:12:5c:31:3c:a1:ab:33:c8:36:ef:f8:7e: 0d:a1:5e:eb:ec:3e:2f:c9:9d:59:03:0b:fe:57:84: ed:e9:d0:68:f7:ac:29:45:c5:8f:ee:34:3e:17:51: 05:4c:88:4f:ba:b1:d3:99:1f:e8:8b:60:a5:35:f4: 5a:f8:5f:18:05:b1:80:f4:18:63:de:f6:66:ac:c1: 3c:7f:f8:21:f4:41:f8:be:e8:ab:6d:1c:53:59:e8: b6:d7:56:76:45:ee:59:71:7e:38:66:aa:ec:a6:ce: fa:b5:35:7e:ad:79:7c:a4:d7:b4:70:ec:9a:af:c5: 1e:57:48:6a:b0:66:ca:3f:ee:e2:5e:da:20:91:9a: 0b:b0:c8:20:d8:99:b6:03:26:03:66:1f:94:8e:dd: f6:5d:5c:cf:75:aa:f7:b3:9f:80:89:24:1f:12:26: d5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5F:C1:1C:F9:64:30:AE:8F:35:6C:43:3E:7E:77:30:85:49:3A:41 X509v3 Authority Key Identifier: keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a643030303a3a2f33362d3336203d3e203234313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:6100:d000::/36 Signature Algorithm: sha256WithRSAEncryption aa:16:71:85:1d:80:ab:e2:d8:8e:40:27:19:e7:07:7f:64:bc: 5d:29:0e:99:29:cb:af:00:dc:5d:91:c1:8d:0c:aa:f7:00:04: 43:dd:dd:3f:4a:ab:c5:29:ee:f4:cc:c5:9e:b4:6f:d9:f9:65: e6:d5:e2:63:48:b0:cf:09:53:a2:3e:d9:6a:26:13:56:af:e2: 12:5a:ec:97:7d:ce:63:ae:96:ac:8a:e4:a1:58:15:a9:41:7c: 3d:5c:34:c5:74:25:4f:17:3e:a6:2e:ed:b8:89:33:d7:30:5e: 8e:01:d3:44:58:db:8a:82:1e:49:d5:1e:d9:8f:52:e2:b1:d3: d0:07:f2:e1:b5:b7:d3:0f:d2:5e:8a:9b:99:2b:e6:4b:d3:a9: 0d:25:4c:50:69:f8:72:62:0d:2d:04:7c:6e:17:2d:ed:bd:b9: fd:3c:6f:fb:09:80:25:87:75:84:4d:22:a2:18:a9:b4:03:9f: c8:46:59:a5:b0:82:e5:ef:7b:65:d8:6c:64:f0:7d:6d:d0:82: d8:17:c3:a2:f7:74:fc:00:ea:c5:cd:a7:ab:0e:60:69:43:08: 4e:bd:dc:a8:c9:52:fc:1a:93:17:8b:36:70:99:14:3e:91:b0: 77:4a:59:d5:5b:d7:b2:56:37:cb:ca:c6:4c:c1:2d:56:aa:87: 85:ee:e1:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUBAbTiBDVKNtvWTUiwBU+K1Zkoi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4 NjkwNTIwNDAeFw0yNjA1MTIwNzE5NTBaFw0yNzA1MTEwNzI0NTBaMDMxMTAvBgNV BAMTKEE1NUZDMTFDRjk2NDMwQUU4RjM1NkM0MzNFN0U3NzMwODU0OTNBNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc1bKyj/9eKOuwms+8PdiBeDwj yXWrHqEdGq+52eMeJlmP4X36uiBRxS7Rnc3WANMmc+wWigU9R8s5MLZW3Ayk50HI NH0QxIjhdWweyk6CsiaBmBJDQ1QDKBoTMxJcMTyhqzPINu/4fg2hXuvsPi/JnVkD C/5XhO3p0Gj3rClFxY/uND4XUQVMiE+6sdOZH+iLYKU19Fr4XxgFsYD0GGPe9mas wTx/+CH0Qfi+6KttHFNZ6LbXVnZF7llxfjhmquymzvq1NX6teXyk17Rw7JqvxR5X SGqwZso/7uJe2iCRmguwyCDYmbYDJgNmH5SO3fZdXM91qvezn4CJJB8SJtV1AgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUpV/BHPlkMK6PNWxDPn53MIVJOkEwHwYDVR0j BBgwFoAUqjmun8QXIZ1KhNd1n4KGn4aQUgQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjQ1MzA5OTEyNTQwNzc2My8wL0FBMzlBRTlGQzQxNzIxOUQ0QTg0RDc3NTlGODI4 NjlGODY5MDUyMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4NjkwNTIwNC5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA2NDUzMDk5MTI1NDA3NzYzLzAvMzIzNDMwMzYz YTM2MzEzMDMwM2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzQz MTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgQkBmEA0DANBgkqhkiG9w0BAQsFAAOCAQEAqhZxhR2A q+LYjkAnGecHf2S8XSkOmSnLrwDcXZHBjQyq9wAEQ93dP0qrxSnu9MzFnrRv2fll 5tXiY0iwzwlToj7ZaiYTVq/iElrsl33OY66WrIrkoVgVqUF8PVw0xXQlTxc+pi7t uIkz1zBejgHTRFjbioIeSdUe2Y9S4rHT0Afy4bW30w/SXoqbmSvmS9OpDSVMUGn4 cmINLQR8bhct7b25/Txv+wmAJYd1hE0iohiptAOfyEZZpbCC5e97ZdhsZPB9bdCC 2BfDovd0/ADqxc2nqw5gaUMITr3cqMlS/BqTF4s2cJkUPpGwd0pZ1VvXslY3y8rG TMEtVqqHhe7hrA== -----END CERTIFICATE-----Generated at Wed May 13 17:41:18 2026 by rpki-client