$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a663030303a3a2f33362d3336203d3e203234313339.roa File: 323430363a363130303a663030303a3a2f33362d3336203d3e203234313339.roa (raw, json) Hash identifier: k7ppHJGvPeQCRuKbE+YGT+zFqwt94W47Aqe+iURX61s= Subject key identifier: 1B:87:AA:34:03:49:91:B4:19:79:24:21:9A:6D:1E:DF:2F:AF:7D:8B Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204 Certificate serial: 422DA367859A81F5C1579A4865E952B01C62CC66 Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a663030303a3a2f33362d3336203d3e203234313339.roa Signing time: Tue 12 May 2026 07:24:51 +0000 ROA not before: Tue 12 May 2026 07:19:51 +0000 ROA not after: Tue 11 May 2027 07:24:51 +0000 asID: 24139 IP address blocks: 2406:6100:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2d:a3:67:85:9a:81:f5:c1:57:9a:48:65:e9:52:b0:1c:62:cc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204 Validity Not Before: May 12 07:19:51 2026 GMT Not After : May 11 07:24:51 2027 GMT Subject: CN=1B87AA34034991B4197924219A6D1EDF2FAF7D8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:23:e2:9b:84:6c:dd:2d:0a:aa:b9:dc:06: c3:42:05:e1:4b:9f:02:e1:f6:9e:e6:bf:47:d9:0e: 58:8b:e8:53:4d:10:93:03:81:ec:f1:c8:24:bf:a8: 50:8d:e3:d4:68:db:47:24:c7:b9:13:95:75:d6:b6: 97:a7:dd:e5:11:aa:e1:eb:b2:eb:51:f1:d8:74:cd: 29:e6:cb:2e:57:e2:4e:cb:af:3d:fb:ae:ec:22:5c: a8:39:92:60:71:f7:f4:e5:f5:65:6c:52:40:31:50: f3:f9:e7:c9:5f:7f:20:2c:a3:4c:c1:d5:e5:a1:57: 83:4b:28:14:7f:ac:d3:c7:77:0f:d0:82:a2:29:69: 79:f8:db:e5:81:1d:25:31:c8:5e:a9:40:a2:bf:b7: e1:de:c3:cd:52:7a:70:0c:a8:35:b0:ac:8a:d4:31: b7:32:b0:3f:33:99:03:e9:98:58:7d:0f:5a:d4:81: 73:0b:40:31:50:65:65:83:a9:84:42:74:c3:d5:2e: 09:4d:24:07:d0:04:46:34:b4:7f:70:c8:85:1c:8a: e3:c1:43:5c:e1:bf:66:46:68:46:dc:2f:b4:d3:9e: a0:b6:a1:ac:2c:0b:fd:65:ac:1b:a5:d8:f0:c2:8e: 6c:1f:e8:52:6e:2e:27:04:06:0e:4c:ee:e2:66:97: af:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:87:AA:34:03:49:91:B4:19:79:24:21:9A:6D:1E:DF:2F:AF:7D:8B X509v3 Authority Key Identifier: keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a663030303a3a2f33362d3336203d3e203234313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:6100:f000::/36 Signature Algorithm: sha256WithRSAEncryption a6:c3:fa:37:21:92:ce:a9:5c:40:c3:7a:8a:43:cf:3c:fb:80: cd:61:72:1d:bd:01:f7:c5:bf:68:68:29:d1:99:68:1b:52:1a: 55:bc:b3:54:16:b6:50:64:70:39:ad:bb:42:f4:01:37:48:4e: 87:55:60:7f:bb:79:8d:b0:8a:b2:34:09:fa:13:f3:06:e7:24: 71:af:83:aa:29:d5:78:a7:78:d1:aa:2d:a2:11:b0:7e:f1:63: ce:39:a0:ad:b3:6c:65:18:98:5c:e7:ad:15:4c:f1:c3:f7:37: f5:a2:3d:00:4c:4f:3c:ec:6b:9a:60:ed:12:2f:00:0c:3e:98: 91:a8:4b:7a:90:57:f2:a9:cd:67:fb:cf:2e:5d:d9:6f:11:8a: d2:3e:7a:fe:9f:17:fd:bd:29:16:c3:e4:24:33:bd:0e:2f:1a: c9:f0:a1:ab:bc:48:07:02:64:db:4e:ba:7e:ad:79:64:1a:27: ab:b8:ae:c4:ec:b0:2e:f3:eb:a8:d3:c5:cc:11:5d:6e:28:84: 24:eb:83:e1:ab:c0:a3:94:9a:58:83:05:8f:a0:aa:77:75:09: a0:91:82:ee:04:59:b4:0d:cc:2f:79:9b:35:b5:87:02:df:21: 8d:e6:f9:9b:12:19:65:98:72:0b:78:63:6a:5e:31:01:05:83: 98:c4:24:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUQi2jZ4WagfXBV5pIZelSsBxizGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4 NjkwNTIwNDAeFw0yNjA1MTIwNzE5NTFaFw0yNzA1MTEwNzI0NTFaMDMxMTAvBgNV BAMTKDFCODdBQTM0MDM0OTkxQjQxOTc5MjQyMTlBNkQxRURGMkZBRjdEOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR9SPim4Rs3S0KqrncBsNCBeFL nwLh9p7mv0fZDliL6FNNEJMDgezxyCS/qFCN49Ro20ckx7kTlXXWtpen3eURquHr sutR8dh0zSnmyy5X4k7Lrz37ruwiXKg5kmBx9/Tl9WVsUkAxUPP558lffyAso0zB 1eWhV4NLKBR/rNPHdw/QgqIpaXn42+WBHSUxyF6pQKK/t+Hew81SenAMqDWwrIrU MbcysD8zmQPpmFh9D1rUgXMLQDFQZWWDqYRCdMPVLglNJAfQBEY0tH9wyIUciuPB Q1zhv2ZGaEbcL7TTnqC2oawsC/1lrBul2PDCjmwf6FJuLicEBg5M7uJml68/AgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUG4eqNANJkbQZeSQhmm0e3y+vfYswHwYDVR0j BBgwFoAUqjmun8QXIZ1KhNd1n4KGn4aQUgQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjQ1MzA5OTEyNTQwNzc2My8wL0FBMzlBRTlGQzQxNzIxOUQ0QTg0RDc3NTlGODI4 NjlGODY5MDUyMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4NjkwNTIwNC5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA2NDUzMDk5MTI1NDA3NzYzLzAvMzIzNDMwMzYz YTM2MzEzMDMwM2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzQz MTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgQkBmEA8DANBgkqhkiG9w0BAQsFAAOCAQEApsP6NyGS zqlcQMN6ikPPPPuAzWFyHb0B98W/aGgp0ZloG1IaVbyzVBa2UGRwOa27QvQBN0hO h1Vgf7t5jbCKsjQJ+hPzBuckca+DqinVeKd40aotohGwfvFjzjmgrbNsZRiYXOet FUzxw/c39aI9AExPPOxrmmDtEi8ADD6YkahLepBX8qnNZ/vPLl3ZbxGK0j56/p8X /b0pFsPkJDO9Di8ayfChq7xIBwJk2066fq15ZBonq7iuxOywLvPrqNPFzBFdbiiE JOuD4avAo5SaWIMFj6Cqd3UJoJGC7gRZtA3ML3mbNbWHAt8hjeb5mxIZZZhyC3hj al4xAQWDmMQkWw== -----END CERTIFICATE-----Generated at Wed May 13 17:42:03 2026 by rpki-client