$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/323430323a653838303a3a2f34382d3438203d3e203633363134.roa File: 323430323a653838303a3a2f34382d3438203d3e203633363134.roa (raw, json) Hash identifier: kraliiar4yxqugi2IGhcy/yE4wMZ9/dOXuCy2SdmB+s= Subject key identifier: AD:67:7A:AB:9C:29:D4:8E:2E:72:30:FD:26:BC:7A:7A:2E:14:A6:5B Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874 Certificate serial: 7E0697AC8D2FA013616CAA9C0D777F8BC47B3F42 Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/323430323a653838303a3a2f34382d3438203d3e203633363134.roa Signing time: Tue 12 May 2026 09:22:14 +0000 ROA not before: Tue 12 May 2026 09:17:14 +0000 ROA not after: Tue 11 May 2027 09:22:14 +0000 asID: 63614 IP address blocks: 2402:e880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:06:97:ac:8d:2f:a0:13:61:6c:aa:9c:0d:77:7f:8b:c4:7b:3f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874 Validity Not Before: May 12 09:17:14 2026 GMT Not After : May 11 09:22:14 2027 GMT Subject: CN=AD677AAB9C29D48E2E7230FD26BC7A7A2E14A65B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7b:b8:a4:34:7d:7e:a1:b4:d8:e9:2c:ae:70: 3c:08:5b:66:dc:b3:14:c7:fa:5d:eb:a2:92:1d:19: 82:bf:70:47:2d:33:97:ce:5a:30:10:49:83:15:c3: a9:6a:58:89:6e:fe:65:68:e6:fb:ae:31:90:3f:87: 07:fc:a4:a8:6f:49:7a:cb:09:d6:53:99:1e:55:f9: 83:87:2d:71:75:16:0b:2c:6d:51:d3:b1:84:9a:60: 6f:7c:29:18:5f:70:f2:ee:66:c0:40:6f:71:42:be: 9c:5a:93:c8:58:12:40:01:14:7f:f1:c0:92:1c:9d: 8c:16:bc:60:92:57:0d:aa:c5:47:cb:91:ce:34:5d: 27:b2:d1:ab:e4:c0:e3:41:f7:0b:7c:61:77:67:dd: cf:8a:96:12:a6:b4:f0:64:c4:df:98:68:a3:32:96: af:1f:63:5c:ff:4e:47:89:44:e2:1e:b6:7a:26:bc: 2a:77:68:45:34:2f:12:7f:b5:77:31:63:10:af:2a: 19:f9:2b:7c:48:39:ae:fa:48:be:5d:23:c6:6b:61: aa:db:a8:d6:e9:4e:9b:66:1d:c4:d5:e3:f4:77:3b: f0:12:82:d1:3c:e8:35:53:17:05:50:04:75:85:a9: 6e:ec:fa:30:30:6f:e7:94:e2:ea:72:5f:57:12:d1: fc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:67:7A:AB:9C:29:D4:8E:2E:72:30:FD:26:BC:7A:7A:2E:14:A6:5B X509v3 Authority Key Identifier: keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/323430323a653838303a3a2f34382d3438203d3e203633363134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:e880::/48 Signature Algorithm: sha256WithRSAEncryption 28:b6:64:31:5f:20:ba:14:49:7a:65:11:58:22:d8:05:6b:10: e0:7f:29:ed:7a:7e:ca:bf:e4:ef:d0:b3:e4:e5:a0:0c:54:06: 96:c7:bd:32:c0:07:c8:a5:f5:d7:7d:f9:f4:6e:83:e9:cd:66: 9e:df:f7:c7:24:8a:41:8b:6f:b3:9c:95:15:af:fe:39:7e:31: ac:04:68:96:66:12:b8:fd:03:0f:97:8e:f8:e0:12:bb:f0:52: 76:2a:8d:48:7c:04:1a:26:7e:1b:5b:8c:1e:df:22:e8:8e:07: 7f:9e:34:45:02:a4:8c:fc:2c:0d:a3:87:23:99:4a:fd:9a:7e: 11:19:80:e5:72:93:4f:be:b3:62:e1:45:f9:b2:1d:2e:0f:37: d8:ae:a7:72:f9:fc:0c:61:26:03:4f:00:a5:63:91:77:c6:df: 99:da:3f:ba:35:1c:aa:70:95:83:38:42:d7:47:fd:49:68:2c: f8:b8:73:46:95:29:56:26:d8:47:1c:53:f2:2b:14:23:5c:e2: 49:6a:c0:ea:b6:11:71:3c:7a:3b:71:b7:ee:27:10:0d:fe:b2: d7:83:c1:94:10:8a:7a:95:08:d6:b6:90:dc:2f:fc:a0:d5:65: 01:ce:28:fc:2a:93:22:ad:f8:f2:82:10:6c:3f:fd:93:04:35: 30:5a:83:0f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUfgaXrI0voBNhbKqcDXd/i8R7P0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIy NkYxNDg3NDAeFw0yNjA1MTIwOTE3MTRaFw0yNzA1MTEwOTIyMTRaMDMxMTAvBgNV BAMTKEFENjc3QUFCOUMyOUQ0OEUyRTcyMzBGRDI2QkM3QTdBMkUxNEE2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHe7ikNH1+obTY6SyucDwIW2bc sxTH+l3ropIdGYK/cEctM5fOWjAQSYMVw6lqWIlu/mVo5vuuMZA/hwf8pKhvSXrL CdZTmR5V+YOHLXF1FgssbVHTsYSaYG98KRhfcPLuZsBAb3FCvpxak8hYEkABFH/x wJIcnYwWvGCSVw2qxUfLkc40XSey0avkwONB9wt8YXdn3c+KlhKmtPBkxN+YaKMy lq8fY1z/TkeJROIetnomvCp3aEU0LxJ/tXcxYxCvKhn5K3xIOa76SL5dI8ZrYarb qNbpTptmHcTV4/R3O/ASgtE86DVTFwVQBHWFqW7s+jAwb+eU4upyX1cS0fyRAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUrWd6q5wp1I4ucjD9Jrx6ei4UplswHwYDVR0j BBgwFoAUQNhnJtsU+eXgZhCSj/bHcibxSHQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjUwMzE1NTY2MDYxOTc5My8wLzQwRDg2NzI2REIxNEY5RTVFMDY2MTA5MjhGRjZD NzcyMjZGMTQ4NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIyNkYxNDg3NC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2NTAzMTU1NjYwNjE5NzkzLzAvMzIzNDMwMzIzYTY1 MzgzODMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzYzMzM2MzEzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQC6IAAADANBgkqhkiG9w0BAQsFAAOCAQEAKLZkMV8guhRJemURWCLYBWsQ 4H8p7Xp+yr/k79Cz5OWgDFQGlse9MsAHyKX113359G6D6c1mnt/3xySKQYtvs5yV Fa/+OX4xrARolmYSuP0DD5eO+OASu/BSdiqNSHwEGiZ+G1uMHt8i6I4Hf540RQKk jPwsDaOHI5lK/Zp+ERmA5XKTT76zYuFF+bIdLg832K6ncvn8DGEmA08ApWORd8bf mdo/ujUcqnCVgzhC10f9SWgs+LhzRpUpVibYRxxT8isUI1ziSWrA6rYRcTx6O3G3 7icQDf6y14PBlBCKepUI1raQ3C/8oNVlAc4o/CqTIq348oIQbD/9kwQ1MFqDDw== -----END CERTIFICATE-----Generated at Wed May 13 16:11:44 2026 by rpki-client