$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220108819/0/323430363a336438303a3a2f33322d3332203d3e203633363230.roa File: 323430363a336438303a3a2f33322d3332203d3e203633363230.roa (raw, json) Hash identifier: S7ogy1GUCLHfddt1QMmppgk2+axfyM/l/Np8aUOiq9M= Subject key identifier: 6F:5D:4A:52:78:9B:07:7B:FB:31:CA:D9:40:97:30:E8:C0:57:8C:D8 Certificate issuer: /CN=C1686602F57C97BDB7058DB5F05623F79F733F08 Certificate serial: 774ECCB39DA2944966CEC342A75403F2253FA8CC Authority key identifier: C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/323430363a336438303a3a2f33322d3332203d3e203633363230.roa Signing time: Wed 13 May 2026 09:21:03 +0000 ROA not before: Wed 13 May 2026 09:16:03 +0000 ROA not after: Wed 12 May 2027 09:21:03 +0000 asID: 63620 IP address blocks: 2406:3d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:4e:cc:b3:9d:a2:94:49:66:ce:c3:42:a7:54:03:f2:25:3f:a8:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1686602F57C97BDB7058DB5F05623F79F733F08 Validity Not Before: May 13 09:16:03 2026 GMT Not After : May 12 09:21:03 2027 GMT Subject: CN=6F5D4A52789B077BFB31CAD9409730E8C0578CD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:68:91:a5:db:1d:95:dc:ba:da:1e:53:f7: 03:e4:d3:9a:bd:1c:f9:66:96:5b:32:2c:cb:23:ba: 6c:6b:ef:d6:2d:8f:d5:32:da:9f:38:e7:66:0b:ff: 7b:8e:6a:73:ce:b9:6d:e2:76:52:c4:92:24:da:9f: eb:03:52:23:50:5f:f3:8b:1d:a6:8a:c8:a7:8a:7a: 92:ce:08:95:e5:9a:f6:53:10:dd:b3:c4:5b:6a:98: ee:9e:ea:6e:b2:d1:8e:6e:50:f3:18:f4:2d:f6:3a: 1f:9a:a8:3c:8e:6f:13:52:3b:dd:b5:7a:38:a9:4b: bf:af:57:60:ae:2e:fe:12:da:da:09:5e:5b:de:0f: 03:d5:e8:97:40:4c:34:d3:d9:1b:13:84:e4:f0:0f: 32:f8:45:15:c9:8a:25:16:fd:da:86:3a:00:06:e5: ae:7c:e2:07:e2:01:6c:cf:e3:b1:8e:55:9c:1f:20: 5b:b9:c0:c5:95:a6:0e:44:55:39:e0:07:51:5d:a5: e2:70:27:5f:6e:c8:7c:9c:8b:05:d2:47:b4:42:c0: 33:e6:ae:40:66:af:a4:a0:2d:a3:d0:ef:f2:ab:ff: 9f:71:73:6b:67:eb:07:e5:6e:26:f4:ca:7c:3a:8c: f5:8f:31:e9:ae:7e:fb:96:b4:91:ec:79:11:00:a2: 4e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5D:4A:52:78:9B:07:7B:FB:31:CA:D9:40:97:30:E8:C0:57:8C:D8 X509v3 Authority Key Identifier: keyid:C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/323430363a336438303a3a2f33322d3332203d3e203633363230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3d80::/32 Signature Algorithm: sha256WithRSAEncryption 3f:2d:4d:1c:0b:2b:5b:e6:be:52:3e:da:58:fb:38:8b:bb:0c: 83:12:27:8e:7c:58:00:bc:a0:3b:1b:8a:cd:18:9e:2a:1d:bd: 5f:48:04:62:df:ac:9a:27:4e:b9:cb:b9:82:43:3b:82:87:53: 4a:03:ea:07:7c:bb:c2:db:29:38:bd:39:5c:ac:c2:20:6e:50: 87:05:c1:80:d5:b5:8b:19:37:c4:28:ef:2d:a1:66:44:42:eb: 88:42:64:bc:c5:de:eb:14:0b:39:0b:de:0c:6d:60:b4:bb:71: 58:57:7f:5c:12:86:f8:6e:95:3f:e9:57:0c:8a:9e:b0:b0:81: c3:05:ef:18:21:e7:60:46:45:d7:29:69:ca:15:96:68:a3:d4: 3a:94:e1:86:cc:48:2f:fc:90:e9:4b:9a:bc:2d:9e:f8:f7:2e: 35:3d:d0:31:66:3e:c8:e6:c2:a8:00:63:69:ab:e6:75:14:1b: a6:2d:14:dd:ec:1b:15:c1:2f:f7:bd:2d:5a:71:0d:86:e8:f4: 61:ce:eb:9d:e6:0d:2e:80:5c:f5:a6:90:84:b1:e4:c2:b1:7f: 86:de:fe:fd:6f:ba:e1:ca:32:37:da:0c:c4:1a:b5:4b:d4:90: 1b:97:0f:e3:d3:b7:46:6d:ff:89:7b:35:f7:5d:f4:86:6e:6d: 15:a9:3f:ae -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUd07Ms52ilElmzsNCp1QD8iU/qMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5 RjczM0YwODAeFw0yNjA1MTMwOTE2MDNaFw0yNzA1MTIwOTIxMDNaMDMxMTAvBgNV BAMTKDZGNUQ0QTUyNzg5QjA3N0JGQjMxQ0FEOTQwOTczMEU4QzA1NzhDRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjjWiRpdsdldy62h5T9wPk05q9 HPlmllsyLMsjumxr79Ytj9Uy2p8452YL/3uOanPOuW3idlLEkiTan+sDUiNQX/OL HaaKyKeKepLOCJXlmvZTEN2zxFtqmO6e6m6y0Y5uUPMY9C32Oh+aqDyObxNSO921 ejipS7+vV2CuLv4S2toJXlveDwPV6JdATDTT2RsThOTwDzL4RRXJiiUW/dqGOgAG 5a584gfiAWzP47GOVZwfIFu5wMWVpg5EVTngB1FdpeJwJ19uyHyciwXSR7RCwDPm rkBmr6SgLaPQ7/Kr/59xc2tn6wflbib0ynw6jPWPMemufvuWtJHseREAok6RAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUb11KUnibB3v7McrZQJcw6MBXjNgwHwYDVR0j BBgwFoAUwWhmAvV8l723BY218FYj959zPwgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg3MTA3NjIyMDEwODgxOS8wL0MxNjg2NjAyRjU3Qzk3QkRCNzA1OERCNUYwNTYy M0Y3OUY3MzNGMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5RjczM0YwOC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2ODcxMDc2MjIwMTA4ODE5LzAvMzIzNDMwMzYzYTMz NjQzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMzM2MzIzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQGPYAwDQYJKoZIhvcNAQELBQADggEBAD8tTRwLK1vmvlI+2lj7OIu7DIMS J458WAC8oDsbis0YniodvV9IBGLfrJonTrnLuYJDO4KHU0oD6gd8u8LbKTi9OVys wiBuUIcFwYDVtYsZN8Qo7y2hZkRC64hCZLzF3usUCzkL3gxtYLS7cVhXf1wShvhu lT/pVwyKnrCwgcMF7xgh52BGRdcpacoVlmij1DqU4YbMSC/8kOlLmrwtnvj3LjU9 0DFmPsjmwqgAY2mr5nUUG6YtFN3sGxXBL/e9LVpxDYbo9GHO653mDS6AXPWmkISx 5MKxf4be/v1vuuHKMjfaDMQatUvUkBuXD+PTt0Zt/4l7Nfdd9IZubRWpP64= -----END CERTIFICATE-----Generated at Wed May 13 21:31:41 2026 by rpki-client