$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS150706.roa File: AS150706.roa (raw, json) Hash identifier: STUozDldmjWQWxL3PhQcntDrjXlCusCSutFc35uwO3o= Subject key identifier: 93:15:60:9B:A1:99:C1:6E:97:C2:29:88:CB:5D:AA:48:B2:DC:13:F6 Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Certificate serial: 2544E90A6C026A8FC322E25E89E1A1875CDEA1C1 Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS150706.roa Signing time: Mon 20 Apr 2026 05:08:23 +0000 ROA not before: Mon 20 Apr 2026 05:03:23 +0000 ROA not after: Mon 19 Apr 2027 05:08:23 +0000 asID: 150706 IP address blocks: 2403:a100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:44:e9:0a:6c:02:6a:8f:c3:22:e2:5e:89:e1:a1:87:5c:de:a1:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Validity Not Before: Apr 20 05:03:23 2026 GMT Not After : Apr 19 05:08:23 2027 GMT Subject: CN=9315609BA199C16E97C22988CB5DAA48B2DC13F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:f8:8e:e7:64:43:e2:a4:1c:d7:3a:f0:1b: 7a:d5:01:a7:f1:23:59:11:bd:f8:bd:6a:08:b2:33: 28:ab:ed:aa:55:44:08:4d:d9:6a:a6:b3:af:0c:18: 52:b6:1d:e0:86:d8:59:f1:9a:4d:1a:5f:ed:57:3c: 2d:e4:5e:35:1a:fb:69:55:b1:0d:f4:27:fd:86:86: 13:0a:d8:33:4a:b6:4e:d0:7a:26:66:3b:2a:36:5f: 99:88:03:73:03:47:b1:c1:3b:b7:51:af:9d:dc:6f: 29:11:bc:25:98:45:e2:69:77:57:c3:a3:be:0e:de: 4d:97:c5:5e:ec:f7:d7:e8:45:5e:39:b1:85:61:b0: 04:23:fc:57:4b:15:03:46:99:95:1d:76:8c:f8:ac: 21:fc:86:e9:7d:d7:71:e8:f0:5f:4d:2e:86:fb:4e: 26:ef:0b:8e:69:61:26:4f:0c:30:73:0b:8c:4a:a4: 83:b7:e0:2e:6e:49:bc:a1:49:ea:8b:6c:69:c4:48: d8:74:fe:fd:b4:ad:47:e9:c2:99:0d:f5:65:c6:ea: 4a:21:f1:2d:d4:4e:dc:0d:04:87:71:eb:8c:02:99: ab:76:cd:89:ef:02:d0:8e:a5:38:6b:ef:e0:89:95: 77:c0:8f:af:35:d9:92:c7:9a:60:b3:70:70:46:1a: ad:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:15:60:9B:A1:99:C1:6E:97:C2:29:88:CB:5D:AA:48:B2:DC:13:F6 X509v3 Authority Key Identifier: keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS150706.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:a100::/48 Signature Algorithm: sha256WithRSAEncryption 71:dd:44:03:1d:06:6c:3e:ed:8c:8d:e1:ab:ae:75:5e:cb:9b: 11:3f:d0:b2:a1:b5:48:ea:79:2d:45:a5:69:6d:3d:72:d2:12: f8:4c:a7:e0:3d:09:7a:4d:cb:bb:ab:60:9e:4c:9e:60:48:18: 45:a9:32:6d:4f:8f:96:a5:3d:82:42:96:76:03:d3:70:da:07: 2a:01:24:f3:ef:28:5c:c1:6b:1c:32:bc:1f:d8:bb:c2:c6:c5: 24:a3:aa:7f:1f:0b:aa:24:25:13:f9:ac:34:86:63:74:07:4b: 3b:bb:32:a9:8b:da:ae:1e:da:f4:70:9b:4d:ce:12:ab:5b:5b: b2:70:b0:7e:12:72:c8:b9:b8:5f:2f:0c:ea:c3:3f:0e:d2:72: 16:39:c9:cc:45:5c:49:80:82:3d:8b:de:da:37:0f:fc:14:81: 37:b2:f9:f6:e7:be:57:71:ee:ef:c0:7b:54:bd:20:31:99:28: 8b:2e:90:84:25:e0:53:f0:c4:40:72:3a:4c:0e:7b:21:a6:db: 52:23:7a:5a:76:5f:63:9c:03:5a:34:85:9e:77:be:71:c2:1f: 5c:87:88:7b:96:b9:d9:58:ab:98:46:bc:2c:89:75:85:c8:52: 28:c3:f8:da:9e:94:84:c6:d8:2e:92:40:31:4c:b6:2a:d7:e8: a1:f9:6b:75 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJUTpCmwCao/DIuJeieGhh1zeocEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy MjEwNjQyNjAeFw0yNjA0MjAwNTAzMjNaFw0yNzA0MTkwNTA4MjNaMDMxMTAvBgNV BAMTKDkzMTU2MDlCQTE5OUMxNkU5N0MyMjk4OENCNURBQTQ4QjJEQzEzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/uPiO52RD4qQc1zrwG3rVAafx I1kRvfi9agiyMyir7apVRAhN2Wqms68MGFK2HeCG2Fnxmk0aX+1XPC3kXjUa+2lV sQ30J/2GhhMK2DNKtk7QeiZmOyo2X5mIA3MDR7HBO7dRr53cbykRvCWYReJpd1fD o74O3k2XxV7s99foRV45sYVhsAQj/FdLFQNGmZUddoz4rCH8hul913Ho8F9NLob7 TibvC45pYSZPDDBzC4xKpIO34C5uSbyhSeqLbGnESNh0/v20rUfpwpkN9WXG6koh 8S3UTtwNBIdx64wCmat2zYnvAtCOpThr7+CJlXfAj6812ZLHmmCzcHBGGq2xAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUkxVgm6GZwW6XwimIy12qSLLcE/YwHwYDVR0j BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwNjI5OTcxNjgxMzEvMC9BUzE1MDcwNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQDoQAAADANBgkqhkiG9w0BAQsFAAOCAQEAcd1EAx0GbD7tjI3hq651 XsubET/QsqG1SOp5LUWlaW09ctIS+Eyn4D0Jek3Lu6tgnkyeYEgYRakybU+PlqU9 gkKWdgPTcNoHKgEk8+8oXMFrHDK8H9i7wsbFJKOqfx8LqiQlE/msNIZjdAdLO7sy qYvarh7a9HCbTc4Sq1tbsnCwfhJyyLm4Xy8M6sM/DtJyFjnJzEVcSYCCPYve2jcP /BSBN7L59ue+V3Hu78B7VL0gMZkoiy6QhCXgU/DEQHI6TA57IabbUiN6WnZfY5wD WjSFnne+ccIfXIeIe5a52VirmEa8LIl1hchSKMP42p6UhMbYLpJAMUy2Ktfooflr dQ== -----END CERTIFICATE-----Generated at Mon Apr 20 12:26:35 2026 by rpki-client