$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e382e302f32342d3234203d3e2039333934.roa File: 3131312e3134382e382e302f32342d3234203d3e2039333934.roa (raw, json) Hash identifier: LWnHAbLGtlkK5nTvz+5CMwvgK9TT0DJa9/aYAytvj6Y= Subject key identifier: 4B:4E:65:1F:0C:02:F6:37:6C:CE:5F:62:4F:E0:67:BC:7D:EB:A0:8E Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720 Certificate serial: 0215D856218BAFE51362AC2929BC28734FB5A4F7 Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e382e302f32342d3234203d3e2039333934.roa Signing time: Thu 21 May 2026 08:39:13 +0000 ROA not before: Thu 21 May 2026 08:34:13 +0000 ROA not after: Thu 20 May 2027 08:39:13 +0000 asID: 9394 IP address blocks: 111.148.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 22:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:15:d8:56:21:8b:af:e5:13:62:ac:29:29:bc:28:73:4f:b5:a4:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720 Validity Not Before: May 21 08:34:13 2026 GMT Not After : May 20 08:39:13 2027 GMT Subject: CN=4B4E651F0C02F6376CCE5F624FE067BC7DEBA08E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:59:67:77:61:03:4d:32:ab:7d:69:10:79: 98:ca:8a:da:1e:9d:ef:7d:48:05:d1:ff:3b:69:a2: 2b:83:69:d2:b9:41:6c:34:3d:cf:35:c4:42:7b:fa: 2d:5e:4d:07:be:97:52:66:ae:fa:e0:eb:62:a9:82: e9:13:40:24:5d:4f:5c:00:f4:45:d6:49:5e:de:59: 1f:d1:57:c7:9b:20:23:40:b2:9c:07:92:de:77:79: 7d:00:4f:04:02:99:a4:94:29:5f:7f:5d:43:8c:65: 6f:f5:df:0f:f7:19:e4:9e:a4:f3:5f:cb:87:9d:fd: 24:51:d7:f2:f7:a0:c7:51:db:4b:12:a2:e8:79:92: c7:5d:d9:b9:a1:7b:99:91:0c:97:0b:14:d9:4d:0e: 9b:ad:77:cc:47:fe:94:b4:35:6a:01:59:a0:6b:8b: e1:de:ec:f4:70:57:1e:0f:bf:45:49:99:b4:69:b1: 05:dc:d5:11:32:92:6b:2f:2a:ad:15:d4:e0:bc:c4: e6:a4:58:5b:99:1e:82:e0:44:96:50:8f:12:38:c0: 93:5f:c1:f7:b1:ce:ac:23:df:d8:f0:47:36:0c:4d: 84:1b:01:da:72:da:06:ad:db:66:b2:82:16:42:92: fe:26:48:77:ae:2b:0c:f0:f2:ce:01:7c:41:c5:a1: e1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4E:65:1F:0C:02:F6:37:6C:CE:5F:62:4F:E0:67:BC:7D:EB:A0:8E X509v3 Authority Key Identifier: keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e382e302f32342d3234203d3e2039333934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.148.8.0/24 Signature Algorithm: sha256WithRSAEncryption 71:1f:00:a0:24:21:25:e8:a2:91:b6:ae:34:82:4e:67:6f:7e: 7c:26:99:82:0e:ba:d4:1f:ca:b8:45:6d:46:22:b0:87:10:bb: 16:fa:51:f0:38:71:3e:19:96:ba:b6:45:4a:08:9f:ee:ad:ae: fd:3a:8c:af:87:f4:18:c4:ea:4b:8e:6b:d7:c2:20:91:ec:9a: e6:af:97:5e:31:0f:54:3a:7b:0f:91:83:79:56:bc:c1:f0:08: 5c:6c:7d:de:e2:56:a1:4b:eb:88:c8:11:76:77:a8:9e:47:5b: fe:a3:04:ae:b0:54:3f:24:18:dd:94:b7:2f:66:b3:68:4d:3b: 12:56:6d:3c:1c:42:a7:dd:b5:cc:78:f8:4f:bd:c7:6c:4e:4d: 80:fd:10:d6:7b:9b:eb:c0:78:2e:4d:77:49:69:c0:24:c2:c3: 4e:ce:fc:c5:32:67:3a:79:51:e3:a3:a7:c0:ab:fc:0b:19:53: 0f:73:be:d2:d2:5b:d1:07:78:85:d9:d4:e0:90:be:1c:fa:34: cc:c4:cd:8d:5f:48:f3:3a:65:5d:3b:aa:6c:0d:51:55:a5:86: a6:96:ad:42:af:81:39:8d:49:a7:f8:a4:ea:f3:a8:83:ee:41: 55:d2:1e:0d:72:89:24:a3:12:89:7a:9b:79:4d:f6:24:de:95: 90:3e:8c:81 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUAhXYViGLr+UTYqwpKbwoc0+1pPcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODVCRjAwMDAwMTEwLwYDVQQFEyg1RjNENjREQ0Yx MzE5NEZCMEQ3MUYyOUZCMzdDMkQ5M0Y4RDQ4NzIwMB4XDTI2MDUyMTA4MzQxM1oX DTI3MDUyMDA4MzkxM1owMzExMC8GA1UEAxMoNEI0RTY1MUYwQzAyRjYzNzZDQ0U1 RjYyNEZFMDY3QkM3REVCQTA4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7cWWd3YQNNMqt9aRB5mMqK2h6d731IBdH/O2miK4Np0rlBbDQ9zzXEQnv6 LV5NB76XUmau+uDrYqmC6RNAJF1PXAD0RdZJXt5ZH9FXx5sgI0CynAeS3nd5fQBP BAKZpJQpX39dQ4xlb/XfD/cZ5J6k81/Lh539JFHX8vegx1HbSxKi6HmSx13ZuaF7 mZEMlwsU2U0Om613zEf+lLQ1agFZoGuL4d7s9HBXHg+/RUmZtGmxBdzVETKSay8q rRXU4LzE5qRYW5keguBEllCPEjjAk1/B97HOrCPf2PBHNgxNhBsB2nLaBq3bZrKC FkKS/iZId64rDPDyzgF8QcWh4dMCAwEAAaOCAg8wggILMB0GA1UdDgQWBBRLTmUf DAL2N2zOX2JP4Ge8feugjjAfBgNVHSMEGDAWgBRfPWTc8TGU+w1x8p+zfC2T+NSH IDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ2MzA3NDE4ODE2NTMzLzAvNUYzRDY0 RENGMTMxOTRGQjBENzFGMjlGQjM3QzJEOTNGOEQ0ODcyMC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvWHoxazNQRXhs UHNOY2ZLZnMzd3RrX2pVaHlBLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUF BzALhmxyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMDk3NDYzMDc0 MTg4MTY1MzMvMC8zMTMxMzEyZTMxMzQzODJlMzgyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzOTMzMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG+UCDANBgkqhkiG9w0BAQsFAAOCAQEA cR8AoCQhJeiikbauNIJOZ29+fCaZgg661B/KuEVtRiKwhxC7FvpR8DhxPhmWurZF Sgif7q2u/TqMr4f0GMTqS45r18Igkeya5q+XXjEPVDp7D5GDeVa8wfAIXGx93uJW oUvriMgRdneonkdb/qMErrBUPyQY3ZS3L2azaE07ElZtPBxCp921zHj4T73HbE5N gP0Q1nub68B4Lk13SWnAJMLDTs78xTJnOnlR46OnwKv8CxlTD3O+0tJb0Qd4hdnU 4JC+HPo0zMTNjV9I8zplXTuqbA1RVaWGppatQq+BOY1Jp/ik6vOog+5BVdIeDXKJ JKMSiXqbeU32JN6VkD6MgQ== -----END CERTIFICATE-----Generated at Sat May 23 07:55:30 2026 by rpki-client