$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134392e302e302f32342d3234203d3e2039333934.roa File: 3131312e3134392e302e302f32342d3234203d3e2039333934.roa (raw, json) Hash identifier: 03vGDWQVIW9JyCDE28uuXlzYH7T8yfTtPUiTGwaujkk= Subject key identifier: 80:FE:C7:FA:F5:25:75:2D:1D:8C:1F:FB:1D:C1:8A:85:6F:D5:17:3C Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720 Certificate serial: 0BEF1B21FB11A7B9E82EBB7ACC25372B1A0FDCFD Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134392e302e302f32342d3234203d3e2039333934.roa Signing time: Thu 21 May 2026 08:49:30 +0000 ROA not before: Thu 21 May 2026 08:44:30 +0000 ROA not after: Thu 20 May 2027 08:49:30 +0000 asID: 9394 IP address blocks: 111.149.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 22:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ef:1b:21:fb:11:a7:b9:e8:2e:bb:7a:cc:25:37:2b:1a:0f:dc:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720 Validity Not Before: May 21 08:44:30 2026 GMT Not After : May 20 08:49:30 2027 GMT Subject: CN=80FEC7FAF525752D1D8C1FFB1DC18A856FD5173C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7e:65:4c:20:03:f9:ea:b5:1c:73:e2:87:6f: 09:bc:66:ac:84:8b:09:62:0b:e1:c0:ad:bb:6e:50: ff:0e:42:d8:e1:9d:da:b8:39:d1:49:23:84:e7:d7: 17:83:0c:5b:54:60:e4:24:90:0c:09:c4:ab:18:87: 91:85:45:6a:bc:7b:c5:8b:de:0b:b0:77:60:aa:e4: 94:29:41:10:36:7e:be:68:78:f6:bc:3e:ee:66:88: 69:d8:72:c8:41:62:b9:de:2d:09:58:be:eb:bf:52: 90:0b:22:ff:56:cd:58:59:6e:1a:62:87:e5:95:b3: f9:81:d2:89:2c:23:6f:94:74:19:3b:c7:15:bd:cd: d6:78:38:70:f5:9a:c1:ea:c9:cd:6b:52:0e:9c:b7: 1a:a6:4e:cb:57:8d:37:81:03:20:a8:b1:97:24:05: ba:5e:b7:42:d6:53:a0:b6:ba:b3:73:84:25:35:9f: 0e:92:49:bb:39:c6:3e:1e:9e:04:d5:9a:84:f2:b4: 35:6f:58:05:e6:3e:4e:ab:b9:ee:fd:02:8b:03:0d: 40:21:f2:54:69:04:5a:fc:34:f4:d3:f8:0d:55:0b: 04:72:8f:a5:41:48:08:b9:bb:24:37:49:b4:37:ae: 63:76:0e:98:00:e3:5c:f2:a5:93:7f:03:c6:55:92: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FE:C7:FA:F5:25:75:2D:1D:8C:1F:FB:1D:C1:8A:85:6F:D5:17:3C X509v3 Authority Key Identifier: keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134392e302e302f32342d3234203d3e2039333934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.149.0.0/24 Signature Algorithm: sha256WithRSAEncryption 99:04:6b:d0:93:6a:a0:d6:71:36:30:95:da:5a:81:6e:f6:94: 4e:aa:ee:a6:47:55:74:9f:5c:fa:9d:87:af:fa:eb:f5:cb:e9: da:e2:3e:e5:26:2a:9f:c7:bd:4b:d5:9f:4b:32:83:08:23:f6: 60:da:20:89:5f:cc:04:8d:0d:b6:45:80:85:f3:7a:2e:d2:bb: 6c:34:0b:13:a3:3c:d8:dc:a8:26:26:45:9b:69:bc:1c:59:87: 5e:4e:8e:a5:b5:21:66:50:68:4e:f3:97:b4:a9:51:11:17:6f: ff:f5:61:84:27:f0:fe:c5:d7:3e:27:38:52:51:13:13:7c:75: 03:58:10:7d:60:50:be:d5:bf:04:f5:65:4c:af:64:7e:a1:ba: fd:04:d6:56:e0:ba:fc:b0:a7:50:f5:cf:6f:2a:55:d6:2e:97: 13:1d:97:61:42:a0:6e:80:14:56:f6:db:e9:6f:c8:9c:1d:52: 0e:d8:48:a5:30:41:52:aa:3c:4f:72:bd:fe:fb:08:36:e5:5f: 51:63:c1:01:9d:c4:01:4d:1f:ab:a8:ab:a8:88:8a:35:98:da: 10:eb:bb:ee:1c:27:d3:d8:f2:49:f7:32:a2:51:58:f4:56:85: aa:82:38:bc:8f:88:5f:1a:e9:f6:8c:13:4a:5d:d4:86:35:dc: 0b:28:ee:3f -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUC+8bIfsRp7noLrt6zCU3KxoP3P0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODVCRjAwMDAwMTEwLwYDVQQFEyg1RjNENjREQ0Yx MzE5NEZCMEQ3MUYyOUZCMzdDMkQ5M0Y4RDQ4NzIwMB4XDTI2MDUyMTA4NDQzMFoX DTI3MDUyMDA4NDkzMFowMzExMC8GA1UEAxMoODBGRUM3RkFGNTI1NzUyRDFEOEMx RkZCMURDMThBODU2RkQ1MTczQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANd+ZUwgA/nqtRxz4odvCbxmrISLCWIL4cCtu25Q/w5C2OGd2rg50UkjhOfX F4MMW1Rg5CSQDAnEqxiHkYVFarx7xYveC7B3YKrklClBEDZ+vmh49rw+7maIadhy yEFiud4tCVi+679SkAsi/1bNWFluGmKH5ZWz+YHSiSwjb5R0GTvHFb3N1ng4cPWa werJzWtSDpy3GqZOy1eNN4EDIKixlyQFul63QtZToLa6s3OEJTWfDpJJuznGPh6e BNWahPK0NW9YBeY+Tqu57v0CiwMNQCHyVGkEWvw09NP4DVULBHKPpUFICLm7JDdJ tDeuY3YOmADjXPKlk38DxlWSbzECAwEAAaOCAg8wggILMB0GA1UdDgQWBBSA/sf6 9SV1LR2MH/sdwYqFb9UXPDAfBgNVHSMEGDAWgBRfPWTc8TGU+w1x8p+zfC2T+NSH IDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ2MzA3NDE4ODE2NTMzLzAvNUYzRDY0 RENGMTMxOTRGQjBENzFGMjlGQjM3QzJEOTNGOEQ0ODcyMC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvWHoxazNQRXhs UHNOY2ZLZnMzd3RrX2pVaHlBLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUF BzALhmxyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMDk3NDYzMDc0 MTg4MTY1MzMvMC8zMTMxMzEyZTMxMzQzOTJlMzAyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzOTMzMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG+VADANBgkqhkiG9w0BAQsFAAOCAQEA mQRr0JNqoNZxNjCV2lqBbvaUTqrupkdVdJ9c+p2Hr/rr9cvp2uI+5SYqn8e9S9Wf SzKDCCP2YNogiV/MBI0NtkWAhfN6LtK7bDQLE6M82NyoJiZFm2m8HFmHXk6OpbUh ZlBoTvOXtKlRERdv//VhhCfw/sXXPic4UlETE3x1A1gQfWBQvtW/BPVlTK9kfqG6 /QTWVuC6/LCnUPXPbypV1i6XEx2XYUKgboAUVvbb6W/InB1SDthIpTBBUqo8T3K9 /vsINuVfUWPBAZ3EAU0fq6irqIiKNZjaEOu77hwn09jySfcyolFY9FaFqoI4vI+I Xxrp9owTSl3UhjXcCyjuPw== -----END CERTIFICATE-----Generated at Sat May 23 07:55:17 2026 by rpki-client