$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3132382e302f31372d3137203d3e203435303930.roa File: 3135342e382e3132382e302f31372d3137203d3e203435303930.roa (raw, json) Hash identifier: 0sr7kTAUJTHQOumWe9+9dVINRU4J9gIj1CAAlinJWzQ= Subject key identifier: AD:30:43:24:71:FD:A0:C8:53:E8:85:F1:DC:B4:6A:2D:B6:4A:EB:B3 Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Certificate serial: 44D4363F59D0626F6767F60020F02E172B41FD10 Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3132382e302f31372d3137203d3e203435303930.roa Signing time: Tue 30 Jun 2026 10:38:32 +0000 ROA not before: Tue 30 Jun 2026 10:33:32 +0000 ROA not after: Tue 29 Jun 2027 10:38:32 +0000 asID: 45090 IP address blocks: 154.8.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Jul 2026 01:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d4:36:3f:59:d0:62:6f:67:67:f6:00:20:f0:2e:17:2b:41:fd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Validity Not Before: Jun 30 10:33:32 2026 GMT Not After : Jun 29 10:38:32 2027 GMT Subject: CN=AD30432471FDA0C853E885F1DCB46A2DB64AEBB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a7:3c:09:a9:38:cb:32:6f:01:db:77:b3:13: bf:90:dd:e3:6e:5c:e8:cc:85:97:3b:1c:3b:dc:21: 87:2b:24:46:24:d1:a0:e7:a4:b9:52:fc:4c:39:89: e0:0e:a1:2f:49:0d:a1:7d:3b:56:be:76:a6:fa:0a: 0e:5d:41:7f:33:83:db:4b:33:d0:8c:d1:f4:91:7d: 9c:59:94:56:1c:7d:27:62:c8:24:58:22:73:24:55: 53:4e:98:3f:2e:c9:ae:a1:e3:d2:72:4f:25:a7:44: ea:6a:97:cb:d2:03:7e:67:94:14:45:76:a5:01:3b: f3:8f:c3:15:47:49:f4:7a:91:4f:e5:08:7a:9e:98: 01:eb:ec:c5:ce:58:70:eb:65:b8:ca:f3:3d:93:c8: d1:52:86:c7:b9:20:37:31:a8:94:df:c5:62:23:c8: 47:57:36:2b:f2:62:be:57:02:76:60:c1:04:07:4e: 1f:39:de:6c:20:0a:f7:e1:b5:07:6d:f6:0c:bd:42: df:c7:b5:be:fe:f2:a0:dd:49:76:d6:be:d2:17:a9: 93:65:93:2f:c8:dc:35:52:b2:05:d6:54:ad:8b:b7: 48:b1:92:46:69:38:f8:79:00:93:c6:8e:93:01:d4: ce:66:c7:86:06:dc:a4:0c:0e:3f:1a:c4:f9:e0:30: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:30:43:24:71:FD:A0:C8:53:E8:85:F1:DC:B4:6A:2D:B6:4A:EB:B3 X509v3 Authority Key Identifier: keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3132382e302f31372d3137203d3e203435303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 154.8.128.0/17 Signature Algorithm: sha256WithRSAEncryption 66:80:47:b7:fe:99:3d:ec:92:75:a0:ca:88:76:d2:b2:f0:fd: e4:6b:ac:7f:21:f4:58:34:7a:b7:6c:d0:ce:3e:f6:b7:ac:df: 98:44:d0:da:1b:f3:19:05:37:09:7b:42:89:ab:68:47:9b:4f: 29:f5:85:42:aa:6f:0e:7b:27:4e:67:0b:c1:87:7b:1d:fd:55: 8a:d3:8c:36:54:9c:b2:73:a7:c6:e8:e9:80:13:34:0b:ac:fa: 58:7f:fd:49:fe:68:79:87:e7:34:a1:11:b1:9a:e1:d2:13:5e: c1:39:69:b5:f8:cc:b2:d8:6c:5e:33:f3:92:53:4f:51:d2:47: ea:70:69:3e:c9:31:36:53:da:b5:ea:80:46:af:52:b5:e4:96: ba:19:9c:f3:26:5d:f1:e0:33:2d:b8:6d:42:2f:d2:a6:fa:20: 0f:a0:37:86:4a:d7:14:1e:11:67:8e:33:78:54:e1:bf:1f:98: 97:30:ab:40:48:18:9f:71:fd:32:43:21:93:5f:6a:72:51:91: 93:b1:c8:2e:1d:09:53:4a:ea:88:cf:36:14:c4:d1:61:93:fa: c5:dd:13:21:4f:51:1d:3e:18:5b:72:27:f9:92:43:a4:e3:56: c3:19:fa:28:7d:62:7e:98:28:19:7e:57:e4:60:fd:4d:2c:68: 21:aa:85:63 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIURNQ2P1nQYm9nZ/YAIPAuFytB/RAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEygzOTA5Q0NGNjlE N0YxQTE3RENBMDE4NzhGQUUwNkVDMzlCMzhFM0JDMB4XDTI2MDYzMDEwMzMzMloX DTI3MDYyOTEwMzgzMlowMzExMC8GA1UEAxMoQUQzMDQzMjQ3MUZEQTBDODUzRTg4 NUYxRENCNDZBMkRCNjRBRUJCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJKnPAmpOMsybwHbd7MTv5Dd425c6MyFlzscO9whhyskRiTRoOekuVL8TDmJ 4A6hL0kNoX07Vr52pvoKDl1BfzOD20sz0IzR9JF9nFmUVhx9J2LIJFgicyRVU06Y Py7JrqHj0nJPJadE6mqXy9IDfmeUFEV2pQE784/DFUdJ9HqRT+UIep6YAevsxc5Y cOtluMrzPZPI0VKGx7kgNzGolN/FYiPIR1c2K/JivlcCdmDBBAdOHznebCAK9+G1 B232DL1C38e1vv7yoN1Jdta+0hepk2WTL8jcNVKyBdZUrYu3SLGSRmk4+HkAk8aO kwHUzmbHhgbcpAwOPxrE+eAwDrkCAwEAAaOCAhEwggINMB0GA1UdDgQWBBStMEMk cf2gyFPohfHctGottkrrszAfBgNVHSMEGDAWgBQ5Ccz2nX8aF9ygGHj64G7Dmzjj vDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzAvMzkwOUND RjY5RDdGMUExN0RDQTAxODc4RkFFMDZFQzM5QjM4RTNCQy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvT1FuTTlwMV9H aGZjb0JoNC11QnV3NXM0NDd3LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMjE2MTU4MzM0 MDQwODAxNjUvMC8zMTM1MzQyZTM4MmUzMTMyMzgyZTMwMmYzMTM3MmQzMTM3MjAz ZDNlMjAzNDM1MzAzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmgiAMA0GCSqGSIb3DQEBCwUAA4IB AQBmgEe3/pk97JJ1oMqIdtKy8P3ka6x/IfRYNHq3bNDOPva3rN+YRNDaG/MZBTcJ e0KJq2hHm08p9YVCqm8OeydOZwvBh3sd/VWK04w2VJyyc6fG6OmAEzQLrPpYf/1J /mh5h+c0oRGxmuHSE17BOWm1+Myy2GxeM/OSU09R0kfqcGk+yTE2U9q16oBGr1K1 5Ja6GZzzJl3x4DMtuG1CL9Km+iAPoDeGStcUHhFnjjN4VOG/H5iXMKtASBifcf0y QyGTX2pyUZGTscguHQlTSuqIzzYUxNFhk/rF3RMhT1EdPhhbcif5kkOk41bDGfoo fWJ+mCgZflfkYP1NLGghqoVj -----END CERTIFICATE-----Generated at Sat Jul 18 06:09:08 2026 by rpki-client