$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3133322e302f32332d3233203d3e203435303930.roa File: 3135342e382e3133322e302f32332d3233203d3e203435303930.roa (raw, json) Hash identifier: SWnENGU00Efm4Xs/Ye6ghapyUfpuVE13wlHYMdQVJEs= Subject key identifier: D6:DC:6F:70:25:74:59:B7:AD:2C:F7:CA:09:95:15:FB:6C:76:27:E6 Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Certificate serial: 0107AC993839DF06DFC19C78330D22E7BE1A52FB Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3133322e302f32332d3233203d3e203435303930.roa Signing time: Tue 30 Jun 2026 10:39:19 +0000 ROA not before: Tue 30 Jun 2026 10:34:19 +0000 ROA not after: Tue 29 Jun 2027 10:39:19 +0000 asID: 45090 IP address blocks: 154.8.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Jul 2026 01:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:07:ac:99:38:39:df:06:df:c1:9c:78:33:0d:22:e7:be:1a:52:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Validity Not Before: Jun 30 10:34:19 2026 GMT Not After : Jun 29 10:39:19 2027 GMT Subject: CN=D6DC6F70257459B7AD2CF7CA099515FB6C7627E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:88:26:8d:fa:b8:c2:55:94:ba:46:d5:5f: 97:2b:95:87:88:e7:df:cc:ea:b9:e6:b1:7d:0f:0f: fb:8f:ec:cc:e8:10:a1:26:f0:46:b5:25:d7:81:2e: c8:8a:17:bd:c6:cc:5c:bd:11:f6:86:fa:c2:9b:73: e8:cd:02:1f:de:06:06:ae:89:64:84:9f:0d:d0:6b: 6c:6a:f8:d5:f1:09:c9:ce:bc:15:87:ab:56:9c:05: 1b:a0:81:a9:86:4c:f8:40:e1:01:17:2f:bb:32:e9: d3:8c:d4:c4:9f:81:a5:37:f6:4a:b9:e1:90:3e:c8: 9c:59:7d:30:ce:ee:00:37:67:c4:3c:ed:34:3e:ee: 62:d8:0b:18:6d:a4:46:04:c9:5d:40:52:9f:a4:6f: b8:c7:1b:40:d0:d9:4e:78:ba:ef:ef:83:2e:fd:ba: af:82:c9:3f:ec:4a:57:a5:55:12:45:77:e9:29:b7: 4c:14:41:ec:f8:9d:76:26:f3:6b:c5:8d:21:d8:93: 1e:d8:a0:84:ba:a2:6e:49:76:4e:0f:78:de:86:4d: 46:bc:94:7a:0b:3c:67:a7:9f:8d:f7:aa:73:00:78: ed:13:e9:2f:79:ce:d2:69:98:53:29:16:5b:82:e6: 14:03:42:7f:0d:e8:75:1c:9e:12:50:e6:9f:7b:e2: a3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DC:6F:70:25:74:59:B7:AD:2C:F7:CA:09:95:15:FB:6C:76:27:E6 X509v3 Authority Key Identifier: keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3133322e302f32332d3233203d3e203435303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 154.8.132.0/23 Signature Algorithm: sha256WithRSAEncryption 71:d1:f0:89:28:0c:ac:79:3a:d9:e1:af:76:7b:4f:55:91:05: f1:e5:06:c5:fc:07:2b:7d:19:ab:1b:07:71:b4:34:fb:1e:d4: d3:b7:9d:29:db:6c:05:ee:55:d4:db:bc:46:60:5b:07:46:1a: a7:21:f3:72:af:b9:90:59:11:42:90:a1:74:7d:6b:ef:fd:4d: 2f:d8:39:ae:ff:a5:64:8d:b5:e7:91:13:c4:ae:a2:86:10:d5: e8:46:24:e5:91:62:7a:92:0d:6d:ab:aa:de:dc:4f:a5:6c:18: 02:3e:dc:fe:97:3a:6b:8a:c4:0e:30:eb:0b:b4:0f:c5:f9:cf: cd:ec:72:4f:f2:ac:2d:78:7c:c7:1d:31:d8:e7:03:9d:c0:58: 5e:62:c0:6e:4f:42:d2:77:e7:0c:c9:83:f3:84:99:cc:11:54: ef:09:b5:c4:bb:d5:41:cc:54:dc:a1:93:35:01:1e:21:36:01: ae:8f:f1:e0:2f:94:48:c1:3a:66:e2:1c:95:0e:a0:2a:93:9e: 37:47:c0:3a:59:49:69:fc:3e:4d:00:dc:da:f5:51:cf:21:47: 1f:9b:d0:99:eb:b7:de:5d:d9:1f:42:a0:8a:2e:90:27:eb:85: 1e:75:24:a7:8c:a1:a2:36:d9:93:17:c4:0b:48:ee:2f:0e:99: 31:b1:b1:c4 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUAQesmTg53wbfwZx4Mw0i574aUvswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEygzOTA5Q0NGNjlE N0YxQTE3RENBMDE4NzhGQUUwNkVDMzlCMzhFM0JDMB4XDTI2MDYzMDEwMzQxOVoX DTI3MDYyOTEwMzkxOVowMzExMC8GA1UEAxMoRDZEQzZGNzAyNTc0NTlCN0FEMkNG N0NBMDk5NTE1RkI2Qzc2MjdFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/tiCaN+rjCVZS6RtVflyuVh4jn38zqueaxfQ8P+4/szOgQoSbwRrUl14Eu yIoXvcbMXL0R9ob6wptz6M0CH94GBq6JZISfDdBrbGr41fEJyc68FYerVpwFG6CB qYZM+EDhARcvuzLp04zUxJ+BpTf2SrnhkD7InFl9MM7uADdnxDztND7uYtgLGG2k RgTJXUBSn6RvuMcbQNDZTni67++DLv26r4LJP+xKV6VVEkV36Sm3TBRB7Piddibz a8WNIdiTHtighLqibkl2Tg943oZNRryUegs8Z6efjfeqcwB47RPpL3nO0mmYUykW W4LmFANCfw3odRyeElDmn3vioycCAwEAAaOCAhEwggINMB0GA1UdDgQWBBTW3G9w JXRZt60s98oJlRX7bHYn5jAfBgNVHSMEGDAWgBQ5Ccz2nX8aF9ygGHj64G7Dmzjj vDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzAvMzkwOUND RjY5RDdGMUExN0RDQTAxODc4RkFFMDZFQzM5QjM4RTNCQy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvT1FuTTlwMV9H aGZjb0JoNC11QnV3NXM0NDd3LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMjE2MTU4MzM0 MDQwODAxNjUvMC8zMTM1MzQyZTM4MmUzMTMzMzIyZTMwMmYzMjMzMmQzMjMzMjAz ZDNlMjAzNDM1MzAzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmgiEMA0GCSqGSIb3DQEBCwUAA4IB AQBx0fCJKAyseTrZ4a92e09VkQXx5QbF/AcrfRmrGwdxtDT7HtTTt50p22wF7lXU 27xGYFsHRhqnIfNyr7mQWRFCkKF0fWvv/U0v2Dmu/6VkjbXnkRPErqKGENXoRiTl kWJ6kg1tq6re3E+lbBgCPtz+lzprisQOMOsLtA/F+c/N7HJP8qwteHzHHTHY5wOd wFheYsBuT0LSd+cMyYPzhJnMEVTvCbXEu9VBzFTcoZM1AR4hNgGuj/HgL5RIwTpm 4hyVDqAqk543R8A6WUlp/D5NANza9VHPIUcfm9CZ67feXdkfQqCKLpAn64UedSSn jKGiNtmTF8QLSO4vDpkxsbHE -----END CERTIFICATE-----Generated at Sat Jul 18 06:08:37 2026 by rpki-client