$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3230342e302f32332d3233203d3e203435303930.roa File: 3135342e382e3230342e302f32332d3233203d3e203435303930.roa (raw, json) Hash identifier: dB/y27Xfn48GEsIUY7otGJXame0ky7e4YnlXe+GrjCY= Subject key identifier: 1B:2A:C4:BC:6F:96:B3:27:E6:3F:1C:1A:E0:E1:8A:7B:9C:E5:45:B6 Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Certificate serial: 7EAECB9E7D9CCB051CB334F4CB745A8B29712D90 Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3230342e302f32332d3233203d3e203435303930.roa Signing time: Tue 30 Jun 2026 10:41:13 +0000 ROA not before: Tue 30 Jun 2026 10:36:13 +0000 ROA not after: Tue 29 Jun 2027 10:41:13 +0000 asID: 45090 IP address blocks: 154.8.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Jul 2026 01:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ae:cb:9e:7d:9c:cb:05:1c:b3:34:f4:cb:74:5a:8b:29:71:2d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Validity Not Before: Jun 30 10:36:13 2026 GMT Not After : Jun 29 10:41:13 2027 GMT Subject: CN=1B2AC4BC6F96B327E63F1C1AE0E18A7B9CE545B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:55:00:f7:d2:cf:a4:f7:2a:80:f9:2e:98: 0d:d6:42:ba:36:88:c0:89:76:0e:cc:c0:0f:49:71: f8:18:54:3e:41:b4:77:be:47:74:60:b6:29:75:db: 01:c9:22:f2:1c:b5:28:c0:4e:26:28:74:9f:d9:6c: 2e:cb:98:d0:f6:0a:a4:9f:09:3f:ec:6a:ca:37:60: f2:98:1a:35:5d:30:81:52:32:ca:d4:f8:e8:bc:9d: 65:a0:f9:60:b6:f1:47:99:be:e4:e4:2c:5d:a7:cb: 3f:18:0e:6e:03:64:38:5e:af:c1:09:c4:0b:fc:0f: 56:ca:bf:69:e3:86:11:cb:eb:1c:26:bc:26:b5:21: 69:af:45:93:ac:71:5d:fc:dd:a7:18:aa:a2:c6:35: aa:ab:2a:fd:02:3e:66:9c:7d:79:b1:b8:33:5e:11: 37:03:96:8f:b0:a2:d8:e1:70:cd:0d:60:c9:53:5d: 66:6f:2e:85:9c:88:47:dc:3f:09:8c:76:0a:b4:f8: 34:91:34:a9:8c:4f:88:14:d5:8a:e8:d0:34:77:49: e0:f0:a3:0c:7a:a5:d1:8c:93:1f:e1:92:67:6d:60: 0d:7f:23:f9:58:1f:a6:67:ef:de:5f:71:d1:bd:90: 4c:cf:5a:7e:e9:c9:75:92:e8:7b:d8:2c:f0:02:5c: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2A:C4:BC:6F:96:B3:27:E6:3F:1C:1A:E0:E1:8A:7B:9C:E5:45:B6 X509v3 Authority Key Identifier: keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3230342e302f32332d3233203d3e203435303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 154.8.204.0/23 Signature Algorithm: sha256WithRSAEncryption 78:ad:09:f7:af:7c:c9:b7:5a:cc:ae:fd:74:99:6e:52:36:03: f1:9b:3c:08:3c:9a:55:a4:ad:69:22:ab:91:39:25:c9:f2:e2: 63:62:aa:80:a9:fe:ab:6d:36:33:83:08:15:9b:8e:c8:c6:de: 7b:7a:c8:4e:84:af:3a:f4:e9:25:b5:03:ed:41:10:39:d4:1c: 44:3b:05:79:5f:33:8b:bc:d7:72:6b:80:2b:49:0c:80:0c:d2: 56:06:54:32:b8:58:75:63:b4:23:29:c0:50:3c:2c:67:58:50: 9a:3c:4e:e8:ed:45:c2:7e:35:3c:89:71:87:b9:37:f3:5a:75: f3:3b:73:1a:56:3f:17:dd:01:b1:82:82:f4:bc:a0:c7:4b:0e: 7b:21:18:98:0e:b0:13:fc:64:6f:7c:db:86:be:12:e3:49:1f: 8b:0c:e7:cf:35:89:0a:5e:96:51:26:b4:37:c7:ec:80:65:55: d8:bb:a5:ea:84:da:7e:55:0b:53:15:1c:c8:c8:1f:77:56:ae: fa:5b:0e:98:ab:8a:97:90:1f:b0:07:12:74:81:9d:76:44:64: 4a:52:97:9c:de:2b:44:74:ed:27:a6:e3:c2:f7:30:48:d9:03: ce:f0:ba:95:b1:8a:e6:3c:f0:42:fd:72:55:26:62:c9:fd:36: 97:94:3b:55 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUfq7Lnn2cywUcszT0y3RaiylxLZAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEygzOTA5Q0NGNjlE N0YxQTE3RENBMDE4NzhGQUUwNkVDMzlCMzhFM0JDMB4XDTI2MDYzMDEwMzYxM1oX DTI3MDYyOTEwNDExM1owMzExMC8GA1UEAxMoMUIyQUM0QkM2Rjk2QjMyN0U2M0Yx QzFBRTBFMThBN0I5Q0U1NDVCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKptVQD30s+k9yqA+S6YDdZCujaIwIl2DszAD0lx+BhUPkG0d75HdGC2KXXb Acki8hy1KMBOJih0n9lsLsuY0PYKpJ8JP+xqyjdg8pgaNV0wgVIyytT46LydZaD5 YLbxR5m+5OQsXafLPxgObgNkOF6vwQnEC/wPVsq/aeOGEcvrHCa8JrUhaa9Fk6xx XfzdpxiqosY1qqsq/QI+Zpx9ebG4M14RNwOWj7Ci2OFwzQ1gyVNdZm8uhZyIR9w/ CYx2CrT4NJE0qYxPiBTViujQNHdJ4PCjDHql0YyTH+GSZ21gDX8j+Vgfpmfv3l9x 0b2QTM9afunJdZLoe9gs8AJcG38CAwEAAaOCAhEwggINMB0GA1UdDgQWBBQbKsS8 b5azJ+Y/HBrg4Yp7nOVFtjAfBgNVHSMEGDAWgBQ5Ccz2nX8aF9ygGHj64G7Dmzjj vDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzAvMzkwOUND RjY5RDdGMUExN0RDQTAxODc4RkFFMDZFQzM5QjM4RTNCQy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvT1FuTTlwMV9H aGZjb0JoNC11QnV3NXM0NDd3LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMjE2MTU4MzM0 MDQwODAxNjUvMC8zMTM1MzQyZTM4MmUzMjMwMzQyZTMwMmYzMjMzMmQzMjMzMjAz ZDNlMjAzNDM1MzAzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmgjMMA0GCSqGSIb3DQEBCwUAA4IB AQB4rQn3r3zJt1rMrv10mW5SNgPxmzwIPJpVpK1pIquROSXJ8uJjYqqAqf6rbTYz gwgVm47Ixt57eshOhK869OkltQPtQRA51BxEOwV5XzOLvNdya4ArSQyADNJWBlQy uFh1Y7QjKcBQPCxnWFCaPE7o7UXCfjU8iXGHuTfzWnXzO3MaVj8X3QGxgoL0vKDH Sw57IRiYDrAT/GRvfNuGvhLjSR+LDOfPNYkKXpZRJrQ3x+yAZVXYu6XqhNp+VQtT FRzIyB93Vq76Ww6Yq4qXkB+wBxJ0gZ12RGRKUpec3itEdO0npuPC9zBI2QPO8LqV sYrmPPBC/XJVJmLJ/TaXlDtV -----END CERTIFICATE-----Generated at Sat Jul 18 06:08:38 2026 by rpki-client