$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3230382e302f32302d3230203d3e203435303930.roa File: 3135342e382e3230382e302f32302d3230203d3e203435303930.roa (raw, json) Hash identifier: ZQz/O22MTMUek+0zKBVGN5vrkbQkHB5F/FMNHGhBDOM= Subject key identifier: 5C:54:E1:34:A2:3C:3B:80:DD:42:62:B7:F1:55:E8:F0:7A:AD:0F:59 Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Certificate serial: 77EF23E32E315B44A5F537A17C541C5DAAABD550 Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3230382e302f32302d3230203d3e203435303930.roa Signing time: Tue 30 Jun 2026 10:41:45 +0000 ROA not before: Tue 30 Jun 2026 10:36:45 +0000 ROA not after: Tue 29 Jun 2027 10:41:45 +0000 asID: 45090 IP address blocks: 154.8.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Jul 2026 01:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ef:23:e3:2e:31:5b:44:a5:f5:37:a1:7c:54:1c:5d:aa:ab:d5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Validity Not Before: Jun 30 10:36:45 2026 GMT Not After : Jun 29 10:41:45 2027 GMT Subject: CN=5C54E134A23C3B80DD4262B7F155E8F07AAD0F59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a2:cc:a1:01:ad:f8:5f:9a:c0:52:dc:81:2a: e4:b2:03:53:49:98:8b:0b:5c:90:a0:97:e5:15:44: aa:37:3b:d7:9e:95:03:04:b8:0b:18:ed:c5:9a:e2: 0d:71:67:7e:b2:34:81:51:b2:e1:a7:a7:6f:9a:97: a3:61:76:ab:d8:1c:25:be:2a:81:bd:c6:3a:b8:8a: b9:d8:30:ac:b1:96:da:b5:d7:25:47:5d:bc:61:fc: e1:24:59:ab:30:39:e0:cd:4b:02:dd:97:08:46:a6: f3:11:f7:61:71:40:96:4a:79:4a:14:bc:fe:4f:0a: dc:86:6d:d4:f0:52:7a:54:9e:ae:c6:69:84:d8:07: 83:06:82:cb:21:ad:e4:83:a0:b6:53:58:6e:24:b2: de:cf:10:95:4e:3c:02:e7:3f:b7:f3:1d:fc:94:22: f7:51:1b:2e:50:57:f5:ab:40:7b:69:af:33:07:da: 6b:f6:8a:f2:2f:ba:d0:e5:a7:47:61:79:2d:df:af: ee:b4:6d:ae:94:44:17:26:dd:39:63:54:ac:26:fd: 54:17:fd:d2:be:65:e9:bd:81:83:59:67:db:14:36: 27:34:25:57:fb:8f:65:48:e7:8a:36:32:40:8d:d3: ca:97:78:30:3e:db:cf:e7:32:80:eb:f3:c2:4b:af: 4c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:54:E1:34:A2:3C:3B:80:DD:42:62:B7:F1:55:E8:F0:7A:AD:0F:59 X509v3 Authority Key Identifier: keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3230382e302f32302d3230203d3e203435303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 154.8.208.0/20 Signature Algorithm: sha256WithRSAEncryption 46:bb:94:23:ff:31:d3:90:58:8c:2a:ef:76:1f:5c:00:04:53: bb:46:60:28:b4:22:99:f0:65:e9:2b:50:63:fb:cb:e7:b5:94: 7d:84:43:3a:c5:c4:a9:d4:e8:30:0b:50:33:a9:26:14:c7:c3: f0:72:d5:ba:9f:00:21:fb:d6:87:b8:83:ba:f5:f9:32:de:c2: fc:c2:ad:99:de:31:2e:e5:e5:4b:ae:82:e6:18:13:d6:18:f0: 3b:5b:8e:8a:32:ef:e3:87:1d:ca:1a:df:ef:bd:7d:bc:a6:cf: c9:1d:f8:36:41:e7:74:51:9b:96:7b:e8:3f:d0:df:01:e8:6f: 80:2a:8c:d1:70:2d:d2:ad:51:c9:df:2a:62:24:69:2f:e7:69: 4f:02:fa:64:93:80:3b:e9:79:82:02:56:0b:27:2b:66:7c:4a: b5:78:f0:04:b0:63:10:4a:20:ff:b4:a6:6d:48:f9:db:a2:06: 8a:0e:ca:c2:bd:25:23:a2:c3:23:c7:d3:8d:fa:e1:49:6e:ab: 8b:81:6a:1c:ba:c2:e4:8d:6b:aa:e9:29:f2:15:a6:f5:61:93: 04:f7:6b:f0:94:04:67:79:0d:44:6d:50:fd:8d:a8:e6:5c:38: c3:40:fe:61:25:fc:ee:22:e3:24:90:a1:3f:79:21:c1:f5:eb: a1:ae:15:96 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUd+8j4y4xW0Sl9TehfFQcXaqr1VAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEygzOTA5Q0NGNjlE N0YxQTE3RENBMDE4NzhGQUUwNkVDMzlCMzhFM0JDMB4XDTI2MDYzMDEwMzY0NVoX DTI3MDYyOTEwNDE0NVowMzExMC8GA1UEAxMoNUM1NEUxMzRBMjNDM0I4MERENDI2 MkI3RjE1NUU4RjA3QUFEMEY1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqizKEBrfhfmsBS3IEq5LIDU0mYiwtckKCX5RVEqjc7156VAwS4CxjtxZri DXFnfrI0gVGy4aenb5qXo2F2q9gcJb4qgb3GOriKudgwrLGW2rXXJUddvGH84SRZ qzA54M1LAt2XCEam8xH3YXFAlkp5ShS8/k8K3IZt1PBSelSersZphNgHgwaCyyGt 5IOgtlNYbiSy3s8QlU48Auc/t/Md/JQi91EbLlBX9atAe2mvMwfaa/aK8i+60OWn R2F5Ld+v7rRtrpREFybdOWNUrCb9VBf90r5l6b2Bg1ln2xQ2JzQlV/uPZUjnijYy QI3Typd4MD7bz+cygOvzwkuvTIkCAwEAAaOCAhEwggINMB0GA1UdDgQWBBRcVOE0 ojw7gN1CYrfxVejweq0PWTAfBgNVHSMEGDAWgBQ5Ccz2nX8aF9ygGHj64G7Dmzjj vDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzAvMzkwOUND RjY5RDdGMUExN0RDQTAxODc4RkFFMDZFQzM5QjM4RTNCQy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvT1FuTTlwMV9H aGZjb0JoNC11QnV3NXM0NDd3LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMjE2MTU4MzM0 MDQwODAxNjUvMC8zMTM1MzQyZTM4MmUzMjMwMzgyZTMwMmYzMjMwMmQzMjMwMjAz ZDNlMjAzNDM1MzAzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmgjQMA0GCSqGSIb3DQEBCwUAA4IB AQBGu5Qj/zHTkFiMKu92H1wABFO7RmAotCKZ8GXpK1Bj+8vntZR9hEM6xcSp1Ogw C1AzqSYUx8PwctW6nwAh+9aHuIO69fky3sL8wq2Z3jEu5eVLroLmGBPWGPA7W46K Mu/jhx3KGt/vvX28ps/JHfg2Qed0UZuWe+g/0N8B6G+AKozRcC3SrVHJ3ypiJGkv 52lPAvpkk4A76XmCAlYLJytmfEq1ePAEsGMQSiD/tKZtSPnbogaKDsrCvSUjosMj x9ON+uFJbquLgWocusLkjWuq6SnyFab1YZME92vwlARneQ1EbVD9jajmXDjDQP5h JfzuIuMkkKE/eSHB9euhrhWW -----END CERTIFICATE-----Generated at Sat Jul 18 06:08:38 2026 by rpki-client