$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3232342e302f32302d3230203d3e203435303930.roa File: 3135342e382e3232342e302f32302d3230203d3e203435303930.roa (raw, json) Hash identifier: v5X6bVjXVyxk3rPnBTQ+YqDy+TM93hPxL6xwQae8C28= Subject key identifier: 75:99:64:F2:96:75:37:B1:D7:0E:5A:DB:6F:DD:E5:AC:67:A8:28:DA Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Certificate serial: 493E5EDD8646FC026ABF8D16384EC472492F8465 Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3232342e302f32302d3230203d3e203435303930.roa Signing time: Tue 30 Jun 2026 10:42:00 +0000 ROA not before: Tue 30 Jun 2026 10:37:00 +0000 ROA not after: Tue 29 Jun 2027 10:42:00 +0000 asID: 45090 IP address blocks: 154.8.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Jul 2026 01:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3e:5e:dd:86:46:fc:02:6a:bf:8d:16:38:4e:c4:72:49:2f:84:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Validity Not Before: Jun 30 10:37:00 2026 GMT Not After : Jun 29 10:42:00 2027 GMT Subject: CN=759964F2967537B1D70E5ADB6FDDE5AC67A828DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:af:ea:e1:48:68:81:10:8b:5b:2d:3b:95: 94:b9:69:73:de:a8:70:65:d5:fc:50:db:f1:74:e5: 7c:98:f9:a9:50:03:e0:d1:67:88:9c:81:f5:fa:d7: 51:1b:12:87:f0:c6:ee:09:a5:4e:60:fa:a4:50:28: 50:08:b3:6a:68:cb:cd:75:3b:ae:ac:d1:39:cc:bc: c3:fd:e3:cd:fd:6c:c0:f9:f1:83:d5:0e:6f:e8:ed: 19:12:7c:5e:65:7a:3d:c6:ac:8d:52:49:d2:7d:4e: a4:b0:1f:c6:18:dd:48:b2:51:52:54:48:c2:a5:2c: 92:c1:12:f2:5e:52:dd:03:b8:8e:59:0f:12:e8:56: 56:c7:f9:38:b6:88:7c:fd:75:0e:1b:3f:98:5b:04: 6b:1b:98:d6:90:80:6f:51:4f:0a:13:c6:62:ff:d5: de:46:0f:72:00:66:55:de:28:cc:80:0b:51:f8:cb: cd:af:16:1e:92:49:41:c2:16:e5:20:91:16:a6:d3: 42:ec:41:95:79:32:f7:25:0c:49:b3:88:40:e8:40: 8e:00:56:f8:ac:64:83:b9:b2:d5:20:60:b5:16:da: ca:17:8f:97:66:bc:6b:56:49:36:ef:7a:11:56:34: a7:30:3d:5c:a3:2f:93:83:f3:7b:66:08:b3:2d:20: c5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:99:64:F2:96:75:37:B1:D7:0E:5A:DB:6F:DD:E5:AC:67:A8:28:DA X509v3 Authority Key Identifier: keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3232342e302f32302d3230203d3e203435303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 154.8.224.0/20 Signature Algorithm: sha256WithRSAEncryption 30:b2:b0:65:28:cc:81:19:0d:0d:49:cd:4c:a1:9d:97:d5:8c: 85:62:7d:b9:c3:a9:60:48:72:63:a1:8e:75:f6:27:d8:7d:81: ca:c8:bb:31:3d:74:f7:df:f4:24:e5:fe:cf:0f:c9:1d:5a:5d: b2:4d:03:0e:5d:96:58:de:bb:38:8c:83:ec:ee:7c:2d:42:70: 7c:b4:d4:09:1c:02:f6:ea:80:79:63:39:b6:ed:d7:54:d2:ac: 14:fb:91:6f:bc:b4:51:2f:54:fd:44:88:eb:71:43:f6:e9:6a: 8d:5e:ea:8d:d7:2b:d8:2a:32:2a:e5:08:b6:e6:4b:bf:d3:5c: 11:0e:98:db:14:ec:e8:ae:ea:ac:a7:91:c4:cb:13:60:1d:d3: 46:e5:10:8d:c4:d2:71:e8:48:f8:6a:56:25:f6:33:61:5a:eb: 5c:6e:d3:d2:ce:58:a2:45:52:78:91:c7:f5:ca:e5:f4:ac:3f: c9:96:55:93:52:c7:1a:f8:9a:41:94:d5:0e:5d:65:09:f4:16: 25:7c:3c:30:fc:87:af:44:0c:ef:18:b9:f4:11:09:76:8d:f8: 96:39:af:08:16:69:ff:42:5c:4e:74:60:a0:bb:4b:7f:86:ca: b1:54:6d:e6:5e:fb:69:ba:1a:c3:b7:93:cf:bd:67:64:63:a6: ee:65:46:82 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUST5e3YZG/AJqv40WOE7EckkvhGUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEygzOTA5Q0NGNjlE N0YxQTE3RENBMDE4NzhGQUUwNkVDMzlCMzhFM0JDMB4XDTI2MDYzMDEwMzcwMFoX DTI3MDYyOTEwNDIwMFowMzExMC8GA1UEAxMoNzU5OTY0RjI5Njc1MzdCMUQ3MEU1 QURCNkZEREU1QUM2N0E4MjhEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALyhr+rhSGiBEItbLTuVlLlpc96ocGXV/FDb8XTlfJj5qVAD4NFniJyB9frX URsSh/DG7gmlTmD6pFAoUAizamjLzXU7rqzROcy8w/3jzf1swPnxg9UOb+jtGRJ8 XmV6PcasjVJJ0n1OpLAfxhjdSLJRUlRIwqUsksES8l5S3QO4jlkPEuhWVsf5OLaI fP11Dhs/mFsEaxuY1pCAb1FPChPGYv/V3kYPcgBmVd4ozIALUfjLza8WHpJJQcIW 5SCRFqbTQuxBlXky9yUMSbOIQOhAjgBW+Kxkg7my1SBgtRbayhePl2a8a1ZJNu96 EVY0pzA9XKMvk4Pze2YIsy0gxfkCAwEAAaOCAhEwggINMB0GA1UdDgQWBBR1mWTy lnU3sdcOWttv3eWsZ6go2jAfBgNVHSMEGDAWgBQ5Ccz2nX8aF9ygGHj64G7Dmzjj vDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzAvMzkwOUND RjY5RDdGMUExN0RDQTAxODc4RkFFMDZFQzM5QjM4RTNCQy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvT1FuTTlwMV9H aGZjb0JoNC11QnV3NXM0NDd3LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMjE2MTU4MzM0 MDQwODAxNjUvMC8zMTM1MzQyZTM4MmUzMjMyMzQyZTMwMmYzMjMwMmQzMjMwMjAz ZDNlMjAzNDM1MzAzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmgjgMA0GCSqGSIb3DQEBCwUAA4IB AQAwsrBlKMyBGQ0NSc1MoZ2X1YyFYn25w6lgSHJjoY519ifYfYHKyLsxPXT33/Qk 5f7PD8kdWl2yTQMOXZZY3rs4jIPs7nwtQnB8tNQJHAL26oB5Yzm27ddU0qwU+5Fv vLRRL1T9RIjrcUP26WqNXuqN1yvYKjIq5Qi25ku/01wRDpjbFOzoruqsp5HEyxNg HdNG5RCNxNJx6Ej4alYl9jNhWutcbtPSzliiRVJ4kcf1yuX0rD/JllWTUsca+JpB lNUOXWUJ9BYlfDww/IevRAzvGLn0EQl2jfiWOa8IFmn/QlxOdGCgu0t/hsqxVG3m XvtpuhrDt5PPvWdkY6buZUaC -----END CERTIFICATE-----Generated at Sat Jul 18 06:08:41 2026 by rpki-client