$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3234302e302f32302d3230203d3e203435303930.roa File: 3135342e382e3234302e302f32302d3230203d3e203435303930.roa (raw, json) Hash identifier: xAfqjwLdDrCkqZjmByvLddM16gkqguZVlyvK8q6kqZk= Subject key identifier: 05:5A:30:1A:E0:4D:DF:72:E6:D6:1C:C4:5F:80:47:F9:7A:66:94:6A Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Certificate serial: 235965C9DDBEEEB1AE578AB9DE7BDB22B2C8B189 Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3234302e302f32302d3230203d3e203435303930.roa Signing time: Tue 30 Jun 2026 10:42:16 +0000 ROA not before: Tue 30 Jun 2026 10:37:16 +0000 ROA not after: Tue 29 Jun 2027 10:42:16 +0000 asID: 45090 IP address blocks: 154.8.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Jul 2026 01:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:59:65:c9:dd:be:ee:b1:ae:57:8a:b9:de:7b:db:22:b2:c8:b1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Validity Not Before: Jun 30 10:37:16 2026 GMT Not After : Jun 29 10:42:16 2027 GMT Subject: CN=055A301AE04DDF72E6D61CC45F8047F97A66946A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:54:fc:e6:e8:dd:2f:bd:12:a3:bd:88:eb:ec: c0:cb:c5:e9:2e:b0:e4:9b:0a:1d:27:e4:a0:31:15: 25:51:4f:3f:6a:64:24:22:05:95:3a:95:1a:14:09: 4b:79:bc:31:3d:df:c1:51:1e:bd:f8:27:6a:9c:14: 1d:c6:a9:aa:d5:17:18:33:67:20:7a:46:c4:f4:1c: 3d:4b:70:99:f5:b6:68:11:cd:b9:81:f8:fd:6a:9f: 4e:88:c0:a6:00:ca:dc:07:36:e9:d1:05:7c:1b:17: b4:8a:c6:3f:a5:4c:cd:c8:49:6d:4f:93:50:68:6c: 86:1b:13:e4:dc:49:71:bc:35:cf:ba:eb:c9:a2:92: 08:54:7e:77:5f:5b:e0:b3:9d:fc:89:c4:32:a1:73: fe:4d:61:46:7c:07:3a:36:52:b4:ab:6b:01:06:1a: e5:7e:23:c9:af:1f:d5:44:cd:09:5c:19:f2:0d:c5: 6e:bf:d6:22:20:ea:86:e8:4f:10:b9:e0:5d:79:33: f3:f0:2a:da:1c:cc:60:2e:ae:60:07:2b:b8:d8:1b: ab:d8:33:10:20:5e:14:4c:0b:c5:e4:f5:9b:ee:5a: 68:6a:fb:43:df:b5:2e:c1:4b:01:f0:b6:42:2d:b5: 9e:91:7a:ec:30:b8:11:f7:87:c3:9c:2d:a8:93:98: 6c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5A:30:1A:E0:4D:DF:72:E6:D6:1C:C4:5F:80:47:F9:7A:66:94:6A X509v3 Authority Key Identifier: keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3234302e302f32302d3230203d3e203435303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 154.8.240.0/20 Signature Algorithm: sha256WithRSAEncryption 30:39:c4:c8:99:ba:02:53:5d:8a:b3:39:65:3b:09:44:a0:96: f0:86:32:61:2d:ca:3a:b6:57:88:cf:19:8d:7c:d4:a9:8e:01: 29:91:13:92:89:a5:1f:9c:8f:4d:a6:37:40:57:34:91:10:73: 98:b9:ef:b1:1d:4f:d6:6f:68:4a:b5:c1:c2:5c:5b:d6:83:11: 19:17:02:65:0c:9a:ab:a1:e0:9d:ba:41:54:4e:d3:14:ca:05: bc:dd:c3:1c:b2:36:36:e5:50:fa:ab:66:99:33:9c:46:36:fd: 5b:ac:55:b0:71:77:74:5a:9e:7f:b2:f4:22:5e:c8:fe:84:3f: 45:b1:95:1a:d7:db:ed:91:7e:96:31:23:61:c0:ac:d0:67:8d: 74:af:08:09:91:47:b1:2f:46:92:db:6f:b1:4f:b0:4b:e8:73: ff:33:75:10:0c:2c:35:dc:f7:0c:b0:fd:97:e5:f6:35:7e:4a: 77:75:0c:80:2f:d5:d2:1f:c9:2e:4e:4f:4a:e2:ef:64:96:86: b9:7f:41:07:98:b0:8d:76:ab:dd:58:2b:5d:21:ad:4c:c1:fc: dd:d2:2c:dc:22:0e:ba:ee:8b:b3:08:70:55:67:71:3f:7d:67: a2:ed:e4:c9:93:4d:d1:cd:7c:92:9b:58:03:0d:c9:5e:c1:eb: b8:65:2c:27 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUI1llyd2+7rGuV4q53nvbIrLIsYkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEygzOTA5Q0NGNjlE N0YxQTE3RENBMDE4NzhGQUUwNkVDMzlCMzhFM0JDMB4XDTI2MDYzMDEwMzcxNloX DTI3MDYyOTEwNDIxNlowMzExMC8GA1UEAxMoMDU1QTMwMUFFMDREREY3MkU2RDYx Q0M0NUY4MDQ3Rjk3QTY2OTQ2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhU/Obo3S+9EqO9iOvswMvF6S6w5JsKHSfkoDEVJVFPP2pkJCIFlTqVGhQJ S3m8MT3fwVEevfgnapwUHcapqtUXGDNnIHpGxPQcPUtwmfW2aBHNuYH4/WqfTojA pgDK3Ac26dEFfBsXtIrGP6VMzchJbU+TUGhshhsT5NxJcbw1z7rryaKSCFR+d19b 4LOd/InEMqFz/k1hRnwHOjZStKtrAQYa5X4jya8f1UTNCVwZ8g3Fbr/WIiDqhuhP ELngXXkz8/Aq2hzMYC6uYAcruNgbq9gzECBeFEwLxeT1m+5aaGr7Q9+1LsFLAfC2 Qi21npF67DC4EfeHw5wtqJOYbJkCAwEAAaOCAhEwggINMB0GA1UdDgQWBBQFWjAa 4E3fcubWHMRfgEf5emaUajAfBgNVHSMEGDAWgBQ5Ccz2nX8aF9ygGHj64G7Dmzjj vDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzAvMzkwOUND RjY5RDdGMUExN0RDQTAxODc4RkFFMDZFQzM5QjM4RTNCQy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvT1FuTTlwMV9H aGZjb0JoNC11QnV3NXM0NDd3LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMjE2MTU4MzM0 MDQwODAxNjUvMC8zMTM1MzQyZTM4MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjMwMjAz ZDNlMjAzNDM1MzAzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmgjwMA0GCSqGSIb3DQEBCwUAA4IB AQAwOcTImboCU12KszllOwlEoJbwhjJhLco6tleIzxmNfNSpjgEpkROSiaUfnI9N pjdAVzSREHOYue+xHU/Wb2hKtcHCXFvWgxEZFwJlDJqroeCdukFUTtMUygW83cMc sjY25VD6q2aZM5xGNv1brFWwcXd0Wp5/svQiXsj+hD9FsZUa19vtkX6WMSNhwKzQ Z410rwgJkUexL0aS22+xT7BL6HP/M3UQDCw13PcMsP2X5fY1fkp3dQyAL9XSH8ku Tk9K4u9kloa5f0EHmLCNdqvdWCtdIa1Mwfzd0izcIg667ouzCHBVZ3E/fWei7eTJ k03RzXySm1gDDcleweu4ZSwn -----END CERTIFICATE-----Generated at Sat Jul 18 06:08:36 2026 by rpki-client