$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3234302e302f32312d3231203d3e203435303930.roa File: 3135342e382e3234302e302f32312d3231203d3e203435303930.roa (raw, json) Hash identifier: iB5+YQ3TDQDQUWMOn6xehEpOzuBG2Q+Fd4hiZru9UPI= Subject key identifier: CD:E5:DD:EB:37:B0:B8:E3:B0:73:F9:09:D6:97:FF:B0:23:7F:8A:7A Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Certificate serial: 70B0BB36189CEDFD17C89CDF9DB75B5FD3E6020F Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3234302e302f32312d3231203d3e203435303930.roa Signing time: Tue 30 Jun 2026 10:42:32 +0000 ROA not before: Tue 30 Jun 2026 10:37:32 +0000 ROA not after: Tue 29 Jun 2027 10:42:32 +0000 asID: 45090 IP address blocks: 154.8.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Jul 2026 01:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b0:bb:36:18:9c:ed:fd:17:c8:9c:df:9d:b7:5b:5f:d3:e6:02:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Validity Not Before: Jun 30 10:37:32 2026 GMT Not After : Jun 29 10:42:32 2027 GMT Subject: CN=CDE5DDEB37B0B8E3B073F909D697FFB0237F8A7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:e2:5d:d6:b9:3d:c3:8a:96:9f:75:2e:f6: 0c:d2:0d:4f:0f:59:dc:b6:bc:7c:7d:50:8f:b9:de: 9c:6b:f4:17:66:e5:1d:71:ba:c1:43:27:2c:48:22: 80:9f:f2:33:db:ce:c4:74:06:b5:84:58:e2:c5:15: ee:2d:d0:c5:be:53:68:65:dc:fe:bc:99:2c:a2:73: ce:a2:78:9d:b6:13:5c:e6:2d:5e:17:10:ca:13:bc: 0c:b5:57:6d:cc:b6:5d:3f:c0:cc:e3:64:24:57:27: 9a:a7:3f:3f:48:1a:09:a3:af:bc:b6:4b:f4:1e:16: 4b:c4:c3:03:56:ab:28:f7:51:66:2a:2c:0c:c2:ab: 1b:a3:a0:03:9d:a3:7f:03:69:a5:2c:4a:2a:ee:f9: 27:4f:cb:ed:1e:80:ca:eb:67:c5:8f:cb:86:1c:a4: c5:fb:36:b0:a4:64:a5:88:76:74:5c:4a:68:f0:81: 4a:e6:ad:d0:75:f9:77:a1:61:7f:26:66:60:89:96: 5d:23:c5:9a:b6:d0:a7:0a:16:97:e6:ef:24:94:f0: cd:c4:3b:1b:19:3f:15:4a:0a:56:a7:6a:06:29:cf: 68:06:46:4b:25:73:be:f1:04:6a:dd:2d:b5:07:56: ac:a1:cf:ff:fe:87:d7:a3:e6:c2:da:7a:56:6b:b8: 84:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E5:DD:EB:37:B0:B8:E3:B0:73:F9:09:D6:97:FF:B0:23:7F:8A:7A X509v3 Authority Key Identifier: keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3234302e302f32312d3231203d3e203435303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 154.8.240.0/21 Signature Algorithm: sha256WithRSAEncryption 6a:6b:fb:65:83:cf:93:92:6c:6b:08:bb:b5:e9:8f:b1:7d:1f: 85:05:6b:7f:6b:87:8b:4c:77:02:f0:fa:02:ad:d9:ce:8c:25: 70:24:06:9a:e2:b5:3e:d0:e8:4f:a1:c2:56:57:28:20:2f:eb: cd:62:e1:72:c5:85:a1:2f:be:3f:48:0f:ad:9a:57:7a:08:02: e4:60:0e:02:d1:d4:ad:40:e4:9a:38:e4:e2:81:d2:f6:7f:d8: de:f7:01:50:18:73:59:e8:10:f3:19:b2:23:91:0f:c3:72:45: 91:52:2f:89:3b:41:f4:c7:f5:69:40:2d:57:4d:6c:17:cf:62: 66:29:28:ad:79:88:5b:f4:3d:c3:48:26:b7:31:5b:2a:59:f8: ee:93:54:a2:dc:3f:30:6e:c6:6f:bf:bf:02:4d:b7:f7:f0:fa: 38:07:ff:04:2d:8a:a6:d1:bb:00:0d:e0:9c:57:fa:82:08:5e: 70:d8:f2:71:3a:9b:66:8b:7a:04:11:78:a5:94:28:3c:0f:9b: 57:03:ab:cf:2d:9a:6b:93:d3:fd:1c:3d:e4:04:28:7a:70:7b: 8a:e9:86:94:c2:42:21:5a:12:87:e6:ff:76:16:23:32:7e:c3: ba:b6:51:c0:cd:5b:92:a1:31:17:96:3d:5d:06:ce:f5:81:e0: 59:8f:a6:81 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUcLC7Nhic7f0XyJzfnbdbX9PmAg8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEygzOTA5Q0NGNjlE N0YxQTE3RENBMDE4NzhGQUUwNkVDMzlCMzhFM0JDMB4XDTI2MDYzMDEwMzczMloX DTI3MDYyOTEwNDIzMlowMzExMC8GA1UEAxMoQ0RFNURERUIzN0IwQjhFM0IwNzNG OTA5RDY5N0ZGQjAyMzdGOEE3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQ44l3WuT3DipafdS72DNINTw9Z3La8fH1Qj7nenGv0F2blHXG6wUMnLEgi gJ/yM9vOxHQGtYRY4sUV7i3Qxb5TaGXc/ryZLKJzzqJ4nbYTXOYtXhcQyhO8DLVX bcy2XT/AzONkJFcnmqc/P0gaCaOvvLZL9B4WS8TDA1arKPdRZiosDMKrG6OgA52j fwNppSxKKu75J0/L7R6AyutnxY/Lhhykxfs2sKRkpYh2dFxKaPCBSuat0HX5d6Fh fyZmYImWXSPFmrbQpwoWl+bvJJTwzcQ7Gxk/FUoKVqdqBinPaAZGSyVzvvEEat0t tQdWrKHP//6H16Pmwtp6Vmu4hF0CAwEAAaOCAhEwggINMB0GA1UdDgQWBBTN5d3r N7C447Bz+QnWl/+wI3+KejAfBgNVHSMEGDAWgBQ5Ccz2nX8aF9ygGHj64G7Dmzjj vDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzAvMzkwOUND RjY5RDdGMUExN0RDQTAxODc4RkFFMDZFQzM5QjM4RTNCQy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvT1FuTTlwMV9H aGZjb0JoNC11QnV3NXM0NDd3LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMjE2MTU4MzM0 MDQwODAxNjUvMC8zMTM1MzQyZTM4MmUzMjM0MzAyZTMwMmYzMjMxMmQzMjMxMjAz ZDNlMjAzNDM1MzAzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmgjwMA0GCSqGSIb3DQEBCwUAA4IB AQBqa/tlg8+TkmxrCLu16Y+xfR+FBWt/a4eLTHcC8PoCrdnOjCVwJAaa4rU+0OhP ocJWVyggL+vNYuFyxYWhL74/SA+tmld6CALkYA4C0dStQOSaOOTigdL2f9je9wFQ GHNZ6BDzGbIjkQ/DckWRUi+JO0H0x/VpQC1XTWwXz2JmKSiteYhb9D3DSCa3MVsq Wfjuk1Si3D8wbsZvv78CTbf38Po4B/8ELYqm0bsADeCcV/qCCF5w2PJxOptmi3oE EXillCg8D5tXA6vPLZprk9P9HD3kBCh6cHuK6YaUwkIhWhKH5v92FiMyfsO6tlHA zVuSoTEXlj1dBs71geBZj6aB -----END CERTIFICATE-----Generated at Sat Jul 18 06:09:08 2026 by rpki-client