$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3234382e302f32312d3231203d3e203435303930.roa File: 3135342e382e3234382e302f32312d3231203d3e203435303930.roa (raw, json) Hash identifier: 8gRHtouL2bLRfPWudNbg+c5S6PWeHK2579jKGZL9Kvo= Subject key identifier: B0:4A:5D:42:81:C9:61:C4:74:3F:78:9A:F1:40:2E:6E:21:96:D7:86 Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Certificate serial: 6C7DDF866DC8B3F3921C75287D4997AEE80A80F5 Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3234382e302f32312d3231203d3e203435303930.roa Signing time: Tue 30 Jun 2026 10:42:47 +0000 ROA not before: Tue 30 Jun 2026 10:37:47 +0000 ROA not after: Tue 29 Jun 2027 10:42:47 +0000 asID: 45090 IP address blocks: 154.8.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Jul 2026 01:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:7d:df:86:6d:c8:b3:f3:92:1c:75:28:7d:49:97:ae:e8:0a:80:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Validity Not Before: Jun 30 10:37:47 2026 GMT Not After : Jun 29 10:42:47 2027 GMT Subject: CN=B04A5D4281C961C4743F789AF1402E6E2196D786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ea:04:f7:ac:08:bf:ea:45:2f:5d:5f:58:07: 70:8f:88:52:1a:ab:b1:79:24:e7:4b:ba:c6:48:97: 4e:c5:1e:d7:55:57:a2:bc:58:fc:a0:fa:ce:36:d5: d1:e5:ca:a9:31:bb:bb:d9:76:24:f4:65:f8:f0:16: ce:34:d8:9d:be:90:97:a0:bf:8c:ae:d7:42:1d:5c: 50:f6:33:d1:c7:4f:ae:c3:ee:6d:12:7d:88:01:21: 4e:62:d3:c1:5e:7e:c6:8e:79:01:2e:81:7c:5e:ef: 7c:c1:08:b0:23:d9:80:b6:7e:9d:1b:c3:d8:2f:eb: 53:ff:68:c6:83:71:cd:60:1d:e8:ba:18:a0:e7:94: 04:c7:45:f4:bd:23:76:ec:b8:09:3b:14:89:0a:b8: 97:40:2e:23:21:ad:27:86:a7:9f:cb:7d:6a:da:c1: c6:77:cd:52:8d:62:92:33:48:dc:79:f9:51:1c:56: 4a:95:05:fe:e3:e7:91:b6:20:2a:19:62:87:8b:c2: 84:d7:cb:30:1b:b0:ac:c9:a7:46:ee:d3:8f:5b:f9: 99:37:7b:03:6f:85:04:d8:06:40:05:48:fd:09:12: 42:33:0f:fc:58:79:37:ea:14:ba:11:bd:2d:b3:2a: 9c:08:23:b6:f2:4c:a8:46:3c:7f:e4:10:6a:77:70: 83:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4A:5D:42:81:C9:61:C4:74:3F:78:9A:F1:40:2E:6E:21:96:D7:86 X509v3 Authority Key Identifier: keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3234382e302f32312d3231203d3e203435303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 154.8.248.0/21 Signature Algorithm: sha256WithRSAEncryption 7b:76:cd:32:4b:0f:66:e2:e5:bb:06:db:84:d9:ff:eb:b0:51: ff:f2:3c:73:47:93:c0:44:75:00:fe:ba:ac:47:b0:d0:93:1e: 20:a2:3f:f1:3d:a8:61:77:41:ad:71:8b:40:c5:f4:0a:26:bb: 13:04:31:00:d0:d7:4e:c9:fd:02:32:49:57:14:1b:e0:b2:f6: c8:ab:9c:75:a4:bf:b8:0e:ac:40:92:d4:fe:bd:f8:68:0d:a6: d0:17:48:3b:14:ab:df:b7:af:95:47:8e:b6:4b:7d:e6:5e:5c: 36:20:30:0f:17:20:10:c9:cb:af:d2:09:59:e6:3e:0f:8d:a4: fc:b1:c0:65:8e:d6:13:8b:95:f8:dc:d0:3f:2b:6f:13:24:cf: 95:4a:3f:c5:37:5c:65:99:16:c3:2c:8c:d1:35:7b:7d:ad:f0: 24:95:f1:d5:fb:70:89:88:9b:49:f9:35:01:f6:de:5f:61:6c: b7:56:d9:bb:42:96:15:3e:09:23:34:d4:b7:ce:da:99:04:97: 94:34:87:bf:46:6f:e1:99:3a:0e:21:26:8e:b9:17:e8:2c:c1: e1:f7:25:cd:fd:7a:e4:23:7e:f1:1f:74:9e:90:42:cd:c3:98: 45:77:dd:85:d9:19:4e:09:c4:6e:35:c4:ae:27:46:b8:43:df: 67:f1:7d:6c -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUbH3fhm3Is/OSHHUofUmXrugKgPUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEygzOTA5Q0NGNjlE N0YxQTE3RENBMDE4NzhGQUUwNkVDMzlCMzhFM0JDMB4XDTI2MDYzMDEwMzc0N1oX DTI3MDYyOTEwNDI0N1owMzExMC8GA1UEAxMoQjA0QTVENDI4MUM5NjFDNDc0M0Y3 ODlBRjE0MDJFNkUyMTk2RDc4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHqBPesCL/qRS9dX1gHcI+IUhqrsXkk50u6xkiXTsUe11VXorxY/KD6zjbV 0eXKqTG7u9l2JPRl+PAWzjTYnb6Ql6C/jK7XQh1cUPYz0cdPrsPubRJ9iAEhTmLT wV5+xo55AS6BfF7vfMEIsCPZgLZ+nRvD2C/rU/9oxoNxzWAd6LoYoOeUBMdF9L0j duy4CTsUiQq4l0AuIyGtJ4ann8t9atrBxnfNUo1ikjNI3Hn5URxWSpUF/uPnkbYg Khlih4vChNfLMBuwrMmnRu7Tj1v5mTd7A2+FBNgGQAVI/QkSQjMP/Fh5N+oUuhG9 LbMqnAgjtvJMqEY8f+QQandwg+cCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSwSl1C gclhxHQ/eJrxQC5uIZbXhjAfBgNVHSMEGDAWgBQ5Ccz2nX8aF9ygGHj64G7Dmzjj vDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzAvMzkwOUND RjY5RDdGMUExN0RDQTAxODc4RkFFMDZFQzM5QjM4RTNCQy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvT1FuTTlwMV9H aGZjb0JoNC11QnV3NXM0NDd3LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMjE2MTU4MzM0 MDQwODAxNjUvMC8zMTM1MzQyZTM4MmUzMjM0MzgyZTMwMmYzMjMxMmQzMjMxMjAz ZDNlMjAzNDM1MzAzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmgj4MA0GCSqGSIb3DQEBCwUAA4IB AQB7ds0ySw9m4uW7BtuE2f/rsFH/8jxzR5PARHUA/rqsR7DQkx4goj/xPahhd0Gt cYtAxfQKJrsTBDEA0NdOyf0CMklXFBvgsvbIq5x1pL+4DqxAktT+vfhoDabQF0g7 FKvft6+VR462S33mXlw2IDAPFyAQycuv0glZ5j4PjaT8scBljtYTi5X43NA/K28T JM+VSj/FN1xlmRbDLIzRNXt9rfAklfHV+3CJiJtJ+TUB9t5fYWy3Vtm7QpYVPgkj NNS3ztqZBJeUNIe/Rm/hmToOISaOuRfoLMHh9yXN/XrkI37xH3SekELNw5hFd92F 2RlOCcRuNcSuJ0a4Q99n8X1s -----END CERTIFICATE-----Generated at Sat Jul 18 06:09:07 2026 by rpki-client