$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123865781596061733/0/3135302e3132392e3133362e302f32322d3232203d3e2034383337.roa File: 3135302e3132392e3133362e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: +hoH7sbwHcCO+Lo6uK8YC9snfhyFUkr3JblTcfw/qj8= Subject key identifier: 8B:0A:89:50:94:FA:1C:6D:CB:2D:D8:54:EB:5A:83:95:1D:64:47:4A Certificate issuer: /CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Certificate serial: 29C5CC3BD2CB295E606FB0014617A414CD57FB01 Authority key identifier: C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/3135302e3132392e3133362e302f32322d3232203d3e2034383337.roa Signing time: Mon 29 Jun 2026 06:43:29 +0000 ROA not before: Mon 29 Jun 2026 06:38:29 +0000 ROA not after: Mon 28 Jun 2027 06:43:29 +0000 asID: 4837 IP address blocks: 150.129.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 22:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c5:cc:3b:d2:cb:29:5e:60:6f:b0:01:46:17:a4:14:cd:57:fb:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Validity Not Before: Jun 29 06:38:29 2026 GMT Not After : Jun 28 06:43:29 2027 GMT Subject: CN=8B0A895094FA1C6DCB2DD854EB5A83951D64474A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f4:fc:e3:f6:0c:ba:a2:d0:25:06:e6:d0:3f: 9a:90:62:e9:eb:a3:2a:94:de:4a:46:4b:ad:b5:d1: cb:d3:e6:45:8f:25:8f:52:75:86:51:82:ee:27:3b: 7c:06:36:75:dc:62:ae:9a:65:91:10:8f:95:0b:73: 00:d4:b1:ba:f7:dd:d1:01:1d:88:86:98:71:02:f7: c3:85:1d:8a:63:c4:43:a0:5b:bc:df:5d:f7:10:03: 48:73:b3:f6:fa:96:bb:27:05:8d:49:b2:16:14:36: ce:5c:70:09:b9:90:38:e9:da:08:e0:3a:ed:06:dc: 58:28:53:35:13:14:d4:67:a3:df:b1:1c:d2:44:a1: 8f:a8:7e:76:c4:2e:c4:fb:0c:a0:2e:d1:05:39:da: 8b:8c:1e:2f:1f:c2:cd:46:07:aa:4b:e9:7c:e4:f0: 36:19:41:03:18:fd:30:51:69:ee:a4:fd:20:62:7f: 87:ed:7f:73:f5:9a:d9:52:a1:c4:cd:f7:6a:67:3b: bd:36:72:48:0e:38:b6:5e:ea:a6:24:ee:a9:47:07: db:8e:d7:18:3c:33:aa:a5:ac:ca:c1:f7:37:d8:17: 9d:c4:fe:e5:69:16:3a:6b:ff:a4:8e:76:ea:04:28: 2e:6b:90:01:c7:b2:fb:58:21:0e:e8:b7:e9:1f:66: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0A:89:50:94:FA:1C:6D:CB:2D:D8:54:EB:5A:83:95:1D:64:47:4A X509v3 Authority Key Identifier: keyid:C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/3135302e3132392e3133362e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.129.136.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:51:fe:56:6f:dc:4a:1b:bb:cc:57:40:e5:d2:d9:9b:db:5e: 7b:22:bb:20:9d:37:7a:a8:b9:d3:cb:6b:1a:35:e9:e3:83:4c: e1:a5:f4:0a:f7:3b:b2:64:80:d8:e3:e1:5f:98:c5:8d:16:ec: e1:49:55:e7:c4:f2:4e:7f:66:aa:d5:a7:9d:08:30:68:c9:69: f5:8a:15:f9:3d:77:9b:7e:f1:34:f0:cb:18:3a:c0:da:61:05: 89:d6:cc:63:08:ca:e4:96:1f:70:55:7a:6d:ec:07:8f:83:e7: e3:76:5b:55:6d:04:4c:e4:5b:11:16:7f:29:1f:0e:b8:3c:2a: 7a:fb:d3:8a:92:5c:02:ce:13:15:b1:f2:16:f8:ed:28:83:55: ac:24:6b:65:81:60:99:cf:9f:75:38:f6:49:d6:58:3e:d4:06: 26:35:e8:7d:22:da:df:e7:b5:1a:c2:1e:f0:fb:93:85:61:2f: 62:1b:1b:7c:1e:b3:c8:54:99:f3:3c:3e:72:58:33:b8:4d:d2: 8c:bd:a2:22:58:8d:41:3e:57:e4:c8:80:48:1a:4b:80:ff:3e: 5c:36:be:a4:50:ee:87:f7:0e:33:c8:9a:41:11:33:35:62:67: d0:48:b1:f1:21:94:af:9c:21:6a:c3:fe:3e:10:cb:06:36:c1: 85:2e:f7:a8 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKcXMO9LLKV5gb7ABRhekFM1X+wEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZD ODc2MTRFQjAeFw0yNjA2MjkwNjM4MjlaFw0yNzA2MjgwNjQzMjlaMDMxMTAvBgNV BAMTKDhCMEE4OTUwOTRGQTFDNkRDQjJERDg1NEVCNUE4Mzk1MUQ2NDQ3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9Pzj9gy6otAlBubQP5qQYunr oyqU3kpGS6210cvT5kWPJY9SdYZRgu4nO3wGNnXcYq6aZZEQj5ULcwDUsbr33dEB HYiGmHEC98OFHYpjxEOgW7zfXfcQA0hzs/b6lrsnBY1JshYUNs5ccAm5kDjp2gjg Ou0G3FgoUzUTFNRno9+xHNJEoY+ofnbELsT7DKAu0QU52ouMHi8fws1GB6pL6Xzk 8DYZQQMY/TBRae6k/SBif4ftf3P1mtlSocTN92pnO702ckgOOLZe6qYk7qlHB9uO 1xg8M6qlrMrB9zfYF53E/uVpFjpr/6SOduoEKC5rkAHHsvtYIQ7ot+kfZuwXAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUiwqJUJT6HG3LLdhU61qDlR1kR0owHwYDVR0j BBgwFoAUxGdrMFj1s/m/tli77Y9edsh2FOswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg2NTc4MTU5NjA2MTczMy8wL0M0Njc2QjMwNThGNUIzRjlCRkI2NThCQkVEOEY1 RTc2Qzg3NjE0RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZDODc2MTRFQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEyMzg2NTc4MTU5NjA2MTczMy8wLzMxMzUzMDJlMzEz MjM5MmUzMTMzMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzMzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEApaBiDANBgkqhkiG9w0BAQsFAAOCAQEAWlH+Vm/cShu7zFdA5dLZm9te eyK7IJ03eqi508trGjXp44NM4aX0Cvc7smSA2OPhX5jFjRbs4UlV58TyTn9mqtWn nQgwaMlp9YoV+T13m37xNPDLGDrA2mEFidbMYwjK5JYfcFV6bewHj4Pn43ZbVW0E TORbERZ/KR8OuDwqevvTipJcAs4TFbHyFvjtKINVrCRrZYFgmc+fdTj2SdZYPtQG JjXofSLa3+e1GsIe8PuThWEvYhsbfB6zyFSZ8zw+clgzuE3SjL2iIliNQT5X5MiA SBpLgP8+XDa+pFDuh/cOM8iaQREzNWJn0Eix8SGUr5whasP+PhDLBjbBhS73qA== -----END CERTIFICATE-----Generated at Tue Jul 7 11:44:10 2026 by rpki-client