$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1137957082008387625/0/3232302e3135342e3131342e302f32332d3233203d3e203633383338.roa File: 3232302e3135342e3131342e302f32332d3233203d3e203633383338.roa (raw, json) Hash identifier: ivGXMKZ3j/SM+VplsuPp05w4vpAs8N9xajLe22gGV00= Subject key identifier: 20:99:43:9B:FC:8E:67:02:9D:55:26:9B:AB:4A:0E:1B:0E:51:C5:39 Certificate issuer: /CN=1968876B21FE15E288B0923B17E385B487979161 Certificate serial: 724FE49DEBCF4755A0DD08B6BBEBC3ED3E1BAE0D Authority key identifier: 19:68:87:6B:21:FE:15:E2:88:B0:92:3B:17:E3:85:B4:87:97:91:61 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/3232302e3135342e3131342e302f32332d3233203d3e203633383338.roa Signing time: Fri 07 Aug 2026 04:04:00 +0000 ROA not before: Fri 07 Aug 2026 03:59:00 +0000 ROA not after: Fri 06 Aug 2027 04:04:00 +0000 asID: 63838 IP address blocks: 220.154.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.crl rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 15:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:4f:e4:9d:eb:cf:47:55:a0:dd:08:b6:bb:eb:c3:ed:3e:1b:ae:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1968876B21FE15E288B0923B17E385B487979161 Validity Not Before: Aug 7 03:59:00 2026 GMT Not After : Aug 6 04:04:00 2027 GMT Subject: CN=2099439BFC8E67029D55269BAB4A0E1B0E51C539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:d0:50:d4:da:a1:6e:1d:66:7f:57:35:14: 5b:20:6d:5e:6e:2e:9b:12:2b:ff:41:80:ac:73:31: 72:3a:cc:28:c0:19:9f:8c:4e:56:82:bf:fd:d6:45: e5:54:ab:d1:04:25:29:a5:e8:c3:18:e3:e0:24:2e: d4:94:17:d8:e7:56:3b:16:c4:e0:fe:73:ce:3c:1f: e4:aa:1e:3a:c2:db:74:88:2c:1a:68:16:14:f9:22: 23:14:d7:a0:39:91:bc:4c:cc:77:7b:96:bc:5b:b5: bb:78:db:e2:3e:20:c2:b1:31:06:d5:be:fd:11:dd: 15:db:fd:f0:a8:f7:3d:98:94:5c:c0:12:d0:10:f8: cf:51:f8:20:ad:88:b3:49:f4:93:87:6e:18:c5:cd: f3:1a:08:c3:2d:25:0d:b9:07:96:d1:c8:87:f5:dd: 12:ff:9a:27:73:9c:8b:e3:7d:be:b2:50:ae:07:14: 3b:f6:85:7e:5a:11:af:4f:f9:89:db:14:f6:7d:a3: 80:11:e6:94:52:25:9a:ba:5f:7d:f6:d3:d2:39:9e: 4e:f7:0d:10:41:ac:5f:67:59:31:f5:74:7f:0b:18: b5:ec:71:c5:18:4b:a6:74:e6:9c:5d:24:6b:65:cc: 82:c3:e0:c5:44:a9:cb:61:6b:f9:50:dd:6d:24:eb: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:99:43:9B:FC:8E:67:02:9D:55:26:9B:AB:4A:0E:1B:0E:51:C5:39 X509v3 Authority Key Identifier: keyid:19:68:87:6B:21:FE:15:E2:88:B0:92:3B:17:E3:85:B4:87:97:91:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/3232302e3135342e3131342e302f32332d3233203d3e203633383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.154.114.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:b5:ed:c3:0d:46:2a:4f:94:a3:4a:2c:0c:72:29:95:c2:6b: 91:31:16:72:48:b1:77:e8:3a:3a:33:06:36:c6:96:8a:15:a0: 56:5e:1f:81:72:61:75:fb:2d:36:09:4e:9c:7c:58:11:c3:d4: 6a:70:1e:39:17:71:da:75:8d:18:ed:fc:d6:d5:c1:7f:9e:58: 5e:5b:ca:02:51:02:1c:a5:18:68:0a:4c:7b:96:20:0d:d0:31: ab:2e:79:c9:d1:3b:05:56:49:30:d3:6b:1d:23:fd:5f:74:b0: a1:04:27:47:e5:0a:f3:c7:b9:69:87:7a:4c:49:e9:c0:64:1b: d3:8b:f0:8e:db:5e:71:f3:3a:cb:63:42:32:72:5b:bd:1e:91: 43:dd:39:cc:32:67:98:44:c3:c7:c1:f1:72:e3:4f:71:2c:e7: 83:72:59:e5:f3:0c:f5:49:7e:a7:02:b0:44:f6:56:01:bc:be: 68:c5:50:d7:a3:03:09:4e:ab:8a:5e:df:0f:b1:20:dc:9a:62: ad:5b:2b:83:61:9f:fc:91:ed:ad:2a:61:b7:5d:c3:37:e9:84: 23:5f:30:15:8f:9d:bd:1d:6b:9e:02:de:90:7b:17:e2:4d:8e: e8:c2:16:2d:5e:c7:af:c3:e1:a1:5c:52:28:1a:6c:a6:ab:47: 2f:ba:52:ff -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUck/knevPR1Wg3Qi2u+vD7T4brg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2ODg3NkIyMUZFMTVFMjg4QjA5MjNCMTdFMzg1QjQ4 Nzk3OTE2MTAeFw0yNjA4MDcwMzU5MDBaFw0yNzA4MDYwNDA0MDBaMDMxMTAvBgNV BAMTKDIwOTk0MzlCRkM4RTY3MDI5RDU1MjY5QkFCNEEwRTFCMEU1MUM1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tNBQ1Nqhbh1mf1c1FFsgbV5u LpsSK/9BgKxzMXI6zCjAGZ+MTlaCv/3WReVUq9EEJSml6MMY4+AkLtSUF9jnVjsW xOD+c848H+SqHjrC23SILBpoFhT5IiMU16A5kbxMzHd7lrxbtbt42+I+IMKxMQbV vv0R3RXb/fCo9z2YlFzAEtAQ+M9R+CCtiLNJ9JOHbhjFzfMaCMMtJQ25B5bRyIf1 3RL/midznIvjfb6yUK4HFDv2hX5aEa9P+YnbFPZ9o4AR5pRSJZq6X33209I5nk73 DRBBrF9nWTH1dH8LGLXsccUYS6Z05pxdJGtlzILD4MVEqctha/lQ3W0k65zrAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUIJlDm/yOZwKdVSabq0oOGw5RxTkwHwYDVR0j BBgwFoAUGWiHayH+FeKIsJI7F+OFtIeXkWEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz Nzk1NzA4MjAwODM4NzYyNS8wLzE5Njg4NzZCMjFGRTE1RTI4OEIwOTIzQjE3RTM4 NUI0ODc5NzkxNjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTk2ODg3NkIyMUZFMTVFMjg4QjA5MjNCMTdFMzg1QjQ4Nzk3OTE2MS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMzc5NTcwODIwMDgzODc2MjUvMC8zMjMyMzAyZTMx MzUzNDJlMzEzMTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMzM4MzMzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAdyacjANBgkqhkiG9w0BAQsFAAOCAQEAPrXtww1GKk+Uo0osDHIp lcJrkTEWckixd+g6OjMGNsaWihWgVl4fgXJhdfstNglOnHxYEcPUanAeORdx2nWN GO381tXBf55YXlvKAlECHKUYaApMe5YgDdAxqy55ydE7BVZJMNNrHSP9X3SwoQQn R+UK88e5aYd6TEnpwGQb04vwjttecfM6y2NCMnJbvR6RQ905zDJnmETDx8HxcuNP cSzng3JZ5fMM9Ul+pwKwRPZWAby+aMVQ16MDCU6ril7fD7Eg3JpirVsrg2Gf/JHt rSpht13DN+mEI18wFY+dvR1rngLekHsX4k2O6MIWLV7Hr8PhoVxSKBpspqtHL7pS /w== -----END CERTIFICATE-----Generated at Sat Aug 22 05:22:40 2026 by rpki-client