$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3135302e3234322e3233322e302f32322d3332203d3e2034383337.roa File: 3135302e3234322e3233322e302f32322d3332203d3e2034383337.roa (raw, json) Hash identifier: w5FSzLFmyVddLlA4YHga7R5Drq0hSAp700NDCwLz6y0= Subject key identifier: 46:CD:8A:92:F5:62:0E:4B:DB:E5:6B:A3:AE:E9:67:0E:C0:86:1E:E2 Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Certificate serial: 4EE713992BEE261A16E3041C27B0D30F7A1E9797 Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3135302e3234322e3233322e302f32322d3332203d3e2034383337.roa Signing time: Mon 11 May 2026 02:13:49 +0000 ROA not before: Mon 11 May 2026 02:08:49 +0000 ROA not after: Mon 10 May 2027 02:13:49 +0000 asID: 4837 IP address blocks: 150.242.232.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e7:13:99:2b:ee:26:1a:16:e3:04:1c:27:b0:d3:0f:7a:1e:97:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Validity Not Before: May 11 02:08:49 2026 GMT Not After : May 10 02:13:49 2027 GMT Subject: CN=46CD8A92F5620E4BDBE56BA3AEE9670EC0861EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c8:00:64:80:86:a9:ce:f9:ab:e7:e1:00:92: ee:08:7a:7e:5a:45:9a:b2:e2:cc:23:c1:77:bc:70: 38:6a:d8:6b:50:fe:99:b3:04:14:d9:2b:d4:e5:a2: d8:2e:d8:96:1a:ca:bf:0c:e7:71:9b:34:62:a4:77: 49:bf:5f:a0:c0:ae:4e:d4:87:27:01:e4:78:03:a7: 80:07:18:e7:8f:b9:9f:6c:f6:46:c7:7a:8a:de:3a: e0:b9:04:a4:3e:84:99:67:f6:92:85:0b:a7:f1:fc: b8:0d:b7:9b:90:99:b6:21:e9:5f:a6:67:58:df:0b: a4:13:b8:08:bd:db:26:3e:b7:82:fc:f8:ff:d9:e4: c5:f5:22:fc:91:1e:ab:be:6e:8f:ee:3f:70:fd:8e: 90:38:eb:50:33:d9:fb:62:1b:23:c5:b0:43:a3:d1: e5:66:0f:17:34:dc:69:b7:17:a5:e6:21:9c:6e:a9: 52:00:d1:87:dc:f9:f0:77:eb:9a:70:a0:37:f3:2f: 3d:9d:52:d7:7c:a0:5a:0e:87:85:6f:4b:19:05:3f: 33:66:35:18:1f:db:1c:48:f4:67:25:59:2c:a6:6e: 49:f8:0f:92:a6:3e:db:c6:f6:1c:d0:1f:e1:04:55: e5:12:71:9d:80:8b:9f:38:f9:d5:ba:02:3e:51:9d: e7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CD:8A:92:F5:62:0E:4B:DB:E5:6B:A3:AE:E9:67:0E:C0:86:1E:E2 X509v3 Authority Key Identifier: keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3135302e3234322e3233322e302f32322d3332203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.242.232.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:d6:50:7f:d2:f6:ab:82:87:c5:bd:63:64:aa:bb:9e:a3:e4: 03:fc:d0:fb:17:70:c4:bf:e1:e0:f7:c8:f1:49:78:6e:d2:02: 65:2f:4d:3c:60:41:e8:70:c5:e4:d7:ed:90:cd:45:f8:b8:77: 6f:94:4c:d8:c7:08:da:44:79:01:33:ee:47:d0:8a:cd:d0:03: b4:74:0e:df:cb:2d:7c:ce:43:17:26:3f:28:3a:d1:b6:31:b1: d3:75:94:5b:1f:d7:0c:c8:e8:6a:12:b6:76:b0:0f:ee:41:13: 5e:2f:90:d1:fc:b4:d2:ed:d9:42:9f:da:31:cb:bc:25:31:66: 3f:ff:3c:7d:52:0c:b8:dc:de:e3:51:91:79:b4:4d:6d:81:4c: 94:3c:8f:76:e6:a8:95:1a:47:e2:31:18:eb:79:64:b7:29:54: 42:e3:71:40:b2:6c:ae:2c:2c:ee:73:ee:d5:03:26:8c:f9:d7: 2a:a5:b9:c5:0e:d9:7f:12:7b:69:6a:d4:5c:a0:69:c6:91:2a: da:13:ca:a8:88:c6:cb:fc:eb:e9:27:d2:5a:c8:62:3c:8b:65: ac:6e:9a:6b:2a:73:7f:98:27:04:23:1b:72:bb:a0:74:5c:87: 77:79:4c:c9:ac:df:fb:59:4f:fe:ba:d4:e5:1e:88:56:2a:23: 61:df:2c:a0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTucTmSvuJhoW4wQcJ7DTD3oel5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3 OEMxRTMxNTAeFw0yNjA1MTEwMjA4NDlaFw0yNzA1MTAwMjEzNDlaMDMxMTAvBgNV BAMTKDQ2Q0Q4QTkyRjU2MjBFNEJEQkU1NkJBM0FFRTk2NzBFQzA4NjFFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnyABkgIapzvmr5+EAku4Ien5a RZqy4swjwXe8cDhq2GtQ/pmzBBTZK9Tlotgu2JYayr8M53GbNGKkd0m/X6DArk7U hycB5HgDp4AHGOePuZ9s9kbHeoreOuC5BKQ+hJln9pKFC6fx/LgNt5uQmbYh6V+m Z1jfC6QTuAi92yY+t4L8+P/Z5MX1IvyRHqu+bo/uP3D9jpA461Az2ftiGyPFsEOj 0eVmDxc03Gm3F6XmIZxuqVIA0Yfc+fB365pwoDfzLz2dUtd8oFoOh4VvSxkFPzNm NRgf2xxI9GclWSymbkn4D5KmPtvG9hzQH+EEVeUScZ2Ai584+dW6Aj5RneeNAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQURs2KkvViDkvb5WujrulnDsCGHuIwHwYDVR0j BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk4NDI5NDc2NzA5OTkwNS8wLzMxMzUzMDJlMzIz NDMyMmUzMjMzMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNDM4MzMzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEApby6DANBgkqhkiG9w0BAQsFAAOCAQEAO9ZQf9L2q4KHxb1jZKq7nqPk A/zQ+xdwxL/h4PfI8Ul4btICZS9NPGBB6HDF5NftkM1F+Lh3b5RM2McI2kR5ATPu R9CKzdADtHQO38stfM5DFyY/KDrRtjGx03WUWx/XDMjoahK2drAP7kETXi+Q0fy0 0u3ZQp/aMcu8JTFmP/88fVIMuNze41GRebRNbYFMlDyPduaolRpH4jEY63lktylU QuNxQLJsriws7nPu1QMmjPnXKqW5xQ7ZfxJ7aWrUXKBpxpEq2hPKqIjGy/zr6SfS WshiPItlrG6aaypzf5gnBCMbcrugdFyHd3lMyazf+1lP/rrU5R6IViojYd8soA== -----END CERTIFICATE-----Generated at Wed May 13 18:03:38 2026 by rpki-client