$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1137957082008387625/0/3232302e3135342e38342e302f32342d3234203d3e203538373732.roa File: 3232302e3135342e38342e302f32342d3234203d3e203538373732.roa (raw, json) Hash identifier: giu9S36zcVfJKSHZbr5yoNMgbWhG/13q35tjFSu28YA= Subject key identifier: 15:05:66:60:EC:F8:89:FE:27:2E:2A:05:41:D3:BE:86:85:B2:9B:73 Certificate issuer: /CN=1968876B21FE15E288B0923B17E385B487979161 Certificate serial: 53CF949E9DBDC40C805A52CBC1CDB975ADF99913 Authority key identifier: 19:68:87:6B:21:FE:15:E2:88:B0:92:3B:17:E3:85:B4:87:97:91:61 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/3232302e3135342e38342e302f32342d3234203d3e203538373732.roa Signing time: Fri 04 Sep 2026 06:53:16 +0000 ROA not before: Fri 04 Sep 2026 06:48:16 +0000 ROA not after: Fri 03 Sep 2027 06:53:16 +0000 asID: 58772 IP address blocks: 220.154.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.crl rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 08:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:cf:94:9e:9d:bd:c4:0c:80:5a:52:cb:c1:cd:b9:75:ad:f9:99:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1968876B21FE15E288B0923B17E385B487979161 Validity Not Before: Sep 4 06:48:16 2026 GMT Not After : Sep 3 06:53:16 2027 GMT Subject: CN=15056660ECF889FE272E2A0541D3BE8685B29B73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:f1:91:f4:bc:d9:ca:e9:ee:d0:31:a4:43: 7b:4b:4a:67:73:d1:94:bf:fa:40:6a:c7:8d:90:08: 1f:8d:4f:01:fd:52:75:11:24:50:b5:54:c6:54:eb: 90:ea:70:dd:7f:41:97:e1:5a:74:c6:53:b2:ea:83: cd:5c:65:68:38:0d:83:31:6c:26:fc:e9:17:9d:97: a6:06:3f:93:4d:bc:1a:b7:13:f9:89:3b:26:32:68: 75:98:da:f3:70:25:a8:e4:c3:8e:6c:8b:fb:23:dd: 3b:a9:67:a3:6a:50:53:f7:f3:8e:c7:77:bd:d7:71: 68:ae:61:61:1d:96:b7:1c:6f:a5:3e:77:96:01:b6: 60:1d:2a:0c:e9:09:c9:53:c7:7e:43:c4:9a:a0:71: 3b:dc:50:7d:d0:b1:77:d9:69:71:d9:aa:54:e1:dd: 1e:5e:14:6c:fe:87:72:ad:4e:d8:2f:d8:34:9b:8d: c5:44:a5:96:4f:50:65:9f:dd:2f:31:5b:9f:e3:99: 0e:ea:29:3b:47:1d:dc:5e:de:2c:22:c8:77:b4:28: b1:3d:5f:45:5e:4e:5a:03:ef:b2:fa:55:e0:cd:a6: c3:26:24:5b:14:fe:f1:c0:ff:7a:e7:9d:0e:49:bb: cb:c6:69:8a:59:2c:28:ed:9d:d2:a1:02:08:81:ad: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:05:66:60:EC:F8:89:FE:27:2E:2A:05:41:D3:BE:86:85:B2:9B:73 X509v3 Authority Key Identifier: keyid:19:68:87:6B:21:FE:15:E2:88:B0:92:3B:17:E3:85:B4:87:97:91:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/3232302e3135342e38342e302f32342d3234203d3e203538373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.154.84.0/24 Signature Algorithm: sha256WithRSAEncryption ae:27:08:96:31:d9:57:c4:bf:2b:9a:f4:4b:43:bd:7b:5e:67: 1e:57:c4:45:9e:e9:b4:7a:bb:6f:9f:ac:aa:28:b8:da:fd:d5: 74:aa:c8:0b:01:58:55:aa:13:d5:df:df:f8:e1:8f:92:f8:47: ed:bc:e5:3a:72:52:91:c3:60:27:32:31:df:24:f3:d2:df:c7: 53:8d:82:28:4d:29:e6:3e:5d:e3:03:01:d1:06:bf:16:74:2e: 09:fb:62:6c:f0:fa:52:83:5c:29:25:cb:ed:ae:45:5a:d2:fb: a9:ab:04:98:80:8f:bb:ff:e0:ed:6a:62:a2:b0:b7:07:3f:48: 76:31:10:43:b0:ec:90:44:09:bc:bd:24:08:13:5b:97:30:11: 95:79:fa:aa:8c:83:bb:b4:a0:1e:70:1b:0e:dc:5f:07:3b:ad: 08:21:bd:b1:33:75:5f:7e:2d:3c:49:12:b1:b3:3b:f2:a7:65: 32:e2:17:de:94:e0:d1:fc:f8:c4:06:7a:39:9f:02:75:74:d3: fe:ff:5f:cf:f7:a4:e7:e8:e8:44:bd:f5:5e:6d:83:fe:7d:3a: 00:91:14:c3:6a:49:68:bb:a4:35:84:63:21:62:69:8b:e3:fa: fd:d9:f9:65:f7:f4:48:48:32:5c:f4:66:bc:87:ae:83:68:82: 29:dd:03:b5 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUU8+Unp29xAyAWlLLwc25da35mRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2ODg3NkIyMUZFMTVFMjg4QjA5MjNCMTdFMzg1QjQ4 Nzk3OTE2MTAeFw0yNjA5MDQwNjQ4MTZaFw0yNzA5MDMwNjUzMTZaMDMxMTAvBgNV BAMTKDE1MDU2NjYwRUNGODg5RkUyNzJFMkEwNTQxRDNCRTg2ODVCMjlCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3fGR9LzZyunu0DGkQ3tLSmdz 0ZS/+kBqx42QCB+NTwH9UnURJFC1VMZU65DqcN1/QZfhWnTGU7Lqg81cZWg4DYMx bCb86Redl6YGP5NNvBq3E/mJOyYyaHWY2vNwJajkw45si/sj3TupZ6NqUFP3847H d73XcWiuYWEdlrccb6U+d5YBtmAdKgzpCclTx35DxJqgcTvcUH3QsXfZaXHZqlTh 3R5eFGz+h3KtTtgv2DSbjcVEpZZPUGWf3S8xW5/jmQ7qKTtHHdxe3iwiyHe0KLE9 X0VeTloD77L6VeDNpsMmJFsU/vHA/3rnnQ5Ju8vGaYpZLCjtndKhAgiBrT9PAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUFQVmYOz4if4nLioFQdO+hoWym3MwHwYDVR0j BBgwFoAUGWiHayH+FeKIsJI7F+OFtIeXkWEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz Nzk1NzA4MjAwODM4NzYyNS8wLzE5Njg4NzZCMjFGRTE1RTI4OEIwOTIzQjE3RTM4 NUI0ODc5NzkxNjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTk2ODg3NkIyMUZFMTVFMjg4QjA5MjNCMTdFMzg1QjQ4Nzk3OTE2MS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEzNzk1NzA4MjAwODM4NzYyNS8wLzMyMzIzMDJlMzEz NTM0MmUzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM3MzczMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANyaVDANBgkqhkiG9w0BAQsFAAOCAQEAricIljHZV8S/K5r0S0O9e15n HlfERZ7ptHq7b5+sqii42v3VdKrICwFYVaoT1d/f+OGPkvhH7bzlOnJSkcNgJzIx 3yTz0t/HU42CKE0p5j5d4wMB0Qa/FnQuCftibPD6UoNcKSXL7a5FWtL7qasEmICP u//g7WpiorC3Bz9IdjEQQ7DskEQJvL0kCBNblzARlXn6qoyDu7SgHnAbDtxfBzut CCG9sTN1X34tPEkSsbM78qdlMuIX3pTg0fz4xAZ6OZ8CdXTT/v9fz/ek5+joRL31 Xm2D/n06AJEUw2pJaLukNYRjIWJpi+P6/dn5Zff0SEgyXPRmvIeug2iCKd0DtQ== -----END CERTIFICATE-----Generated at Fri Oct 9 20:35:02 2026 by rpki-client