$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1137957082008387625/0/3232302e3135342e38352e302f32342d3234203d3e203538373732.roa File: 3232302e3135342e38352e302f32342d3234203d3e203538373732.roa (raw, json) Hash identifier: IBP0xdDOyiOgq5Eci2DK92c7gb9KM+knsIqLW4CamSo= Subject key identifier: 63:BC:73:B8:AD:8C:F5:F7:D9:77:32:B6:0F:BB:B7:D7:14:80:B6:E1 Certificate issuer: /CN=1968876B21FE15E288B0923B17E385B487979161 Certificate serial: 3C476992B5185109221D26F07EFDF53EE9106310 Authority key identifier: 19:68:87:6B:21:FE:15:E2:88:B0:92:3B:17:E3:85:B4:87:97:91:61 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/3232302e3135342e38352e302f32342d3234203d3e203538373732.roa Signing time: Fri 04 Sep 2026 06:53:16 +0000 ROA not before: Fri 04 Sep 2026 06:48:16 +0000 ROA not after: Fri 03 Sep 2027 06:53:16 +0000 asID: 58772 IP address blocks: 220.154.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.crl rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:47:69:92:b5:18:51:09:22:1d:26:f0:7e:fd:f5:3e:e9:10:63:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1968876B21FE15E288B0923B17E385B487979161 Validity Not Before: Sep 4 06:48:16 2026 GMT Not After : Sep 3 06:53:16 2027 GMT Subject: CN=63BC73B8AD8CF5F7D97732B60FBBB7D71480B6E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:76:bc:e8:4c:c4:a7:de:9f:54:da:91:b4:5a: db:62:e8:1b:ea:da:e8:9e:6c:0d:2b:ce:f8:89:e6: 08:84:27:71:bf:32:c7:e0:8f:f0:fe:bb:49:c9:f0: 2a:ca:d1:d1:6f:b8:67:e5:31:4f:9c:06:fd:a7:80: 03:7d:86:be:61:3d:f5:be:f1:2a:ad:2c:3c:2a:85: 84:bd:8e:d4:30:57:07:52:3a:e5:f2:89:18:3f:9e: b6:fe:59:29:58:58:09:8e:b8:33:d5:77:f6:a4:21: d8:5c:3e:6b:29:c0:b6:fb:4f:d0:52:ff:ef:45:80: 12:cb:e1:6f:65:24:f3:82:ad:e5:e0:4d:c0:dc:ea: 3b:f2:70:f4:4f:00:b2:38:a4:b4:e4:66:86:45:76: 1b:43:45:c9:cc:ec:50:85:e6:1c:da:77:1c:1e:62: 61:ac:22:32:5b:5b:21:44:f3:44:17:8e:cc:e2:96: ac:61:21:1c:9b:81:e5:ea:26:b1:f5:b9:3d:e3:0f: e4:40:f7:21:00:df:e4:27:ea:34:db:ce:a5:6c:82: 2c:fe:17:f5:50:56:d7:aa:76:cc:bd:47:bb:ff:bf: 51:34:3d:b9:80:a2:ed:1f:ab:a6:c4:ba:e9:2e:db: 9b:fd:e1:16:e6:ae:80:a9:37:7e:07:58:9d:d7:3d: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BC:73:B8:AD:8C:F5:F7:D9:77:32:B6:0F:BB:B7:D7:14:80:B6:E1 X509v3 Authority Key Identifier: keyid:19:68:87:6B:21:FE:15:E2:88:B0:92:3B:17:E3:85:B4:87:97:91:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/3232302e3135342e38352e302f32342d3234203d3e203538373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.154.85.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:a3:4c:ea:3b:91:39:18:b6:91:84:75:02:ab:52:ea:28:62: e9:d1:be:51:07:7d:24:8d:82:00:d2:97:c0:8c:d4:f5:d2:c7: e9:3c:5f:14:2c:56:ca:4d:3f:ca:50:54:79:73:42:2f:2f:43: 78:3b:24:7c:e0:bd:c6:9c:8d:cf:5d:49:5f:87:9f:68:a1:d6: e5:23:7a:91:d8:f1:c4:7a:ef:22:4b:0a:8b:78:ed:94:ea:75: 98:1e:e4:01:b8:1b:98:d6:7a:33:84:38:2f:fb:f0:76:99:d7: f5:78:8e:d1:46:3d:a0:4b:f6:42:19:c3:43:4f:a2:71:48:37: 3b:12:93:17:bd:48:5e:be:92:70:00:46:b6:14:03:6d:af:a6: 9f:f4:f2:32:35:ad:97:ef:ed:44:29:b5:05:90:e6:11:34:4b: fe:bb:87:6e:a1:71:fa:a5:ef:53:76:29:15:77:fa:8d:3f:5e: f9:d8:81:69:21:6b:6c:bc:3f:4a:55:e3:97:b2:fc:6a:4b:c1: 27:7d:d4:c5:30:bc:d4:e6:5c:89:19:68:73:27:46:96:9c:ce: c9:f8:40:77:cc:93:86:7c:dc:5e:5a:86:f0:87:76:9e:7f:c3: 11:c8:14:53:54:bb:6b:5a:b0:c0:fa:fe:84:4b:be:2e:7a:3a: b2:41:3b:3f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPEdpkrUYUQkiHSbwfv31PukQYxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2ODg3NkIyMUZFMTVFMjg4QjA5MjNCMTdFMzg1QjQ4 Nzk3OTE2MTAeFw0yNjA5MDQwNjQ4MTZaFw0yNzA5MDMwNjUzMTZaMDMxMTAvBgNV BAMTKDYzQkM3M0I4QUQ4Q0Y1RjdEOTc3MzJCNjBGQkJCN0Q3MTQ4MEI2RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCddrzoTMSn3p9U2pG0Wtti6Bvq 2uiebA0rzviJ5giEJ3G/Msfgj/D+u0nJ8CrK0dFvuGflMU+cBv2ngAN9hr5hPfW+ 8SqtLDwqhYS9jtQwVwdSOuXyiRg/nrb+WSlYWAmOuDPVd/akIdhcPmspwLb7T9BS /+9FgBLL4W9lJPOCreXgTcDc6jvycPRPALI4pLTkZoZFdhtDRcnM7FCF5hzadxwe YmGsIjJbWyFE80QXjszilqxhIRybgeXqJrH1uT3jD+RA9yEA3+Qn6jTbzqVsgiz+ F/VQVteqdsy9R7v/v1E0PbmAou0fq6bEuuku25v94RbmroCpN34HWJ3XPfrlAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUY7xzuK2M9ffZdzK2D7u31xSAtuEwHwYDVR0j BBgwFoAUGWiHayH+FeKIsJI7F+OFtIeXkWEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz Nzk1NzA4MjAwODM4NzYyNS8wLzE5Njg4NzZCMjFGRTE1RTI4OEIwOTIzQjE3RTM4 NUI0ODc5NzkxNjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTk2ODg3NkIyMUZFMTVFMjg4QjA5MjNCMTdFMzg1QjQ4Nzk3OTE2MS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEzNzk1NzA4MjAwODM4NzYyNS8wLzMyMzIzMDJlMzEz NTM0MmUzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM3MzczMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANyaVTANBgkqhkiG9w0BAQsFAAOCAQEAGqNM6juRORi2kYR1AqtS6ihi 6dG+UQd9JI2CANKXwIzU9dLH6TxfFCxWyk0/ylBUeXNCLy9DeDskfOC9xpyNz11J X4efaKHW5SN6kdjxxHrvIksKi3jtlOp1mB7kAbgbmNZ6M4Q4L/vwdpnX9XiO0UY9 oEv2QhnDQ0+icUg3OxKTF71IXr6ScABGthQDba+mn/TyMjWtl+/tRCm1BZDmETRL /ruHbqFx+qXvU3YpFXf6jT9e+diBaSFrbLw/SlXjl7L8akvBJ33UxTC81OZciRlo cydGlpzOyfhAd8yThnzcXlqG8Id2nn/DEcgUU1S7a1qwwPr+hEu+Lno6skE7Pw== -----END CERTIFICATE-----Generated at Mon Sep 28 21:36:23 2026 by rpki-client