$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3135302e3234322e3136382e302f32322d3232203d3e2034383437.roa File: 3135302e3234322e3136382e302f32322d3232203d3e2034383437.roa (raw, json) Hash identifier: msUHNNmDuf0xFczzqOuI1kN210zxZ1Wrfaif6pe6eEA= Subject key identifier: B1:D3:63:9E:CE:30:8D:6E:55:BB:24:D3:51:EE:12:11:8E:D9:E5:8A Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 143F8F2A5B6218F55C387D441C15D32A489067AA Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3135302e3234322e3136382e302f32322d3232203d3e2034383437.roa Signing time: Mon 13 Apr 2026 09:58:59 +0000 ROA not before: Mon 13 Apr 2026 09:53:59 +0000 ROA not after: Mon 12 Apr 2027 09:58:59 +0000 asID: 4847 IP address blocks: 150.242.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3f:8f:2a:5b:62:18:f5:5c:38:7d:44:1c:15:d3:2a:48:90:67:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Apr 13 09:53:59 2026 GMT Not After : Apr 12 09:58:59 2027 GMT Subject: CN=B1D3639ECE308D6E55BB24D351EE12118ED9E58A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5b:8e:30:0c:ef:b1:95:6b:48:a8:21:a3:16: 6f:ce:3d:3a:5a:37:e3:22:c6:a2:3f:9b:9e:d7:5c: 76:43:3f:fd:a9:3b:99:90:6c:2d:15:00:30:1f:21: d9:05:e7:9c:c0:ce:6b:ba:16:85:e4:47:80:6b:87: f5:55:1d:95:19:c3:6a:a8:f0:e0:b5:28:b0:7a:6c: 0e:93:ad:99:cb:29:59:40:3d:ac:6d:15:07:c6:65: ed:05:3c:b4:5a:b2:ac:aa:35:2c:19:58:99:ff:ec: ed:3e:fd:98:c3:45:cc:fb:3c:b4:6a:bb:f8:26:c4: 3c:49:61:32:7b:96:b1:d5:5f:76:5e:2f:96:28:2b: 89:f1:87:64:d1:25:2b:c9:c7:aa:9f:a1:6e:96:40: c8:72:bf:6e:72:6c:f7:4a:d9:0a:21:ee:de:fa:37: 8a:dc:dd:cc:4d:4f:76:4c:e0:65:15:97:5e:e9:f2: ed:3a:8c:21:0d:b2:92:8e:bb:7a:92:f3:2b:c8:db: 2d:1b:d4:b2:36:60:6f:4d:c8:b5:89:e9:62:fa:11: 30:fc:01:87:4c:ea:5f:1d:f7:b9:f5:7c:64:f3:35: 3e:f7:99:26:61:a6:14:d7:b9:cb:1d:44:b9:41:a9: 1a:41:14:dc:c5:06:ad:6a:5b:a2:ab:f4:74:33:eb: 1f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D3:63:9E:CE:30:8D:6E:55:BB:24:D3:51:EE:12:11:8E:D9:E5:8A X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3135302e3234322e3136382e302f32322d3232203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.242.168.0/22 Signature Algorithm: sha256WithRSAEncryption b8:b5:3a:5b:d1:37:26:50:a7:5c:86:b7:da:02:3d:87:f3:0c: dd:b3:90:71:62:58:b7:26:64:c0:8d:82:7e:7b:59:a3:56:0f: 5e:71:7c:b4:36:27:b2:8c:76:6d:da:64:98:89:79:52:fc:43: 9c:e0:9d:63:29:a2:02:e4:e7:13:17:5e:f1:55:fe:4f:c3:ec: 0d:0f:26:1d:ff:05:5c:b2:55:3c:5a:14:2d:92:16:a9:4d:54: 7a:51:62:4c:3f:7c:06:d4:8f:20:36:32:13:b5:08:43:08:02: 8f:1a:d7:0c:5a:56:32:03:e3:ea:bc:36:05:30:fe:94:2c:09: e5:be:b0:e4:86:0e:27:2d:b6:ea:3b:fc:e3:45:75:68:5e:e0: d9:b9:04:a7:60:c5:2b:2d:61:5a:21:05:4b:32:80:6b:12:be: 33:54:b1:6b:6a:d2:38:57:53:8d:79:87:24:e1:9e:c6:d8:e2: f8:ca:47:48:dc:33:df:68:fd:b0:77:88:df:9e:4c:f7:ff:32: 14:5b:48:76:59:76:1c:7c:33:52:e9:15:87:60:7e:ef:32:e6: f1:dc:8e:7f:d7:19:ef:e3:8f:f7:16:db:c3:62:c1:ac:3c:cd: a0:34:6d:69:28:3c:92:db:75:f9:fc:2a:86:32:0b:2e:93:9e: 54:80:81:46 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFD+PKltiGPVcOH1EHBXTKkiQZ6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjA0MTMwOTUzNTlaFw0yNzA0MTIwOTU4NTlaMDMxMTAvBgNV BAMTKEIxRDM2MzlFQ0UzMDhENkU1NUJCMjREMzUxRUUxMjExOEVEOUU1OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUW44wDO+xlWtIqCGjFm/OPTpa N+MixqI/m57XXHZDP/2pO5mQbC0VADAfIdkF55zAzmu6FoXkR4Brh/VVHZUZw2qo 8OC1KLB6bA6TrZnLKVlAPaxtFQfGZe0FPLRasqyqNSwZWJn/7O0+/ZjDRcz7PLRq u/gmxDxJYTJ7lrHVX3ZeL5YoK4nxh2TRJSvJx6qfoW6WQMhyv25ybPdK2Qoh7t76 N4rc3cxNT3ZM4GUVl17p8u06jCENspKOu3qS8yvI2y0b1LI2YG9NyLWJ6WL6ETD8 AYdM6l8d97n1fGTzNT73mSZhphTXucsdRLlBqRpBFNzFBq1qW6Kr9HQz6x9PAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUsdNjns4wjW5VuyTTUe4SEY7Z5YowHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA4ODY1MTAxNTE4MTMwMzgxMC8wLzMxMzUzMDJlMzIz NDMyMmUzMTM2MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEApbyqDANBgkqhkiG9w0BAQsFAAOCAQEAuLU6W9E3JlCnXIa32gI9h/MM 3bOQcWJYtyZkwI2CfntZo1YPXnF8tDYnsox2bdpkmIl5UvxDnOCdYymiAuTnExde 8VX+T8PsDQ8mHf8FXLJVPFoULZIWqU1UelFiTD98BtSPIDYyE7UIQwgCjxrXDFpW MgPj6rw2BTD+lCwJ5b6w5IYOJy226jv840V1aF7g2bkEp2DFKy1hWiEFSzKAaxK+ M1Sxa2rSOFdTjXmHJOGextji+MpHSNwz32j9sHeI355M9/8yFFtIdll2HHwzUukV h2B+7zLm8dyOf9cZ7+OP9xbbw2LBrDzNoDRtaSg8ktt1+fwqhjILLpOeVICBRg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:16:28 2026 by rpki-client