$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e342e302f32342d3234203d3e2039333934.roa File: 3131312e3134382e342e302f32342d3234203d3e2039333934.roa (raw, json) Hash identifier: t+OPiobZgQ42TShAV/kLlhHrj9LU2TUCnV3Mj/d8UpA= Subject key identifier: 89:6D:13:EA:5F:CD:97:F1:C3:FB:C9:04:A1:AF:18:98:1B:36:20:B1 Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720 Certificate serial: 6D38B3AEFC40DB0F3C09C0E4B839650C569E23CD Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e342e302f32342d3234203d3e2039333934.roa Signing time: Sun 31 May 2026 23:09:44 +0000 ROA not before: Sun 31 May 2026 23:04:44 +0000 ROA not after: Sun 30 May 2027 23:09:44 +0000 asID: 9394 IP address blocks: 111.148.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 14:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:38:b3:ae:fc:40:db:0f:3c:09:c0:e4:b8:39:65:0c:56:9e:23:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720 Validity Not Before: May 31 23:04:44 2026 GMT Not After : May 30 23:09:44 2027 GMT Subject: CN=896D13EA5FCD97F1C3FBC904A1AF18981B3620B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c9:93:3d:30:76:e7:66:dd:89:8f:3d:93:5a: f7:44:e5:3e:c8:b9:c2:0c:cc:8d:7a:5f:7d:17:3b: f3:cd:98:35:46:65:31:06:fa:72:3d:c1:bd:48:0d: ce:77:05:b1:7d:92:57:83:e1:65:ee:9e:fc:a1:b1: 6b:e0:04:10:3c:61:f6:dd:f6:4c:cf:11:83:7a:36: 18:16:9b:2b:4a:e4:96:1c:ee:51:9e:aa:0d:79:2a: 79:2e:a8:97:87:6a:6e:78:6a:eb:3d:7a:ee:ec:ab: a3:b0:2c:49:ea:79:41:14:a4:4b:6a:04:2d:76:cb: f2:81:71:af:2e:ef:fb:ba:03:92:2e:05:5b:b7:6e: a7:17:92:51:eb:09:90:06:2c:57:43:1c:38:c4:ac: 24:e3:33:14:c6:87:a8:36:81:c3:c1:bd:37:9a:90: 60:e6:4b:cd:be:66:72:f4:09:d3:fb:48:f4:2b:de: cf:0c:e4:4d:f6:e1:59:57:42:d6:77:19:2d:63:c5: 98:94:12:25:53:02:86:d6:e5:21:b9:a8:be:d3:c0: 9c:cc:f6:8b:66:22:78:67:b8:a5:b9:19:38:d1:49: 08:8a:53:fc:44:35:e4:b7:7c:58:66:60:84:a0:8a: 44:f6:97:fb:81:e3:61:90:d6:87:91:ee:93:2c:a5: 1f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6D:13:EA:5F:CD:97:F1:C3:FB:C9:04:A1:AF:18:98:1B:36:20:B1 X509v3 Authority Key Identifier: keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3134382e342e302f32342d3234203d3e2039333934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.148.4.0/24 Signature Algorithm: sha256WithRSAEncryption b1:a4:d8:4f:2e:3e:8d:ce:53:99:31:c2:7f:1f:90:9b:f1:63: ac:84:49:57:13:0a:59:98:ff:54:ec:d7:f2:c4:7d:f1:c7:1f: 03:16:2c:ce:66:ad:cf:51:5d:39:09:4a:12:74:20:81:33:b1: 92:88:e6:fb:90:45:42:e3:ce:a5:39:f0:00:93:9e:ba:7d:b7: 5b:43:e0:6c:29:97:4e:23:be:6d:70:2d:e6:02:9f:8d:3b:56: 49:15:29:90:3e:4e:eb:cb:0a:fe:1f:06:a7:20:dd:be:21:15: 57:b7:24:31:d4:ab:12:fd:15:15:72:b2:0f:04:cc:21:5e:f2: f5:52:a8:21:f1:f2:3f:5c:ac:0b:fa:9e:6b:86:f4:ab:33:b6: 9f:a9:99:a3:5b:c0:9d:c6:f3:df:2a:85:cb:23:0f:8d:af:c6: a9:4d:2a:80:e1:34:ff:c8:18:81:e6:ca:4e:73:25:01:a1:e5: d3:60:67:4e:ec:9b:72:24:fb:b6:0f:98:fb:4c:19:c1:7c:ec: a8:7b:54:7f:aa:a8:7a:3f:ce:cc:11:43:12:c0:86:bf:c2:b5: b4:5d:38:65:81:07:25:4d:17:89:37:6a:5d:ab:41:29:78:2f: d7:e9:2a:4d:e7:af:04:50:4e:1b:dd:12:0f:dc:34:1e:e3:d5: fd:37:23:fc -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUbTizrvxA2w88CcDkuDllDFaeI80wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODVCRjAwMDAwMTEwLwYDVQQFEyg1RjNENjREQ0Yx MzE5NEZCMEQ3MUYyOUZCMzdDMkQ5M0Y4RDQ4NzIwMB4XDTI2MDUzMTIzMDQ0NFoX DTI3MDUzMDIzMDk0NFowMzExMC8GA1UEAxMoODk2RDEzRUE1RkNEOTdGMUMzRkJD OTA0QTFBRjE4OTgxQjM2MjBCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzJkz0wdudm3YmPPZNa90TlPsi5wgzMjXpffRc7882YNUZlMQb6cj3BvUgN zncFsX2SV4PhZe6e/KGxa+AEEDxh9t32TM8Rg3o2GBabK0rklhzuUZ6qDXkqeS6o l4dqbnhq6z167uyro7AsSep5QRSkS2oELXbL8oFxry7v+7oDki4FW7dupxeSUesJ kAYsV0McOMSsJOMzFMaHqDaBw8G9N5qQYOZLzb5mcvQJ0/tI9CvezwzkTfbhWVdC 1ncZLWPFmJQSJVMChtblIbmovtPAnMz2i2YieGe4pbkZONFJCIpT/EQ15Ld8WGZg hKCKRPaX+4HjYZDWh5HukyylHzkCAwEAAaOCAg8wggILMB0GA1UdDgQWBBSJbRPq X82X8cP7yQShrxiYGzYgsTAfBgNVHSMEGDAWgBRfPWTc8TGU+w1x8p+zfC2T+NSH IDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ2MzA3NDE4ODE2NTMzLzAvNUYzRDY0 RENGMTMxOTRGQjBENzFGMjlGQjM3QzJEOTNGOEQ0ODcyMC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvWHoxazNQRXhs UHNOY2ZLZnMzd3RrX2pVaHlBLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUF BzALhmxyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMDk3NDYzMDc0 MTg4MTY1MzMvMC8zMTMxMzEyZTMxMzQzODJlMzQyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzOTMzMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG+UBDANBgkqhkiG9w0BAQsFAAOCAQEA saTYTy4+jc5TmTHCfx+Qm/FjrIRJVxMKWZj/VOzX8sR98ccfAxYszmatz1FdOQlK EnQggTOxkojm+5BFQuPOpTnwAJOeun23W0PgbCmXTiO+bXAt5gKfjTtWSRUpkD5O 68sK/h8GpyDdviEVV7ckMdSrEv0VFXKyDwTMIV7y9VKoIfHyP1ysC/qea4b0qzO2 n6mZo1vAncbz3yqFyyMPja/GqU0qgOE0/8gYgebKTnMlAaHl02BnTuybciT7tg+Y +0wZwXzsqHtUf6qoej/OzBFDEsCGv8K1tF04ZYEHJU0XiTdqXatBKXgv1+kqTeev BFBOG90SD9w0HuPV/Tcj/A== -----END CERTIFICATE-----Generated at Sun Jun 14 06:53:31 2026 by rpki-client