$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3132382e302f31392d3139203d3e2034383131.roa File: 3134302e3231302e3132382e302f31392d3139203d3e2034383131.roa (raw, json) Hash identifier: d/6fwhtHa5rxhSctNwWhiQGIbB+3qXse1oi5zwS8Nww= Subject key identifier: C6:F7:62:B8:2E:75:AE:CB:0F:2D:F2:D4:C0:C6:28:CD:37:BE:B7:1D Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 4B75A35BBA3D3B5B22133BD81A26C3DD61D9A8E3 Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3132382e302f31392d3139203d3e2034383131.roa Signing time: Tue 16 Jun 2026 14:57:16 +0000 ROA not before: Tue 16 Jun 2026 14:52:16 +0000 ROA not after: Tue 15 Jun 2027 14:57:16 +0000 asID: 4811 IP address blocks: 140.210.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:75:a3:5b:ba:3d:3b:5b:22:13:3b:d8:1a:26:c3:dd:61:d9:a8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: Jun 16 14:52:16 2026 GMT Not After : Jun 15 14:57:16 2027 GMT Subject: CN=C6F762B82E75AECB0F2DF2D4C0C628CD37BEB71D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:c9:32:cf:00:18:98:f0:eb:79:5e:eb:b2: 2c:29:47:66:50:65:0f:f5:3e:56:a4:66:01:23:82: 56:21:85:0e:4d:2f:32:50:36:94:7c:a7:64:75:2f: bc:96:47:97:4b:6c:a1:90:26:5f:f3:ed:7a:cd:94: d8:8f:0d:84:19:75:c2:28:a4:d0:7c:83:f1:ea:8f: ed:2c:a2:80:3d:fa:47:f8:12:64:a7:ff:a6:36:22: dd:06:1a:e5:72:88:ef:e2:67:7c:46:64:67:97:e1: 25:10:43:e2:39:d5:dc:19:0a:5a:b4:e8:30:04:5f: 7b:61:3a:81:e1:38:04:e1:1f:dd:ea:f7:88:54:95: 8c:0a:3b:b1:ec:f4:27:ff:f3:8c:c8:42:c6:48:bb: f5:e1:a9:15:3e:2d:4e:1f:79:0f:c8:60:fa:cb:72: 7d:4d:7b:87:d8:71:42:33:01:03:c7:5c:91:e9:a5: ad:09:56:2e:c3:95:60:2f:7d:a6:d3:80:fa:13:ab: 12:d6:79:bb:09:84:0e:70:38:0e:4d:28:1e:8a:2c: d8:c8:47:b5:ce:61:56:bb:de:ca:a6:62:34:90:19: 89:8f:6a:aa:30:fa:c1:1a:32:aa:81:1b:52:10:af: f6:da:30:02:12:42:b8:35:b6:e5:9d:03:1d:ed:60: 76:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F7:62:B8:2E:75:AE:CB:0F:2D:F2:D4:C0:C6:28:CD:37:BE:B7:1D X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3132382e302f31392d3139203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.210.128.0/19 Signature Algorithm: sha256WithRSAEncryption 4a:b7:8a:d0:c0:97:60:e0:d2:4c:80:6b:a9:bb:3b:28:11:50: 9f:72:4e:f7:63:f8:1a:b1:e1:e6:f2:9f:49:d3:7e:3b:df:43: bb:e7:a0:0e:57:e7:d5:87:08:f2:9a:6c:1d:ec:da:8c:2c:8c: 3b:3d:f8:c2:d5:0a:92:4d:81:83:67:b9:4c:01:65:3a:80:6c: 17:5f:0c:59:35:22:df:91:3e:bb:70:7b:f9:18:d4:cc:95:3f: 19:c5:2b:67:4b:4c:bf:c2:b1:be:24:c2:54:f7:40:50:b8:43: 8e:4d:ff:b4:33:d8:3b:7b:6f:b8:d5:20:59:8c:bb:6b:83:08: 28:c5:04:6b:18:6a:47:9f:72:be:3d:57:a1:a0:bd:6f:35:e0: bc:7f:91:a1:3c:e0:71:89:a2:4a:b8:2b:43:bb:b8:07:4b:5a: b6:b0:e0:29:d3:56:cc:9b:89:e9:9a:fe:f4:c3:d3:ab:89:5a: 04:eb:04:73:c6:7d:b5:b5:93:dc:a4:fc:0e:82:80:1b:37:02: 54:87:7f:13:ca:a4:9e:3a:d8:99:30:65:14:a0:71:72:4a:c1: 60:70:9d:85:df:62:a7:8f:25:95:19:a3:d1:6f:f2:45:68:3b: 92:20:a3:16:8e:1e:16:03:41:34:6d:7c:61:4e:a2:31:ae:2c: d6:37:e6:e8 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUS3WjW7o9O1siEzvYGibD3WHZqOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjA2MTYxNDUyMTZaFw0yNzA2MTUxNDU3MTZaMDMxMTAvBgNV BAMTKEM2Rjc2MkI4MkU3NUFFQ0IwRjJERjJENEMwQzYyOENEMzdCRUI3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKLckyzwAYmPDreV7rsiwpR2ZQ ZQ/1PlakZgEjglYhhQ5NLzJQNpR8p2R1L7yWR5dLbKGQJl/z7XrNlNiPDYQZdcIo pNB8g/Hqj+0sooA9+kf4EmSn/6Y2It0GGuVyiO/iZ3xGZGeX4SUQQ+I51dwZClq0 6DAEX3thOoHhOAThH93q94hUlYwKO7Hs9Cf/84zIQsZIu/XhqRU+LU4feQ/IYPrL cn1Ne4fYcUIzAQPHXJHppa0JVi7DlWAvfabTgPoTqxLWebsJhA5wOA5NKB6KLNjI R7XOYVa73sqmYjSQGYmPaqow+sEaMqqBG1IQr/baMAISQrg1tuWdAx3tYHZ9AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUxvdiuC51rssPLfLUwMYozTe+tx0wHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTM4OTI2NTIyMzY4MS8xLzMxMzQzMDJlMzIz MTMwMmUzMTMyMzgyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzNDM4MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBYzSgDANBgkqhkiG9w0BAQsFAAOCAQEASreK0MCXYODSTIBrqbs7KBFQ n3JO92P4GrHh5vKfSdN+O99Du+egDlfn1YcI8ppsHezajCyMOz34wtUKkk2Bg2e5 TAFlOoBsF18MWTUi35E+u3B7+RjUzJU/GcUrZ0tMv8KxviTCVPdAULhDjk3/tDPY O3tvuNUgWYy7a4MIKMUEaxhqR59yvj1XoaC9bzXgvH+RoTzgcYmiSrgrQ7u4B0ta trDgKdNWzJuJ6Zr+9MPTq4laBOsEc8Z9tbWT3KT8DoKAGzcCVId/E8qknjrYmTBl FKBxckrBYHCdhd9ip48llRmj0W/yRWg7kiCjFo4eFgNBNG18YU6iMa4s1jfm6A== -----END CERTIFICATE-----Generated at Tue Jul 14 22:49:54 2026 by rpki-client