$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3232342e302f32302d3230203d3e203538353139.roa File: 3134302e3231302e3232342e302f32302d3230203d3e203538353139.roa (raw, json) Hash identifier: K9syKqwbDP3WB54WfS928Fh2S68aHBqNb68LdR9zX/w= Subject key identifier: 0B:45:EB:57:08:B2:E4:1E:C2:4B:7A:F3:1B:49:09:FA:2F:39:58:2A Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 7A62C3293E0FDCB2336BC8284C19CF7B287CAE30 Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3232342e302f32302d3230203d3e203538353139.roa Signing time: Thu 11 Jun 2026 16:02:07 +0000 ROA not before: Thu 11 Jun 2026 15:57:07 +0000 ROA not after: Thu 10 Jun 2027 16:02:07 +0000 asID: 58519 IP address blocks: 140.210.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 18:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:62:c3:29:3e:0f:dc:b2:33:6b:c8:28:4c:19:cf:7b:28:7c:ae:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: Jun 11 15:57:07 2026 GMT Not After : Jun 10 16:02:07 2027 GMT Subject: CN=0B45EB5708B2E41EC24B7AF31B4909FA2F39582A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:7a:fc:58:54:e4:c7:9d:fd:10:2a:a6:90: d3:62:6d:97:5b:00:65:79:7c:2d:66:d5:5d:56:66: 2b:48:48:72:7c:7c:a3:7b:e8:7a:a7:15:14:00:d8: 8c:b2:f0:ce:c7:e6:a7:34:95:46:2f:cb:8f:f3:67: 22:6c:ba:c4:08:ed:9d:fd:60:2b:fa:0d:f0:f3:91: aa:20:ff:57:53:3b:46:f2:8a:38:77:e2:76:2d:78: 14:23:62:80:ef:f8:8e:59:f0:a6:e3:85:e4:1c:f7: 1b:6f:dd:df:b8:16:20:e3:b3:5a:12:18:80:40:93: 40:e8:fb:a9:f9:e9:2d:ec:55:bf:b9:eb:cc:fc:62: 2d:af:25:49:4b:8c:07:67:4f:5f:d2:16:34:a1:6d: d5:8c:14:9f:63:ae:fd:20:98:17:d2:3e:a1:11:84: 01:f0:d7:59:7e:f5:04:cd:0e:c3:52:75:dd:2a:8e: 29:67:51:fe:42:0c:ef:e0:08:6f:4d:2d:51:c8:dd: ee:88:eb:ff:93:8d:2c:dc:7a:39:41:17:47:ae:be: af:b0:1d:e1:1b:93:36:91:f1:87:cf:f1:93:33:3f: 24:bd:24:75:63:f9:0e:f7:25:0c:18:17:f1:77:aa: 2c:fe:48:1b:e1:57:95:75:03:8d:c2:89:3e:0f:ce: 62:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:45:EB:57:08:B2:E4:1E:C2:4B:7A:F3:1B:49:09:FA:2F:39:58:2A X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3232342e302f32302d3230203d3e203538353139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.210.224.0/20 Signature Algorithm: sha256WithRSAEncryption a5:4b:ab:6e:66:c3:58:34:ce:36:d9:96:2e:53:b5:84:b3:f6: 62:c2:c0:15:54:55:43:f6:52:41:1f:8f:50:d7:95:82:46:33: f3:f3:04:93:7a:34:91:b8:0f:3f:2a:e2:23:b5:6e:f3:bc:8b: 5d:81:a0:5b:24:6f:7b:83:6e:e0:a4:0c:04:ff:18:3b:0c:83: 7d:ae:f1:e3:0c:cd:1f:94:99:99:77:9c:a9:8c:29:cd:a8:33: 15:2c:2a:53:8c:79:3b:74:df:e7:cc:97:df:8a:1a:0a:48:28: c4:11:46:7e:ed:2d:6f:7d:4a:1a:c0:cd:54:ed:c3:3b:30:84: b3:94:9b:b8:c5:35:be:36:d2:0b:20:8d:01:44:61:2c:03:17: 18:9e:38:31:48:b7:31:10:9d:4a:db:b9:1a:bd:01:30:61:d3: 45:cd:e5:b8:75:ba:31:57:68:46:9c:2f:5b:b7:9f:e6:54:96: 4c:10:21:34:1f:8c:c9:04:d4:7e:36:6b:c6:76:8c:02:6f:51: f4:e6:4a:8f:96:9b:04:06:2d:c0:51:ce:64:1e:9c:ad:60:9c: e9:d6:4a:0f:ca:99:6c:63:af:28:97:93:53:2f:b4:da:92:b5: 4c:81:01:66:82:32:b5:7f:2b:e7:bd:ed:ea:d4:65:ac:fd:0b: 00:5e:67:0f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUemLDKT4P3LIza8goTBnPeyh8rjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjA2MTExNTU3MDdaFw0yNzA2MTAxNjAyMDdaMDMxMTAvBgNV BAMTKDBCNDVFQjU3MDhCMkU0MUVDMjRCN0FGMzFCNDkwOUZBMkYzOTU4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Znr8WFTkx539ECqmkNNibZdb AGV5fC1m1V1WZitISHJ8fKN76HqnFRQA2Iyy8M7H5qc0lUYvy4/zZyJsusQI7Z39 YCv6DfDzkaog/1dTO0byijh34nYteBQjYoDv+I5Z8KbjheQc9xtv3d+4FiDjs1oS GIBAk0Do+6n56S3sVb+568z8Yi2vJUlLjAdnT1/SFjShbdWMFJ9jrv0gmBfSPqER hAHw11l+9QTNDsNSdd0qjilnUf5CDO/gCG9NLVHI3e6I6/+TjSzcejlBF0euvq+w HeEbkzaR8YfP8ZMzPyS9JHVj+Q73JQwYF/F3qiz+SBvhV5V1A43CiT4PzmJJAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUC0XrVwiy5B7CS3rzG0kJ+i85WCowHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMS8zMTM0MzAyZTMy MzEzMDJlMzIzMjM0MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzODM1MzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBIzS4DANBgkqhkiG9w0BAQsFAAOCAQEApUurbmbDWDTONtmWLlO1 hLP2YsLAFVRVQ/ZSQR+PUNeVgkYz8/MEk3o0kbgPPyriI7Vu87yLXYGgWyRve4Nu 4KQMBP8YOwyDfa7x4wzNH5SZmXecqYwpzagzFSwqU4x5O3Tf58yX34oaCkgoxBFG fu0tb31KGsDNVO3DOzCEs5SbuMU1vjbSCyCNAURhLAMXGJ44MUi3MRCdStu5Gr0B MGHTRc3luHW6MVdoRpwvW7ef5lSWTBAhNB+MyQTUfjZrxnaMAm9R9OZKj5abBAYt wFHOZB6crWCc6dZKD8qZbGOvKJeTUy+02pK1TIEBZoIytX8r573t6tRlrP0LAF5n Dw== -----END CERTIFICATE-----Generated at Fri Jun 12 02:40:41 2026 by rpki-client