$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36372e302f32342d3234203d3e2034383038.roa File: 3134302e3231302e36372e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: Zv39ZziMYl0Xa7kyRnkZMkWDJYthFx6coOt/rDWg6xI= Subject key identifier: 54:18:89:BA:0C:9B:8E:9D:E0:94:BC:B1:9F:B3:70:B9:1B:06:F8:74 Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Certificate serial: 2143668B5F361C58F1984A14756EB5A138B5112C Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36372e302f32342d3234203d3e2034383038.roa Signing time: Wed 10 Jun 2026 17:49:28 +0000 ROA not before: Wed 10 Jun 2026 17:44:28 +0000 ROA not after: Wed 09 Jun 2027 17:49:28 +0000 asID: 4808 IP address blocks: 140.210.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:43:66:8b:5f:36:1c:58:f1:98:4a:14:75:6e:b5:a1:38:b5:11:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Validity Not Before: Jun 10 17:44:28 2026 GMT Not After : Jun 9 17:49:28 2027 GMT Subject: CN=541889BA0C9B8E9DE094BCB19FB370B91B06F874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ed:e3:c9:b4:4c:86:41:4f:96:5d:8c:bc:50: 54:7f:f0:5c:1d:5e:28:33:3a:6d:9d:08:9c:07:b4: 71:6e:03:26:64:90:ea:ee:a9:8c:94:1f:39:27:d6: d8:16:80:28:98:02:56:0b:a6:61:b2:de:be:4c:df: 17:20:8b:f4:a1:fc:df:78:44:66:85:e6:28:03:67: 99:01:46:40:cc:d8:92:bc:bd:8c:5d:b7:e6:ef:54: f2:9c:1c:2b:c7:06:39:8f:ed:72:a6:7b:e6:ce:6d: d4:5a:ca:96:79:9e:bc:f4:09:48:1a:e4:5a:cd:5a: 04:9e:1d:5d:9e:aa:a0:f0:13:98:3a:b0:4a:b6:50: 83:f2:36:0e:02:9f:1b:cd:01:9e:b8:a4:45:52:37: 8a:01:a6:9f:9f:38:f8:d2:1c:14:cd:11:ad:df:42: 96:62:4a:e6:f1:85:aa:0a:6e:1f:7e:18:24:12:ef: 14:2f:e7:9e:d2:19:cd:d9:39:7e:0a:02:4e:eb:19: d1:ba:c7:e4:bf:b5:59:97:48:bd:8d:58:4e:c5:83: 1c:3c:56:a4:5a:84:94:a0:7d:1f:69:90:56:64:d6: 0e:5a:2b:6c:68:e3:a2:dd:d6:6b:28:4e:c2:e9:02: 3d:a8:ff:94:03:4a:7d:60:0e:47:df:bf:c4:97:95: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:18:89:BA:0C:9B:8E:9D:E0:94:BC:B1:9F:B3:70:B9:1B:06:F8:74 X509v3 Authority Key Identifier: keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36372e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.210.67.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:e2:b5:70:e9:33:f8:b7:c9:46:b5:41:e0:0a:90:6b:0e:ed: ec:19:4b:09:2f:6b:e0:a9:33:41:fb:da:9e:63:00:e9:fa:77: e2:3d:bb:30:23:79:1d:1d:35:a9:26:13:db:f5:57:fa:1e:90: 60:ae:65:f1:5f:15:8c:f8:4f:88:22:eb:3d:46:e8:db:49:0b: 0e:c1:64:b0:be:97:67:65:59:96:ca:71:c5:ee:dd:2d:f2:dc: 86:dd:23:85:f3:62:ec:49:ee:46:ad:84:90:b2:5a:9d:0e:c5: 35:50:64:76:0d:f3:4b:25:c5:9f:63:0f:9d:11:aa:f9:e8:a8: 65:78:6e:79:8b:bb:f1:91:40:c6:79:21:04:a9:f2:f5:a1:79: dc:11:df:45:61:ff:78:35:0d:60:91:6b:de:0a:34:54:f8:58: 77:25:4a:b2:1f:21:04:ab:c6:ca:55:aa:bf:9b:b1:25:7b:bf: d9:b6:30:55:bd:98:d7:d4:42:7f:40:ec:e1:63:59:cd:e9:10: 49:6a:d5:70:1c:c0:4c:20:a7:2d:97:9b:d9:ed:cb:a8:ea:f2: 81:3b:3c:72:d3:4a:fc:a7:01:84:f2:dd:31:c9:e0:6e:03:7d: 3b:57:30:b0:de:5c:46:6f:51:85:49:dd:d5:f2:88:48:92:58: d5:10:b0:d9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUIUNmi182HFjxmEoUdW61oTi1ESwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE RUYwMERCQTAeFw0yNjA2MTAxNzQ0MjhaFw0yNzA2MDkxNzQ5MjhaMDMxMTAvBgNV BAMTKDU0MTg4OUJBMEM5QjhFOURFMDk0QkNCMTlGQjM3MEI5MUIwNkY4NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc7ePJtEyGQU+WXYy8UFR/8Fwd XigzOm2dCJwHtHFuAyZkkOruqYyUHzkn1tgWgCiYAlYLpmGy3r5M3xcgi/Sh/N94 RGaF5igDZ5kBRkDM2JK8vYxdt+bvVPKcHCvHBjmP7XKme+bObdRaypZ5nrz0CUga 5FrNWgSeHV2eqqDwE5g6sEq2UIPyNg4CnxvNAZ64pEVSN4oBpp+fOPjSHBTNEa3f QpZiSubxhaoKbh9+GCQS7xQv557SGc3ZOX4KAk7rGdG6x+S/tVmXSL2NWE7Fgxw8 VqRahJSgfR9pkFZk1g5aK2xo46Ld1msoTsLpAj2o/5QDSn1gDkffv8SXlfnfAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUVBiJugybjp3glLyxn7NwuRsG+HQwHwYDVR0j BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4MTU2OTMwLzEvMzEzNDMwMmUzMjMx MzAyZTM2MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAIzSQzANBgkqhkiG9w0BAQsFAAOCAQEATuK1cOkz+LfJRrVB4AqQaw7t7BlL CS9r4KkzQfvanmMA6fp34j27MCN5HR01qSYT2/VX+h6QYK5l8V8VjPhPiCLrPUbo 20kLDsFksL6XZ2VZlspxxe7dLfLcht0jhfNi7EnuRq2EkLJanQ7FNVBkdg3zSyXF n2MPnRGq+eioZXhueYu78ZFAxnkhBKny9aF53BHfRWH/eDUNYJFr3go0VPhYdyVK sh8hBKvGylWqv5uxJXu/2bYwVb2Y19RCf0Ds4WNZzekQSWrVcBzATCCnLZeb2e3L qOrygTs8ctNK/KcBhPLdMcngbgN9O1cwsN5cRm9RhUnd1fKISJJY1RCw2Q== -----END CERTIFICATE-----Generated at Fri Jun 12 02:24:08 2026 by rpki-client