$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37322e302f32342d3234203d3e203536303438.roa File: 3134302e3231302e37322e302f32342d3234203d3e203536303438.roa (raw, json) Hash identifier: rxR4mIYd3Pqmu3v7aKhGbBjW1AcyVW0hD/MScIys/V0= Subject key identifier: 63:FC:DF:81:63:9C:6D:70:F3:15:8C:13:FB:A8:62:96:F0:F1:0A:6B Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Certificate serial: 3748F21B6D1D28048CA8E05C8D8E58C78C762832 Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37322e302f32342d3234203d3e203536303438.roa Signing time: Wed 10 Jun 2026 17:49:27 +0000 ROA not before: Wed 10 Jun 2026 17:44:27 +0000 ROA not after: Wed 09 Jun 2027 17:49:27 +0000 asID: 56048 IP address blocks: 140.210.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:48:f2:1b:6d:1d:28:04:8c:a8:e0:5c:8d:8e:58:c7:8c:76:28:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Validity Not Before: Jun 10 17:44:27 2026 GMT Not After : Jun 9 17:49:27 2027 GMT Subject: CN=63FCDF81639C6D70F3158C13FBA86296F0F10A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:17:b5:94:c9:aa:70:1f:dd:77:3c:db:90: 17:23:77:e2:69:4d:24:8f:d0:3c:03:81:b2:d3:e1: 9a:6a:7f:dc:c7:66:4c:28:35:d3:4a:29:06:c0:84: 00:fb:90:c4:0c:c9:df:7b:26:95:9e:65:ec:13:9c: c8:b6:12:5b:ea:19:af:a6:ff:45:ca:6b:e3:79:46: 95:23:a5:54:b5:c0:10:b5:85:f2:29:7a:64:af:3a: 96:b1:ac:1a:fb:a2:61:d8:5c:28:ee:fc:68:6d:8e: b0:a3:86:e6:55:93:c9:8b:64:88:6f:c3:cb:c5:40: 0d:8d:2d:56:35:8f:c9:2f:14:7b:75:fd:83:0a:d6: 4b:a9:86:a1:11:a6:c0:e0:b4:dd:ff:45:9d:41:dd: 5b:89:02:3c:9d:4f:ef:ce:b5:8c:9c:34:28:93:d6: f1:0a:66:b4:70:26:55:27:43:ab:6e:fa:b9:c8:d2: 52:45:3e:bb:cf:e9:1a:a0:7c:0a:aa:34:76:b6:eb: 52:e2:1d:07:f1:cd:fe:9e:db:08:4b:1a:4b:fe:e9: a0:7e:11:d1:90:8b:ed:b8:41:25:73:33:75:fc:de: e8:ec:3d:9c:84:1d:13:5d:40:77:a0:5c:71:23:45: 25:50:74:d9:27:53:d6:53:a4:37:fe:92:86:a8:01: 17:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FC:DF:81:63:9C:6D:70:F3:15:8C:13:FB:A8:62:96:F0:F1:0A:6B X509v3 Authority Key Identifier: keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37322e302f32342d3234203d3e203536303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.210.72.0/24 Signature Algorithm: sha256WithRSAEncryption aa:1f:77:3d:b3:53:80:c3:52:be:b7:12:fa:3f:b6:42:c7:2f: 39:67:83:9e:1f:13:25:a6:fb:f2:08:7d:df:7d:5a:07:93:75: 6c:35:c0:e5:a1:58:34:7a:a2:21:d5:01:d5:38:96:ac:d6:cb: ba:d7:a1:f6:dd:5a:f6:05:74:4c:b0:ad:fb:37:aa:0e:5d:46: 63:cb:45:89:59:72:47:cd:2a:3a:4e:a6:d1:5a:aa:81:e0:c7: a9:07:aa:fb:1c:4b:1f:0e:55:83:81:2f:81:9b:f4:32:41:d5: 95:ff:04:88:c2:17:e8:12:fa:77:cf:5b:41:61:6c:73:dc:81: 6e:21:02:46:a8:e6:fd:2e:be:a4:a7:12:85:e6:6f:64:21:20: 80:e1:1c:f0:5c:b6:7e:24:97:79:dd:9c:00:4e:2e:b4:fa:57: fe:c2:54:ba:b2:39:76:be:1e:6b:90:5f:c0:e2:fd:c2:b3:d8: b9:02:c5:26:3e:92:67:9b:32:b4:11:76:5a:c7:ab:f4:8a:ee: 09:b2:f9:84:81:36:d3:b7:cc:aa:d5:50:bd:ba:71:dc:92:d2: 7e:80:88:35:48:18:69:42:68:5f:a6:42:dc:1c:43:85:02:83: 99:fc:29:e2:5b:a3:2b:c3:9b:07:c4:7c:93:61:0d:b8:c3:97: 8d:76:80:d1 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUN0jyG20dKASMqOBcjY5Yx4x2KDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE RUYwMERCQTAeFw0yNjA2MTAxNzQ0MjdaFw0yNzA2MDkxNzQ5MjdaMDMxMTAvBgNV BAMTKDYzRkNERjgxNjM5QzZENzBGMzE1OEMxM0ZCQTg2Mjk2RjBGMTBBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3Re1lMmqcB/ddzzbkBcjd+Jp TSSP0DwDgbLT4Zpqf9zHZkwoNdNKKQbAhAD7kMQMyd97JpWeZewTnMi2ElvqGa+m /0XKa+N5RpUjpVS1wBC1hfIpemSvOpaxrBr7omHYXCju/GhtjrCjhuZVk8mLZIhv w8vFQA2NLVY1j8kvFHt1/YMK1kuphqERpsDgtN3/RZ1B3VuJAjydT+/OtYycNCiT 1vEKZrRwJlUnQ6tu+rnI0lJFPrvP6RqgfAqqNHa261LiHQfxzf6e2whLGkv+6aB+ EdGQi+24QSVzM3X83ujsPZyEHRNdQHegXHEjRSVQdNknU9ZTpDf+koaoARd/AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUY/zfgWOcbXDzFYwT+6hilvDxCmswHwYDVR0j BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODE1NjkzMC8xLzMxMzQzMDJlMzIz MTMwMmUzNzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAIzSSDANBgkqhkiG9w0BAQsFAAOCAQEAqh93PbNTgMNSvrcS+j+2Qscv OWeDnh8TJab78gh9331aB5N1bDXA5aFYNHqiIdUB1TiWrNbLuteh9t1a9gV0TLCt +zeqDl1GY8tFiVlyR80qOk6m0VqqgeDHqQeq+xxLHw5Vg4EvgZv0MkHVlf8EiMIX 6BL6d89bQWFsc9yBbiECRqjm/S6+pKcSheZvZCEggOEc8Fy2fiSXed2cAE4utPpX /sJUurI5dr4ea5BfwOL9wrPYuQLFJj6SZ5sytBF2Wser9IruCbL5hIE207fMqtVQ vbpx3JLSfoCINUgYaUJoX6ZC3BxDhQKDmfwp4lujK8ObB8R8k2ENuMOXjXaA0Q== -----END CERTIFICATE-----Generated at Fri Jun 12 06:45:02 2026 by rpki-client