$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3133392e3230362e3133352e302f32342d3234203d3e203338323833.roa File: 3133392e3230362e3133352e302f32342d3234203d3e203338323833.roa (raw, json) Hash identifier: 4Y//3K9PKxKKEiE8WgZ/iADKp4F16v+yzvjW5KEpOXc= Subject key identifier: 8E:1A:7B:AA:5B:EF:8B:53:CB:AA:8F:4D:9B:1A:31:D4:64:FB:92:3F Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 7DFAF91C8060F0C7CD66E7A27E4A8ADC5839520A Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3133392e3230362e3133352e302f32342d3234203d3e203338323833.roa Signing time: Mon 25 May 2026 16:07:18 +0000 ROA not before: Mon 25 May 2026 16:02:18 +0000 ROA not after: Mon 24 May 2027 16:07:18 +0000 asID: 38283 IP address blocks: 139.206.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fa:f9:1c:80:60:f0:c7:cd:66:e7:a2:7e:4a:8a:dc:58:39:52:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 25 16:02:18 2026 GMT Not After : May 24 16:07:18 2027 GMT Subject: CN=8E1A7BAA5BEF8B53CBAA8F4D9B1A31D464FB923F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5f:22:6d:f2:2b:f3:38:f3:dd:58:d8:40:16: 3f:4c:7c:4c:5f:a8:24:57:b2:b4:b1:2e:aa:3a:90: 70:14:53:b6:53:df:4e:68:6c:0f:2b:a0:9c:01:0d: bc:11:58:5b:64:90:04:3e:14:07:61:a2:d6:c9:bb: 09:8e:c2:fd:8a:14:b8:71:fb:25:0f:1b:b4:a0:92: 94:6a:2e:d8:c1:95:40:50:7d:91:a5:fa:89:53:6c: ff:ba:9b:f0:59:08:4c:1e:65:ec:cc:d2:e7:b1:23: 00:1e:2b:d4:c1:00:76:a2:ec:8d:cd:04:bc:7d:45: 42:14:77:f7:1f:83:fe:bc:02:19:fb:10:ae:b5:ff: 0d:ec:e4:b0:80:c3:2e:bb:1e:58:34:47:4b:d2:0e: 23:74:0e:a0:d4:f2:7d:15:74:9a:66:03:a8:89:79: 11:b9:12:de:42:ba:7f:e5:b6:16:74:3b:b6:ef:8d: c4:ba:7d:7b:25:d6:52:fb:f9:d4:bd:40:c6:d0:fc: 79:0b:4d:69:d4:0f:6f:f4:a4:56:29:e5:c7:6d:4b: b5:16:98:51:41:f4:80:c0:e2:88:c3:2f:3b:d4:52: ec:c2:a1:96:27:bb:18:1e:0e:34:f3:8c:ff:31:0c: 26:49:a9:fd:8a:a1:53:df:e9:06:ce:47:fa:54:ee: b6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1A:7B:AA:5B:EF:8B:53:CB:AA:8F:4D:9B:1A:31:D4:64:FB:92:3F X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3133392e3230362e3133352e302f32342d3234203d3e203338323833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.206.135.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:af:e5:23:20:08:4c:a4:de:ec:ee:54:4e:8f:58:e6:51:64: 13:88:4d:81:98:fc:21:bf:08:25:2e:81:67:db:3f:fa:94:fc: de:57:29:c3:ea:4d:f5:31:9c:01:58:f1:e4:82:5f:83:21:c1: 31:53:68:6f:7e:48:7d:7f:33:54:ba:71:9e:2b:26:3a:f3:25: fd:a2:24:87:3e:13:58:51:e2:3b:36:9a:d6:02:19:2c:ca:5c: 93:8a:46:bc:8e:92:bd:b3:f1:46:42:c8:c9:bf:70:08:9a:8c: 3a:0c:c4:7b:18:07:b3:f5:5c:de:a7:fb:6d:8f:3d:73:ed:31: 61:94:af:f1:5e:3f:e1:85:4d:06:52:db:ac:eb:fe:9a:8e:28: ae:a9:5b:2c:ed:01:46:6a:c8:6c:09:25:73:84:f9:5e:85:a7: c8:40:5b:af:53:f0:e8:0f:49:ea:dc:5e:91:3e:c1:33:36:f0: c4:81:6c:62:65:a5:09:0b:a3:d6:b1:15:98:f5:55:0a:fa:e6: a0:1b:32:bd:e3:fb:ed:1a:0b:2c:01:ba:74:81:02:ff:e7:61: 31:66:f0:d2:0d:a9:44:dd:37:95:49:8b:f8:1c:bd:9a:6e:d3: f6:99:c7:c9:4c:ad:07:fa:08:b8:65:15:25:49:15:04:29:24: b1:36:3a:e9 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUffr5HIBg8MfNZueifkqK3Fg5UgowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyNTE2MDIxOFoX DTI3MDUyNDE2MDcxOFowMzExMC8GA1UEAxMoOEUxQTdCQUE1QkVGOEI1M0NCQUE4 RjREOUIxQTMxRDQ2NEZCOTIzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAORfIm3yK/M4891Y2EAWP0x8TF+oJFeytLEuqjqQcBRTtlPfTmhsDyugnAEN vBFYW2SQBD4UB2Gi1sm7CY7C/YoUuHH7JQ8btKCSlGou2MGVQFB9kaX6iVNs/7qb 8FkITB5l7MzS57EjAB4r1MEAdqLsjc0EvH1FQhR39x+D/rwCGfsQrrX/DezksIDD LrseWDRHS9IOI3QOoNTyfRV0mmYDqIl5EbkS3kK6f+W2FnQ7tu+NxLp9eyXWUvv5 1L1AxtD8eQtNadQPb/SkVinlx21LtRaYUUH0gMDiiMMvO9RS7MKhlie7GB4ONPOM /zEMJkmp/YqhU9/pBs5H+lTutvECAwEAAaOCAhcwggITMB0GA1UdDgQWBBSOGnuq W++LU8uqj02bGjHUZPuSPzAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw MjkwNTk3NjgzNS8wLzMxMzMzOTJlMzIzMDM2MmUzMTMzMzUyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMzM4MzIzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi86HMA0GCSqGSIb3DQEB CwUAA4IBAQAvr+UjIAhMpN7s7lROj1jmUWQTiE2BmPwhvwglLoFn2z/6lPzeVynD 6k31MZwBWPHkgl+DIcExU2hvfkh9fzNUunGeKyY68yX9oiSHPhNYUeI7NprWAhks ylyTika8jpK9s/FGQsjJv3AImow6DMR7GAez9Vzep/ttjz1z7TFhlK/xXj/hhU0G Utus6/6ajiiuqVss7QFGashsCSVzhPlehafIQFuvU/DoD0nq3F6RPsEzNvDEgWxi ZaUJC6PWsRWY9VUK+uagGzK94/vtGgssAbp0gQL/52ExZvDSDalE3TeVSYv4HL2a btP2mcfJTK0H+gi4ZRUlSRUEKSSxNjrp -----END CERTIFICATE-----Generated at Sat May 30 02:40:33 2026 by rpki-client