$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3133392e3230362e3139382e302f32342d3234203d3e203338323833.roa File: 3133392e3230362e3139382e302f32342d3234203d3e203338323833.roa (raw, json) Hash identifier: ueaFLfNc5Y4w6ySeyzv/gy6V3bj9fvYqPOcFSAg3Mus= Subject key identifier: 94:C1:83:3E:2E:20:27:44:1C:85:1E:E3:41:30:39:90:6C:85:D8:BC Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 49CBD8E29268283D35AB64FDE18DCE285DC20881 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3133392e3230362e3139382e302f32342d3234203d3e203338323833.roa Signing time: Mon 25 May 2026 16:07:18 +0000 ROA not before: Mon 25 May 2026 16:02:18 +0000 ROA not after: Mon 24 May 2027 16:07:18 +0000 asID: 38283 IP address blocks: 139.206.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:cb:d8:e2:92:68:28:3d:35:ab:64:fd:e1:8d:ce:28:5d:c2:08:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 25 16:02:18 2026 GMT Not After : May 24 16:07:18 2027 GMT Subject: CN=94C1833E2E2027441C851EE3413039906C85D8BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:18:fd:89:1e:45:18:44:d7:29:57:00:14:c0: 3e:df:51:61:d3:fe:0a:de:2e:79:ff:43:af:06:ba: 94:80:91:5a:74:95:65:a1:f8:ce:8b:03:51:e5:c0: 58:a1:ac:5a:94:83:33:13:28:74:17:3b:38:a3:1c: 4c:98:74:90:71:da:6e:14:89:42:d9:53:50:8c:15: 29:1b:cc:a0:e6:3c:d3:b2:24:ed:07:f5:8c:f5:cd: ea:12:e5:2e:26:83:0b:34:f7:6a:c3:78:01:5c:0d: 7f:06:ba:e4:70:b6:2a:db:52:41:77:88:cc:99:13: d2:16:72:e8:e8:00:4d:a1:47:c7:49:06:03:f7:40: 55:5a:0a:95:94:8c:ca:78:67:61:cd:2c:6c:6d:1e: 97:f2:5a:80:a9:0b:32:72:2b:d6:f8:5c:a1:a3:0f: 2e:de:d8:34:0b:93:d3:a2:38:91:8b:85:e5:0f:9a: 4d:9f:a3:69:f6:8a:a7:3d:77:2f:d9:1e:62:19:8f: 71:0d:35:d4:27:db:99:d8:c3:7a:13:cf:ef:56:ab: 2c:ee:61:24:2e:f3:5c:19:7f:f6:5f:00:be:df:96: 10:65:f9:ab:35:e2:1d:53:37:e7:96:8b:50:0a:22: f0:61:05:86:ed:a8:d5:23:a6:62:8a:87:4f:9c:74: 23:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C1:83:3E:2E:20:27:44:1C:85:1E:E3:41:30:39:90:6C:85:D8:BC X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3133392e3230362e3139382e302f32342d3234203d3e203338323833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.206.198.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:0f:88:2e:60:4d:ca:36:bd:3d:47:bb:cd:b9:78:16:cf:4f: ba:99:75:d4:43:25:3d:a9:c7:d5:4f:12:86:1c:ee:e6:bd:46: b8:59:70:ad:ae:94:c6:06:42:4c:de:7c:a9:7c:d5:e9:3f:ad: 10:a1:c3:50:ed:3e:9a:48:78:f5:db:66:1f:42:ce:9e:28:13: 7f:97:b9:46:89:8c:b6:b9:ae:f7:2b:55:7e:56:96:22:d7:ce: 08:86:36:4e:9a:4e:62:82:d2:00:f8:44:8a:67:96:2a:1a:20: 86:55:30:1b:15:fd:a1:7f:3d:62:77:47:6d:f0:eb:c5:30:4d: 74:ef:b8:86:ae:73:e8:38:75:4c:0c:cf:08:9c:47:e5:08:38: 02:3c:a6:53:07:79:40:40:19:cd:0f:6a:0f:0a:a8:69:67:1e: e3:ef:a1:b5:c0:6d:42:af:17:be:f2:ac:d0:be:23:82:b9:c9: 90:af:44:fe:92:09:a1:71:e1:eb:0a:41:f9:2b:2f:7c:77:23: 34:4b:35:f9:33:9f:c5:b9:28:a7:8c:8b:cc:ef:37:e0:da:aa: 73:69:d5:fa:dd:18:d0:0e:2a:d5:09:22:98:6d:19:7c:53:73: 55:9d:98:c3:78:86:60:3a:f7:67:94:8a:6a:09:67:b8:c3:ce: 87:fd:49:49 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUScvY4pJoKD01q2T94Y3OKF3CCIEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyNTE2MDIxOFoX DTI3MDUyNDE2MDcxOFowMzExMC8GA1UEAxMoOTRDMTgzM0UyRTIwMjc0NDFDODUx RUUzNDEzMDM5OTA2Qzg1RDhCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPIY/YkeRRhE1ylXABTAPt9RYdP+Ct4uef9Drwa6lICRWnSVZaH4zosDUeXA WKGsWpSDMxModBc7OKMcTJh0kHHabhSJQtlTUIwVKRvMoOY807Ik7Qf1jPXN6hLl LiaDCzT3asN4AVwNfwa65HC2KttSQXeIzJkT0hZy6OgATaFHx0kGA/dAVVoKlZSM ynhnYc0sbG0el/JagKkLMnIr1vhcoaMPLt7YNAuT06I4kYuF5Q+aTZ+jafaKpz13 L9keYhmPcQ011CfbmdjDehPP71arLO5hJC7zXBl/9l8Avt+WEGX5qzXiHVM355aL UAoi8GEFhu2o1SOmYoqHT5x0I0ECAwEAAaOCAhcwggITMB0GA1UdDgQWBBSUwYM+ LiAnRByFHuNBMDmQbIXYvDAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw MjkwNTk3NjgzNS8wLzMxMzMzOTJlMzIzMDM2MmUzMTM5MzgyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMzM4MzIzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi87GMA0GCSqGSIb3DQEB CwUAA4IBAQA+D4guYE3KNr09R7vNuXgWz0+6mXXUQyU9qcfVTxKGHO7mvUa4WXCt rpTGBkJM3nypfNXpP60QocNQ7T6aSHj122YfQs6eKBN/l7lGiYy2ua73K1V+VpYi 184IhjZOmk5igtIA+ESKZ5YqGiCGVTAbFf2hfz1id0dt8OvFME1077iGrnPoOHVM DM8InEflCDgCPKZTB3lAQBnND2oPCqhpZx7j76G1wG1Crxe+8qzQviOCucmQr0T+ kgmhceHrCkH5Ky98dyM0SzX5M5/FuSinjIvM7zfg2qpzadX63RjQDirVCSKYbRl8 U3NVnZjDeIZgOvdnlIpqCWe4w86H/UlJ -----END CERTIFICATE-----Generated at Sat May 30 02:40:38 2026 by rpki-client