$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3132382e302f32342d3234203d3e203538353139.roa File: 3134302e3234362e3132382e302f32342d3234203d3e203538353139.roa (raw, json) Hash identifier: xfHKLT3CXkrPIsDjVVvkHRdHLBAfLyjaK5S2R9H9Dk4= Subject key identifier: F8:81:20:F5:99:CD:1F:F6:FB:7A:F1:42:B7:19:53:75:D9:C4:C9:E4 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 7150CBCFB9A27040AF2A9B877B70B0304FFF7195 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3132382e302f32342d3234203d3e203538353139.roa Signing time: Wed 03 Jun 2026 16:53:19 +0000 ROA not before: Wed 03 Jun 2026 16:48:19 +0000 ROA not after: Wed 02 Jun 2027 16:53:19 +0000 asID: 58519 IP address blocks: 140.246.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:50:cb:cf:b9:a2:70:40:af:2a:9b:87:7b:70:b0:30:4f:ff:71:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Jun 3 16:48:19 2026 GMT Not After : Jun 2 16:53:19 2027 GMT Subject: CN=F88120F599CD1FF6FB7AF142B7195375D9C4C9E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d7:fd:62:55:da:25:96:a5:0f:31:ad:ca:88: 40:58:08:4e:b7:f5:4f:a6:15:ea:1e:8d:48:5d:94: 41:ab:a6:a1:e4:55:32:09:37:39:33:bf:2f:5b:61: 69:b3:d1:10:81:67:9c:60:88:8b:22:9c:32:3c:28: c7:52:64:8c:ed:cc:08:89:88:f3:f2:e9:be:72:ae: 22:e5:fd:c8:1a:81:ed:a1:b1:ad:2b:05:70:2f:df: a2:11:03:75:61:db:56:80:7d:0f:59:95:a9:d8:6b: 01:ce:7b:60:05:fe:f6:26:ce:f6:9c:30:2b:86:a2: e1:46:6b:07:59:58:f8:8a:31:c4:c6:b5:5e:7d:2c: 6f:f4:db:53:8d:e3:08:78:6e:d1:dc:80:14:5f:10: f1:9e:fb:1b:ea:ff:18:65:ab:45:dc:1a:21:b9:21: be:d8:9f:e7:6a:16:c3:f3:9e:36:d3:3b:88:28:ed: 2c:1c:3c:8e:67:75:05:a7:d0:f6:dc:20:2a:8b:bb: 12:60:8a:08:9d:40:94:dd:72:22:12:fc:ac:c2:02: 97:a4:1f:cf:03:13:29:83:38:20:98:eb:5c:a8:a8: 70:c8:06:a2:22:96:af:06:08:3a:8f:9f:12:23:6d: 91:56:a4:99:09:01:62:35:76:55:c4:56:8c:86:21: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:81:20:F5:99:CD:1F:F6:FB:7A:F1:42:B7:19:53:75:D9:C4:C9:E4 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3132382e302f32342d3234203d3e203538353139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.246.128.0/24 Signature Algorithm: sha256WithRSAEncryption dd:8a:e2:02:4c:a1:85:7e:b8:63:31:fd:34:ea:28:65:73:a0: 9d:25:9e:be:fa:20:a2:ba:9d:b9:d4:a0:58:b3:ba:e1:9b:e0: 6a:4f:e7:54:4c:0f:17:c5:16:86:9b:85:c6:62:24:1e:55:a8: 82:91:e9:65:d8:08:b1:e5:2e:b5:8b:b5:ca:58:55:3c:c1:29: 0f:d5:d8:8b:68:51:e2:2e:d6:09:4c:42:d0:18:de:58:c5:d7: 4f:a3:c4:d1:ff:01:d0:4f:5e:d3:b9:63:86:a8:88:f7:be:c6: 13:99:91:2b:6d:84:d0:30:b3:97:b7:dc:c3:5c:48:b7:97:21: cb:22:b5:31:ad:c5:00:2b:7b:e0:83:26:28:4c:0b:9b:f5:14: 02:6d:23:a3:c7:c9:b0:9d:30:ce:88:96:63:cb:be:4b:e7:b8: da:05:4c:d6:28:1e:3b:8f:20:34:46:47:15:32:e4:dc:1a:fa: 67:ca:14:a8:b8:27:d0:b0:4f:3f:1d:d2:7b:60:ce:ee:f8:ee: 7c:10:b9:5a:81:46:be:0d:21:e3:6c:25:0a:60:56:b7:df:be: f1:3d:ae:39:a8:b3:ba:5e:c7:5d:d0:ba:92:22:60:cf:3e:59: 64:e5:79:5e:7a:63:4a:0c:7b:5e:ed:06:2a:65:ab:3a:c7:cf: 30:a2:67:20 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUcVDLz7micECvKpuHe3CwME//cZUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYwMzE2NDgxOVoX DTI3MDYwMjE2NTMxOVowMzExMC8GA1UEAxMoRjg4MTIwRjU5OUNEMUZGNkZCN0FG MTQyQjcxOTUzNzVEOUM0QzlFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJbX/WJV2iWWpQ8xrcqIQFgITrf1T6YV6h6NSF2UQaumoeRVMgk3OTO/L1th abPREIFnnGCIiyKcMjwox1JkjO3MCImI8/LpvnKuIuX9yBqB7aGxrSsFcC/fohED dWHbVoB9D1mVqdhrAc57YAX+9ibO9pwwK4ai4UZrB1lY+IoxxMa1Xn0sb/TbU43j CHhu0dyAFF8Q8Z77G+r/GGWrRdwaIbkhvtif52oWw/OeNtM7iCjtLBw8jmd1BafQ 9twgKou7EmCKCJ1AlN1yIhL8rMICl6QfzwMTKYM4IJjrXKiocMgGoiKWrwYIOo+f EiNtkVakmQkBYjV2VcRWjIYhS2cCAwEAAaOCAhcwggITMB0GA1UdDgQWBBT4gSD1 mc0f9vt68UK3GVN12cTJ5DAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw MjkwNTk3NjgzNS8wLzMxMzQzMDJlMzIzNDM2MmUzMTMyMzgyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzNTM4MzUzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPaAMA0GCSqGSIb3DQEB CwUAA4IBAQDdiuICTKGFfrhjMf006ihlc6CdJZ6++iCiup251KBYs7rhm+BqT+dU TA8XxRaGm4XGYiQeVaiCkell2Aix5S61i7XKWFU8wSkP1diLaFHiLtYJTELQGN5Y xddPo8TR/wHQT17TuWOGqIj3vsYTmZErbYTQMLOXt9zDXEi3lyHLIrUxrcUAK3vg gyYoTAub9RQCbSOjx8mwnTDOiJZjy75L57jaBUzWKB47jyA0RkcVMuTcGvpnyhSo uCfQsE8/HdJ7YM7u+O58ELlagUa+DSHjbCUKYFa3377xPa45qLO6Xsdd0LqSImDP Pllk5XleemNKDHte7QYqZas6x88womcg -----END CERTIFICATE-----Generated at Fri Jun 12 02:41:03 2026 by rpki-client