$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3235312e302f32342d3234203d3e203538353139.roa File: 3134302e3234362e3235312e302f32342d3234203d3e203538353139.roa (raw, json) Hash identifier: 0QhGoOD5k+OGGKsRpoivcUVnnGDpE09UCyciOzQKPEk= Subject key identifier: 21:AE:75:94:78:EE:60:90:40:A2:67:F1:F2:05:5E:0C:87:89:28:BD Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 08B317A15F834CFA81CD093200FC1D913E5AE04B Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3235312e302f32342d3234203d3e203538353139.roa Signing time: Wed 03 Jun 2026 16:53:21 +0000 ROA not before: Wed 03 Jun 2026 16:48:21 +0000 ROA not after: Wed 02 Jun 2027 16:53:21 +0000 asID: 58519 IP address blocks: 140.246.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b3:17:a1:5f:83:4c:fa:81:cd:09:32:00:fc:1d:91:3e:5a:e0:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Jun 3 16:48:21 2026 GMT Not After : Jun 2 16:53:21 2027 GMT Subject: CN=21AE759478EE609040A267F1F2055E0C878928BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f8:88:15:4b:c7:10:97:65:e4:b1:8b:23:49: f4:9e:b9:84:6b:8a:7e:ad:57:1c:8d:c7:9c:5d:cf: 76:6e:0a:6e:75:9c:1a:a5:dd:bf:78:04:ac:6d:23: fc:0b:b1:9a:85:60:79:c8:5c:ee:b3:a3:e3:cf:9c: 73:b1:1c:30:00:b1:ca:8c:43:d0:5b:10:81:ca:91: d8:66:d4:4b:21:1d:65:71:51:6d:e7:4e:c3:77:9f: 16:62:6d:17:14:1f:b9:72:4b:49:e1:5b:7e:6a:be: 2a:a1:ee:df:4b:86:a6:79:36:97:aa:2f:92:78:b8: e8:51:dc:da:7f:18:4b:3f:df:65:8c:42:ae:a8:08: 4b:d3:2c:93:46:b7:27:03:27:d6:36:10:ee:21:7f: 2d:36:75:74:b0:7a:ae:60:4e:9d:77:0f:b9:d5:27: 2e:d7:47:68:b4:57:ad:cd:27:63:69:e2:9c:bb:f9: e2:05:88:9d:2d:9c:88:6b:27:63:24:43:5a:31:47: 06:5e:e2:2c:cd:c6:7b:4c:be:40:c8:80:14:af:82: 48:4d:5e:f9:f3:cf:62:a2:7f:5f:f8:54:f3:8b:76: 84:c9:0f:73:24:da:c4:26:86:1b:33:dd:9b:e9:84: df:02:0d:ef:5b:44:83:cb:d9:43:ed:72:bc:68:4a: db:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AE:75:94:78:EE:60:90:40:A2:67:F1:F2:05:5E:0C:87:89:28:BD X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3235312e302f32342d3234203d3e203538353139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.246.251.0/24 Signature Algorithm: sha256WithRSAEncryption af:83:66:4f:99:9a:ae:3e:49:81:2e:84:8b:b8:b3:34:83:1c: db:05:5f:bb:fa:f3:86:eb:15:c2:ac:c3:a2:63:35:e9:63:27: f0:99:7c:68:05:92:99:84:85:ea:9c:00:8a:6c:ee:5d:31:e2: e0:fa:91:db:5b:8b:7e:3b:86:c5:1d:28:a1:69:72:e1:a9:39: 0b:da:94:77:31:c8:a4:92:a7:8f:48:7a:62:61:65:20:5a:e7: 1b:ea:72:e3:c4:2c:ba:10:73:94:4b:1e:83:d1:9a:aa:c6:3f: cf:e2:ce:b4:0a:11:7a:12:f0:e9:58:ca:2f:c4:ee:2b:e6:15: c2:1a:97:ae:f5:bb:3c:a4:10:ad:12:bf:11:93:56:5a:f0:95: a5:15:e8:fd:e2:07:78:da:55:26:df:2e:7d:0f:e9:ac:3c:4a: cc:bd:fb:bc:b5:f5:5f:e2:cf:cf:1e:f2:12:37:71:20:38:bb: 8f:17:0f:13:56:94:80:5c:7c:6f:b8:dd:8d:15:29:fa:97:f2: 62:c2:66:0e:c3:3a:cd:81:d3:e6:6c:fa:40:64:f6:16:b7:36: 28:9d:e1:9e:e4:42:23:cb:92:11:5e:07:bb:b0:0b:61:2c:4e: a5:2b:5f:69:0f:43:76:36:bb:6a:29:43:02:4c:10:95:ca:c3: d8:6d:14:64 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUCLMXoV+DTPqBzQkyAPwdkT5a4EswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYwMzE2NDgyMVoX DTI3MDYwMjE2NTMyMVowMzExMC8GA1UEAxMoMjFBRTc1OTQ3OEVFNjA5MDQwQTI2 N0YxRjIwNTVFMEM4Nzg5MjhCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALz4iBVLxxCXZeSxiyNJ9J65hGuKfq1XHI3HnF3Pdm4KbnWcGqXdv3gErG0j /AuxmoVgechc7rOj48+cc7EcMACxyoxD0FsQgcqR2GbUSyEdZXFRbedOw3efFmJt FxQfuXJLSeFbfmq+KqHu30uGpnk2l6ovkni46FHc2n8YSz/fZYxCrqgIS9Msk0a3 JwMn1jYQ7iF/LTZ1dLB6rmBOnXcPudUnLtdHaLRXrc0nY2ninLv54gWInS2ciGsn YyRDWjFHBl7iLM3Ge0y+QMiAFK+CSE1e+fPPYqJ/X/hU84t2hMkPcyTaxCaGGzPd m+mE3wIN71tEg8vZQ+1yvGhK2/UCAwEAAaOCAhcwggITMB0GA1UdDgQWBBQhrnWU eO5gkECiZ/HyBV4Mh4kovTAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw MjkwNTk3NjgzNS8wLzMxMzQzMDJlMzIzNDM2MmUzMjM1MzEyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzNTM4MzUzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPb7MA0GCSqGSIb3DQEB CwUAA4IBAQCvg2ZPmZquPkmBLoSLuLM0gxzbBV+7+vOG6xXCrMOiYzXpYyfwmXxo BZKZhIXqnACKbO5dMeLg+pHbW4t+O4bFHSihaXLhqTkL2pR3McikkqePSHpiYWUg Wucb6nLjxCy6EHOUSx6D0Zqqxj/P4s60ChF6EvDpWMovxO4r5hXCGpeu9bs8pBCt Er8Rk1Za8JWlFej94gd42lUm3y59D+msPErMvfu8tfVf4s/PHvISN3EgOLuPFw8T VpSAXHxvuN2NFSn6l/JiwmYOwzrNgdPmbPpAZPYWtzYoneGe5EIjy5IRXge7sAth LE6lK19pD0N2NrtqKUMCTBCVysPYbRRk -----END CERTIFICATE-----Generated at Fri Jun 12 02:41:03 2026 by rpki-client