$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3136302e302f31392d3139203d3e20313336313935.roa File: 3134302e3234392e3136302e302f31392d3139203d3e20313336313935.roa (raw, json) Hash identifier: zu++7kR3uIhEs/cxOzMlTnz8aoVGXuWVzn6fzfo0LGg= Subject key identifier: 8F:39:48:62:53:9B:D2:7D:2A:1D:A0:A7:22:6E:12:79:DD:48:83:1F Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 04DD3A066D59D9F3CE6A140CB9B170F36DA73FF3 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3136302e302f31392d3139203d3e20313336313935.roa Signing time: Thu 28 May 2026 16:06:19 +0000 ROA not before: Thu 28 May 2026 16:01:19 +0000 ROA not after: Thu 27 May 2027 16:06:19 +0000 asID: 136195 IP address blocks: 140.249.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:dd:3a:06:6d:59:d9:f3:ce:6a:14:0c:b9:b1:70:f3:6d:a7:3f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 28 16:01:19 2026 GMT Not After : May 27 16:06:19 2027 GMT Subject: CN=8F394862539BD27D2A1DA0A7226E1279DD48831F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d5:a9:0c:0d:0a:f3:da:36:04:e6:25:80:06: a8:f3:2b:d4:f5:4f:24:a4:40:88:8d:23:b1:8c:f6: 73:47:f5:df:21:4d:07:c1:7b:4c:94:40:2a:f7:af: 9e:63:09:28:56:58:7d:6c:af:1b:98:fb:bf:b6:a8: 6d:81:d8:13:58:e7:9e:65:49:3f:18:d3:26:08:d8: d9:ca:c3:63:47:46:d3:a7:87:57:be:47:25:10:f2: 0d:ad:3e:34:76:2d:26:59:05:1a:e2:23:fa:73:f5: 38:d2:c9:85:33:73:64:1c:55:07:05:ff:2c:a0:6a: 94:5a:37:42:57:b6:bf:04:ab:f9:29:53:d2:04:c7: 7c:42:87:f6:a2:a7:96:45:46:c5:32:84:ad:96:d3: a1:e0:1c:28:87:75:6b:43:dd:7e:75:49:6d:56:8c: 8e:e6:e0:df:ef:28:e2:f9:c0:d4:27:db:28:64:e0: 91:03:f9:ac:df:38:fb:12:8c:a4:f5:5f:c6:8f:ba: c5:4c:b6:b0:57:d0:83:3c:64:d8:bc:f3:f0:ae:fc: 2d:33:cf:d5:fa:b3:be:49:10:d0:48:98:c1:e3:9c: ef:42:df:b2:8b:21:fd:85:d4:5f:2e:d7:7f:0c:16: de:df:e7:55:0d:54:9d:53:b7:a7:f5:a4:45:98:6c: c6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:39:48:62:53:9B:D2:7D:2A:1D:A0:A7:22:6E:12:79:DD:48:83:1F X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3136302e302f31392d3139203d3e20313336313935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.249.160.0/19 Signature Algorithm: sha256WithRSAEncryption 73:6d:53:4f:72:2b:12:ed:2e:a0:e0:b1:06:41:1c:14:1b:79: 45:cc:e3:0d:75:11:1f:cd:e0:b0:93:e3:38:68:97:11:14:ab: 3e:64:a2:6b:7a:7e:44:30:4b:e6:36:34:89:b7:87:18:19:64: d6:e8:79:b0:88:04:1d:c1:b2:0f:2b:ab:64:ac:b0:82:9b:24: 02:3c:f0:1a:5b:31:9b:f5:06:fb:0c:23:9f:e2:b8:dc:6d:e6: 4f:2a:44:d2:4d:eb:cb:2e:ef:11:52:80:84:0c:eb:eb:18:be: c7:e3:56:e5:c8:bd:6e:01:1f:8c:fa:5b:59:ca:ef:d1:1c:db: 52:c7:db:9d:04:b4:2a:d7:49:28:17:03:80:92:7a:d9:aa:a1: 65:4f:81:1d:73:1c:41:83:d1:c1:86:6e:11:3d:a1:1a:e5:83: 4e:0f:c6:f1:1f:7d:6d:35:cf:69:e9:2c:2b:67:61:53:53:14: 82:1d:06:c0:6a:7a:b9:43:ba:8e:e1:b1:86:29:6a:1c:2c:35: 9d:d0:9b:c8:fd:5e:c6:e1:a2:e8:2a:09:0d:3e:bf:80:0e:57: a2:bf:e3:71:31:44:29:23:a3:44:44:59:0f:38:ed:09:65:0f: 4d:4b:43:fa:35:53:9a:33:b4:10:cc:6c:2a:36:47:65:f3:84: d8:ae:35:20 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUBN06Bm1Z2fPOahQMubFw822nP/MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyODE2MDExOVoX DTI3MDUyNzE2MDYxOVowMzExMC8GA1UEAxMoOEYzOTQ4NjI1MzlCRDI3RDJBMURB MEE3MjI2RTEyNzlERDQ4ODMxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJXVqQwNCvPaNgTmJYAGqPMr1PVPJKRAiI0jsYz2c0f13yFNB8F7TJRAKvev nmMJKFZYfWyvG5j7v7aobYHYE1jnnmVJPxjTJgjY2crDY0dG06eHV75HJRDyDa0+ NHYtJlkFGuIj+nP1ONLJhTNzZBxVBwX/LKBqlFo3Qle2vwSr+SlT0gTHfEKH9qKn lkVGxTKErZbToeAcKId1a0PdfnVJbVaMjubg3+8o4vnA1CfbKGTgkQP5rN84+xKM pPVfxo+6xUy2sFfQgzxk2Lzz8K78LTPP1fqzvkkQ0EiYweOc70Lfsosh/YXUXy7X fwwW3t/nVQ1UnVO3p/WkRZhsxmcCAwEAAaOCAhowggIWMB0GA1UdDgQWBBSPOUhi U5vSfSodoKcibhJ53UiDHzAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsG AQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0 MDI5MDU5NzY4MzUvMC8zMTM0MzAyZTMyMzQzOTJlMzEzNjMwMmUzMDJmMzEzOTJk MzEzOTIwM2QzZTIwMzEzMzM2MzEzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjPmgMA0GCSqGSIb3 DQEBCwUAA4IBAQBzbVNPcisS7S6g4LEGQRwUG3lFzOMNdREfzeCwk+M4aJcRFKs+ ZKJren5EMEvmNjSJt4cYGWTW6HmwiAQdwbIPK6tkrLCCmyQCPPAaWzGb9Qb7DCOf 4rjcbeZPKkTSTevLLu8RUoCEDOvrGL7H41blyL1uAR+M+ltZyu/RHNtSx9udBLQq 10koFwOAknrZqqFlT4EdcxxBg9HBhm4RPaEa5YNOD8bxH31tNc9p6SwrZ2FTUxSC HQbAanq5Q7qO4bGGKWocLDWd0JvI/V7G4aLoKgkNPr+ADleiv+NxMUQpI6NERFkP OO0JZQ9NS0P6NVOaM7QQzGwqNkdl84TYrjUg -----END CERTIFICATE-----Generated at Sat May 30 02:41:44 2026 by rpki-client