$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e31372e302f32342d3234203d3e20313336313935.roa File: 3134302e3234392e31372e302f32342d3234203d3e20313336313935.roa (raw, json) Hash identifier: CYSZgusLPufXnYRfmY8tWkcI+Z9GiT9BQK9TUJ+qzJ0= Subject key identifier: 5F:84:98:6B:C9:08:F7:85:ED:3F:33:6B:8D:D1:29:22:A1:24:D3:28 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 4DE7A14E79B1EC44F1158190F90692F17174126F Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e31372e302f32342d3234203d3e20313336313935.roa Signing time: Thu 28 May 2026 16:07:18 +0000 ROA not before: Thu 28 May 2026 16:02:18 +0000 ROA not after: Thu 27 May 2027 16:07:18 +0000 asID: 136195 IP address blocks: 140.249.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e7:a1:4e:79:b1:ec:44:f1:15:81:90:f9:06:92:f1:71:74:12:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 28 16:02:18 2026 GMT Not After : May 27 16:07:18 2027 GMT Subject: CN=5F84986BC908F785ED3F336B8DD12922A124D328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:7e:3a:bc:bc:46:c4:7c:f6:78:6d:64:38: 75:ec:d7:9b:d6:71:ee:dd:ce:2c:ca:36:b1:35:e1: 47:a6:70:b3:b5:0d:37:a0:71:84:2e:68:a4:23:d4: 15:46:78:74:8e:b6:61:7e:46:03:e6:af:42:98:cf: af:ca:fa:f7:a2:d4:d9:f4:e5:5e:f9:50:46:4f:88: eb:df:e9:99:7d:58:79:e0:60:c5:91:78:0f:88:9d: 72:cb:44:08:fc:e3:fe:3d:44:ae:38:aa:d1:ea:79: 0c:89:ae:6a:b2:61:53:88:38:12:65:12:f1:d1:8f: 83:f7:ee:dd:54:c5:bb:c1:99:55:65:7d:7f:59:5a: 0a:67:9e:96:3f:55:c9:a5:14:27:e8:26:7c:76:28: df:41:8c:35:6d:e2:fe:7b:b7:1f:b0:fe:34:4a:c8: 96:fb:44:95:97:8a:a4:f3:06:70:37:40:d9:e9:57: e3:5a:fd:59:09:ee:9b:b3:a7:1b:f1:e9:4c:34:9a: 3b:00:47:e1:39:50:ac:88:a1:bd:cb:bb:e9:db:88: 4f:84:29:00:16:04:55:a3:02:d7:a4:64:e8:09:3b: 7b:30:80:46:f7:1e:f1:2d:ca:5e:d5:21:be:7a:49: 4e:3f:c2:6e:69:e7:64:c3:fe:9d:55:c3:63:d3:60: 6d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:84:98:6B:C9:08:F7:85:ED:3F:33:6B:8D:D1:29:22:A1:24:D3:28 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e31372e302f32342d3234203d3e20313336313935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.249.17.0/24 Signature Algorithm: sha256WithRSAEncryption ca:2a:a4:4f:df:e3:e2:73:47:97:15:2b:12:3b:6b:97:1c:08: a0:53:57:cb:f0:f6:bc:cd:86:77:a5:e2:4f:58:d6:47:7d:e2: 84:3d:6b:4b:2b:77:7d:85:d4:ed:44:36:d8:19:22:11:9b:50: be:f3:50:6c:5c:5d:33:c5:c3:0a:ac:c3:45:8b:a8:1f:f9:56: b7:fc:cc:8e:8b:06:d2:d8:9e:71:f3:60:d1:39:9c:84:28:ee: 8b:a0:c0:f8:d5:53:f5:3b:b8:f9:cd:99:2a:da:0f:07:ee:5a: b8:de:20:4b:45:8c:d6:cc:bf:49:08:9b:2d:0f:28:44:ed:8f: 28:ac:15:ca:57:b6:e8:06:8f:21:ab:7a:fc:c9:32:e1:29:98: f2:58:53:1d:42:6e:7a:0a:d5:73:ea:00:3f:4f:64:b3:3c:c7: bf:91:1c:98:b0:9d:d3:b9:72:58:64:8b:c5:32:83:40:e3:7d: 25:52:9d:5d:83:9a:24:fd:8e:7a:8f:48:c1:d8:3d:ef:d2:bd: fb:7d:3a:2d:1b:52:78:52:66:76:3b:92:bf:ed:1e:f9:f8:35: ec:5b:11:3e:9c:d2:4e:68:53:7c:13:fa:37:d7:ef:46:46:79: bf:44:6b:81:8c:83:2e:3b:7f:c4:43:ef:6c:ad:88:cb:d8:1e: 78:1b:bb:26 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUTeehTnmx7ETxFYGQ+QaS8XF0Em8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyODE2MDIxOFoX DTI3MDUyNzE2MDcxOFowMzExMC8GA1UEAxMoNUY4NDk4NkJDOTA4Rjc4NUVEM0Yz MzZCOEREMTI5MjJBMTI0RDMyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKJdfjq8vEbEfPZ4bWQ4dezXm9Zx7t3OLMo2sTXhR6Zws7UNN6BxhC5opCPU FUZ4dI62YX5GA+avQpjPr8r696LU2fTlXvlQRk+I69/pmX1YeeBgxZF4D4idcstE CPzj/j1Erjiq0ep5DImuarJhU4g4EmUS8dGPg/fu3VTFu8GZVWV9f1laCmeelj9V yaUUJ+gmfHYo30GMNW3i/nu3H7D+NErIlvtElZeKpPMGcDdA2elX41r9WQnum7On G/HpTDSaOwBH4TlQrIihvcu76duIT4QpABYEVaMC16Rk6Ak7ezCARvce8S3KXtUh vnpJTj/CbmnnZMP+nVXDY9NgbXcCAwEAAaOCAhcwggITMB0GA1UdDgQWBBRfhJhr yQj3he0/M2uN0SkioSTTKDAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw MjkwNTk3NjgzNS8wLzMxMzQzMDJlMzIzNDM5MmUzMTM3MmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzEzMzM2MzEzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPkRMA0GCSqGSIb3DQEB CwUAA4IBAQDKKqRP3+Pic0eXFSsSO2uXHAigU1fL8Pa8zYZ3peJPWNZHfeKEPWtL K3d9hdTtRDbYGSIRm1C+81BsXF0zxcMKrMNFi6gf+Va3/MyOiwbS2J5x82DROZyE KO6LoMD41VP1O7j5zZkq2g8H7lq43iBLRYzWzL9JCJstDyhE7Y8orBXKV7boBo8h q3r8yTLhKZjyWFMdQm56CtVz6gA/T2SzPMe/kRyYsJ3TuXJYZIvFMoNA430lUp1d g5ok/Y56j0jB2D3v0r37fTotG1J4UmZ2O5K/7R75+DXsWxE+nNJOaFN8E/o31+9G Rnm/RGuBjIMuO3/EQ+9srYjL2B54G7sm -----END CERTIFICATE-----Generated at Sat May 30 02:41:44 2026 by rpki-client