$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3137362e302f32302d3230203d3e203538353431.roa File: 3134302e3234392e3137362e302f32302d3230203d3e203538353431.roa (raw, json) Hash identifier: tZ1TZvuSUthIa4iF4x1Y0Msl16oz9Ec5535tCkHXawk= Subject key identifier: D5:D2:B4:5B:CA:80:E8:FB:41:38:EF:16:95:6B:78:3A:73:AB:C6:97 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 6971CFC83006A5E945D7F88B915FB31124D3364F Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3137362e302f32302d3230203d3e203538353431.roa Signing time: Thu 28 May 2026 16:05:39 +0000 ROA not before: Thu 28 May 2026 16:00:39 +0000 ROA not after: Thu 27 May 2027 16:05:39 +0000 asID: 58541 IP address blocks: 140.249.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:71:cf:c8:30:06:a5:e9:45:d7:f8:8b:91:5f:b3:11:24:d3:36:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 28 16:00:39 2026 GMT Not After : May 27 16:05:39 2027 GMT Subject: CN=D5D2B45BCA80E8FB4138EF16956B783A73ABC697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e5:75:dd:b4:b4:fe:62:c7:07:e9:e3:3e:6c: 8d:11:21:af:3d:e9:2f:de:9a:1e:c5:25:1a:86:66: f4:cb:b7:e4:50:f8:d5:66:48:9a:65:f4:68:93:40: e3:dd:cd:fe:b2:49:a5:94:74:91:17:a4:18:a1:1d: 89:25:4b:d8:ff:03:43:92:2d:7b:f5:05:69:c4:d5: 79:65:22:a1:11:64:cf:4b:87:de:53:a1:96:a4:fc: 5a:48:b1:03:52:41:4f:b8:b5:df:a0:8f:52:54:ff: db:e2:20:61:49:cd:94:e9:99:df:d1:02:34:ea:1b: 56:6e:0c:54:0d:a8:93:66:44:58:13:65:a8:73:19: b9:35:46:d9:0f:4e:32:4a:c6:45:9e:46:fe:5f:97: d8:54:a3:c4:09:0b:c7:d1:0f:7a:1a:76:a2:7e:53: 3f:fe:a8:bc:53:df:ac:85:8e:a5:a1:0f:b7:cb:e3: 13:b8:04:80:56:63:8a:7d:e2:42:af:eb:eb:16:d8: 92:ae:09:17:73:ae:de:f2:63:e9:0d:3f:ad:22:61: 0e:0b:08:ee:b7:7d:db:a6:98:dc:ca:09:c1:ed:eb: 8f:84:ce:02:60:5c:b4:a5:e3:6f:00:c9:7e:2e:3d: dc:dc:fb:95:d0:6e:36:91:ad:59:0a:8e:92:ad:ea: 47:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D2:B4:5B:CA:80:E8:FB:41:38:EF:16:95:6B:78:3A:73:AB:C6:97 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3137362e302f32302d3230203d3e203538353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.249.176.0/20 Signature Algorithm: sha256WithRSAEncryption aa:db:dc:69:1d:1c:28:57:78:2a:4e:02:3c:3a:f2:c3:c1:22: 95:d8:25:19:c3:c0:9a:eb:4d:80:b0:d9:d7:bc:8d:e2:0f:06: d5:13:7f:04:8a:b7:29:e6:92:9b:8c:84:ca:ee:fb:2d:8a:25: 21:59:fa:0b:1b:c5:81:74:5c:1e:28:a4:9e:f7:7b:11:fd:5e: 2f:f1:41:1a:c3:82:bd:bc:97:e8:f7:9e:85:86:ae:6f:3c:c3: 4a:8a:8c:2e:5b:ad:45:41:7a:ad:7d:2c:5c:70:59:e7:3d:54: 5d:c1:e4:c3:69:8e:3c:1d:79:13:a5:49:25:ae:d4:a8:a4:86: 18:54:0b:d9:c7:26:36:fa:3a:d4:ac:df:90:35:b4:5c:f2:65: 0a:e6:8c:1e:65:2f:49:97:b4:d1:c1:66:3b:33:fc:62:45:b9: b9:b9:d6:fb:4d:88:2f:2e:68:12:99:1e:02:fc:58:d3:df:bb: c6:af:fa:34:2b:53:b2:c5:95:b7:ee:50:8e:3e:00:99:c4:58: 8d:eb:7b:23:37:f3:e7:ba:f5:48:82:0a:e0:ad:41:46:5a:45: 53:6d:96:f4:62:5e:6b:fe:bf:53:1f:4c:c8:de:35:62:47:23: 93:32:0b:f7:4e:c9:e8:e9:ca:0d:17:47:04:51:3e:41:90:53: 99:ad:f2:6a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUaXHPyDAGpelF1/iLkV+zESTTNk8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyODE2MDAzOVoX DTI3MDUyNzE2MDUzOVowMzExMC8GA1UEAxMoRDVEMkI0NUJDQTgwRThGQjQxMzhF RjE2OTU2Qjc4M0E3M0FCQzY5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbldd20tP5ixwfp4z5sjREhrz3pL96aHsUlGoZm9Mu35FD41WZImmX0aJNA 493N/rJJpZR0kRekGKEdiSVL2P8DQ5Ite/UFacTVeWUioRFkz0uH3lOhlqT8Wkix A1JBT7i136CPUlT/2+IgYUnNlOmZ39ECNOobVm4MVA2ok2ZEWBNlqHMZuTVG2Q9O MkrGRZ5G/l+X2FSjxAkLx9EPehp2on5TP/6ovFPfrIWOpaEPt8vjE7gEgFZjin3i Qq/r6xbYkq4JF3Ou3vJj6Q0/rSJhDgsI7rd926aY3MoJwe3rj4TOAmBctKXjbwDJ fi493Nz7ldBuNpGtWQqOkq3qRy8CAwEAAaOCAhcwggITMB0GA1UdDgQWBBTV0rRb yoDo+0E47xaVa3g6c6vGlzAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw MjkwNTk3NjgzNS8wLzMxMzQzMDJlMzIzNDM5MmUzMTM3MzYyZTMwMmYzMjMwMmQz MjMwMjAzZDNlMjAzNTM4MzUzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjPmwMA0GCSqGSIb3DQEB CwUAA4IBAQCq29xpHRwoV3gqTgI8OvLDwSKV2CUZw8Ca602AsNnXvI3iDwbVE38E ircp5pKbjITK7vstiiUhWfoLG8WBdFweKKSe93sR/V4v8UEaw4K9vJfo956Fhq5v PMNKiowuW61FQXqtfSxccFnnPVRdweTDaY48HXkTpUklrtSopIYYVAvZxyY2+jrU rN+QNbRc8mUK5oweZS9Jl7TRwWY7M/xiRbm5udb7TYgvLmgSmR4C/FjT37vGr/o0 K1OyxZW37lCOPgCZxFiN63sjN/PnuvVIggrgrUFGWkVTbZb0Yl5r/r9TH0zI3jVi RyOTMgv3Tsno6coNF0cEUT5BkFOZrfJq -----END CERTIFICATE-----Generated at Sat May 30 02:40:38 2026 by rpki-client