$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3139322e302f32312d3231203d3e203538353431.roa File: 3134302e3234392e3139322e302f32312d3231203d3e203538353431.roa (raw, json) Hash identifier: 5VaWKmDZTTDIAEHk1DSRL8/G1bwUaXQLaliBVpjBiSc= Subject key identifier: 8D:76:98:10:AD:22:0A:40:38:A4:D2:62:05:C3:C2:FA:AE:C5:09:75 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 7A0A06226C3C6676C10A97A27331932C1D361950 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3139322e302f32312d3231203d3e203538353431.roa Signing time: Thu 28 May 2026 16:07:18 +0000 ROA not before: Thu 28 May 2026 16:02:18 +0000 ROA not after: Thu 27 May 2027 16:07:18 +0000 asID: 58541 IP address blocks: 140.249.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0a:06:22:6c:3c:66:76:c1:0a:97:a2:73:31:93:2c:1d:36:19:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 28 16:02:18 2026 GMT Not After : May 27 16:07:18 2027 GMT Subject: CN=8D769810AD220A4038A4D26205C3C2FAAEC50975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:52:f5:22:89:52:5a:ab:f2:97:72:6b:b0: 16:b6:ac:39:56:24:1a:a1:7a:dc:87:8b:af:9d:e8: a0:e6:0b:fd:57:6f:b5:b0:31:15:7f:68:63:6a:05: 98:4b:19:f4:0e:b5:b1:3d:3c:af:0d:67:4f:3e:b2: 7a:34:11:16:f4:5b:d1:1f:03:cf:0e:89:f4:85:56: ca:af:c4:00:fa:5a:ab:87:00:b0:20:63:03:7c:48: 29:52:87:32:9a:63:04:da:2e:b3:42:37:ae:64:73: 7a:97:54:df:9a:eb:59:d0:b4:b3:08:17:2d:80:e0: ef:79:16:e2:97:22:3b:b6:30:34:0c:ad:fa:4c:7c: d5:ac:1c:ce:cf:f4:77:e2:1e:d9:32:61:fd:97:97: fb:8f:90:17:22:41:5c:f5:68:49:b3:e5:aa:dd:17: b4:66:94:3f:0b:c2:2b:93:7c:02:33:1a:2e:25:79: c8:30:82:2d:7f:50:c0:8e:ee:ee:00:65:03:e8:0f: 36:8b:5c:59:f8:7b:d8:5f:a3:50:96:5b:9d:17:80: d2:ab:8a:e8:22:cc:af:fb:df:10:ec:07:db:40:3f: e2:88:94:3e:d4:6d:b0:19:e1:f3:66:e6:a1:99:f7: 5a:94:c9:48:b9:a0:7f:56:96:2c:98:b6:e1:95:2c: 7d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:76:98:10:AD:22:0A:40:38:A4:D2:62:05:C3:C2:FA:AE:C5:09:75 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3139322e302f32312d3231203d3e203538353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.249.192.0/21 Signature Algorithm: sha256WithRSAEncryption 10:b7:bb:d2:9d:8e:62:9e:a1:d0:2b:32:de:ef:2a:cd:86:6c: 24:49:40:c0:89:e4:e3:2a:3f:f7:e7:a7:18:f4:02:c9:fb:7a: d5:93:e6:dd:a5:e3:e3:32:27:36:ad:57:fe:c0:63:0d:95:4d: 93:3c:0f:2f:39:ec:25:07:6e:4d:18:89:17:2c:90:16:6d:73: e0:da:7d:83:b4:3d:50:ee:c9:06:f4:d1:59:20:bf:1e:25:e4: 15:c9:fa:6d:f6:25:58:79:fa:bf:af:43:e2:85:e6:db:61:98: 27:6e:d4:f3:2e:76:55:c7:dc:e3:73:90:6d:25:6d:a4:98:d5: 94:5d:f2:d9:b8:26:4c:a9:c0:39:97:c9:a6:61:41:de:70:95: 42:41:22:df:f7:c8:f8:f0:a9:8e:20:58:35:4b:87:df:6a:82: 85:fd:d6:33:f9:19:19:e9:48:2a:e0:bf:1f:e5:74:2c:72:db: 90:51:53:ca:bc:f2:f7:86:51:23:83:60:cb:54:c0:16:48:40: 1d:16:5b:0b:12:d8:22:32:7e:c2:bc:e0:04:a6:b8:55:f0:e1: 80:bc:34:07:7a:f0:6f:5a:05:6d:b2:22:8c:be:13:76:3d:e9: a7:4c:6c:f0:13:da:6a:c1:ab:21:fc:02:13:2a:cc:40:8e:d9: 72:6a:93:a3 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUegoGImw8ZnbBCpeiczGTLB02GVAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyODE2MDIxOFoX DTI3MDUyNzE2MDcxOFowMzExMC8GA1UEAxMoOEQ3Njk4MTBBRDIyMEE0MDM4QTRE MjYyMDVDM0MyRkFBRUM1MDk3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKw+UvUiiVJaq/KXcmuwFrasOVYkGqF63IeLr53ooOYL/VdvtbAxFX9oY2oF mEsZ9A61sT08rw1nTz6yejQRFvRb0R8Dzw6J9IVWyq/EAPpaq4cAsCBjA3xIKVKH MppjBNous0I3rmRzepdU35rrWdC0swgXLYDg73kW4pciO7YwNAyt+kx81awczs/0 d+Ie2TJh/ZeX+4+QFyJBXPVoSbPlqt0XtGaUPwvCK5N8AjMaLiV5yDCCLX9QwI7u 7gBlA+gPNotcWfh72F+jUJZbnReA0quK6CLMr/vfEOwH20A/4oiUPtRtsBnh82bm oZn3WpTJSLmgf1aWLJi24ZUsfdMCAwEAAaOCAhcwggITMB0GA1UdDgQWBBSNdpgQ rSIKQDik0mIFw8L6rsUJdTAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw MjkwNTk3NjgzNS8wLzMxMzQzMDJlMzIzNDM5MmUzMTM5MzIyZTMwMmYzMjMxMmQz MjMxMjAzZDNlMjAzNTM4MzUzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjPnAMA0GCSqGSIb3DQEB CwUAA4IBAQAQt7vSnY5inqHQKzLe7yrNhmwkSUDAieTjKj/356cY9ALJ+3rVk+bd pePjMic2rVf+wGMNlU2TPA8vOewlB25NGIkXLJAWbXPg2n2DtD1Q7skG9NFZIL8e JeQVyfpt9iVYefq/r0PihebbYZgnbtTzLnZVx9zjc5BtJW2kmNWUXfLZuCZMqcA5 l8mmYUHecJVCQSLf98j48KmOIFg1S4ffaoKF/dYz+RkZ6Ugq4L8f5XQsctuQUVPK vPL3hlEjg2DLVMAWSEAdFlsLEtgiMn7CvOAEprhV8OGAvDQHevBvWgVtsiKMvhN2 PemnTGzwE9pqwash/AITKsxAjtlyapOj -----END CERTIFICATE-----Generated at Sat May 30 02:41:26 2026 by rpki-client