$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32302e302f32342d3234203d3e203538353431.roa File: 3134302e3234392e32302e302f32342d3234203d3e203538353431.roa (raw, json) Hash identifier: XQeV7GsQb1TB1C7TQJE7OJ6+QBAE52/BHMpKm0kNIpI= Subject key identifier: 22:95:42:CB:3A:EB:D1:85:C3:81:0B:B0:CC:21:E8:34:4E:51:96:50 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 7A815CA96BC7181C1F0867CD059A8A4050D6A3AD Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32302e302f32342d3234203d3e203538353431.roa Signing time: Mon 25 May 2026 16:08:31 +0000 ROA not before: Mon 25 May 2026 16:03:31 +0000 ROA not after: Mon 24 May 2027 16:08:31 +0000 asID: 58541 IP address blocks: 140.249.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:81:5c:a9:6b:c7:18:1c:1f:08:67:cd:05:9a:8a:40:50:d6:a3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 25 16:03:31 2026 GMT Not After : May 24 16:08:31 2027 GMT Subject: CN=229542CB3AEBD185C3810BB0CC21E8344E519650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:76:ef:a3:4e:a7:83:ae:ec:a4:2f:3d:25:34: cd:c7:70:fe:81:72:74:fa:63:75:5e:fa:57:13:b8: 7e:f8:b7:f7:18:d7:a2:7a:f8:9f:27:97:26:cf:3f: 7e:87:1e:71:da:22:48:f7:f8:21:01:3c:6f:19:3f: 8a:54:73:49:9a:a1:46:f8:eb:5b:4d:b7:ea:50:95: 09:cf:c9:49:6b:59:de:2b:65:f3:54:6d:da:94:d6: 53:51:4f:f8:f1:7c:47:21:7f:bd:25:cb:15:c6:73: 6c:9f:c2:be:27:c7:27:20:6f:ab:87:fb:ef:eb:c0: 7d:5c:f8:e8:ce:83:09:5d:35:0a:6d:24:a4:71:94: fb:e3:80:6f:58:76:a9:b8:fc:3a:3b:90:6b:1a:d5: 0b:ac:fd:a6:5b:12:7a:e6:88:4f:6e:20:80:93:2e: 54:35:95:95:8b:c0:e4:c7:90:af:a8:d6:e9:6e:d3: 9f:87:5f:b4:df:ee:a3:e9:79:6e:0e:ac:46:1e:73: 08:cf:66:4b:b0:8c:e6:f7:0d:44:0f:18:13:04:46: e5:d7:97:7d:f5:39:d1:8c:c4:79:7e:24:d6:03:27: 26:ba:b7:eb:38:85:27:6c:f3:98:41:64:01:f1:1c: 85:86:66:92:9d:5c:3c:9d:ca:16:48:49:b9:80:3c: 7b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:95:42:CB:3A:EB:D1:85:C3:81:0B:B0:CC:21:E8:34:4E:51:96:50 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32302e302f32342d3234203d3e203538353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.249.20.0/24 Signature Algorithm: sha256WithRSAEncryption 33:99:27:96:70:a3:60:01:2b:aa:c4:c7:59:cb:d3:ce:8d:b1: ff:f5:37:04:c4:a3:b2:9a:4c:fc:1b:c9:61:ba:00:b6:76:ca: 75:c8:27:c5:f8:6a:57:12:5c:9a:1c:12:50:3a:25:ac:bc:18: cf:d5:ea:2b:c7:d2:eb:8e:32:35:a0:12:ad:a2:4c:64:21:05: 55:77:95:90:4b:32:03:25:82:d0:40:ee:ce:e5:21:42:30:f3: e7:f6:5f:42:ad:3f:b1:84:57:4c:28:15:3a:02:05:c1:20:fd: 8f:45:2d:ae:b8:4b:e6:a1:04:f9:bf:86:ed:9d:d5:1d:4b:d9: 23:b2:dd:5e:e5:8c:16:cb:db:f3:1d:35:4b:3a:83:ca:53:38: 18:04:a2:d8:45:94:65:3f:97:ee:1d:e5:42:e8:ee:4a:cb:d3: 53:04:c1:81:47:24:32:17:fd:18:41:96:af:05:13:16:7b:6d: ce:e1:ce:3f:2e:b3:f1:d7:12:7a:cc:29:d7:ce:2f:d0:86:5c: f7:02:c7:ad:b7:c6:fc:6e:ed:80:55:48:16:d5:c9:55:02:50: 5d:32:06:95:d9:e7:33:5b:c6:a5:ee:e9:3f:40:be:50:84:ed: c1:82:1b:bb:2e:66:fc:d6:20:cc:eb:71:45:29:14:0b:40:e1: ef:4b:e0:db -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUeoFcqWvHGBwfCGfNBZqKQFDWo60wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyNTE2MDMzMVoX DTI3MDUyNDE2MDgzMVowMzExMC8GA1UEAxMoMjI5NTQyQ0IzQUVCRDE4NUMzODEw QkIwQ0MyMUU4MzQ0RTUxOTY1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKN276NOp4Ou7KQvPSU0zcdw/oFydPpjdV76VxO4fvi39xjXonr4nyeXJs8/ focecdoiSPf4IQE8bxk/ilRzSZqhRvjrW0236lCVCc/JSWtZ3itl81Rt2pTWU1FP +PF8RyF/vSXLFcZzbJ/CvifHJyBvq4f77+vAfVz46M6DCV01Cm0kpHGU++OAb1h2 qbj8OjuQaxrVC6z9plsSeuaIT24ggJMuVDWVlYvA5MeQr6jW6W7Tn4dftN/uo+l5 bg6sRh5zCM9mS7CM5vcNRA8YEwRG5deXffU50YzEeX4k1gMnJrq36ziFJ2zzmEFk AfEchYZmkp1cPJ3KFkhJuYA8e3cCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBQilULL OuvRhcOBC7DMIeg0TlGWUDAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEF BQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAy OTA1OTc2ODM1LzAvMzEzNDMwMmUzMjM0MzkyZTMyMzAyZTMwMmYzMjM0MmQzMjM0 MjAzZDNlMjAzNTM4MzUzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPkUMA0GCSqGSIb3DQEBCwUA A4IBAQAzmSeWcKNgASuqxMdZy9POjbH/9TcExKOymkz8G8lhugC2dsp1yCfF+GpX ElyaHBJQOiWsvBjP1eorx9LrjjI1oBKtokxkIQVVd5WQSzIDJYLQQO7O5SFCMPPn 9l9CrT+xhFdMKBU6AgXBIP2PRS2uuEvmoQT5v4btndUdS9kjst1e5YwWy9vzHTVL OoPKUzgYBKLYRZRlP5fuHeVC6O5Ky9NTBMGBRyQyF/0YQZavBRMWe23O4c4/LrPx 1xJ6zCnXzi/Qhlz3Asett8b8bu2AVUgW1clVAlBdMgaV2eczW8al7uk/QL5QhO3B ghu7Lmb81iDM63FFKRQLQOHvS+Db -----END CERTIFICATE-----Generated at Sat May 30 02:40:39 2026 by rpki-client