$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32312e302f32342d3234203d3e203538353431.roa File: 3134302e3234392e32312e302f32342d3234203d3e203538353431.roa (raw, json) Hash identifier: 8xMqVFmwCEkm4p6Vx3ZJakAc2E7jT5Y92YYjxwXOJHo= Subject key identifier: 68:D1:83:44:CB:7E:ED:9A:0F:81:0B:B4:A4:16:AF:59:49:34:C0:17 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 64DFD446A655A3333DD358E026573CB86B06F8E7 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32312e302f32342d3234203d3e203538353431.roa Signing time: Mon 25 May 2026 16:08:31 +0000 ROA not before: Mon 25 May 2026 16:03:31 +0000 ROA not after: Mon 24 May 2027 16:08:31 +0000 asID: 58541 IP address blocks: 140.249.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:df:d4:46:a6:55:a3:33:3d:d3:58:e0:26:57:3c:b8:6b:06:f8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 25 16:03:31 2026 GMT Not After : May 24 16:08:31 2027 GMT Subject: CN=68D18344CB7EED9A0F810BB4A416AF594934C017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:2b:19:3d:c1:74:09:b6:b0:3a:a8:88:3e: eb:34:8c:14:fc:08:b7:5a:a1:88:c1:3e:74:f5:aa: ac:97:e4:fd:ad:d4:6e:d2:44:ec:9e:9d:0c:c6:1f: 1c:fa:11:12:51:96:cd:b6:18:e9:59:1d:a6:26:d0: 0b:51:14:59:45:ae:6a:b1:29:bd:4b:5d:5c:bd:f0: ec:78:e0:55:f7:e7:d1:93:d6:44:08:a5:bf:1a:92: e1:7b:fe:28:d0:67:93:b1:56:74:76:55:cd:43:1e: ca:99:03:7d:f8:59:5b:11:a8:0d:40:0b:53:00:03: 4a:7b:5a:c1:f4:6e:3f:3c:a6:8b:56:2b:c2:32:a4: 8c:27:2a:da:07:b1:e6:cc:56:85:d3:51:81:0e:5c: 10:69:4f:3b:70:d9:ff:36:9f:da:7d:e1:96:cb:18: 83:f6:9d:00:b4:f3:ed:e0:d8:c0:21:50:41:57:3a: 4c:9c:49:f7:13:ab:4b:85:92:3e:40:23:de:d7:2c: b7:dc:f0:72:07:63:a8:15:ac:c0:b4:c3:45:5a:2f: 4c:89:bd:d8:c2:ba:70:38:0c:23:18:a1:98:78:68: f1:dd:f9:cb:c4:51:2d:ae:ce:cf:74:9f:90:fb:ea: 80:9b:ae:12:52:2a:71:fc:71:22:ac:5b:d3:ed:fe: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D1:83:44:CB:7E:ED:9A:0F:81:0B:B4:A4:16:AF:59:49:34:C0:17 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32312e302f32342d3234203d3e203538353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.249.21.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:54:10:88:5f:6e:cc:18:0c:9b:e3:e6:9e:bd:4c:81:72:1d: e1:10:f8:77:b0:79:5a:63:a8:cf:33:19:a1:93:d1:bd:60:8d: 51:91:3e:6e:95:7a:e2:fc:c4:a9:39:32:dd:ac:46:c4:3d:1f: 6b:85:f5:34:93:1a:84:b6:cf:49:07:37:2b:74:27:64:6c:7d: df:af:54:49:98:09:eb:24:46:79:b1:d0:7a:50:e3:cd:11:42: cc:b5:77:63:0b:24:09:10:02:ca:f4:bf:fe:b5:7e:27:49:47: 0e:22:c1:ee:d5:78:75:42:7f:7a:9c:d5:e0:2d:1e:d9:9d:c9: ca:2e:65:70:b8:c2:1f:69:57:7e:28:50:2e:c8:35:f0:fe:9a: d2:00:d3:b3:4e:36:54:ec:fe:9d:66:bd:45:64:db:8e:f8:13: 28:1d:65:0c:3a:e0:03:e6:59:55:e3:82:55:e1:cc:85:27:94: 6e:1d:8a:ae:8c:3e:4f:6a:7a:42:b9:f5:c7:c2:06:0c:5d:1d: cf:72:0a:10:78:6d:74:69:4d:30:12:5e:99:ed:7b:03:4d:55: 25:da:40:2c:00:d6:16:86:4d:3d:ca:41:c9:e9:ed:dd:5d:5e: 9f:62:27:64:4f:73:9e:46:48:56:7c:46:d0:3b:53:43:18:03: 4c:9f:88:1d -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUZN/URqZVozM901jgJlc8uGsG+OcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyNTE2MDMzMVoX DTI3MDUyNDE2MDgzMVowMzExMC8GA1UEAxMoNjhEMTgzNDRDQjdFRUQ5QTBGODEw QkI0QTQxNkFGNTk0OTM0QzAxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbdKxk9wXQJtrA6qIg+6zSMFPwIt1qhiME+dPWqrJfk/a3UbtJE7J6dDMYf HPoRElGWzbYY6VkdpibQC1EUWUWuarEpvUtdXL3w7HjgVffn0ZPWRAilvxqS4Xv+ KNBnk7FWdHZVzUMeypkDffhZWxGoDUALUwADSntawfRuPzymi1YrwjKkjCcq2gex 5sxWhdNRgQ5cEGlPO3DZ/zaf2n3hlssYg/adALTz7eDYwCFQQVc6TJxJ9xOrS4WS PkAj3tcst9zwcgdjqBWswLTDRVovTIm92MK6cDgMIxihmHho8d35y8RRLa7Oz3Sf kPvqgJuuElIqcfxxIqxb0+3+mjsCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBRo0YNE y37tmg+BC7SkFq9ZSTTAFzAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEF BQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAy OTA1OTc2ODM1LzAvMzEzNDMwMmUzMjM0MzkyZTMyMzEyZTMwMmYzMjM0MmQzMjM0 MjAzZDNlMjAzNTM4MzUzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPkVMA0GCSqGSIb3DQEBCwUA A4IBAQCMVBCIX27MGAyb4+aevUyBch3hEPh3sHlaY6jPMxmhk9G9YI1RkT5ulXri /MSpOTLdrEbEPR9rhfU0kxqEts9JBzcrdCdkbH3fr1RJmAnrJEZ5sdB6UOPNEULM tXdjCyQJEALK9L/+tX4nSUcOIsHu1Xh1Qn96nNXgLR7ZncnKLmVwuMIfaVd+KFAu yDXw/prSANOzTjZU7P6dZr1FZNuO+BMoHWUMOuAD5llV44JV4cyFJ5RuHYqujD5P anpCufXHwgYMXR3PcgoQeG10aU0wEl6Z7XsDTVUl2kAsANYWhk09ykHJ6e3dXV6f YidkT3OeRkhWfEbQO1NDGANMn4gd -----END CERTIFICATE-----Generated at Sat May 30 02:40:38 2026 by rpki-client