$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3231362e302f32322d3232203d3e203538353431.roa File: 3134302e3234392e3231362e302f32322d3232203d3e203538353431.roa (raw, json) Hash identifier: NwQLYKXSI1JQ8R2tzQ8jn4U2TT6JxJRxv9EX5cRPrug= Subject key identifier: FE:82:5C:98:70:8A:2A:A8:1A:70:24:10:A9:1C:A0:BC:A9:DC:50:B1 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 1BC83E0877EED4F9E7B531924CD9367E4258C2AE Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3231362e302f32322d3232203d3e203538353431.roa Signing time: Thu 28 May 2026 16:07:18 +0000 ROA not before: Thu 28 May 2026 16:02:18 +0000 ROA not after: Thu 27 May 2027 16:07:18 +0000 asID: 58541 IP address blocks: 140.249.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c8:3e:08:77:ee:d4:f9:e7:b5:31:92:4c:d9:36:7e:42:58:c2:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 28 16:02:18 2026 GMT Not After : May 27 16:07:18 2027 GMT Subject: CN=FE825C98708A2AA81A702410A91CA0BCA9DC50B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:70:08:0b:02:46:28:f5:a2:71:1c:14:6e: fb:db:c3:cd:06:18:68:a2:a4:44:93:97:a6:02:af: 29:87:8f:64:e9:93:db:95:77:59:68:cc:73:ad:fa: f7:d9:da:5d:48:29:45:75:70:07:72:6e:53:a2:1b: d2:63:b6:f9:b5:39:1d:7f:82:a8:3e:82:d1:d1:38: f3:2c:cb:a0:78:e4:0d:62:b5:b5:69:61:aa:55:4c: d7:ce:32:b9:54:c9:db:5d:12:0d:44:0b:42:e0:4e: cc:be:f1:e0:8d:6e:2e:01:99:92:04:86:be:59:0f: 34:5b:4f:2f:ec:ab:a9:34:0b:55:ce:8b:5a:fb:82: 7d:f6:74:f4:c1:f7:48:fa:25:0d:0f:e7:c9:83:b8: a3:e0:26:05:83:08:35:76:5c:3e:dd:57:60:63:d5: 7f:67:87:2e:f1:9a:8c:de:69:4b:08:1b:89:eb:49: c4:f0:49:f5:d4:6d:d7:63:89:21:5a:47:0d:79:57: 57:7e:59:eb:82:6c:bb:aa:e5:52:75:09:15:e4:03: f4:5b:e2:58:0e:0b:5d:f9:c0:7d:53:77:86:cb:8a: 71:b3:f3:41:49:68:9a:9b:39:1d:4d:0d:bb:e9:8d: 67:e8:fe:de:83:bb:12:13:f6:17:e4:39:39:6b:c6: 8b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:82:5C:98:70:8A:2A:A8:1A:70:24:10:A9:1C:A0:BC:A9:DC:50:B1 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3231362e302f32322d3232203d3e203538353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.249.216.0/22 Signature Algorithm: sha256WithRSAEncryption de:3e:1c:e9:55:b9:23:87:98:3f:a7:8f:7b:dd:af:5d:96:52: b7:56:65:55:e9:a8:13:83:7f:dc:0e:06:9b:cf:59:08:74:90: cc:67:ef:fd:3f:f4:75:b8:c9:e9:17:46:75:f3:73:18:af:91: 2a:f9:fb:c4:4e:f1:b6:58:02:3e:ba:ed:f8:3f:62:49:40:bd: 29:09:bb:91:7b:13:51:f7:65:16:b6:cc:b3:c2:ae:1b:9c:25: d2:82:79:ab:6c:e0:99:6a:e2:94:9f:b5:73:0e:71:60:47:44: db:41:f2:c3:64:e5:17:d1:93:3f:d2:41:90:5d:02:1c:69:73: dc:c0:bf:86:22:5a:36:50:fa:5f:8d:43:54:cc:ab:86:b8:fe: 44:f8:32:41:01:e1:c6:0c:20:d1:3f:15:1a:3b:1f:b1:ef:04: 01:2c:3c:f2:5a:63:b4:48:d5:c9:db:e5:97:ab:9a:59:7b:cd: ba:64:ef:98:66:57:fe:3c:9d:35:4e:ed:ae:da:ef:35:fc:e6: 89:8c:79:c6:7f:1a:7e:47:9c:d2:54:ed:4d:30:3b:58:ab:09: f0:5d:4d:a4:a1:e8:8e:22:83:17:62:2c:36:a6:6f:9e:04:3f: fd:39:39:ac:fd:6f:fe:80:57:fb:64:42:f8:6c:4a:e5:dd:06: 79:20:2a:38 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUG8g+CHfu1PnntTGSTNk2fkJYwq4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyODE2MDIxOFoX DTI3MDUyNzE2MDcxOFowMzExMC8GA1UEAxMoRkU4MjVDOTg3MDhBMkFBODFBNzAy NDEwQTkxQ0EwQkNBOURDNTBCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIocAgLAkYo9aJxHBRu+9vDzQYYaKKkRJOXpgKvKYePZOmT25V3WWjMc636 99naXUgpRXVwB3JuU6Ib0mO2+bU5HX+CqD6C0dE48yzLoHjkDWK1tWlhqlVM184y uVTJ210SDUQLQuBOzL7x4I1uLgGZkgSGvlkPNFtPL+yrqTQLVc6LWvuCffZ09MH3 SPolDQ/nyYO4o+AmBYMINXZcPt1XYGPVf2eHLvGajN5pSwgbietJxPBJ9dRt12OJ IVpHDXlXV35Z64Jsu6rlUnUJFeQD9FviWA4LXfnAfVN3hsuKcbPzQUlomps5HU0N u+mNZ+j+3oO7EhP2F+Q5OWvGi/cCAwEAAaOCAhcwggITMB0GA1UdDgQWBBT+glyY cIoqqBpwJBCpHKC8qdxQsTAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw MjkwNTk3NjgzNS8wLzMxMzQzMDJlMzIzNDM5MmUzMjMxMzYyZTMwMmYzMjMyMmQz MjMyMjAzZDNlMjAzNTM4MzUzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjPnYMA0GCSqGSIb3DQEB CwUAA4IBAQDePhzpVbkjh5g/p4973a9dllK3VmVV6agTg3/cDgabz1kIdJDMZ+/9 P/R1uMnpF0Z183MYr5Eq+fvETvG2WAI+uu34P2JJQL0pCbuRexNR92UWtsyzwq4b nCXSgnmrbOCZauKUn7VzDnFgR0TbQfLDZOUX0ZM/0kGQXQIcaXPcwL+GIlo2UPpf jUNUzKuGuP5E+DJBAeHGDCDRPxUaOx+x7wQBLDzyWmO0SNXJ2+WXq5pZe826ZO+Y Zlf+PJ01Tu2u2u81/OaJjHnGfxp+R5zSVO1NMDtYqwnwXU2koeiOIoMXYiw2pm+e BD/9OTms/W/+gFf7ZEL4bErl3QZ5ICo4 -----END CERTIFICATE-----Generated at Sat May 30 02:41:26 2026 by rpki-client