$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3232342e302f32302d3230203d3e20313336313935.roa File: 3134302e3234392e3232342e302f32302d3230203d3e20313336313935.roa (raw, json) Hash identifier: u3/KXN5YhB2LfF0ctaeNhr+fEVusq/35rPk73g43IGo= Subject key identifier: 2D:01:38:A2:63:31:59:2D:78:18:47:01:22:1E:61:FA:0A:6E:A6:4A Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 0CD68F2CC9B5A77BFDC9D9A3621415A37045B66F Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3232342e302f32302d3230203d3e20313336313935.roa Signing time: Thu 28 May 2026 16:07:18 +0000 ROA not before: Thu 28 May 2026 16:02:18 +0000 ROA not after: Thu 27 May 2027 16:07:18 +0000 asID: 136195 IP address blocks: 140.249.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d6:8f:2c:c9:b5:a7:7b:fd:c9:d9:a3:62:14:15:a3:70:45:b6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 28 16:02:18 2026 GMT Not After : May 27 16:07:18 2027 GMT Subject: CN=2D0138A26331592D78184701221E61FA0A6EA64A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:68:af:3f:15:4b:81:4b:1b:80:40:5d:ca:03: 1f:57:f8:80:17:d7:2c:69:13:58:22:60:5c:bb:d3: f4:b1:d4:e3:0f:9b:f1:ff:60:a5:02:8a:b4:2e:d3: 59:bd:bf:98:e6:cc:12:ad:2f:e0:61:a8:31:d8:2e: 54:11:36:38:6a:09:06:3f:48:30:04:f1:51:55:53: 67:54:d9:ac:39:83:9c:61:b5:36:c2:26:b6:3c:42: 7b:78:91:71:7f:f4:e1:29:91:de:b1:46:81:f6:ad: e7:f9:ef:b9:23:36:6e:a3:5c:b3:51:6c:a6:66:14: f2:12:1c:ca:c6:b2:73:2d:df:28:81:66:40:ff:b4: 69:b9:59:db:74:9d:da:82:71:c8:fc:0f:3b:87:6e: fb:9c:9b:34:64:da:a6:97:24:e7:c2:f4:1f:57:54: 5b:30:a2:3f:2d:e8:04:ef:f2:51:37:73:95:c1:a9: c5:c6:3f:8f:4b:28:54:d9:36:76:cf:fc:0a:9a:8b: e8:d2:63:55:8f:70:5e:f0:75:9e:4c:58:ce:99:5a: f8:69:8b:f5:48:16:eb:c7:b2:99:3a:6d:a1:5d:ad: 87:72:67:d7:6d:6d:61:fd:e4:3f:f7:19:f8:33:4f: 4a:8e:c8:78:5a:ce:d0:e2:97:0f:90:4b:49:85:35: 20:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:01:38:A2:63:31:59:2D:78:18:47:01:22:1E:61:FA:0A:6E:A6:4A X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e3232342e302f32302d3230203d3e20313336313935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.249.224.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:e8:44:0c:73:67:fc:a0:63:5a:8b:0f:f1:a4:e2:55:4d:3d: 45:55:a0:70:3f:5b:e2:08:c4:a2:9b:31:53:91:f9:d6:e7:f5: a5:e6:58:f4:69:cb:55:97:d9:13:a0:3e:ca:0b:69:da:b7:64: 68:bc:54:44:fd:db:e2:36:d2:ef:05:89:65:81:ca:dd:e0:f8: 33:e3:84:db:70:ca:0e:db:d5:91:6b:34:a3:26:dc:db:17:d4: b1:b8:dd:47:17:e1:69:93:7f:97:6a:6e:67:55:9c:f7:e6:80: 6e:0e:0f:ed:5e:79:ca:3b:78:55:d9:f3:56:19:e7:a4:2d:22: dc:cb:f6:1d:e2:5b:68:de:f8:db:3e:f9:b6:bd:dd:76:90:38: 14:5b:a4:9b:32:2f:de:9d:78:a8:e0:22:91:21:22:0c:87:1f: dc:08:92:23:20:55:40:94:3d:24:00:cf:62:d3:b6:fd:48:19: ee:5e:3f:a7:f2:71:bf:ca:9a:32:28:5c:2b:df:af:27:e0:e0: c1:03:9e:8a:3e:b3:48:2e:a8:05:cb:18:23:cb:79:ad:ee:81: 3b:19:4c:8b:cb:9f:37:e5:33:e5:4c:f5:6e:9f:58:a3:ab:ad: 29:af:19:ad:76:e2:bb:5b:b8:a9:a0:6d:1f:33:13:63:68:91: b0:82:d5:bb -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUDNaPLMm1p3v9ydmjYhQVo3BFtm8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyODE2MDIxOFoX DTI3MDUyNzE2MDcxOFowMzExMC8GA1UEAxMoMkQwMTM4QTI2MzMxNTkyRDc4MTg0 NzAxMjIxRTYxRkEwQTZFQTY0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANVorz8VS4FLG4BAXcoDH1f4gBfXLGkTWCJgXLvT9LHU4w+b8f9gpQKKtC7T Wb2/mObMEq0v4GGoMdguVBE2OGoJBj9IMATxUVVTZ1TZrDmDnGG1NsImtjxCe3iR cX/04SmR3rFGgfat5/nvuSM2bqNcs1FspmYU8hIcysaycy3fKIFmQP+0ablZ23Sd 2oJxyPwPO4du+5ybNGTappck58L0H1dUWzCiPy3oBO/yUTdzlcGpxcY/j0soVNk2 ds/8CpqL6NJjVY9wXvB1nkxYzpla+GmL9UgW68eymTptoV2th3Jn121tYf3kP/cZ +DNPSo7IeFrO0OKXD5BLSYU1IGMCAwEAAaOCAhowggIWMB0GA1UdDgQWBBQtATii YzFZLXgYRwEiHmH6Cm6mSjAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsG AQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0 MDI5MDU5NzY4MzUvMC8zMTM0MzAyZTMyMzQzOTJlMzIzMjM0MmUzMDJmMzIzMDJk MzIzMDIwM2QzZTIwMzEzMzM2MzEzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjPngMA0GCSqGSIb3 DQEBCwUAA4IBAQAM6EQMc2f8oGNaiw/xpOJVTT1FVaBwP1viCMSimzFTkfnW5/Wl 5lj0actVl9kToD7KC2nat2RovFRE/dviNtLvBYllgcrd4Pgz44TbcMoO29WRazSj JtzbF9SxuN1HF+Fpk3+Xam5nVZz35oBuDg/tXnnKO3hV2fNWGeekLSLcy/Yd4lto 3vjbPvm2vd12kDgUW6SbMi/enXio4CKRISIMhx/cCJIjIFVAlD0kAM9i07b9SBnu Xj+n8nG/ypoyKFwr368n4ODBA56KPrNILqgFyxgjy3mt7oE7GUyLy5835TPlTPVu n1ijq60prxmtduK7W7ipoG0fMxNjaJGwgtW7 -----END CERTIFICATE-----Generated at Sat May 30 02:40:07 2026 by rpki-client