$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32332e302f32342d3234203d3e203538353431.roa File: 3134302e3234392e32332e302f32342d3234203d3e203538353431.roa (raw, json) Hash identifier: tG9LXaqfsRRo3UF2xVvi7Wi1LH5JekdktghCqMU9Bsc= Subject key identifier: 09:1D:F8:1D:C2:6D:07:24:94:4F:12:24:5A:32:DC:37:46:D8:79:ED Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 31F2D43570CD71C3D56C34D41E1E80533D2FB4AA Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32332e302f32342d3234203d3e203538353431.roa Signing time: Mon 25 May 2026 16:08:31 +0000 ROA not before: Mon 25 May 2026 16:03:31 +0000 ROA not after: Mon 24 May 2027 16:08:31 +0000 asID: 58541 IP address blocks: 140.249.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f2:d4:35:70:cd:71:c3:d5:6c:34:d4:1e:1e:80:53:3d:2f:b4:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 25 16:03:31 2026 GMT Not After : May 24 16:08:31 2027 GMT Subject: CN=091DF81DC26D0724944F12245A32DC3746D879ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:46:23:d6:20:a9:ad:78:c9:f6:29:57:1f:01: c4:01:55:f3:66:25:34:54:fb:11:b7:82:4f:4e:27: d4:8b:7e:3c:b2:9c:87:a6:f9:6a:bb:2e:7f:7b:64: 49:53:46:39:31:3b:fb:02:b3:b4:3c:91:0f:24:9f: af:3f:27:1f:7b:6e:7a:70:e8:12:1c:40:6c:0f:a7: 98:0e:15:68:08:45:fd:57:50:6d:fb:e2:02:8f:9a: 67:f9:bb:68:a9:95:d3:04:a1:19:65:bf:7f:a3:ac: 20:5f:cf:1f:3f:1d:28:98:d1:c4:e1:56:81:eb:6d: a8:fe:5e:42:5c:89:d1:1b:5c:f7:40:9b:31:0d:d1: 86:1c:e0:77:bc:67:99:5a:d7:64:17:6c:da:78:8c: 98:05:d8:7b:37:30:15:b1:db:df:45:62:db:b3:97: 84:cd:9c:08:3f:ce:9c:49:58:0d:e8:f0:b9:f8:5c: 67:f3:52:7a:59:c0:e1:3e:77:68:3b:5a:17:14:b6: ab:97:4e:ab:79:ea:07:df:3a:ac:30:42:df:77:69: 7b:be:3a:4e:39:c4:d3:f7:fc:57:3e:f3:b1:d8:ea: 05:e4:b9:cc:c8:d6:ee:4c:a2:b7:54:86:c5:7e:7a: ae:ad:2e:31:da:7f:08:05:c5:5e:38:99:e2:a4:ff: a7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1D:F8:1D:C2:6D:07:24:94:4F:12:24:5A:32:DC:37:46:D8:79:ED X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32332e302f32342d3234203d3e203538353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.249.23.0/24 Signature Algorithm: sha256WithRSAEncryption 93:4f:7c:8f:56:7d:b4:d1:16:29:1d:dc:6a:11:f0:c5:82:a5: e3:42:bb:1e:00:f2:94:b9:af:5b:8e:44:ac:55:66:fb:fc:07: a9:54:5d:13:18:95:12:a6:06:81:90:ba:0a:69:28:8e:34:07: 0b:db:b9:73:67:7f:9a:74:bd:22:65:16:7d:16:38:1d:25:66: be:f1:94:e2:15:36:59:1c:a6:94:7a:5e:92:7b:5a:0c:22:d4: bc:bb:da:f0:04:b0:8b:c4:4c:af:d0:de:67:57:08:93:75:ed: bd:b5:14:3d:c2:e1:a9:90:3e:94:d5:e7:78:5e:b4:f7:87:bb: 0c:77:de:08:2e:ef:62:4c:36:07:f5:c3:60:ff:27:55:b0:a6: a7:09:14:90:fb:70:23:76:3f:71:c4:db:e8:be:d2:02:dc:c4: 4c:a2:2e:d7:e7:f2:2b:b0:35:3d:52:9f:63:ee:97:75:60:d0: 60:34:0d:12:e7:00:c8:c9:20:e7:60:0c:24:da:75:d1:23:36: 91:30:61:a2:f0:fb:6f:63:05:ca:f2:d8:08:5d:c8:c1:e6:86: 0b:ca:af:e5:7a:fa:9c:65:56:d0:db:74:92:71:24:a7:8f:cc: 1e:32:94:30:00:b3:37:7a:fb:e5:f5:c9:74:6b:83:74:ee:3c: 4f:c7:6a:f2 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUMfLUNXDNccPVbDTUHh6AUz0vtKowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyNTE2MDMzMVoX DTI3MDUyNDE2MDgzMVowMzExMC8GA1UEAxMoMDkxREY4MURDMjZEMDcyNDk0NEYx MjI0NUEzMkRDMzc0NkQ4NzlFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJJGI9Ygqa14yfYpVx8BxAFV82YlNFT7EbeCT04n1It+PLKch6b5arsuf3tk SVNGOTE7+wKztDyRDySfrz8nH3tuenDoEhxAbA+nmA4VaAhF/VdQbfviAo+aZ/m7 aKmV0wShGWW/f6OsIF/PHz8dKJjRxOFWgettqP5eQlyJ0Rtc90CbMQ3Rhhzgd7xn mVrXZBds2niMmAXYezcwFbHb30Vi27OXhM2cCD/OnElYDejwufhcZ/NSelnA4T53 aDtaFxS2q5dOq3nqB986rDBC33dpe746TjnE0/f8Vz7zsdjqBeS5zMjW7kyit1SG xX56rq0uMdp/CAXFXjiZ4qT/p2kCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBQJHfgd wm0HJJRPEiRaMtw3Rth57TAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEF BQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAy OTA1OTc2ODM1LzAvMzEzNDMwMmUzMjM0MzkyZTMyMzMyZTMwMmYzMjM0MmQzMjM0 MjAzZDNlMjAzNTM4MzUzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPkXMA0GCSqGSIb3DQEBCwUA A4IBAQCTT3yPVn200RYpHdxqEfDFgqXjQrseAPKUua9bjkSsVWb7/AepVF0TGJUS pgaBkLoKaSiONAcL27lzZ3+adL0iZRZ9FjgdJWa+8ZTiFTZZHKaUel6Se1oMItS8 u9rwBLCLxEyv0N5nVwiTde29tRQ9wuGpkD6U1ed4XrT3h7sMd94ILu9iTDYH9cNg /ydVsKanCRSQ+3Ajdj9xxNvovtIC3MRMoi7X5/IrsDU9Up9j7pd1YNBgNA0S5wDI ySDnYAwk2nXRIzaRMGGi8PtvYwXK8tgIXcjB5oYLyq/levqcZVbQ23SScSSnj8we MpQwALM3evvl9cl0a4N07jxPx2ry -----END CERTIFICATE-----Generated at Sat May 30 02:40:51 2026 by rpki-client