$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32382e302f32342d3234203d3e20313336313935.roa File: 3134302e3234392e32382e302f32342d3234203d3e20313336313935.roa (raw, json) Hash identifier: khkEyZXmfJwsUj7jUWh6/z2Ia0cDvIv/TanKnVEbJyY= Subject key identifier: 13:DB:26:25:8B:76:33:35:CC:F4:D3:9D:EC:AB:58:2E:92:CD:B1:4F Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 687249AF4FB70B5D0AA40A51E3B2E32B824EB377 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32382e302f32342d3234203d3e20313336313935.roa Signing time: Mon 25 May 2026 16:08:31 +0000 ROA not before: Mon 25 May 2026 16:03:31 +0000 ROA not after: Mon 24 May 2027 16:08:31 +0000 asID: 136195 IP address blocks: 140.249.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:72:49:af:4f:b7:0b:5d:0a:a4:0a:51:e3:b2:e3:2b:82:4e:b3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 25 16:03:31 2026 GMT Not After : May 24 16:08:31 2027 GMT Subject: CN=13DB26258B763335CCF4D39DECAB582E92CDB14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:ea:cf:ce:1f:3a:b7:52:76:ea:98:a3:e6: 3a:d1:49:76:26:bd:31:2e:08:47:fe:e9:80:d0:a3: 1f:b3:44:85:60:47:1b:fc:19:f2:d9:15:79:2e:6b: 65:89:ca:2e:df:65:f3:fc:13:70:39:2d:0c:40:cd: 8c:2c:e6:77:c9:f3:8d:7d:b5:f0:d3:27:c0:4e:84: 45:3f:d4:23:33:d2:7d:a9:0d:f9:93:2a:6f:71:12: 38:80:63:f8:f0:ac:eb:1e:0f:b7:91:f9:99:82:64: 23:85:d5:86:1a:94:1b:af:f6:a5:2d:60:62:ea:0e: 3e:92:73:94:c3:1d:96:fd:33:43:09:c1:22:37:43: 9d:f9:05:8e:7e:24:b1:70:77:24:45:d0:12:26:1a: c3:4b:72:a7:78:39:70:0e:1f:1b:86:3d:4f:fc:86: e6:6d:bc:ba:bf:3a:d6:ca:e5:2a:fa:25:f3:af:d2: c5:3a:9f:96:2d:76:cd:b6:42:16:5c:ca:48:de:f5: 2e:9d:ce:ca:b9:1a:3a:9e:21:41:fe:02:c2:5d:79: 09:d4:a3:bf:56:73:b8:8d:bf:6a:77:00:3b:50:c4: 3c:ce:1f:9e:52:d4:78:5f:87:8e:7a:c5:36:ff:be: 9a:34:b3:c1:05:7f:62:9f:89:6c:68:a3:4b:65:e3: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DB:26:25:8B:76:33:35:CC:F4:D3:9D:EC:AB:58:2E:92:CD:B1:4F X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32382e302f32342d3234203d3e20313336313935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.249.28.0/24 Signature Algorithm: sha256WithRSAEncryption 85:ec:44:79:cc:a9:0a:38:71:ee:87:fd:ee:3d:25:da:62:9b: 9d:7c:bb:0a:a1:a3:41:ac:db:23:48:89:5b:ec:3a:8a:66:be: 91:c8:7a:6c:65:9e:5c:2e:5c:ea:fe:a4:64:a8:fe:e4:a2:46: 84:60:79:42:49:2b:07:b6:30:cd:04:70:e5:9f:d5:23:19:bc: 7a:00:88:f5:7a:f1:e0:94:c0:9a:c6:26:6c:1c:bc:20:0e:78: ad:5b:4e:c1:f6:83:f2:0d:ae:6d:87:b6:8d:d6:e0:a0:51:75: 3f:51:f8:e4:32:39:cf:85:6b:d1:5d:ff:da:5c:7b:89:eb:56: a9:68:8a:8d:4b:e8:11:8e:09:49:34:82:c1:16:d8:6b:19:89: 50:54:38:1e:1f:92:c6:68:99:a5:9b:a0:e6:5a:47:e5:1b:bf: c1:5c:2c:29:9f:b9:b2:e1:2f:e6:10:ca:f8:db:59:e3:ce:9d: 51:23:49:d0:ba:d4:36:67:de:32:a7:b7:56:df:00:01:4f:d1: 34:07:52:b3:d5:e5:24:9a:0d:df:47:41:7a:41:3d:38:a5:56: ef:2d:f3:4f:2d:6c:8c:5a:e4:0a:82:3d:f2:ca:04:f4:4e:7e: 6e:ac:b0:68:3e:c5:01:d4:fd:87:e9:2e:ad:43:a0:bc:87:c1: 9f:31:32:b6 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUaHJJr0+3C10KpApR47LjK4JOs3cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyNTE2MDMzMVoX DTI3MDUyNDE2MDgzMVowMzExMC8GA1UEAxMoMTNEQjI2MjU4Qjc2MzMzNUNDRjRE MzlERUNBQjU4MkU5MkNEQjE0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMD06s/OHzq3UnbqmKPmOtFJdia9MS4IR/7pgNCjH7NEhWBHG/wZ8tkVeS5r ZYnKLt9l8/wTcDktDEDNjCzmd8nzjX218NMnwE6ERT/UIzPSfakN+ZMqb3ESOIBj +PCs6x4Pt5H5mYJkI4XVhhqUG6/2pS1gYuoOPpJzlMMdlv0zQwnBIjdDnfkFjn4k sXB3JEXQEiYaw0typ3g5cA4fG4Y9T/yG5m28ur861srlKvol86/SxTqfli12zbZC FlzKSN71Lp3OyrkaOp4hQf4Cwl15CdSjv1ZzuI2/ancAO1DEPM4fnlLUeF+HjnrF Nv++mjSzwQV/Yp+JbGijS2XjuckCAwEAAaOCAhcwggITMB0GA1UdDgQWBBQT2yYl i3YzNcz0053sq1guks2xTzAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw MjkwNTk3NjgzNS8wLzMxMzQzMDJlMzIzNDM5MmUzMjM4MmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzEzMzM2MzEzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPkcMA0GCSqGSIb3DQEB CwUAA4IBAQCF7ER5zKkKOHHuh/3uPSXaYpudfLsKoaNBrNsjSIlb7DqKZr6RyHps ZZ5cLlzq/qRkqP7kokaEYHlCSSsHtjDNBHDln9UjGbx6AIj1evHglMCaxiZsHLwg DnitW07B9oPyDa5th7aN1uCgUXU/UfjkMjnPhWvRXf/aXHuJ61apaIqNS+gRjglJ NILBFthrGYlQVDgeH5LGaJmlm6DmWkflG7/BXCwpn7my4S/mEMr421njzp1RI0nQ utQ2Z94yp7dW3wABT9E0B1Kz1eUkmg3fR0F6QT04pVbvLfNPLWyMWuQKgj3yygT0 Tn5urLBoPsUB1P2H6S6tQ6C8h8GfMTK2 -----END CERTIFICATE-----Generated at Sat May 30 02:41:25 2026 by rpki-client