$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32392e302f32342d3234203d3e20313336313935.roa File: 3134302e3234392e32392e302f32342d3234203d3e20313336313935.roa (raw, json) Hash identifier: ozB4nfhWNmnSiY2Lk2kJBSnf+agsq8NVX2ML/Qb5pm0= Subject key identifier: 38:8C:D8:B5:93:68:12:AE:1E:78:E2:EA:B5:AB:02:67:29:E8:36:C4 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 3BE2491C82C72C511B06B5E81CC6F9365F528089 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32392e302f32342d3234203d3e20313336313935.roa Signing time: Mon 25 May 2026 16:08:31 +0000 ROA not before: Mon 25 May 2026 16:03:31 +0000 ROA not after: Mon 24 May 2027 16:08:31 +0000 asID: 136195 IP address blocks: 140.249.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e2:49:1c:82:c7:2c:51:1b:06:b5:e8:1c:c6:f9:36:5f:52:80:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 25 16:03:31 2026 GMT Not After : May 24 16:08:31 2027 GMT Subject: CN=388CD8B5936812AE1E78E2EAB5AB026729E836C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5e:75:19:39:38:20:d4:fc:95:a6:da:c0:06: d3:cb:b3:9a:e9:87:a4:3c:df:6b:ed:62:2a:f3:4d: 14:69:2f:9d:06:a4:21:5f:a2:90:69:b1:4a:3e:72: a7:f4:56:d6:49:c2:f5:28:1d:ac:33:fc:38:2d:2b: 56:ba:cc:b1:e4:aa:c9:7b:ee:f7:54:cf:e1:00:e0: bf:ac:4f:7e:a9:ea:65:5b:5e:11:8b:be:fd:0d:1b: f9:f6:d4:9e:50:d5:ef:5c:fc:07:1b:03:bb:26:19: ce:8f:63:a1:d9:21:02:93:59:70:4f:88:74:19:26: c3:d3:cf:20:fb:42:08:b8:77:9c:cd:bc:a1:18:31: 00:0f:16:6e:e4:5c:47:01:91:17:59:b6:0e:51:2f: db:af:c7:ac:80:f9:43:b4:e7:79:25:ff:74:d0:12: 4c:d2:6f:d0:c3:2c:e0:73:3f:1c:5f:bd:19:77:75: ad:e8:98:d3:b8:ff:bf:d1:c2:e1:95:b3:23:44:56: af:fb:bb:27:20:b6:9f:e5:e4:8f:fb:5f:33:89:dc: 47:a3:c5:c3:af:0a:37:db:91:50:ef:35:65:41:bf: 9a:a6:e9:a7:d9:d2:1d:99:c4:a1:4f:25:a8:a2:a4: fb:c6:29:24:74:f8:1d:f0:a7:f7:51:05:22:be:35: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8C:D8:B5:93:68:12:AE:1E:78:E2:EA:B5:AB:02:67:29:E8:36:C4 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e32392e302f32342d3234203d3e20313336313935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.249.29.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:c2:df:4f:9f:86:5d:31:c1:d5:10:df:02:d9:d9:70:4d:a0: a0:aa:f9:b8:24:68:4b:39:71:57:70:d8:63:6f:c0:7d:47:53: 7b:20:ec:e9:d2:8a:2d:4d:f8:b1:1f:89:7e:1e:31:cb:04:94: 90:dc:44:0a:6a:36:50:80:5a:af:54:a5:f2:8e:a9:fa:51:19: 66:11:c4:2f:c1:9b:90:71:4b:17:a5:60:72:da:c9:3a:63:f8: 0b:8b:50:f5:04:da:b0:49:0e:fb:c2:40:67:1a:b6:48:f0:ee: 67:64:df:bb:56:30:4f:71:0a:3e:82:97:46:bf:58:ff:2b:f9: ae:d9:f2:fd:6a:43:86:eb:a3:63:48:63:69:46:5e:e3:33:32: 31:eb:09:7e:b9:b3:00:2a:1f:d6:5f:3f:3d:d1:e2:a4:6d:f8: cf:16:ce:d3:b6:62:a9:ee:5c:d5:6d:16:d1:7d:42:e0:1e:8e: 76:fb:d9:57:d3:70:03:55:b3:8b:67:0d:28:f8:52:45:bb:4e: d5:6a:bb:1b:7f:ec:7c:be:63:4d:0d:56:29:77:28:d9:6b:f5: 28:bc:48:12:af:c3:f4:7e:20:29:d2:01:22:8c:a0:1f:69:c5: d5:b1:47:a9:60:5f:3a:a3:51:37:d2:e3:0b:a7:b7:0d:16:e2: a2:82:0b:5c -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUO+JJHILHLFEbBrXoHMb5Nl9SgIkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyNTE2MDMzMVoX DTI3MDUyNDE2MDgzMVowMzExMC8GA1UEAxMoMzg4Q0Q4QjU5MzY4MTJBRTFFNzhF MkVBQjVBQjAyNjcyOUU4MzZDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJVedRk5OCDU/JWm2sAG08uzmumHpDzfa+1iKvNNFGkvnQakIV+ikGmxSj5y p/RW1knC9SgdrDP8OC0rVrrMseSqyXvu91TP4QDgv6xPfqnqZVteEYu+/Q0b+fbU nlDV71z8BxsDuyYZzo9jodkhApNZcE+IdBkmw9PPIPtCCLh3nM28oRgxAA8WbuRc RwGRF1m2DlEv26/HrID5Q7TneSX/dNASTNJv0MMs4HM/HF+9GXd1reiY07j/v9HC 4ZWzI0RWr/u7JyC2n+Xkj/tfM4ncR6PFw68KN9uRUO81ZUG/mqbpp9nSHZnEoU8l qKKk+8YpJHT4HfCn91EFIr41mZcCAwEAAaOCAhcwggITMB0GA1UdDgQWBBQ4jNi1 k2gSrh544uq1qwJnKeg2xDAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw MjkwNTk3NjgzNS8wLzMxMzQzMDJlMzIzNDM5MmUzMjM5MmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzEzMzM2MzEzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPkdMA0GCSqGSIb3DQEB CwUAA4IBAQB9wt9Pn4ZdMcHVEN8C2dlwTaCgqvm4JGhLOXFXcNhjb8B9R1N7IOzp 0ootTfixH4l+HjHLBJSQ3EQKajZQgFqvVKXyjqn6URlmEcQvwZuQcUsXpWBy2sk6 Y/gLi1D1BNqwSQ77wkBnGrZI8O5nZN+7VjBPcQo+gpdGv1j/K/mu2fL9akOG66Nj SGNpRl7jMzIx6wl+ubMAKh/WXz890eKkbfjPFs7TtmKp7lzVbRbRfULgHo52+9lX 03ADVbOLZw0o+FJFu07Varsbf+x8vmNNDVYpdyjZa/UovEgSr8P0fiAp0gEijKAf acXVsUepYF86o1E30uMLp7cNFuKiggtc -----END CERTIFICATE-----Generated at Sat May 30 02:41:25 2026 by rpki-client