$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e332e302f32342d3234203d3e20313336313935.roa File: 3134302e3234392e332e302f32342d3234203d3e20313336313935.roa (raw, json) Hash identifier: iIuB+nV9WEsctPu1o9nF5Ijrk2idKAT8VxjYLhC21A0= Subject key identifier: E5:CA:E6:2B:62:76:25:E0:48:6C:EB:48:95:8F:9B:8F:84:26:BF:1C Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 2D36FCE48F047FB1EBFACFC29D25BF3989E2D18D Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e332e302f32342d3234203d3e20313336313935.roa Signing time: Thu 28 May 2026 16:07:19 +0000 ROA not before: Thu 28 May 2026 16:02:19 +0000 ROA not after: Thu 27 May 2027 16:07:19 +0000 asID: 136195 IP address blocks: 140.249.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:36:fc:e4:8f:04:7f:b1:eb:fa:cf:c2:9d:25:bf:39:89:e2:d1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 28 16:02:19 2026 GMT Not After : May 27 16:07:19 2027 GMT Subject: CN=E5CAE62B627625E0486CEB48958F9B8F8426BF1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2d:aa:be:5c:8b:13:89:c3:37:dd:2e:80:e5: 30:a3:a5:3d:e8:d3:e5:71:ac:fb:91:24:f1:ca:94: 3d:3c:bb:53:3e:8e:56:22:de:33:e3:b9:ad:d0:ee: ba:1d:4e:2a:79:06:e9:a9:8d:1e:d2:18:d5:a9:7d: 35:e3:4c:50:fb:94:19:7a:b6:75:ce:de:29:1f:43: e6:46:7b:40:9d:44:0a:4c:2e:10:96:1e:04:e4:72: 39:14:11:3b:9c:79:ed:e0:e7:78:13:0f:b0:3f:b3: 7b:94:47:4a:27:b7:4d:32:e4:59:95:b7:89:72:83: f7:ac:00:95:80:96:02:a1:fe:21:0c:2e:01:eb:9b: 12:e3:b7:98:5d:9c:71:7c:50:c8:67:1c:65:f2:a8: 41:0a:23:2d:b4:10:8c:95:cb:c6:fb:ba:54:dd:7e: c4:6d:6e:82:9f:b3:85:84:6d:88:de:96:1a:42:e6: 44:b2:80:2a:fc:f1:16:db:98:4a:1a:e2:74:e6:3c: 90:78:18:b1:db:fd:bf:cb:aa:93:50:4f:5a:ca:f5: 1c:bb:d2:05:70:9b:f5:21:2a:af:31:21:70:11:c2: ba:d0:a4:f2:9d:38:12:d7:14:ef:68:38:70:18:20: 32:57:a0:28:a5:88:fd:55:12:8a:70:73:37:96:e8: c0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CA:E6:2B:62:76:25:E0:48:6C:EB:48:95:8F:9B:8F:84:26:BF:1C X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e332e302f32342d3234203d3e20313336313935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.249.3.0/24 Signature Algorithm: sha256WithRSAEncryption c4:59:27:92:d8:17:c7:98:0a:d8:c8:9a:38:75:e0:82:64:f6: 4f:48:56:67:d0:6a:c3:13:2d:96:4e:b8:4c:62:20:8d:71:75: e1:db:fd:77:8f:68:90:06:07:42:e0:9b:dd:a5:14:df:02:50: be:53:6f:b1:41:4e:17:fa:93:b8:4d:7d:38:99:8d:d6:44:67: c0:9f:c7:32:6f:5a:24:28:d4:01:06:44:85:58:c7:52:08:ba: 90:ce:5d:aa:00:4d:14:58:c0:3b:02:41:07:25:6c:0d:7f:20: 04:a1:97:87:93:ac:62:63:9d:02:ae:6b:05:3f:51:da:e3:c6: f4:77:66:14:8c:6f:9d:a6:f2:15:85:f1:8c:c7:c7:3e:c3:98: 39:3e:f8:0a:c6:a1:38:55:75:fe:09:a6:e9:06:52:23:12:0a: fa:f7:83:54:f0:68:4a:10:12:80:91:d2:f3:76:7f:e7:3a:83: bc:51:ee:a7:84:b4:70:69:c7:5f:e0:1e:15:9e:fe:7d:4a:77: bc:fb:50:a3:b9:3c:d6:f8:a0:b7:29:f2:2a:be:df:00:71:b9: f9:9c:10:65:9a:d0:e9:0e:fe:d6:54:40:1b:46:8c:80:83:66: 1d:0b:9e:d2:a3:bd:c9:63:22:00:d8:f7:10:3f:8a:bc:b6:08: 33:58:00:fb -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIULTb85I8Ef7Hr+s/CnSW/OYni0Y0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyODE2MDIxOVoX DTI3MDUyNzE2MDcxOVowMzExMC8GA1UEAxMoRTVDQUU2MkI2Mjc2MjVFMDQ4NkNF QjQ4OTU4RjlCOEY4NDI2QkYxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJstqr5cixOJwzfdLoDlMKOlPejT5XGs+5Ek8cqUPTy7Uz6OViLeM+O5rdDu uh1OKnkG6amNHtIY1al9NeNMUPuUGXq2dc7eKR9D5kZ7QJ1ECkwuEJYeBORyORQR O5x57eDneBMPsD+ze5RHSie3TTLkWZW3iXKD96wAlYCWAqH+IQwuAeubEuO3mF2c cXxQyGccZfKoQQojLbQQjJXLxvu6VN1+xG1ugp+zhYRtiN6WGkLmRLKAKvzxFtuY ShridOY8kHgYsdv9v8uqk1BPWsr1HLvSBXCb9SEqrzEhcBHCutCk8p04EtcU72g4 cBggMlegKKWI/VUSinBzN5bowAkCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBTlyuYr YnYl4Ehs60iVj5uPhCa/HDAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEF BQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAy OTA1OTc2ODM1LzAvMzEzNDMwMmUzMjM0MzkyZTMzMmUzMDJmMzIzNDJkMzIzNDIw M2QzZTIwMzEzMzM2MzEzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPkDMA0GCSqGSIb3DQEBCwUA A4IBAQDEWSeS2BfHmArYyJo4deCCZPZPSFZn0GrDEy2WTrhMYiCNcXXh2/13j2iQ BgdC4JvdpRTfAlC+U2+xQU4X+pO4TX04mY3WRGfAn8cyb1okKNQBBkSFWMdSCLqQ zl2qAE0UWMA7AkEHJWwNfyAEoZeHk6xiY50CrmsFP1Ha48b0d2YUjG+dpvIVhfGM x8c+w5g5PvgKxqE4VXX+CabpBlIjEgr694NU8GhKEBKAkdLzdn/nOoO8Ue6nhLRw acdf4B4Vnv59Sne8+1CjuTzW+KC3KfIqvt8Acbn5nBBlmtDpDv7WVEAbRoyAg2Yd C57So73JYyIA2PcQP4q8tggzWAD7 -----END CERTIFICATE-----Generated at Sat May 30 02:41:16 2026 by rpki-client