$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e34382e302f32322d3232203d3e203538353431.roa File: 3134302e3234392e34382e302f32322d3232203d3e203538353431.roa (raw, json) Hash identifier: RsP1BDsAAgzB8tXWs+TYF2TqaNhFQ4e4XgrJYhmQKL0= Subject key identifier: 8C:B0:A2:21:78:B6:C8:05:0B:26:C9:85:01:17:F0:0F:EF:17:95:B6 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 7C6E508D24BED08D99D19FB9760C3302AE76DA38 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e34382e302f32322d3232203d3e203538353431.roa Signing time: Thu 28 May 2026 16:07:18 +0000 ROA not before: Thu 28 May 2026 16:02:18 +0000 ROA not after: Thu 27 May 2027 16:07:18 +0000 asID: 58541 IP address blocks: 140.249.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6e:50:8d:24:be:d0:8d:99:d1:9f:b9:76:0c:33:02:ae:76:da:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 28 16:02:18 2026 GMT Not After : May 27 16:07:18 2027 GMT Subject: CN=8CB0A22178B6C8050B26C9850117F00FEF1795B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:40:12:dc:e5:0c:36:5a:a4:ca:cf:d1:f1:ce: 0e:68:7e:8b:96:b8:ed:f5:51:1e:3f:b6:6b:ee:81: cc:f4:eb:a4:cf:0a:7a:e6:b9:18:e9:3c:a2:eb:bf: 72:25:c9:b6:06:0d:48:26:75:0f:21:73:61:8f:32: 25:ed:82:4a:97:5b:81:14:9d:0b:ff:bd:bf:fe:f5: ed:55:bb:6b:f3:ab:99:38:c2:73:a2:00:5b:75:d5: 96:68:8b:00:3c:be:8d:c9:a3:f4:59:d0:db:3c:01: 52:cb:d6:ad:2b:ca:4e:9c:99:61:ef:2e:ee:79:07: 29:84:b6:24:ec:9e:c3:00:50:8e:1b:63:18:a5:d2: 82:fc:4d:33:30:8b:ee:6b:65:c4:60:4e:23:d7:39: b2:5b:a8:84:b3:e5:16:01:2f:b1:63:d8:fd:a4:f2: ce:e3:02:ba:b8:1f:71:a0:ab:9c:e1:6a:a6:c4:2d: 8e:16:f0:65:8f:05:3d:fd:34:39:b6:21:21:ea:45: 7a:e5:09:a3:c9:a1:ae:e9:24:56:58:92:71:e9:60: a6:c4:ff:98:c5:a3:ea:cb:2f:e9:ad:be:e8:b4:30: 9f:ea:8c:80:ac:6e:bb:06:3d:f4:c6:fe:d5:73:36: 8a:67:24:7e:58:12:5e:db:fc:b5:97:b0:3e:69:52: 41:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B0:A2:21:78:B6:C8:05:0B:26:C9:85:01:17:F0:0F:EF:17:95:B6 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e34382e302f32322d3232203d3e203538353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.249.48.0/22 Signature Algorithm: sha256WithRSAEncryption 88:7d:a8:4a:1f:d2:7e:06:02:fe:a4:6b:8a:77:92:b8:58:13: 4c:01:c2:88:5d:75:b9:e4:40:7e:5b:ef:49:3e:de:7b:91:73: c0:35:cb:51:e2:1e:fc:99:bf:ff:4e:de:6a:36:2b:ae:d2:37: 20:23:a9:25:36:3f:66:d3:80:c4:b6:d4:1a:1c:f9:bf:24:65: 3a:0d:17:40:48:3c:7f:ca:a0:b9:8f:cf:02:ef:c3:74:c4:73: 33:d9:0a:65:b6:36:95:44:e2:dc:65:5e:b5:e5:9a:73:57:b0: 26:d5:0e:3c:12:67:d9:6e:02:71:0b:24:5d:1e:0b:e0:c2:fd: b1:7f:db:1d:1c:62:8d:0d:fa:5f:5b:2d:e0:c5:e0:0a:a0:38: e6:aa:6d:5a:a0:c6:46:d1:e0:10:62:37:1e:0f:4b:98:34:b2: b1:06:cc:f5:5f:34:8d:55:dc:91:36:af:cb:18:74:a7:a4:d3: a6:a4:ba:f6:87:b4:95:b8:a7:a9:2d:23:57:00:f4:7e:6d:5f: 2e:d6:a6:0a:8b:4e:de:3f:b5:79:1d:3d:9c:92:cf:33:1a:20: e4:d5:3b:ca:06:d1:81:f5:29:67:23:3b:72:b0:e2:8d:f4:99: 08:55:76:87:e1:78:76:32:52:1b:56:81:14:06:16:e6:6c:e5: d3:37:bf:f3 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUfG5QjSS+0I2Z0Z+5dgwzAq522jgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyODE2MDIxOFoX DTI3MDUyNzE2MDcxOFowMzExMC8GA1UEAxMoOENCMEEyMjE3OEI2QzgwNTBCMjZD OTg1MDExN0YwMEZFRjE3OTVCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhAEtzlDDZapMrP0fHODmh+i5a47fVRHj+2a+6BzPTrpM8Keua5GOk8ouu/ ciXJtgYNSCZ1DyFzYY8yJe2CSpdbgRSdC/+9v/717VW7a/OrmTjCc6IAW3XVlmiL ADy+jcmj9FnQ2zwBUsvWrSvKTpyZYe8u7nkHKYS2JOyewwBQjhtjGKXSgvxNMzCL 7mtlxGBOI9c5sluohLPlFgEvsWPY/aTyzuMCurgfcaCrnOFqpsQtjhbwZY8FPf00 ObYhIepFeuUJo8mhrukkVliScelgpsT/mMWj6ssv6a2+6LQwn+qMgKxuuwY99Mb+ 1XM2imckflgSXtv8tZewPmlSQe8CAwEAAaOCAhQwggIQMB0GA1UdDgQWBBSMsKIh eLbIBQsmyYUBF/AP7xeVtjAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEF BQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAy OTA1OTc2ODM1LzAvMzEzNDMwMmUzMjM0MzkyZTM0MzgyZTMwMmYzMjMyMmQzMjMy MjAzZDNlMjAzNTM4MzUzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjPkwMA0GCSqGSIb3DQEBCwUA A4IBAQCIfahKH9J+BgL+pGuKd5K4WBNMAcKIXXW55EB+W+9JPt57kXPANctR4h78 mb//Tt5qNiuu0jcgI6klNj9m04DEttQaHPm/JGU6DRdASDx/yqC5j88C78N0xHMz 2QpltjaVROLcZV615ZpzV7Am1Q48EmfZbgJxCyRdHgvgwv2xf9sdHGKNDfpfWy3g xeAKoDjmqm1aoMZG0eAQYjceD0uYNLKxBsz1XzSNVdyRNq/LGHSnpNOmpLr2h7SV uKepLSNXAPR+bV8u1qYKi07eP7V5HT2cks8zGiDk1TvKBtGB9SlnIztysOKN9JkI VXaH4Xh2MlIbVoEUBhbmbOXTN7/z -----END CERTIFICATE-----Generated at Sat May 30 02:40:51 2026 by rpki-client