$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e3132332e32342e302f32342d3234203d3e20313339383837.roa File: 3134342e3132332e32342e302f32342d3234203d3e20313339383837.roa (raw, json) Hash identifier: XQ4FSyFAf2shUehf4a0hYc9A0BYiTz405/2+0p7c/e0= Subject key identifier: C2:39:71:63:C2:30:B2:25:C3:6B:7E:4D:17:AA:40:8D:EF:66:43:5D Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 035C14EC5A05AAB97FD08EB2418E4DEC72F24913 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e3132332e32342e302f32342d3234203d3e20313339383837.roa Signing time: Thu 28 May 2026 16:05:39 +0000 ROA not before: Thu 28 May 2026 16:00:39 +0000 ROA not after: Thu 27 May 2027 16:05:39 +0000 asID: 139887 IP address blocks: 144.123.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5c:14:ec:5a:05:aa:b9:7f:d0:8e:b2:41:8e:4d:ec:72:f2:49:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 28 16:00:39 2026 GMT Not After : May 27 16:05:39 2027 GMT Subject: CN=C2397163C230B225C36B7E4D17AA408DEF66435D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7a:e4:cb:22:c4:ba:6c:d2:1d:89:54:b6:17: bc:62:77:b3:ab:82:53:94:73:85:4c:5a:93:f7:21: cb:66:29:cf:4f:93:49:d1:65:5d:d5:4f:b6:dd:23: 7d:33:34:96:6b:e0:4c:10:ac:fe:39:41:15:63:0e: 02:0d:ac:10:dc:23:a1:45:da:19:5a:46:e2:52:fc: c7:77:22:6a:a8:bc:82:95:80:97:20:d9:0d:dd:ad: 6a:4f:ff:38:44:43:cf:58:d3:0a:86:a0:3c:6b:62: e9:6b:ca:1d:09:2d:02:04:16:b7:ee:61:d2:72:64: 8e:ed:60:85:b5:5e:45:d2:81:29:ad:f6:8e:b4:a6: 94:2b:50:bf:5c:35:3a:4e:34:2a:56:f0:8c:bb:88: d2:7f:1a:72:da:92:c1:ed:e0:65:79:a5:55:8c:5e: d5:ad:cf:4c:65:04:91:05:15:52:b0:86:de:52:c2: 14:46:25:be:d4:ac:7f:b9:f0:f2:48:98:9c:24:dc: 94:de:d4:c4:74:ab:74:98:4f:d2:f3:80:e3:47:ab: 44:51:37:40:3c:37:72:fb:f0:b7:b2:10:ad:73:b9: 85:11:74:6a:ab:6e:94:f1:fe:99:3f:1c:46:17:62: 4f:30:1c:88:7a:39:76:ec:db:0b:7f:11:2f:71:9e: 63:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:39:71:63:C2:30:B2:25:C3:6B:7E:4D:17:AA:40:8D:EF:66:43:5D X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e3132332e32342e302f32342d3234203d3e20313339383837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.123.24.0/24 Signature Algorithm: sha256WithRSAEncryption b8:cc:ff:df:f7:22:a0:04:29:30:7e:6d:04:09:ab:8d:7f:12: 48:41:9a:e3:6d:9a:a7:87:91:ad:76:25:26:c6:74:7c:aa:7a: ba:19:dd:c5:f4:d9:c3:6d:ef:fe:89:ee:0e:3a:e3:fa:e6:34: 88:62:e1:4b:3f:54:4a:28:e0:7f:8b:e0:1e:8c:bc:9b:29:a2: 5c:66:8d:4f:24:45:c8:25:e0:84:86:5b:e5:76:31:75:6b:a9: a9:ab:06:64:5d:f7:e9:9c:b6:37:39:d7:6a:20:da:a1:0d:ab: 82:01:12:77:44:94:fe:41:86:9b:b9:04:73:f7:8a:e2:db:16: 0e:fb:0d:04:5f:0f:24:53:bc:bd:5b:a5:c6:50:6a:b7:ed:5d: e3:11:4c:dd:c3:30:57:93:f4:b3:1f:f3:78:71:d7:e8:9e:9e: 3e:d0:ab:59:df:47:09:a0:5f:59:eb:93:0c:07:f2:7a:2e:14: 81:61:a1:5a:f1:e5:ba:f8:f7:a1:f7:23:8e:62:c6:3a:96:3f: db:d1:92:03:b6:30:ea:bf:41:66:f1:68:37:3d:0e:e5:28:92: a8:2f:c6:66:1a:9f:50:fd:24:da:b6:96:bc:80:37:b3:96:c7: 6e:ac:09:81:b4:50:4c:8c:b8:1e:a8:53:73:8b:0d:c2:1f:cc: 56:ea:47:5d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUA1wU7FoFqrl/0I6yQY5N7HLySRMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyODE2MDAzOVoX DTI3MDUyNzE2MDUzOVowMzExMC8GA1UEAxMoQzIzOTcxNjNDMjMwQjIyNUMzNkI3 RTREMTdBQTQwOERFRjY2NDM1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJp65MsixLps0h2JVLYXvGJ3s6uCU5RzhUxak/chy2Ypz0+TSdFlXdVPtt0j fTM0lmvgTBCs/jlBFWMOAg2sENwjoUXaGVpG4lL8x3ciaqi8gpWAlyDZDd2tak// OERDz1jTCoagPGti6WvKHQktAgQWt+5h0nJkju1ghbVeRdKBKa32jrSmlCtQv1w1 Ok40KlbwjLuI0n8actqSwe3gZXmlVYxe1a3PTGUEkQUVUrCG3lLCFEYlvtSsf7nw 8kiYnCTclN7UxHSrdJhP0vOA40erRFE3QDw3cvvwt7IQrXO5hRF0aqtulPH+mT8c RhdiTzAciHo5duzbC38RL3GeYycCAwEAAaOCAhcwggITMB0GA1UdDgQWBBTCOXFj wjCyJcNrfk0XqkCN72ZDXTAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw MjkwNTk3NjgzNS8wLzMxMzQzNDJlMzEzMjMzMmUzMjM0MmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzEzMzM5MzgzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkHsYMA0GCSqGSIb3DQEB CwUAA4IBAQC4zP/f9yKgBCkwfm0ECauNfxJIQZrjbZqnh5GtdiUmxnR8qnq6Gd3F 9NnDbe/+ie4OOuP65jSIYuFLP1RKKOB/i+AejLybKaJcZo1PJEXIJeCEhlvldjF1 a6mpqwZkXffpnLY3OddqINqhDauCARJ3RJT+QYabuQRz94ri2xYO+w0EXw8kU7y9 W6XGUGq37V3jEUzdwzBXk/SzH/N4cdfonp4+0KtZ30cJoF9Z65MMB/J6LhSBYaFa 8eW6+Peh9yOOYsY6lj/b0ZIDtjDqv0Fm8Wg3PQ7lKJKoL8ZmGp9Q/STatpa8gDez lsdurAmBtFBMjLgeqFNziw3CH8xW6kdd -----END CERTIFICATE-----Generated at Sat May 30 02:40:07 2026 by rpki-client