$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e38372e302f32342d3234203d3e20313336313937.roa File: 3134342e372e38372e302f32342d3234203d3e20313336313937.roa (raw, json) Hash identifier: 24mcaWpNcMwLM06rg6fbaqzHFUOJqOah3mZP4VEu+4c= Subject key identifier: 2E:46:0C:57:33:65:96:CC:45:F4:84:EF:40:53:AE:66:AB:ED:BE:45 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 7D89807F9B4F5D4FDB519A78AA2AD27F8CD2DADD Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e38372e302f32342d3234203d3e20313336313937.roa Signing time: Mon 25 May 2026 16:05:49 +0000 ROA not before: Mon 25 May 2026 16:00:49 +0000 ROA not after: Mon 24 May 2027 16:05:49 +0000 asID: 136197 IP address blocks: 144.7.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:89:80:7f:9b:4f:5d:4f:db:51:9a:78:aa:2a:d2:7f:8c:d2:da:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: May 25 16:00:49 2026 GMT Not After : May 24 16:05:49 2027 GMT Subject: CN=2E460C57336596CC45F484EF4053AE66ABEDBE45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:16:16:01:57:ea:ae:e3:dc:51:aa:81:8a:9f: d8:7a:cc:e7:ac:d5:50:6d:54:f6:f1:e7:c6:3c:ac: 4b:23:15:cf:05:21:e0:85:97:e5:c2:e5:ac:e5:d8: 43:da:2d:7c:a0:f3:e4:9f:1b:de:1d:79:3f:9a:09: a7:75:d9:0d:d4:c5:02:f0:f1:e2:d2:35:aa:65:01: 2f:25:a7:df:56:e4:79:87:36:60:8f:22:25:16:bf: 4a:b3:91:c4:2a:d6:21:39:cb:33:d9:6d:41:10:92: 6a:5f:5c:e3:52:fe:0b:f6:0a:b9:94:4d:28:43:29: e6:73:6d:00:25:35:7f:81:ac:1e:b7:2f:bf:bf:f7: e4:e5:4f:00:9b:11:1e:d6:d6:c8:0b:18:54:b9:ed: b7:3d:6d:8c:e8:02:ac:76:2a:bd:ae:b8:24:96:03: 70:90:6f:69:dc:10:ea:f1:8e:28:e6:7c:25:4b:e3: eb:2e:24:8e:e1:77:03:9c:3d:d9:63:4f:1b:e4:a5: 16:a3:32:2a:2e:57:f3:57:ef:52:f0:41:ab:ea:b3: 32:59:95:0f:0e:8c:36:40:09:9c:e3:a7:39:0f:8f: 9e:ff:69:aa:23:4d:35:a5:7e:87:94:b8:8f:10:da: 1c:46:c4:7a:68:d6:26:8b:52:57:b7:b1:88:26:91: 36:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:46:0C:57:33:65:96:CC:45:F4:84:EF:40:53:AE:66:AB:ED:BE:45 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e38372e302f32342d3234203d3e20313336313937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.7.87.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:c4:1d:45:5b:a5:72:92:66:67:69:f6:49:76:26:76:b7:f8: 7e:2d:68:4b:28:71:73:f6:ab:f1:23:77:8a:f1:6e:47:5d:a5: ec:82:e6:8c:d8:55:84:7e:81:9c:78:8f:16:8d:8f:d7:95:49: 81:ab:49:9d:dc:9f:f0:52:85:ac:a4:f6:ab:26:fa:2f:e9:ce: 96:b7:11:8d:ad:dd:5a:5e:44:ef:31:23:3e:65:6e:22:e3:92: ca:ce:1a:36:3f:5f:a8:82:06:4f:99:d6:1e:fa:1f:67:ee:f4: a7:97:bb:73:56:c1:e9:b5:23:cc:46:99:6c:94:d1:09:1a:dd: 15:8c:a6:7c:ec:f2:75:44:1a:6e:a1:3c:8b:27:3d:26:cd:c5: e0:bf:56:b5:a0:73:49:ae:36:c2:64:4d:54:d7:64:a7:8f:1e: 75:ff:f0:37:da:1b:02:36:63:84:7e:e3:ac:5b:10:ed:25:fe: 66:dd:57:11:fb:eb:40:d4:90:68:43:07:64:6a:d0:98:04:a5: 4f:c1:4d:ea:90:f6:ba:7a:1f:e6:8f:54:db:95:a4:b6:56:26: da:04:57:86:52:96:c9:7f:a1:9f:20:a5:7d:a9:3c:58:86:6e: 34:13:b4:18:27:cc:89:fa:82:9f:67:91:04:c2:c6:4f:9f:59: 12:4d:f6:7a -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUfYmAf5tPXU/bUZp4qirSf4zS2t0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyNTE2MDA0OVoX DTI3MDUyNDE2MDU0OVowMzExMC8GA1UEAxMoMkU0NjBDNTczMzY1OTZDQzQ1RjQ4 NEVGNDA1M0FFNjZBQkVEQkU0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPsWFgFX6q7j3FGqgYqf2HrM56zVUG1U9vHnxjysSyMVzwUh4IWX5cLlrOXY Q9otfKDz5J8b3h15P5oJp3XZDdTFAvDx4tI1qmUBLyWn31bkeYc2YI8iJRa/SrOR xCrWITnLM9ltQRCSal9c41L+C/YKuZRNKEMp5nNtACU1f4GsHrcvv7/35OVPAJsR HtbWyAsYVLnttz1tjOgCrHYqva64JJYDcJBvadwQ6vGOKOZ8JUvj6y4kjuF3A5w9 2WNPG+SlFqMyKi5X81fvUvBBq+qzMlmVDw6MNkAJnOOnOQ+Pnv9pqiNNNaV+h5S4 jxDaHEbEemjWJotSV7exiCaRNlECAwEAAaOCAhEwggINMB0GA1UdDgQWBBQuRgxX M2WWzEX0hO9AU65mq+2+RTAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0MDI5 MDU5NzY4MzUvMC8zMTM0MzQyZTM3MmUzODM3MmUzMDJmMzIzNDJkMzIzNDIwM2Qz ZTIwMzEzMzM2MzEzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkAdXMA0GCSqGSIb3DQEBCwUAA4IB AQBsxB1FW6VykmZnafZJdiZ2t/h+LWhLKHFz9qvxI3eK8W5HXaXsguaM2FWEfoGc eI8WjY/XlUmBq0md3J/wUoWspParJvov6c6WtxGNrd1aXkTvMSM+ZW4i45LKzho2 P1+oggZPmdYe+h9n7vSnl7tzVsHptSPMRplslNEJGt0VjKZ87PJ1RBpuoTyLJz0m zcXgv1a1oHNJrjbCZE1U12Snjx51//A32hsCNmOEfuOsWxDtJf5m3VcR++tA1JBo QwdkatCYBKVPwU3qkPa6eh/mj1TblaS2VibaBFeGUpbJf6GfIKV9qTxYhm40E7QY J8yJ+oKfZ5EEwsZPn1kSTfZ6 -----END CERTIFICATE-----Generated at Sat May 30 02:40:07 2026 by rpki-client