$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/3134302e3230352e302e302f31362d3234203d3e203435313032.roa File: 3134302e3230352e302e302f31362d3234203d3e203435313032.roa (raw, json) Hash identifier: pQRnaurNhavozvk/Uf/xbHRB5WSXCOHAuz30poaAiH8= Subject key identifier: A1:E2:FA:DE:80:2E:E5:ED:1D:DE:F7:12:D0:AE:AC:80:64:A7:56:D9 Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 5ABFEFD3F9A302461B9A298652C297179211597E Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/3134302e3230352e302e302f31362d3234203d3e203435313032.roa Signing time: Mon 11 May 2026 15:31:27 +0000 ROA not before: Mon 11 May 2026 15:26:27 +0000 ROA not after: Mon 10 May 2027 15:31:27 +0000 asID: 45102 IP address blocks: 140.205.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:bf:ef:d3:f9:a3:02:46:1b:9a:29:86:52:c2:97:17:92:11:59:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: May 11 15:26:27 2026 GMT Not After : May 10 15:31:27 2027 GMT Subject: CN=A1E2FADE802EE5ED1DDEF712D0AEAC8064A756D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:b1:90:81:ee:81:fe:c1:82:0d:4c:52:63: 98:40:47:ee:80:38:25:88:7d:58:07:24:1d:04:8b: a3:d4:69:31:49:15:d8:00:d5:65:eb:a7:64:12:7f: 49:b5:14:00:4f:f8:01:6f:b7:f5:5b:e9:68:af:51: 87:32:36:24:ff:70:32:84:8d:44:59:aa:03:a2:97: 78:8f:af:89:04:f4:00:1a:97:ec:d1:a4:90:60:1d: 07:42:fb:61:25:80:f1:59:c4:4a:63:09:63:ff:0b: d3:ad:32:6b:77:98:a3:6f:c5:c1:70:17:70:72:29: e4:96:2e:8a:32:ea:2c:a8:15:71:9e:1a:7c:d6:aa: 7a:2b:a0:a6:eb:d7:45:14:06:94:e5:fc:d3:0f:ae: 95:b1:21:70:c4:9d:26:e7:2b:74:35:fd:b7:53:57: f6:19:34:62:d3:10:44:d3:54:f9:77:94:fb:b8:8d: a3:c1:a1:86:c7:6f:2a:8b:e4:79:6c:c1:14:4c:e3: 70:a7:2a:f8:08:21:38:4f:d3:ae:8e:b1:8e:fe:bf: 48:ba:4d:ae:a7:0d:59:6f:d8:e5:ee:63:ce:c2:39: 44:e0:2d:4c:ab:de:06:e7:ed:d9:cd:ba:98:d8:eb: dc:ea:7e:c7:4e:2c:49:47:5d:20:83:08:1b:c7:61: f5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E2:FA:DE:80:2E:E5:ED:1D:DE:F7:12:D0:AE:AC:80:64:A7:56:D9 X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/3134302e3230352e302e302f31362d3234203d3e203435313032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.205.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9e:0a:80:57:e8:65:f5:6a:47:ad:15:c7:55:f8:8c:d2:0e:29: 58:ee:36:ea:b0:b9:4f:4e:ce:12:6c:09:d4:22:84:d3:3b:9d: 11:80:f5:a0:62:12:8b:e4:36:fb:22:2b:a6:3f:22:72:90:94: 8f:a8:31:b4:90:95:6b:72:5e:11:28:41:12:df:ec:89:69:b9: a7:92:3e:d5:72:e3:ad:4c:d0:9f:af:26:0c:4c:3f:b3:1e:67: 28:dc:6b:42:28:0c:50:9e:1a:1d:3c:34:d3:7b:56:5b:b2:b7: 02:9e:77:4e:39:ea:c1:8d:b9:2c:c0:2f:b0:b8:0c:4b:2a:23: 00:fe:22:2a:46:86:87:8c:49:04:49:64:f3:b5:22:46:4e:0b: c3:f1:16:ca:03:42:71:04:49:af:04:b3:88:63:3b:17:4e:ef: 32:d5:1b:f0:96:09:99:43:75:c1:82:69:94:2f:07:e2:43:84: 88:2e:27:45:59:88:1c:04:2c:68:fe:75:94:e1:c0:17:ae:29: 41:5b:62:df:45:02:10:54:bc:53:4f:d7:ae:03:ae:53:40:b8: b0:a7:73:c4:3a:39:c3:9e:b5:45:6f:66:d1:18:b4:4c:04:52: e2:e8:9d:6a:a4:8f:b6:32:29:94:fd:c7:2b:b4:ad:b8:17:1b: 79:e1:50:a7 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUWr/v0/mjAkYbmimGUsKXF5IRWX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjA1MTExNTI2MjdaFw0yNzA1MTAxNTMxMjdaMDMxMTAvBgNV BAMTKEExRTJGQURFODAyRUU1RUQxRERFRjcxMkQwQUVBQzgwNjRBNzU2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrerGQge6B/sGCDUxSY5hAR+6A OCWIfVgHJB0Ei6PUaTFJFdgA1WXrp2QSf0m1FABP+AFvt/Vb6WivUYcyNiT/cDKE jURZqgOil3iPr4kE9AAal+zRpJBgHQdC+2ElgPFZxEpjCWP/C9OtMmt3mKNvxcFw F3ByKeSWLooy6iyoFXGeGnzWqnoroKbr10UUBpTl/NMPrpWxIXDEnSbnK3Q1/bdT V/YZNGLTEETTVPl3lPu4jaPBoYbHbyqL5HlswRRM43CnKvgIIThP066OsY7+v0i6 Ta6nDVlv2OXuY87COUTgLUyr3gbn7dnNupjY69zqfsdOLElHXSCDCBvHYfV3AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUoeL63oAu5e0d3vcS0K6sgGSnVtkwHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4NDAyNjkxLzEvMzEzNDMwMmUzMjMw MzUyZTMwMmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzQzNTMxMzAzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAIzNMA0GCSqGSIb3DQEBCwUAA4IBAQCeCoBX6GX1aketFcdV+IzSDilY7jbq sLlPTs4SbAnUIoTTO50RgPWgYhKL5Db7IiumPyJykJSPqDG0kJVrcl4RKEES3+yJ abmnkj7VcuOtTNCfryYMTD+zHmco3GtCKAxQnhodPDTTe1ZbsrcCnndOOerBjbks wC+wuAxLKiMA/iIqRoaHjEkESWTztSJGTgvD8RbKA0JxBEmvBLOIYzsXTu8y1Rvw lgmZQ3XBgmmULwfiQ4SILidFWYgcBCxo/nWU4cAXrilBW2LfRQIQVLxTT9euA65T QLiwp3PEOjnDnrVFb2bRGLRMBFLi6J1qpI+2MimU/ccrtK24Fxt54VCn -----END CERTIFICATE-----Generated at Wed May 13 07:35:21 2026 by rpki-client