$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3132382e302f31392d3139203d3e203535393930.roa File: 3134302e3231302e3132382e302f31392d3139203d3e203535393930.roa (raw, json) Hash identifier: 0wt+vIsOlW/VoaQzhY0BM2NTtXk0Lu7LIbWqJDTCA9U= Subject key identifier: 6B:30:0F:21:C9:66:FD:DE:42:7A:43:F1:44:18:D8:A4:BC:04:13:5D Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 4EF844CB1449D8C70F862B4ACCB14DED019B3FB2 Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3132382e302f31392d3139203d3e203535393930.roa Signing time: Tue 16 Jun 2026 14:57:16 +0000 ROA not before: Tue 16 Jun 2026 14:52:16 +0000 ROA not after: Tue 15 Jun 2027 14:57:16 +0000 asID: 55990 IP address blocks: 140.210.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f8:44:cb:14:49:d8:c7:0f:86:2b:4a:cc:b1:4d:ed:01:9b:3f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: Jun 16 14:52:16 2026 GMT Not After : Jun 15 14:57:16 2027 GMT Subject: CN=6B300F21C966FDDE427A43F14418D8A4BC04135D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:c9:9d:a5:22:f3:eb:41:90:8c:5e:84:49: 47:ee:a2:3f:4d:88:ff:72:2c:79:23:88:82:67:5d: 69:9b:59:43:f8:5f:21:2c:5c:e9:94:94:61:0a:79: 83:55:22:fa:23:6e:68:d5:d4:66:1e:41:a0:ce:6a: 96:18:51:2b:9e:ac:2e:40:36:f9:a9:b9:59:c2:3b: c0:72:c3:44:0a:ef:aa:2c:f0:f1:f8:ab:93:7a:36: 3d:3e:5d:41:10:9c:61:44:32:5d:db:59:01:6f:44: bc:3d:d4:40:f2:53:8f:db:85:33:77:c4:df:ea:1f: ba:12:3f:6a:05:ea:f2:eb:d5:21:42:f2:f4:a8:2c: 4e:37:a7:2b:e8:73:92:fa:b5:e8:c8:8c:f8:01:9a: 66:af:8a:be:08:0c:0a:21:8e:e5:12:a9:d5:f6:18: 89:c4:05:84:c2:8e:54:bf:70:84:0c:0b:4d:84:c1: 9d:1a:2f:28:37:96:15:cf:88:94:0b:a6:26:fc:d0: 54:bb:7d:b3:55:15:5b:c6:27:5a:39:fa:5c:08:43: a7:5c:5a:3c:33:48:df:02:0b:86:b8:e0:79:d2:59: 18:4a:f5:8c:49:bc:2b:fb:fe:93:a4:2c:a3:50:b4: fd:dd:c5:df:df:10:f0:2a:97:3d:e5:21:cd:2c:9c: 76:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:30:0F:21:C9:66:FD:DE:42:7A:43:F1:44:18:D8:A4:BC:04:13:5D X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3132382e302f31392d3139203d3e203535393930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.210.128.0/19 Signature Algorithm: sha256WithRSAEncryption 15:cd:c7:46:a7:f4:5c:fd:64:f0:a0:b5:a7:92:9c:66:59:26: fb:82:22:b0:27:29:da:1f:08:0f:bf:57:b3:e0:d9:82:2b:9b: 89:1b:4d:d1:a2:b0:bb:fc:3a:e6:1c:d8:59:a3:c9:b9:ec:c0: 3c:64:81:2c:83:4f:13:6b:09:4d:40:9c:5e:de:0a:38:ee:5c: 24:ee:db:2d:cb:60:a6:2b:15:1c:4c:8b:95:e3:ff:e2:6d:d5: 8c:50:89:7c:ca:64:ef:15:c7:f6:fb:a1:29:c9:2d:e7:69:86: d8:d0:9e:77:c4:45:29:0c:79:db:af:c1:ec:3d:e8:ed:2d:25: 9b:b6:b9:59:93:1d:de:ab:9d:d8:82:27:6a:61:77:8a:b3:38: 51:91:6c:3d:12:ea:36:fe:bc:ea:c3:ca:8d:e0:e5:7c:44:00: e4:f5:f3:98:a9:46:54:63:55:9b:09:3c:f4:3c:b6:aa:29:c2: 9d:21:f9:86:64:d5:89:2d:94:8c:ba:fe:77:b0:d1:63:f9:9a: 37:76:9f:fa:fb:d6:d9:fd:de:13:20:12:11:8a:f7:8c:90:02: 98:35:93:8c:d0:2c:fa:fa:88:d8:c7:8c:1b:ea:84:f7:a4:f4: 82:04:fa:c7:c0:90:37:69:0b:c0:09:3d:51:0f:2b:f1:32:57: e1:3d:11:78 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUTvhEyxRJ2McPhitKzLFN7QGbP7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjA2MTYxNDUyMTZaFw0yNzA2MTUxNDU3MTZaMDMxMTAvBgNV BAMTKDZCMzAwRjIxQzk2NkZEREU0MjdBNDNGMTQ0MThEOEE0QkMwNDEzNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80cmdpSLz60GQjF6ESUfuoj9N iP9yLHkjiIJnXWmbWUP4XyEsXOmUlGEKeYNVIvojbmjV1GYeQaDOapYYUSuerC5A NvmpuVnCO8Byw0QK76os8PH4q5N6Nj0+XUEQnGFEMl3bWQFvRLw91EDyU4/bhTN3 xN/qH7oSP2oF6vLr1SFC8vSoLE43pyvoc5L6tejIjPgBmmavir4IDAohjuUSqdX2 GInEBYTCjlS/cIQMC02EwZ0aLyg3lhXPiJQLpib80FS7fbNVFVvGJ1o5+lwIQ6dc WjwzSN8CC4a44HnSWRhK9YxJvCv7/pOkLKNQtP3dxd/fEPAqlz3lIc0snHYfAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUazAPIclm/d5CekPxRBjYpLwEE10wHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMS8zMTM0MzAyZTMy MzEzMDJlMzEzMjM4MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzUzNTM5MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBYzSgDANBgkqhkiG9w0BAQsFAAOCAQEAFc3HRqf0XP1k8KC1p5Kc Zlkm+4IisCcp2h8ID79Xs+DZgiubiRtN0aKwu/w65hzYWaPJuezAPGSBLINPE2sJ TUCcXt4KOO5cJO7bLctgpisVHEyLleP/4m3VjFCJfMpk7xXH9vuhKckt52mG2NCe d8RFKQx526/B7D3o7S0lm7a5WZMd3qud2IInamF3irM4UZFsPRLqNv686sPKjeDl fEQA5PXzmKlGVGNVmwk89Dy2qinCnSH5hmTViS2UjLr+d7DRY/maN3af+vvW2f3e EyASEYr3jJACmDWTjNAs+vqI2MeMG+qE96T0ggT6x8CQN2kLwAk9UQ8r8TJX4T0R eA== -----END CERTIFICATE-----Generated at Fri Jul 24 13:13:22 2026 by rpki-client