$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3135372e302f32342d3234203d3e203535393930.roa File: 3134302e3231302e3135372e302f32342d3234203d3e203535393930.roa (raw, json) Hash identifier: BVyIp9/eySYc1KmLIYITNJad8xj3rjb3uEe8OHGzdho= Subject key identifier: 99:BE:7C:EE:71:B9:64:E1:7F:30:73:6C:FD:FF:5A:CA:F8:5C:AC:2D Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 5F8128AE043007ACE399E4E2ABDFB231D5B9500C Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3135372e302f32342d3234203d3e203535393930.roa Signing time: Tue 16 Jun 2026 14:57:16 +0000 ROA not before: Tue 16 Jun 2026 14:52:16 +0000 ROA not after: Tue 15 Jun 2027 14:57:16 +0000 asID: 55990 IP address blocks: 140.210.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:81:28:ae:04:30:07:ac:e3:99:e4:e2:ab:df:b2:31:d5:b9:50:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: Jun 16 14:52:16 2026 GMT Not After : Jun 15 14:57:16 2027 GMT Subject: CN=99BE7CEE71B964E17F30736CFDFF5ACAF85CAC2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:f3:10:96:12:a0:3d:e1:ee:de:97:26:53: 6b:f2:ee:22:b3:f3:b2:af:a5:c1:9a:32:d6:ac:79: 22:7a:6a:65:e9:af:dd:e3:98:3d:cb:0f:74:8d:0f: 23:6b:fc:18:f6:16:6b:07:27:c8:b9:a4:88:e9:c8: 66:80:56:b1:ca:3f:e2:1e:1f:58:24:75:f6:12:09: b3:1e:9a:a4:7b:df:1f:98:27:78:7a:7c:06:eb:f4: 0e:39:2c:45:1f:87:0e:7f:f3:b7:1e:f0:bc:0d:e1: dc:e5:69:9b:c3:39:44:31:41:5c:78:cb:77:1c:7f: 2e:f1:cc:48:c2:e7:22:51:56:5d:c3:a7:4b:b1:79: 61:80:46:08:71:51:0f:28:bc:50:34:fa:da:cb:3d: 18:66:5f:3d:4e:97:6c:3e:ae:4d:75:22:c2:f4:23: 62:cc:65:6e:98:d6:43:bc:81:dc:3a:a1:25:ea:3c: 87:fe:67:7a:a8:c6:c9:19:4c:e1:11:32:70:9f:73: 5f:82:08:12:1d:53:8e:7d:44:b8:25:df:de:e3:a4: 0b:ad:f7:21:ec:4f:48:d3:0e:52:3c:fc:9c:2d:23: 96:8c:01:6c:76:4b:6d:f2:51:21:5c:21:92:71:cd: f8:b6:a1:ef:a2:8e:cb:ef:a3:92:3d:45:c4:1a:6a: c2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BE:7C:EE:71:B9:64:E1:7F:30:73:6C:FD:FF:5A:CA:F8:5C:AC:2D X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3135372e302f32342d3234203d3e203535393930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.210.157.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:40:a1:63:86:e1:90:8a:43:9b:0d:5c:26:b9:9b:4a:83:b6: 8c:aa:93:90:f1:07:5d:32:3f:14:e8:f4:88:5d:3d:65:7c:f8: b8:a9:23:71:3b:92:bd:31:0b:29:52:dd:f4:78:22:53:37:d3: 12:e0:0f:bb:af:51:5d:31:48:ba:e6:b7:7d:84:0d:6d:aa:bc: ea:3e:47:d6:61:74:45:7a:27:f9:71:58:1c:d4:82:ce:5b:1e: 6d:a8:6b:dc:75:46:22:ed:88:6c:a8:44:a1:10:1b:6f:5d:d2: c0:d0:c5:9e:71:df:de:1e:34:75:ae:b6:8a:7d:99:32:2a:f9: f7:8a:64:70:41:f8:96:0a:36:fe:ca:1e:b4:8d:dd:c3:f6:3e: 71:78:12:d6:ad:1e:31:47:d1:fa:bf:35:c0:e0:a7:96:5f:e9: 8d:2e:60:be:9e:3b:2b:8a:7e:de:44:5b:f1:ab:eb:ac:92:6a: d8:f9:06:d9:94:07:8b:d3:21:66:ac:53:e5:47:d3:94:37:2f: 7c:ca:fd:d0:52:ff:37:20:42:5e:b4:08:56:a5:68:36:5d:be: 16:09:89:fa:1e:01:2a:2d:5d:9f:41:04:f4:99:52:96:20:c5: c9:f3:35:f6:a3:2f:c3:06:c6:21:47:fb:a1:af:16:3c:97:ac: ce:7f:24:be -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUX4EorgQwB6zjmeTiq9+yMdW5UAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjA2MTYxNDUyMTZaFw0yNzA2MTUxNDU3MTZaMDMxMTAvBgNV BAMTKDk5QkU3Q0VFNzFCOTY0RTE3RjMwNzM2Q0ZERkY1QUNBRjg1Q0FDMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpa/MQlhKgPeHu3pcmU2vy7iKz 87KvpcGaMtaseSJ6amXpr93jmD3LD3SNDyNr/Bj2FmsHJ8i5pIjpyGaAVrHKP+Ie H1gkdfYSCbMemqR73x+YJ3h6fAbr9A45LEUfhw5/87ce8LwN4dzlaZvDOUQxQVx4 y3ccfy7xzEjC5yJRVl3Dp0uxeWGARghxUQ8ovFA0+trLPRhmXz1Ol2w+rk11IsL0 I2LMZW6Y1kO8gdw6oSXqPIf+Z3qoxskZTOERMnCfc1+CCBIdU459RLgl397jpAut 9yHsT0jTDlI8/JwtI5aMAWx2S23yUSFcIZJxzfi2oe+ijsvvo5I9RcQaasJxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUmb587nG5ZOF/MHNs/f9ayvhcrC0wHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMS8zMTM0MzAyZTMy MzEzMDJlMzEzNTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIzSnTANBgkqhkiG9w0BAQsFAAOCAQEAG0ChY4bhkIpDmw1cJrmb SoO2jKqTkPEHXTI/FOj0iF09ZXz4uKkjcTuSvTELKVLd9HgiUzfTEuAPu69RXTFI uua3fYQNbaq86j5H1mF0RXon+XFYHNSCzlsebahr3HVGIu2IbKhEoRAbb13SwNDF nnHf3h40da62in2ZMir594pkcEH4lgo2/soetI3dw/Y+cXgS1q0eMUfR+r81wOCn ll/pjS5gvp47K4p+3kRb8avrrJJq2PkG2ZQHi9MhZqxT5UfTlDcvfMr90FL/NyBC XrQIVqVoNl2+FgmJ+h4BKi1dn0EE9JlSliDFyfM19qMvwwbGIUf7oa8WPJeszn8k vg== -----END CERTIFICATE-----Generated at Fri Jul 24 18:20:25 2026 by rpki-client