$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e3131332e3133392e302f32342d3234203d3e20313334373030.roa File: 3131342e3131332e3133392e302f32342d3234203d3e20313334373030.roa (raw, json) Hash identifier: MCzCkyBgwqHbcr58p12QwKcAspFT1QOHH5j+cEZBMCA= Subject key identifier: 40:7F:38:DB:F5:29:8A:DE:26:7E:A0:29:AE:57:C3:A6:49:3A:6D:B8 Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 3E21C36DB24A7F245FC2E532B0FD20330BC0848D Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e3131332e3133392e302f32342d3234203d3e20313334373030.roa Signing time: Sat 09 May 2026 08:21:20 +0000 ROA not before: Sat 09 May 2026 08:16:20 +0000 ROA not after: Sat 08 May 2027 08:21:20 +0000 asID: 134700 IP address blocks: 114.113.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:21:c3:6d:b2:4a:7f:24:5f:c2:e5:32:b0:fd:20:33:0b:c0:84:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: May 9 08:16:20 2026 GMT Not After : May 8 08:21:20 2027 GMT Subject: CN=407F38DBF5298ADE267EA029AE57C3A6493A6DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:c9:75:e8:da:89:76:3e:58:ce:3a:67:1f: ae:a9:8c:c0:2d:a6:a2:25:7e:f9:78:ce:2d:0b:04: 4c:43:4a:aa:98:82:7e:a4:32:0e:ed:17:a7:32:a8: 0c:e9:c2:28:ee:32:82:33:e7:24:40:2a:59:dd:78: 22:51:c5:ce:a6:30:d2:ea:60:3d:5a:04:8e:3d:8f: f1:3f:07:86:e0:22:48:47:cb:fd:81:d6:84:97:e6: 3c:aa:8c:84:f6:59:46:38:66:2b:9b:35:38:a1:d7: f6:eb:1a:b2:9b:ee:8c:de:68:81:6f:f3:5a:0f:f5: a9:51:3a:1e:68:82:ee:a7:ff:4c:0f:36:7f:98:de: 7c:83:4c:5a:ca:0d:cc:1a:18:e4:c0:1e:73:81:b6: 12:fd:29:b8:50:ed:57:23:6a:75:6a:5d:3a:9c:8c: 84:31:b4:f1:a8:1e:22:08:9e:5d:c2:2c:0b:ce:37: 12:44:f9:23:50:fc:c9:8f:b0:52:3f:24:20:29:fe: 13:c7:3a:76:eb:cc:16:56:f1:06:18:4b:89:18:d7: 98:75:f6:f2:d4:39:c3:76:d8:12:3e:00:04:69:e8: e0:de:2a:53:b9:42:40:e1:80:24:87:27:b1:6f:20: 5e:b3:ac:89:88:59:14:b4:62:ad:dc:0a:22:3a:18: cf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7F:38:DB:F5:29:8A:DE:26:7E:A0:29:AE:57:C3:A6:49:3A:6D:B8 X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e3131332e3133392e302f32342d3234203d3e20313334373030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.113.139.0/24 Signature Algorithm: sha256WithRSAEncryption 26:29:5f:f8:8e:da:ff:f5:e6:19:f9:e0:ce:01:8e:1a:0e:4c: e1:9c:3d:29:43:c8:c7:d5:58:65:eb:a7:85:26:60:32:27:01: 96:66:a4:90:fd:f9:eb:f2:31:0f:44:c9:15:05:bb:50:20:1b: 2d:c0:3c:41:f2:d1:83:5f:87:74:b8:00:5e:29:9c:08:42:a0: b6:63:94:cc:4f:8e:7b:ec:e6:2a:39:a8:d8:e1:59:5e:75:b7: 80:0b:71:37:d8:68:b6:91:aa:9e:16:36:00:db:45:8d:56:4e: 25:ab:f6:f6:06:2f:cc:6a:f0:f8:fc:af:fc:3a:ee:17:bd:aa: 23:f4:24:6d:37:2c:89:81:2d:03:c0:2b:5b:2e:a0:1a:c8:90: 6b:60:c3:e5:26:66:b6:6f:8e:c7:03:1d:fb:5a:e3:81:84:c8: c5:ec:62:cd:bb:05:e9:3d:58:84:b8:1e:7c:02:4b:41:42:08: 19:a7:57:40:88:a4:1a:42:7f:11:2c:5a:d1:2b:c8:22:7d:f1: c7:4e:b0:7f:fa:e9:27:df:8b:6a:99:4c:91:a9:cd:be:54:ce: e0:f1:ec:b5:fc:f5:8a:65:3f:53:c9:83:8c:0e:9f:13:be:67: 15:3c:61:19:96:06:39:e6:5e:4c:0d:a2:83:7f:48:24:39:18: 8d:e7:c4:99 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUPiHDbbJKfyRfwuUysP0gMwvAhI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA1MDkwODE2MjBaFw0yNzA1MDgwODIxMjBaMDMxMTAvBgNV BAMTKDQwN0YzOERCRjUyOThBREUyNjdFQTAyOUFFNTdDM0E2NDkzQTZEQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/sl16NqJdj5YzjpnH66pjMAt pqIlfvl4zi0LBExDSqqYgn6kMg7tF6cyqAzpwijuMoIz5yRAKlndeCJRxc6mMNLq YD1aBI49j/E/B4bgIkhHy/2B1oSX5jyqjIT2WUY4ZiubNTih1/brGrKb7ozeaIFv 81oP9alROh5ogu6n/0wPNn+Y3nyDTFrKDcwaGOTAHnOBthL9KbhQ7VcjanVqXTqc jIQxtPGoHiIInl3CLAvONxJE+SNQ/MmPsFI/JCAp/hPHOnbrzBZW8QYYS4kY15h1 9vLUOcN22BI+AARp6ODeKlO5QkDhgCSHJ7FvIF6zrImIWRS0Yq3cCiI6GM+ZAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUQH842/Upit4mfqAprlfDpkk6bbgwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1LzAvMzEzMTM0MmUz MTMxMzMyZTMxMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzAz MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHJxizANBgkqhkiG9w0BAQsFAAOCAQEAJilf+I7a//XmGfng zgGOGg5M4Zw9KUPIx9VYZeunhSZgMicBlmakkP356/IxD0TJFQW7UCAbLcA8QfLR g1+HdLgAXimcCEKgtmOUzE+Oe+zmKjmo2OFZXnW3gAtxN9hotpGqnhY2ANtFjVZO Jav29gYvzGrw+Pyv/DruF72qI/QkbTcsiYEtA8ArWy6gGsiQa2DD5SZmtm+OxwMd +1rjgYTIxexizbsF6T1YhLgefAJLQUIIGadXQIikGkJ/ESxa0SvIIn3xx06wf/rp J9+LaplMkanNvlTO4PHstfz1imU/U8mDjA6fE75nFTxhGZYGOeZeTA2ig39IJDkY jefEmQ== -----END CERTIFICATE-----Generated at Wed May 13 15:57:08 2026 by rpki-client