$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3136342e302f32322d3232203d3e20313436383137.roa File: 3139322e3134302e3136342e302f32322d3232203d3e20313436383137.roa (raw, json) Hash identifier: PgK7Lh/lPYUKhFVtDUZevgReYaucj7SnOCkPMNnGMkU= Subject key identifier: CD:D8:8D:11:4F:F6:16:22:39:F8:8F:9A:CB:7D:FC:2A:39:F0:EA:F2 Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362 Certificate serial: 6C695E3D35A3D926D08FB25507A8442455A13DCB Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3136342e302f32322d3232203d3e20313436383137.roa Signing time: Fri 08 May 2026 09:41:54 +0000 ROA not before: Fri 08 May 2026 09:36:54 +0000 ROA not after: Fri 07 May 2027 09:41:54 +0000 asID: 146817 IP address blocks: 192.140.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:69:5e:3d:35:a3:d9:26:d0:8f:b2:55:07:a8:44:24:55:a1:3d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362 Validity Not Before: May 8 09:36:54 2026 GMT Not After : May 7 09:41:54 2027 GMT Subject: CN=CDD88D114FF6162239F88F9ACB7DFC2A39F0EAF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:92:bf:2b:0a:1a:23:fb:c2:a6:86:47:8c:db: c2:fe:01:9c:cd:77:51:3a:ec:9a:9d:e7:cd:7e:e2: 15:13:6d:5f:51:a1:da:fe:93:7b:43:ff:31:28:fb: 64:f1:c0:0c:08:72:4e:0a:14:53:1b:fa:e1:bd:c0: bc:83:db:93:cc:a5:b8:b7:ea:4f:b2:ed:26:cf:44: 61:19:6a:d5:1b:dc:1e:30:30:4f:b8:98:24:37:ae: 7e:3d:60:83:d4:09:2a:ad:61:b6:4f:ca:eb:bf:a2: d6:70:46:1a:86:ab:91:12:e0:84:40:46:76:4c:ef: ef:ca:7f:c6:5b:af:71:8d:6d:22:3a:e9:40:41:80: a6:36:36:ad:68:e8:ef:4c:6c:f3:0d:77:e7:6a:ff: 64:c7:39:85:4b:63:09:50:6c:98:cb:89:8b:d1:9a: 4f:ce:af:94:c2:06:6c:cf:64:32:33:c5:3a:10:21: 08:ab:e1:a7:78:d0:50:78:51:be:1b:e1:48:16:61: 30:cd:09:aa:3e:5b:0f:6e:25:68:67:e8:1a:a4:e2: 11:eb:4a:fb:48:4c:25:70:60:b1:da:57:94:f8:22: a1:d9:7b:21:5d:d7:f1:0e:3f:1c:a6:32:56:ea:05: 36:af:a9:7a:84:15:96:d2:30:d1:74:52:25:52:30: 18:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D8:8D:11:4F:F6:16:22:39:F8:8F:9A:CB:7D:FC:2A:39:F0:EA:F2 X509v3 Authority Key Identifier: keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3136342e302f32322d3232203d3e20313436383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.140.164.0/22 Signature Algorithm: sha256WithRSAEncryption a2:59:d9:f8:48:86:45:2d:e3:b1:8c:b1:ad:2b:12:5e:0e:1b: 0e:9c:53:d4:08:df:99:4c:aa:48:80:70:43:b1:2e:16:45:b0: 5e:fd:d5:ae:bf:2d:9d:c0:36:5e:0d:1e:df:84:05:02:c6:43: e3:f1:7f:29:74:e5:43:98:ad:6b:b9:55:b4:36:c9:ff:db:df: f1:bc:eb:4c:9a:30:39:4c:5d:6e:9c:2d:31:ee:47:47:27:a8: b7:2b:35:be:14:5e:a9:16:08:a5:d4:2a:5d:3f:9b:af:bb:e6: cf:46:0c:09:fd:3a:1c:b8:78:f0:27:bd:b0:be:07:4b:2c:c9: 03:46:6a:72:45:2e:a2:a3:e4:8c:13:70:fd:d5:23:c6:70:dd: 66:01:fd:1b:f4:40:7e:1a:fb:b9:58:4d:1d:7d:b3:24:e3:91: 48:c5:b4:30:bb:27:70:e8:d8:61:a7:2a:c2:c6:cb:e6:5b:39: 64:ab:8c:3d:4a:4f:97:7f:5f:ee:07:ba:4b:49:0d:7f:49:29: 18:37:96:ab:bd:3c:a1:c2:cb:08:51:93:69:9d:ab:84:4d:eb: fc:b7:c8:0c:75:0b:c1:8e:94:5f:81:80:b2:00:ad:ac:36:ca: 2b:5e:d9:f9:b8:b7:8d:0e:3c:fc:b6:e0:06:2e:d5:d0:e8:6f: 85:81:ce:e1 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUbGlePTWj2SbQj7JVB6hEJFWhPcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1 RUJFMDM2MjAeFw0yNjA1MDgwOTM2NTRaFw0yNzA1MDcwOTQxNTRaMDMxMTAvBgNV BAMTKENERDg4RDExNEZGNjE2MjIzOUY4OEY5QUNCN0RGQzJBMzlGMEVBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjkr8rChoj+8KmhkeM28L+AZzN d1E67Jqd581+4hUTbV9Rodr+k3tD/zEo+2TxwAwIck4KFFMb+uG9wLyD25PMpbi3 6k+y7SbPRGEZatUb3B4wME+4mCQ3rn49YIPUCSqtYbZPyuu/otZwRhqGq5ES4IRA RnZM7+/Kf8Zbr3GNbSI66UBBgKY2Nq1o6O9MbPMNd+dq/2THOYVLYwlQbJjLiYvR mk/Or5TCBmzPZDIzxToQIQir4ad40FB4Ub4b4UgWYTDNCao+Ww9uJWhn6Bqk4hHr SvtITCVwYLHaV5T4IqHZeyFd1/EOPxymMlbqBTavqXqEFZbSMNF0UiVSMBh1AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUzdiNEU/2FiI5+I+ay338Kjnw6vIwHwYDVR0j BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzEzOTMyMmUz MTM0MzAyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAsCMpDANBgkqhkiG9w0BAQsFAAOCAQEAolnZ+EiGRS3jsYyx rSsSXg4bDpxT1AjfmUyqSIBwQ7EuFkWwXv3Vrr8tncA2Xg0e34QFAsZD4/F/KXTl Q5ita7lVtDbJ/9vf8bzrTJowOUxdbpwtMe5HRyeotys1vhReqRYIpdQqXT+br7vm z0YMCf06HLh48Ce9sL4HSyzJA0ZqckUuoqPkjBNw/dUjxnDdZgH9G/RAfhr7uVhN HX2zJOORSMW0MLsncOjYYacqwsbL5ls5ZKuMPUpPl39f7ge6S0kNf0kpGDeWq708 ocLLCFGTaZ2rhE3r/LfIDHULwY6UX4GAsgCtrDbKK17Z+bi3jQ48/LbgBi7V0Ohv hYHO4Q== -----END CERTIFICATE-----Generated at Wed May 13 20:55:14 2026 by rpki-client