$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3136382e302f32322d3232203d3e20313436383137.roa File: 3139322e3134302e3136382e302f32322d3232203d3e20313436383137.roa (raw, json) Hash identifier: nGDtwwcLR3drwEj7x6wpTA67xzJvEwTVCMhPl4IleYU= Subject key identifier: 3C:86:38:D7:8C:FE:5C:70:22:84:18:4F:19:EE:FE:C1:CB:B9:B1:7C Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362 Certificate serial: 3F9CA105513EF1C2A5A354782569B99210B753CE Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3136382e302f32322d3232203d3e20313436383137.roa Signing time: Fri 08 May 2026 09:41:54 +0000 ROA not before: Fri 08 May 2026 09:36:54 +0000 ROA not after: Fri 07 May 2027 09:41:54 +0000 asID: 146817 IP address blocks: 192.140.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:9c:a1:05:51:3e:f1:c2:a5:a3:54:78:25:69:b9:92:10:b7:53:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362 Validity Not Before: May 8 09:36:54 2026 GMT Not After : May 7 09:41:54 2027 GMT Subject: CN=3C8638D78CFE5C702284184F19EEFEC1CBB9B17C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d2:eb:3c:85:46:4c:97:73:62:87:37:51:7c: 99:d8:98:1d:c3:8d:9d:21:ed:de:c7:8d:ab:84:c6: d8:65:64:cb:97:91:bc:2c:07:ac:73:d5:da:04:57: 62:9c:74:07:6d:5f:d6:3b:39:7e:b5:bc:94:3e:d6: 23:ee:ec:11:2b:35:c5:41:92:d4:30:c8:20:9e:b7: 6f:87:2c:71:da:1c:cc:d8:b8:29:8c:a1:ea:39:85: e7:c8:05:73:eb:13:44:70:4d:82:5a:94:f3:00:28: db:17:13:da:ac:90:01:8a:39:2c:22:5b:01:2e:9d: 61:18:2b:d9:61:76:4c:78:29:4f:93:60:be:1c:70: 4d:2e:ef:5b:66:b8:10:ab:46:0a:ca:89:f5:e4:89: ed:09:93:5f:99:18:77:f3:7b:18:41:78:72:a8:39: d0:b1:07:8a:78:14:9f:c9:71:b2:02:04:49:cf:af: b5:12:ad:70:0c:11:cc:bc:39:16:62:78:97:1c:f8: d0:56:32:0f:ee:c0:4a:32:4d:b5:f2:42:e6:03:a5: 2d:ab:43:38:e2:f1:fd:bf:66:9e:f3:4c:c4:fe:7c: 1a:b0:eb:42:61:19:0f:39:8f:8f:49:58:45:4d:ab: b3:7e:de:9c:15:e9:b4:39:f0:7c:fc:28:a5:31:17: 5f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:86:38:D7:8C:FE:5C:70:22:84:18:4F:19:EE:FE:C1:CB:B9:B1:7C X509v3 Authority Key Identifier: keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3136382e302f32322d3232203d3e20313436383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.140.168.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:f3:35:df:2f:2f:21:20:75:fc:b1:f5:73:83:8f:66:4c:2c: 0f:66:73:16:60:e5:a2:e2:e9:b8:72:a3:9a:3d:17:dc:2f:84: 36:d5:a4:42:bf:08:e9:3b:95:e3:8b:0e:ef:ec:4d:ac:2f:cf: 7f:03:a1:ab:23:1f:cc:65:33:57:ee:07:32:2a:8c:2a:77:c9: ad:61:2f:2b:b4:d7:1b:49:3f:f9:a3:62:f7:bb:f7:69:cd:d2: cc:e5:79:80:5a:b9:b9:d7:0b:3b:a4:d9:e8:cb:4c:82:94:6d: 9c:20:84:35:35:41:ed:83:05:d8:78:26:71:fc:cb:e2:1b:df: df:7a:25:5a:da:05:76:74:9b:14:6f:65:fb:b5:40:20:8d:95: 87:6e:b4:80:7a:1f:7b:a3:9a:0c:52:c6:24:ba:62:36:26:01: f9:16:7c:c1:76:84:6f:84:d1:7a:7d:76:e7:44:1f:da:d2:f5: a0:76:81:46:64:df:d3:92:e9:a9:63:0a:b6:4d:9c:b5:3f:17: 75:52:31:0d:6e:5b:54:f2:5b:19:58:c0:bb:ee:01:1e:50:18: 5c:46:8b:45:34:4f:93:62:d1:7f:ce:b5:cb:ca:ea:87:7e:74: fc:71:a1:8a:a1:33:96:5b:93:c8:62:de:3c:80:bd:59:b5:f2: 95:6e:b6:f7 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUP5yhBVE+8cKlo1R4JWm5khC3U84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1 RUJFMDM2MjAeFw0yNjA1MDgwOTM2NTRaFw0yNzA1MDcwOTQxNTRaMDMxMTAvBgNV BAMTKDNDODYzOEQ3OENGRTVDNzAyMjg0MTg0RjE5RUVGRUMxQ0JCOUIxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ0us8hUZMl3NihzdRfJnYmB3D jZ0h7d7HjauExthlZMuXkbwsB6xz1doEV2KcdAdtX9Y7OX61vJQ+1iPu7BErNcVB ktQwyCCet2+HLHHaHMzYuCmMoeo5hefIBXPrE0RwTYJalPMAKNsXE9qskAGKOSwi WwEunWEYK9lhdkx4KU+TYL4ccE0u71tmuBCrRgrKifXkie0Jk1+ZGHfzexhBeHKo OdCxB4p4FJ/JcbICBEnPr7USrXAMEcy8ORZieJcc+NBWMg/uwEoyTbXyQuYDpS2r Qzji8f2/Zp7zTMT+fBqw60JhGQ85j49JWEVNq7N+3pwV6bQ58Hz8KKUxF19RAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUPIY414z+XHAihBhPGe7+wcu5sXwwHwYDVR0j BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzEzOTMyMmUz MTM0MzAyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAsCMqDANBgkqhkiG9w0BAQsFAAOCAQEALfM13y8vISB1/LH1 c4OPZkwsD2ZzFmDlouLpuHKjmj0X3C+ENtWkQr8I6TuV44sO7+xNrC/PfwOhqyMf zGUzV+4HMiqMKnfJrWEvK7TXG0k/+aNi97v3ac3SzOV5gFq5udcLO6TZ6MtMgpRt nCCENTVB7YMF2HgmcfzL4hvf33olWtoFdnSbFG9l+7VAII2Vh260gHofe6OaDFLG JLpiNiYB+RZ8wXaEb4TRen1250Qf2tL1oHaBRmTf05LpqWMKtk2ctT8XdVIxDW5b VPJbGVjAu+4BHlAYXEaLRTRPk2LRf861y8rqh350/HGhiqEzlluTyGLePIC9WbXy lW629w== -----END CERTIFICATE-----Generated at Wed May 13 20:55:12 2026 by rpki-client