$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3137362e302f32322d3232203d3e20313436383137.roa File: 3139322e3134302e3137362e302f32322d3232203d3e20313436383137.roa (raw, json) Hash identifier: AdXz0A1bjG88Ks6LMVLkz2yElXRJTxMJIj0RqSyIQLQ= Subject key identifier: 69:11:2A:CD:83:74:FB:54:46:DF:B5:6A:61:96:9F:B9:9F:4A:46:10 Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362 Certificate serial: 02A0D3E1EC40172AE87E97AD5B75639355812261 Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3137362e302f32322d3232203d3e20313436383137.roa Signing time: Fri 08 May 2026 09:47:15 +0000 ROA not before: Fri 08 May 2026 09:42:15 +0000 ROA not after: Fri 07 May 2027 09:47:15 +0000 asID: 146817 IP address blocks: 192.140.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a0:d3:e1:ec:40:17:2a:e8:7e:97:ad:5b:75:63:93:55:81:22:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362 Validity Not Before: May 8 09:42:15 2026 GMT Not After : May 7 09:47:15 2027 GMT Subject: CN=69112ACD8374FB5446DFB56A61969FB99F4A4610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cd:d5:4d:46:75:83:65:cd:75:6e:e9:1e:84: f1:70:33:d5:6f:33:c3:b0:87:ee:07:18:31:05:10: a5:ef:8c:b2:f3:71:b2:a8:66:fe:38:94:2f:8e:f9: 9b:c2:c5:0a:5a:68:b5:72:dd:c8:8f:f5:5e:20:f0: 77:89:52:46:c2:e3:94:cb:57:55:b4:05:d9:f0:6d: 9e:8b:a2:e4:d2:15:89:90:89:de:4d:dc:1c:9e:f9: 32:3c:42:12:b8:69:87:96:31:4e:3d:81:a2:99:ff: bb:e9:5b:38:14:98:b9:d6:7f:47:52:bb:42:6a:c0: 90:ac:9e:93:39:45:6e:42:9d:88:b8:9c:d9:85:e3: b9:1f:7e:e4:d7:d3:8c:47:11:33:0f:f3:d0:55:85: 2a:c5:89:7f:8a:32:aa:9c:2a:9f:54:9c:4b:24:f0: 6b:f6:d1:55:a1:69:fd:d3:bc:60:bb:ec:29:79:9c: 71:a9:99:e0:b9:ba:c8:42:06:49:1c:d2:7d:c2:e9: 18:3a:16:4a:31:5d:3e:91:f1:b6:02:35:8d:c2:26: ef:1e:62:f6:03:43:26:11:c7:7e:ac:42:1f:2e:43: e5:d8:40:0d:10:36:cf:72:1f:99:68:ca:49:5d:83: bd:99:89:91:4c:9e:1c:36:9a:fa:6c:f4:17:52:23: 39:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:11:2A:CD:83:74:FB:54:46:DF:B5:6A:61:96:9F:B9:9F:4A:46:10 X509v3 Authority Key Identifier: keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3137362e302f32322d3232203d3e20313436383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.140.176.0/22 Signature Algorithm: sha256WithRSAEncryption 00:38:ad:70:5c:dd:d7:d0:a4:5b:eb:05:fc:6c:bd:51:44:a3: 33:5b:1a:15:2d:e0:cc:8d:7b:30:9a:9e:6f:fd:fb:73:f8:bc: 60:fd:a2:5b:cd:0b:86:2c:ca:cc:b3:d2:0e:1d:e7:10:ac:c2: 43:f3:28:1b:45:66:93:ec:d8:78:03:d7:76:96:2a:e4:33:9c: f8:af:24:8f:0f:f3:51:6c:a4:c4:c8:f8:cc:1c:8b:94:d0:fb: 6b:4a:5d:ec:47:97:91:56:02:b7:69:b8:0e:2c:85:a6:2b:b5: ea:98:22:05:33:73:ff:36:17:f3:35:37:2a:23:67:09:f3:f5: c7:a7:6b:b7:fd:a2:af:ac:80:88:e7:50:73:f8:dd:4b:08:08: 68:e4:84:da:bf:f6:62:da:76:37:3b:1c:d9:37:56:f2:88:8d: 5a:04:af:52:3b:2d:07:b0:4d:1f:63:40:f6:9b:9d:c8:64:ca: d7:0e:11:26:92:8a:3e:0b:e0:82:8e:1f:b3:c1:78:a9:db:ca: 03:2b:41:09:11:a1:38:a6:cd:63:4b:d4:f3:7a:df:39:6e:73: 96:1b:fe:4f:39:b9:88:65:5c:d2:23:06:31:36:d4:22:75:c8: ac:ad:b2:2b:99:d2:e8:5b:a7:58:a6:2d:a6:e4:d4:5e:9b:9d: a3:0a:27:86 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUAqDT4exAFyrofpetW3Vjk1WBImEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1 RUJFMDM2MjAeFw0yNjA1MDgwOTQyMTVaFw0yNzA1MDcwOTQ3MTVaMDMxMTAvBgNV BAMTKDY5MTEyQUNEODM3NEZCNTQ0NkRGQjU2QTYxOTY5RkI5OUY0QTQ2MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEzdVNRnWDZc11bukehPFwM9Vv M8Owh+4HGDEFEKXvjLLzcbKoZv44lC+O+ZvCxQpaaLVy3ciP9V4g8HeJUkbC45TL V1W0BdnwbZ6LouTSFYmQid5N3Bye+TI8QhK4aYeWMU49gaKZ/7vpWzgUmLnWf0dS u0JqwJCsnpM5RW5CnYi4nNmF47kffuTX04xHETMP89BVhSrFiX+KMqqcKp9UnEsk 8Gv20VWhaf3TvGC77Cl5nHGpmeC5ushCBkkc0n3C6Rg6FkoxXT6R8bYCNY3CJu8e YvYDQyYRx36sQh8uQ+XYQA0QNs9yH5loykldg72ZiZFMnhw2mvps9BdSIzkHAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUaREqzYN0+1RG37VqYZafuZ9KRhAwHwYDVR0j BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzEzOTMyMmUz MTM0MzAyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAsCMsDANBgkqhkiG9w0BAQsFAAOCAQEAADitcFzd19CkW+sF /Gy9UUSjM1saFS3gzI17MJqeb/37c/i8YP2iW80LhizKzLPSDh3nEKzCQ/MoG0Vm k+zYeAPXdpYq5DOc+K8kjw/zUWykxMj4zByLlND7a0pd7EeXkVYCt2m4DiyFpiu1 6pgiBTNz/zYX8zU3KiNnCfP1x6drt/2ir6yAiOdQc/jdSwgIaOSE2r/2Ytp2Nzsc 2TdW8oiNWgSvUjstB7BNH2NA9pudyGTK1w4RJpKKPgvggo4fs8F4qdvKAytBCRGh OKbNY0vU83rfOW5zlhv+Tzm5iGVc0iMGMTbUInXIrK2yK5nS6FunWKYtpuTUXpud owonhg== -----END CERTIFICATE-----Generated at Wed May 13 20:55:11 2026 by rpki-client