$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3138342e302f32322d3232203d3e20313436383137.roa File: 3139322e3134302e3138342e302f32322d3232203d3e20313436383137.roa (raw, json) Hash identifier: kNlKV1QIQTPtGGC4bqyKVn8C4zcxZzD42xU46XUJrik= Subject key identifier: BC:E0:54:30:EB:E6:71:B3:DA:B6:22:D8:4B:08:A1:B1:71:26:CA:95 Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362 Certificate serial: 459ED36B70F6C921A8FB2F5140052A88D4E2A6A5 Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3138342e302f32322d3232203d3e20313436383137.roa Signing time: Fri 08 May 2026 09:47:16 +0000 ROA not before: Fri 08 May 2026 09:42:16 +0000 ROA not after: Fri 07 May 2027 09:47:16 +0000 asID: 146817 IP address blocks: 192.140.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9e:d3:6b:70:f6:c9:21:a8:fb:2f:51:40:05:2a:88:d4:e2:a6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362 Validity Not Before: May 8 09:42:16 2026 GMT Not After : May 7 09:47:16 2027 GMT Subject: CN=BCE05430EBE671B3DAB622D84B08A1B17126CA95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:cd:58:ca:9f:2e:27:44:16:51:ce:0b:d4: cf:1f:5c:89:f5:ca:4a:0b:b5:a3:6a:66:e1:ff:b4: 7a:b6:db:88:87:7c:d1:90:2c:93:91:a1:4c:ba:1b: 6f:39:8a:17:16:ff:e1:bb:74:34:9e:59:7b:16:d4: 7d:f9:4a:ab:a0:17:d3:3e:05:b5:2a:e7:c0:90:13: 4d:16:ca:63:df:3a:fd:be:ca:82:ce:43:1a:29:65: fc:25:fa:3e:c8:38:55:6f:ec:b2:0c:bc:42:31:d1: a7:a5:14:b4:b3:ed:2f:e0:eb:11:50:62:f4:f6:f9: a5:c2:2d:f9:31:f8:88:13:03:e5:c6:06:7b:8d:d8: 05:97:89:8d:98:ec:da:aa:ce:24:c5:b1:7a:d0:d6: 82:7d:09:dc:d0:11:01:45:eb:0c:c6:42:0a:64:30: 4e:67:33:e6:77:09:37:3f:4e:18:32:08:37:eb:16: f2:fe:9f:d3:58:6f:f6:a1:bb:ad:7c:35:38:36:8a: 5e:9c:40:d3:af:bc:14:a7:5a:1e:4f:82:15:63:bc: dc:81:db:fa:8e:1e:14:59:3d:7f:0d:e2:ad:a1:a8: 5f:09:f7:3d:6e:12:88:fc:cb:cb:f7:6d:b4:e7:8d: 67:54:b3:da:8b:4e:a1:6a:dc:6f:d2:73:d9:b8:1d: 6f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E0:54:30:EB:E6:71:B3:DA:B6:22:D8:4B:08:A1:B1:71:26:CA:95 X509v3 Authority Key Identifier: keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3138342e302f32322d3232203d3e20313436383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.140.184.0/22 Signature Algorithm: sha256WithRSAEncryption 06:b2:e9:8a:12:8c:ad:99:f3:ab:86:61:6f:37:6a:f2:7c:a2: 00:89:5d:b4:b2:4e:60:66:75:04:49:ac:83:83:e4:09:d8:7f: 48:36:be:4b:08:61:af:7f:f7:67:d5:63:a8:18:a8:8a:54:ad: 55:63:b5:d4:9c:0d:29:b2:ff:47:c5:7f:28:3e:da:3e:5c:ba: 97:2e:a0:3e:c5:66:21:e4:aa:93:c9:b2:59:c8:7a:c9:8e:41: 1d:ca:ca:1c:fc:05:30:f7:66:ed:94:32:95:bb:7d:bd:13:1e: 3d:7c:11:9e:60:a8:ba:61:5d:b8:63:64:8d:69:50:6d:d2:f2: 8f:17:54:29:91:9a:db:68:4d:8b:f0:2e:6b:a0:4c:c1:e1:36: 6b:49:35:29:ce:64:ba:c8:11:2e:7b:55:0a:68:ab:d7:f1:64: b9:14:eb:e6:bf:25:46:aa:ea:09:a8:ea:da:18:0f:0b:5b:df: 0c:ed:0e:c5:11:a8:2e:39:79:f6:a1:13:89:d4:5f:97:8e:a6: b5:9e:ba:ab:5f:98:b2:76:ed:a2:08:b7:99:f5:50:3f:5e:09: 04:ff:0e:8b:4b:72:19:8e:5b:d3:8f:d9:12:5f:6d:3a:b3:94: 87:e9:03:c3:89:3a:8a:38:48:08:f8:53:68:74:a0:99:f4:b3: 4f:34:8d:78 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIURZ7Ta3D2ySGo+y9RQAUqiNTipqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1 RUJFMDM2MjAeFw0yNjA1MDgwOTQyMTZaFw0yNzA1MDcwOTQ3MTZaMDMxMTAvBgNV BAMTKEJDRTA1NDMwRUJFNjcxQjNEQUI2MjJEODRCMDhBMUIxNzEyNkNBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMM1Yyp8uJ0QWUc4L1M8fXIn1 ykoLtaNqZuH/tHq224iHfNGQLJORoUy6G285ihcW/+G7dDSeWXsW1H35SqugF9M+ BbUq58CQE00WymPfOv2+yoLOQxopZfwl+j7IOFVv7LIMvEIx0aelFLSz7S/g6xFQ YvT2+aXCLfkx+IgTA+XGBnuN2AWXiY2Y7NqqziTFsXrQ1oJ9CdzQEQFF6wzGQgpk ME5nM+Z3CTc/ThgyCDfrFvL+n9NYb/ahu618NTg2il6cQNOvvBSnWh5PghVjvNyB 2/qOHhRZPX8N4q2hqF8J9z1uEoj8y8v3bbTnjWdUs9qLTqFq3G/Sc9m4HW/LAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUvOBUMOvmcbPatiLYSwihsXEmypUwHwYDVR0j BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzEzOTMyMmUz MTM0MzAyZTMxMzgzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAsCMuDANBgkqhkiG9w0BAQsFAAOCAQEABrLpihKMrZnzq4Zh bzdq8nyiAIldtLJOYGZ1BEmsg4PkCdh/SDa+Swhhr3/3Z9VjqBioilStVWO11JwN KbL/R8V/KD7aPly6ly6gPsVmIeSqk8myWch6yY5BHcrKHPwFMPdm7ZQylbt9vRMe PXwRnmCoumFduGNkjWlQbdLyjxdUKZGa22hNi/Aua6BMweE2a0k1Kc5kusgRLntV Cmir1/FkuRTr5r8lRqrqCajq2hgPC1vfDO0OxRGoLjl59qETidRfl46mtZ66q1+Y snbtogi3mfVQP14JBP8Oi0tyGY5b04/ZEl9tOrOUh+kDw4k6ijhICPhTaHSgmfSz TzSNeA== -----END CERTIFICATE-----Generated at Wed May 13 20:55:13 2026 by rpki-client