$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e302e302f32322d3232203d3e2034383039.roa File: 3134342e372e302e302f32322d3232203d3e2034383039.roa (raw, json) Hash identifier: MuBGww8ZWg87hxxbBMNgJSTP8k3GuSu+zwNQ2BVlxAk= Subject key identifier: 86:CE:08:DE:A3:9C:B6:86:25:D6:2C:04:C1:5B:C3:47:F2:B1:84:04 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 78DD0FC9E2ED596074BEA414648AC723D7F68DCF Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e302e302f32322d3232203d3e2034383039.roa Signing time: Fri 12 Jun 2026 16:09:53 +0000 ROA not before: Fri 12 Jun 2026 16:04:53 +0000 ROA not after: Fri 11 Jun 2027 16:09:53 +0000 asID: 4809 IP address blocks: 144.7.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 17:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:dd:0f:c9:e2:ed:59:60:74:be:a4:14:64:8a:c7:23:d7:f6:8d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Jun 12 16:04:53 2026 GMT Not After : Jun 11 16:09:53 2027 GMT Subject: CN=86CE08DEA39CB68625D62C04C15BC347F2B18404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ed:a9:9b:97:93:79:01:d1:10:70:86:bc:e6: af:1f:25:91:79:b7:54:c2:46:b2:92:80:1e:a8:b7: 10:51:fb:42:e1:8e:bd:ed:01:37:07:f7:00:ad:e0: 86:a2:63:5d:6e:85:75:6f:fa:dd:1e:ef:41:30:db: e4:3b:c1:7e:6f:3e:64:9d:4c:cd:f6:cb:07:d6:58: a4:a9:7d:2d:15:df:90:33:00:f7:92:34:7d:c8:46: d2:a2:25:6b:45:1b:77:44:f2:37:2f:81:42:14:c8: b4:93:f7:ad:f7:3d:3f:26:9d:1c:1d:3d:63:e7:d9: 1f:5a:6e:f7:cd:8d:66:78:b0:6c:cc:38:e4:23:36: 76:0b:7a:f2:33:1a:3b:70:65:24:1c:1d:60:50:f6: 03:24:db:78:04:06:1e:27:03:30:bc:a7:d4:70:44: b7:a4:4c:a1:eb:ae:ff:50:42:43:1d:e1:bb:e6:6f: 3c:61:cf:41:c6:0b:75:ef:40:c6:11:b3:2d:5e:11: cb:ff:00:de:2a:1f:ff:9d:f0:cc:b8:57:42:4e:02: e6:d3:de:08:3e:6c:1c:01:f3:a7:68:ae:ba:45:69: 88:07:6c:1a:d9:ed:7e:77:01:ed:04:da:ce:a6:7c: 67:f4:a1:21:cd:5a:e5:53:17:9a:00:bf:46:33:c9: d8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CE:08:DE:A3:9C:B6:86:25:D6:2C:04:C1:5B:C3:47:F2:B1:84:04 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e302e302f32322d3232203d3e2034383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.7.0.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:58:1f:a9:83:1b:37:81:00:8b:c2:41:4f:25:6f:b0:1d:e0: ac:32:c3:7e:70:bc:84:85:49:55:cd:f4:93:ac:75:e5:ee:22: 9e:7c:0a:ec:77:f9:70:7f:05:6e:76:d5:14:2d:67:1d:87:07: 34:67:99:e6:c0:60:d1:87:73:e8:fd:e9:21:79:01:96:eb:70: 73:31:eb:c5:fa:c8:ea:30:e0:9f:81:ee:01:8a:1b:08:b3:0f: 42:bb:36:1c:f5:54:24:4e:0e:3f:a5:e0:e2:99:6a:89:5b:65: 86:08:55:72:e7:26:5e:3f:ae:40:66:87:09:66:fe:ce:97:d0: 7c:64:8c:21:ef:c6:59:6d:89:3f:97:23:08:d1:34:f4:32:a7: f2:22:c7:d4:10:ce:a2:ea:48:e9:6c:44:88:49:fb:e3:7a:00: 6f:60:c4:3d:01:63:26:7e:6b:67:43:a6:38:0c:28:be:96:f1: c3:a7:c7:8b:f6:4e:a9:0f:fd:0c:1b:8d:3a:5d:54:a5:82:2a: 80:c8:9f:04:df:9d:8a:82:1c:1d:b9:d8:2d:49:9b:d8:9a:f0: 20:4c:5b:a5:5f:aa:10:ba:92:10:29:ed:02:ea:01:e8:67:ce: 93:7c:50:0d:68:6b:9a:c6:21:25:49:35:c4:1b:48:69:58:a9: e3:45:09:ec -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUeN0PyeLtWWB0vqQUZIrHI9f2jc8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYxMjE2MDQ1M1oX DTI3MDYxMTE2MDk1M1owMzExMC8GA1UEAxMoODZDRTA4REVBMzlDQjY4NjI1RDYy QzA0QzE1QkMzNDdGMkIxODQwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPtqZuXk3kB0RBwhrzmrx8lkXm3VMJGspKAHqi3EFH7QuGOve0BNwf3AK3g hqJjXW6FdW/63R7vQTDb5DvBfm8+ZJ1MzfbLB9ZYpKl9LRXfkDMA95I0fchG0qIl a0Ubd0TyNy+BQhTItJP3rfc9PyadHB09Y+fZH1pu982NZniwbMw45CM2dgt68jMa O3BlJBwdYFD2AyTbeAQGHicDMLyn1HBEt6RMoeuu/1BCQx3hu+ZvPGHPQcYLde9A xhGzLV4Ry/8A3iof/53wzLhXQk4C5tPeCD5sHAHzp2iuukVpiAdsGtntfncB7QTa zqZ8Z/ShIc1a5VMXmgC/RjPJ2AECAwEAAaOCAgswggIHMB0GA1UdDgQWBBSGzgje o5y2hiXWLATBW8NH8rGEBDAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBhAYIKwYBBQUHAQsEeDB2MHQGCCsGAQUF BzALhmhyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0MDI5 MDU5NzY4MzUvMC8zMTM0MzQyZTM3MmUzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2Uy MDM0MzgzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCkAcAMA0GCSqGSIb3DQEBCwUAA4IBAQBfWB+p gxs3gQCLwkFPJW+wHeCsMsN+cLyEhUlVzfSTrHXl7iKefArsd/lwfwVudtUULWcd hwc0Z5nmwGDRh3Po/ekheQGW63BzMevF+sjqMOCfge4BihsIsw9CuzYc9VQkTg4/ peDimWqJW2WGCFVy5yZeP65AZocJZv7Ol9B8ZIwh78ZZbYk/lyMI0TT0MqfyIsfU EM6i6kjpbESISfvjegBvYMQ9AWMmfmtnQ6Y4DCi+lvHDp8eL9k6pD/0MG406XVSl giqAyJ8E352KghwdudgtSZvYmvAgTFulX6oQupIQKe0C6gHoZ86TfFANaGuaxiEl STXEG0hpWKnjRQns -----END CERTIFICATE-----Generated at Sat Jun 13 09:44:34 2026 by rpki-client