$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS135377.roa File: AS135377.roa (raw, json) Hash identifier: 0TgUONzFV8lNd0jopT12jgLwNazd/6SepxXD+2igQdM= Subject key identifier: 6B:3F:16:1D:EC:9C:99:D0:D4:75:3C:33:09:4E:77:2D:F5:68:03:E7 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 5BD14248B3929C64FA6794682633CC5D48D1447F Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS135377.roa Signing time: Wed 09 Sep 2026 05:11:58 +0000 ROA not before: Wed 09 Sep 2026 05:06:58 +0000 ROA not after: Wed 08 Sep 2027 05:11:58 +0000 asID: 135377 IP address blocks: 42.240.250.0/24 maxlen: 24 42.240.251.0/24 maxlen: 24 42.240.252.0/24 maxlen: 24 42.240.253.0/24 maxlen: 24 42.240.254.0/24 maxlen: 24 42.240.255.0/24 maxlen: 24 101.237.228.0/24 maxlen: 24 101.237.229.0/24 maxlen: 24 101.237.230.0/24 maxlen: 24 101.237.231.0/24 maxlen: 24 101.237.232.0/24 maxlen: 24 101.237.233.0/24 maxlen: 24 101.237.234.0/24 maxlen: 24 101.237.235.0/24 maxlen: 24 101.237.236.0/24 maxlen: 24 101.237.237.0/24 maxlen: 24 101.237.238.0/24 maxlen: 24 101.237.239.0/24 maxlen: 24 101.237.240.0/24 maxlen: 24 101.237.241.0/24 maxlen: 24 101.237.242.0/24 maxlen: 24 101.237.243.0/24 maxlen: 24 101.237.244.0/24 maxlen: 24 101.237.246.0/24 maxlen: 24 101.237.247.0/24 maxlen: 24 101.237.248.0/24 maxlen: 24 101.237.249.0/24 maxlen: 24 101.237.251.0/24 maxlen: 24 101.237.252.0/24 maxlen: 24 101.237.253.0/24 maxlen: 24 101.237.254.0/24 maxlen: 24 101.237.255.0/24 maxlen: 24 106.75.192.0/24 maxlen: 24 106.75.193.0/24 maxlen: 24 106.75.194.0/24 maxlen: 24 106.75.195.0/24 maxlen: 24 106.75.196.0/24 maxlen: 24 106.75.197.0/24 maxlen: 24 106.75.198.0/24 maxlen: 24 106.75.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d1:42:48:b3:92:9c:64:fa:67:94:68:26:33:cc:5d:48:d1:44:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Sep 9 05:06:58 2026 GMT Not After : Sep 8 05:11:58 2027 GMT Subject: CN=6B3F161DEC9C99D0D4753C33094E772DF56803E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2e:08:af:07:f6:7f:0d:5f:39:b8:31:1d:2f: 06:d5:70:5a:6e:1b:4e:9b:ff:4c:0f:33:fa:07:b0: ac:1c:5c:fc:75:ae:a8:68:2b:f5:c5:1c:cd:42:d9: 60:4e:cc:26:e1:8e:f6:bc:81:2d:e7:38:bd:e1:d3: 79:6e:db:9c:c7:c4:a1:02:a5:44:69:f1:8e:41:32: f7:78:5f:dd:d9:e1:a2:2f:a8:87:08:83:3d:97:6c: 32:12:5d:bc:4a:3c:5b:e2:3d:d8:41:39:42:42:87: ca:1b:f4:d0:50:f1:8a:06:d5:6f:d3:0e:63:d3:76: 52:43:c7:9f:05:80:72:26:d7:2a:ca:a6:ed:1f:8d: a8:a8:a0:08:93:8c:80:b9:e0:53:13:ef:06:f8:5f: 4b:a8:31:db:9e:02:61:94:dd:58:83:c2:50:b1:77: f8:fa:50:c9:c0:6a:1f:36:3b:19:e9:f2:9e:db:90: 0a:18:50:3f:11:28:36:cb:4d:0a:11:79:2f:14:38: 99:bb:71:af:c7:b2:73:02:54:16:cc:bd:d4:2f:2c: 39:f4:15:e0:96:f6:37:dd:4e:0c:88:93:b7:55:5c: 70:f0:a5:c3:90:56:9d:0b:a3:0a:f3:f9:c8:f1:f9: 53:b3:29:72:49:89:7c:38:c7:ed:2f:0c:5b:1c:21: 6c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3F:16:1D:EC:9C:99:D0:D4:75:3C:33:09:4E:77:2D:F5:68:03:E7 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS135377.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.240.250.0-42.240.255.255 101.237.228.0-101.237.244.255 101.237.246.0-101.237.249.255 101.237.251.0-101.237.255.255 106.75.192.0/21 Signature Algorithm: sha256WithRSAEncryption 57:f3:05:56:87:bd:c2:f9:56:1c:56:5b:36:d9:81:25:aa:bd: 1f:89:30:6e:a4:17:25:aa:da:3c:ed:10:e1:62:f1:3f:1c:c8: 99:ff:0e:91:3a:28:fa:ea:23:a3:ec:a5:20:33:45:d2:94:10: 1c:2b:b5:c3:71:20:f5:36:f5:1b:f1:ec:7b:f8:e7:f6:15:35: 3c:19:83:c5:64:9a:00:32:7c:24:0d:66:e1:6e:3b:44:22:a4: a0:19:64:90:84:12:10:76:13:0a:db:b2:4d:85:d9:fe:64:2f: 23:0d:ab:a3:9b:da:2c:a0:aa:bc:29:8e:f3:ca:b9:81:42:40: e0:e6:5b:1f:d4:f0:ff:09:71:16:62:f9:7a:7e:d7:2c:ab:bc: a8:eb:c5:95:4e:9f:04:11:6a:81:09:46:49:ba:2a:fc:06:89: d6:dd:4d:43:67:96:ff:23:62:bc:cc:2b:76:61:dd:22:e5:ba: 09:ac:8b:20:0f:eb:d2:b0:50:81:2e:a4:69:14:87:6d:cd:20: 48:85:cf:11:3e:57:16:75:ac:4e:39:10:59:08:f7:ad:af:22: cb:1c:0f:8a:f9:7c:3c:f2:f0:57:c4:ab:41:4b:f8:1a:28:32: a0:8b:4b:62:71:2e:ab:c4:89:0a:6c:65:22:c5:2a:df:9f:fc: 66:1d:42:1c -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUW9FCSLOSnGT6Z5RoJjPMXUjRRH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA5MDkwNTA2NThaFw0yNzA5MDgwNTExNThaMDMxMTAvBgNV BAMTKDZCM0YxNjFERUM5Qzk5RDBENDc1M0MzMzA5NEU3NzJERjU2ODAzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDALgivB/Z/DV85uDEdLwbVcFpu G06b/0wPM/oHsKwcXPx1rqhoK/XFHM1C2WBOzCbhjva8gS3nOL3h03lu25zHxKEC pURp8Y5BMvd4X93Z4aIvqIcIgz2XbDISXbxKPFviPdhBOUJCh8ob9NBQ8YoG1W/T DmPTdlJDx58FgHIm1yrKpu0fjaiooAiTjIC54FMT7wb4X0uoMdueAmGU3ViDwlCx d/j6UMnAah82Oxnp8p7bkAoYUD8RKDbLTQoReS8UOJm7ca/HsnMCVBbMvdQvLDn0 FeCW9jfdTgyIk7dVXHDwpcOQVp0Lowrz+cjx+VOzKXJJiXw4x+0vDFscIWy3AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUaz8WHeycmdDUdTwzCU53LfVoA+cwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC9BUzEzNTM3Ny5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBVBggrBgEFBQcBBwEB/wRGMEQwQgQC AAEwPDALAwQBKvD6AwMAKvAwDAMEAmXt5AMEAGXt9DAMAwQBZe32AwQBZe34MAsD BABl7fsDAwFl7AMEA2pLwDANBgkqhkiG9w0BAQsFAAOCAQEAV/MFVoe9wvlWHFZb NtmBJaq9H4kwbqQXJaraPO0Q4WLxPxzImf8OkToo+uojo+ylIDNF0pQQHCu1w3Eg 9Tb1G/Hse/jn9hU1PBmDxWSaADJ8JA1m4W47RCKkoBlkkIQSEHYTCtuyTYXZ/mQv Iw2ro5vaLKCqvCmO88q5gUJA4OZbH9Tw/wlxFmL5en7XLKu8qOvFlU6fBBFqgQlG Sboq/AaJ1t1NQ2eW/yNivMwrdmHdIuW6CayLIA/r0rBQgS6kaRSHbc0gSIXPET5X FnWsTjkQWQj3ra8iyxwPivl8PPLwV8SrQUv4GigyoItLYnEuq8SJCmxlIsUq35/8 Zh1CHA== -----END CERTIFICATE-----Generated at Mon Sep 21 05:58:11 2026 by rpki-client