$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS131486.roa File: AS131486.roa (raw, json) Hash identifier: hv3NrWI7qndb9pwRQZGa9lhEKMv487gLxwAMSFSJIMw= Subject key identifier: 5B:96:67:01:78:6D:A1:8B:3E:02:92:5E:83:EE:C5:30:C6:FE:85:9F Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 7750E9D77F01C5437BF63B6AEA31F4D7B58E3B5D Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS131486.roa Signing time: Thu 16 Apr 2026 06:29:06 +0000 ROA not before: Thu 16 Apr 2026 06:24:06 +0000 ROA not after: Thu 15 Apr 2027 06:29:06 +0000 asID: 131486 IP address blocks: 43.241.112.0/22 maxlen: 24 101.124.0.0/16 maxlen: 24 101.124.0.0/18 maxlen: 18 101.124.22.0/24 maxlen: 24 101.124.62.0/24 maxlen: 24 101.124.64.0/18 maxlen: 18 101.124.128.0/19 maxlen: 19 103.224.220.0/22 maxlen: 24 114.67.64.0/18 maxlen: 24 114.67.128.0/17 maxlen: 24 114.67.128.0/19 maxlen: 19 114.67.136.0/24 maxlen: 24 114.67.150.0/24 maxlen: 24 114.67.152.0/22 maxlen: 22 114.67.156.0/24 maxlen: 24 114.67.159.0/24 maxlen: 24 114.67.160.0/19 maxlen: 19 114.67.192.0/19 maxlen: 19 114.67.224.0/19 maxlen: 19 116.196.64.0/18 maxlen: 24 116.198.0.0/16 maxlen: 24 116.198.0.0/18 maxlen: 18 116.198.11.0/24 maxlen: 24 116.198.64.0/21 maxlen: 21 116.198.72.0/22 maxlen: 22 116.198.80.0/21 maxlen: 21 116.198.96.0/19 maxlen: 19 116.198.144.0/20 maxlen: 20 116.198.160.0/21 maxlen: 21 116.198.168.0/21 maxlen: 21 116.198.176.0/22 maxlen: 22 116.198.180.0/22 maxlen: 22 116.198.192.0/18 maxlen: 18 117.72.0.0/16 maxlen: 24 122.12.0.0/16 maxlen: 24 123.62.0.0/16 maxlen: 24 124.69.0.0/16 maxlen: 24 2402:db40::/32 maxlen: 48 240f:c000::/24 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:50:e9:d7:7f:01:c5:43:7b:f6:3b:6a:ea:31:f4:d7:b5:8e:3b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Apr 16 06:24:06 2026 GMT Not After : Apr 15 06:29:06 2027 GMT Subject: CN=5B966701786DA18B3E02925E83EEC530C6FE859F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:aa:8d:a9:36:80:b4:90:2f:23:44:d5:8b: 9a:5c:54:c7:de:64:4e:86:69:4d:1c:bb:6c:ff:ac: a9:32:60:ae:f4:c3:a5:1a:dd:1f:dc:3f:2b:a7:c2: 4f:5c:de:ac:f3:f2:cc:fa:46:72:06:0a:df:80:42: 48:39:11:b8:39:2e:ca:1f:4b:c3:56:65:f3:be:18: 8a:72:32:50:7b:38:3d:5a:a8:17:32:26:e1:f5:8c: 57:0f:95:a2:48:1d:66:15:77:84:6d:7d:2a:f1:34: fb:54:5c:c2:91:ad:3f:29:5c:3e:16:0a:cf:ef:1c: 6e:35:5b:17:82:6b:1c:89:d4:44:14:bc:8b:76:52: 2d:f7:41:0a:1b:ce:b4:30:31:0d:03:a3:20:56:0d: f3:87:9c:5c:24:b5:ce:35:54:17:e8:d7:73:63:74: 05:1c:74:30:a6:d4:2e:f5:b1:c6:41:b4:cc:59:72: 91:97:e6:17:ef:d9:17:71:87:f3:1c:80:50:14:62: 4e:06:bb:80:22:01:db:43:36:9a:ec:c7:e9:26:cf: 87:62:3c:36:cc:fc:a1:8d:c8:ad:97:01:e1:b3:bc: be:79:7f:58:50:ad:58:bb:2c:99:3b:d2:14:f4:e8: 65:c8:d8:75:ef:0e:74:12:08:48:c5:60:f7:0b:c1: 76:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:96:67:01:78:6D:A1:8B:3E:02:92:5E:83:EE:C5:30:C6:FE:85:9F X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS131486.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.112.0/22 101.124.0.0/16 103.224.220.0/22 114.67.64.0-114.67.255.255 116.196.64.0/18 116.198.0.0/16 117.72.0.0/16 122.12.0.0/16 123.62.0.0/16 124.69.0.0/16 IPv6: 2402:db40::/32 240f:c000::/24 Signature Algorithm: sha256WithRSAEncryption 5a:08:b1:b7:99:2b:13:78:23:97:f3:b8:6a:ee:67:8d:f1:ee: d0:62:b6:f5:48:69:b9:1e:a5:af:57:99:0e:c1:2b:78:55:7a: b6:34:90:e1:9e:bd:63:cd:f9:4f:11:fc:7f:19:29:87:4c:55: 46:98:3b:44:b5:23:18:14:26:a0:77:43:b3:d9:49:cd:c7:43: c7:db:5d:96:21:a4:09:d0:32:ae:01:e2:fc:83:4b:6f:10:40: 5d:eb:f2:dc:d0:3e:d3:f7:7f:0c:1b:69:6b:9d:d7:49:31:eb: 10:c6:19:1d:6c:7a:69:41:5e:71:fa:b0:b9:47:47:4f:5b:1a: 74:38:c0:d6:c8:3f:b6:1b:99:5c:40:d3:d1:2e:d5:0a:fe:65: a3:76:09:8d:d0:9e:af:69:c3:25:c8:8c:ea:50:d1:ac:b9:e4: 50:7b:fc:f1:5c:29:84:e3:11:47:6a:00:59:8e:a8:54:be:06: 64:8d:8e:97:99:ad:f0:73:7a:80:d8:fd:68:a1:43:5e:ea:07: 2c:85:82:67:d3:23:df:2b:c0:a8:07:0f:6d:77:15:f2:9d:ad: 85:b9:cf:1e:5d:93:9c:cb:16:d5:ce:89:3e:fc:d6:66:d4:78: bf:04:23:2c:06:47:86:35:5e:49:41:cb:3b:84:63:60:ea:7f: 5a:16:7e:33 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUd1Dp138BxUN79jtq6jH017WOO10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA0MTYwNjI0MDZaFw0yNzA0MTUwNjI5MDZaMDMxMTAvBgNV BAMTKDVCOTY2NzAxNzg2REExOEIzRTAyOTI1RTgzRUVDNTMwQzZGRTg1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsKqNqTaAtJAvI0TVi5pcVMfe ZE6GaU0cu2z/rKkyYK70w6Ua3R/cPyunwk9c3qzz8sz6RnIGCt+AQkg5Ebg5Lsof S8NWZfO+GIpyMlB7OD1aqBcyJuH1jFcPlaJIHWYVd4RtfSrxNPtUXMKRrT8pXD4W Cs/vHG41WxeCaxyJ1EQUvIt2Ui33QQobzrQwMQ0DoyBWDfOHnFwktc41VBfo13Nj dAUcdDCm1C71scZBtMxZcpGX5hfv2Rdxh/McgFAUYk4Gu4AiAdtDNprsx+kmz4di PDbM/KGNyK2XAeGzvL55f1hQrVi7LJk70hT06GXI2HXvDnQSCEjFYPcLwXaxAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUW5ZnAXhtoYs+ApJeg+7FMMb+hZ8wHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMC9BUzEzMTQ4Ni5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBrBggrBgEFBQcBBwEB/wRcMFowQwQC AAEwPQMEAivxcAMDAGV8AwQCZ+DcMAsDBAZyQ0ADAwJyQAMEBnTEQAMDAHTGAwMA dUgDAwB6DAMDAHs+AwMAfEUwEwQCAAIwDQMFACQC20ADBAAkD8AwDQYJKoZIhvcN AQELBQADggEBAFoIsbeZKxN4I5fzuGruZ43x7tBitvVIabkepa9XmQ7BK3hVerY0 kOGevWPN+U8R/H8ZKYdMVUaYO0S1IxgUJqB3Q7PZSc3HQ8fbXZYhpAnQMq4B4vyD S28QQF3r8tzQPtP3fwwbaWud10kx6xDGGR1semlBXnH6sLlHR09bGnQ4wNbIP7Yb mVxA09Eu1Qr+ZaN2CY3Qnq9pwyXIjOpQ0ay55FB7/PFcKYTjEUdqAFmOqFS+BmSN jpeZrfBzeoDY/WihQ17qByyFgmfTI98rwKgHD213FfKdrYW5zx5dk5zLFtXOiT78 1mbUeL8EIywGR4Y1XklByzuEY2Dqf1oWfjM= -----END CERTIFICATE-----Generated at Fri Apr 17 20:59:37 2026 by rpki-client