$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS137753.roa File: AS137753.roa (raw, json) Hash identifier: 4+RHeerb+nMVnV6wUIKmstQv6v3WIzsDcvJF0B7glsg= Subject key identifier: C9:0C:2F:A9:32:49:15:DE:D8:FA:71:0C:B2:22:B7:3A:D7:E1:3C:1F Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 500384CA080F7BF0F6C2689A51B741674AD34154 Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS137753.roa Signing time: Thu 16 Apr 2026 06:17:21 +0000 ROA not before: Thu 16 Apr 2026 06:12:21 +0000 ROA not after: Thu 15 Apr 2027 06:17:21 +0000 asID: 137753 IP address blocks: 1.118.0.0/16 maxlen: 24 1.118.32.0/22 maxlen: 24 1.118.32.0/24 maxlen: 24 1.118.33.0/24 maxlen: 24 1.118.34.0/24 maxlen: 24 1.118.35.0/24 maxlen: 24 1.118.36.0/24 maxlen: 24 1.118.48.0/20 maxlen: 24 1.118.64.0/19 maxlen: 24 2402:db40::/32 maxlen: 48 2403:1ec0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:03:84:ca:08:0f:7b:f0:f6:c2:68:9a:51:b7:41:67:4a:d3:41:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Apr 16 06:12:21 2026 GMT Not After : Apr 15 06:17:21 2027 GMT Subject: CN=C90C2FA9324915DED8FA710CB222B73AD7E13C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:59:f2:ef:8f:99:7d:ea:25:d4:75:9b:50:84: 3a:d4:42:44:aa:ca:36:fe:f5:20:57:dd:ba:cc:ed: ba:4c:93:6f:59:57:46:a1:75:88:7c:de:0e:0c:31: 3e:76:45:d2:54:35:e0:ed:ce:5f:9a:54:59:18:92: 89:67:d4:9e:70:07:01:01:4f:af:4f:88:6d:be:a1: 82:86:d1:fa:4e:01:9d:28:62:e9:b0:60:bb:6d:83: 26:f7:48:ad:f7:50:bb:f9:61:ce:75:27:a2:44:ad: c9:ec:6a:9d:d5:36:68:96:5b:d3:d3:b5:9a:59:44: 97:fe:56:4f:16:27:dc:38:60:2d:a3:5c:0f:60:99: 8d:bc:85:df:14:d0:e3:e1:dc:41:73:1f:4a:2c:74: bb:fe:62:6c:99:f5:a6:fd:45:b7:7d:5f:ba:02:b8: 52:6e:d7:34:e9:29:cc:94:95:f1:b2:7a:47:3d:f7: 53:6b:07:57:54:f6:92:07:a3:90:31:e0:c8:a0:d3: 42:95:af:cb:dd:1e:e8:40:08:de:03:c4:1f:13:e2: a9:fa:42:06:3c:84:b9:a7:62:f2:e2:3d:f1:35:ec: c9:37:ed:e2:6a:72:b7:bb:8b:9a:57:66:a1:1c:60: 29:0b:9e:c4:52:cb:d3:ac:4b:48:89:3d:05:48:35: d9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0C:2F:A9:32:49:15:DE:D8:FA:71:0C:B2:22:B7:3A:D7:E1:3C:1F X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS137753.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.118.0.0/16 IPv6: 2402:db40::/32 2403:1ec0::/32 Signature Algorithm: sha256WithRSAEncryption 16:1a:21:b6:45:24:1a:d2:57:0c:83:57:56:7a:51:7c:61:bb: b5:b2:d0:04:e1:9e:8d:83:de:b8:bc:f7:9d:ab:23:19:61:fb: 24:8f:9f:95:3a:ca:fa:91:12:ff:d8:86:77:16:46:81:93:7e: ad:c6:32:ce:d2:c9:39:f4:cc:6a:9e:52:2f:d4:e0:51:69:75: ed:d7:b5:90:fa:b8:57:08:12:07:12:d5:27:fc:ab:93:d5:49: 80:b6:9f:b7:f3:7a:7e:f9:4c:fa:fc:89:ad:ef:6f:bf:76:74: 3a:1e:2a:52:1f:44:32:43:3c:17:8f:10:ee:4d:42:c1:92:01: 45:80:b3:9e:fb:14:66:b5:e7:d6:04:3c:ce:71:a9:aa:f2:85: 6c:c7:c2:85:b2:6e:7b:b1:67:49:be:fb:66:da:f3:18:03:dd: 27:bf:ea:2c:5f:da:36:5e:b0:4f:7e:6e:e2:63:3d:4d:2e:a4: 14:d8:8c:ce:fa:90:1f:b5:5d:ee:55:0a:48:da:2c:f1:90:0d: ab:bc:91:a2:ea:4b:80:21:ca:69:b5:51:f8:34:11:14:48:bf: 2a:5b:3a:8f:4b:f0:fe:d4:04:c5:e2:5c:6c:5a:ea:25:bc:4b: a1:1c:dd:39:4a:d2:ea:f4:2d:54:ca:32:6b:9b:a9:cc:52:68: ad:59:fc:02 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUUAOEyggPe/D2wmiaUbdBZ0rTQVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA0MTYwNjEyMjFaFw0yNzA0MTUwNjE3MjFaMDMxMTAvBgNV BAMTKEM5MEMyRkE5MzI0OTE1REVEOEZBNzEwQ0IyMjJCNzNBRDdFMTNDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWfLvj5l96iXUdZtQhDrUQkSq yjb+9SBX3brM7bpMk29ZV0ahdYh83g4MMT52RdJUNeDtzl+aVFkYkoln1J5wBwEB T69PiG2+oYKG0fpOAZ0oYumwYLttgyb3SK33ULv5Yc51J6JErcnsap3VNmiWW9PT tZpZRJf+Vk8WJ9w4YC2jXA9gmY28hd8U0OPh3EFzH0osdLv+YmyZ9ab9Rbd9X7oC uFJu1zTpKcyUlfGyekc991NrB1dU9pIHo5Ax4Mig00KVr8vdHuhACN4DxB8T4qn6 QgY8hLmnYvLiPfE17Mk37eJqcre7i5pXZqEcYCkLnsRSy9OsS0iJPQVINdlXAgMB AAGjggH5MIIB9TAdBgNVHQ4EFgQUyQwvqTJJFd7Y+nEMsiK3OtfhPB8wHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMC9BUzEzNzc1My5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwCwQC AAEwBQMDAAF2MBQEAgACMA4DBQAkAttAAwUAJAMewDANBgkqhkiG9w0BAQsFAAOC AQEAFhohtkUkGtJXDINXVnpRfGG7tbLQBOGejYPeuLz3nasjGWH7JI+flTrK+pES /9iGdxZGgZN+rcYyztLJOfTMap5SL9TgUWl17de1kPq4VwgSBxLVJ/yrk9VJgLaf t/N6fvlM+vyJre9vv3Z0Oh4qUh9EMkM8F48Q7k1CwZIBRYCznvsUZrXn1gQ8znGp qvKFbMfChbJue7FnSb77ZtrzGAPdJ7/qLF/aNl6wT35u4mM9TS6kFNiMzvqQH7Vd 7lUKSNos8ZANq7yRoupLgCHKabVR+DQRFEi/Kls6j0vw/tQExeJcbFrqJbxLoRzd OUrS6vQtVMoya5upzFJorVn8Ag== -----END CERTIFICATE-----Generated at Fri Apr 17 21:07:25 2026 by rpki-client