$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS138421.roa File: AS138421.roa (raw, json) Hash identifier: 2wlstcl5tFV+5E8jvfptqjBcmgeaje3X7oXtiJyA3WY= Subject key identifier: 75:C1:3B:CD:9E:B1:40:BB:8C:2D:63:31:0B:9B:6D:1C:FE:C7:43:D7 Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 595AE4DB3A2C22482186D44D86EC45A111608557 Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS138421.roa Signing time: Thu 16 Apr 2026 06:24:14 +0000 ROA not before: Thu 16 Apr 2026 06:19:14 +0000 ROA not after: Thu 15 Apr 2027 06:24:14 +0000 asID: 138421 IP address blocks: 114.67.64.0/18 maxlen: 24 116.198.0.0/16 maxlen: 24 116.198.144.0/20 maxlen: 20 116.198.160.0/21 maxlen: 21 116.198.168.0/21 maxlen: 21 116.198.176.0/22 maxlen: 22 116.198.180.0/22 maxlen: 22 2403:1ec0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5a:e4:db:3a:2c:22:48:21:86:d4:4d:86:ec:45:a1:11:60:85:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Apr 16 06:19:14 2026 GMT Not After : Apr 15 06:24:14 2027 GMT Subject: CN=75C13BCD9EB140BB8C2D63310B9B6D1CFEC743D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:f1:fa:36:c7:a3:ec:8d:70:4f:22:50:96: 15:f9:88:05:fd:95:e7:08:30:ef:c3:62:90:ec:7a: 9d:a2:2b:03:51:a0:44:96:ee:2a:f0:33:a5:92:f3: ef:8c:38:42:0b:77:eb:9f:32:b3:d1:6b:01:a9:d0: 65:ba:2e:56:53:93:4c:5d:9e:15:c2:95:51:77:a5: db:48:96:33:ca:61:04:ef:6f:55:35:38:85:ad:69: 05:96:6e:2c:ae:a1:79:28:4d:a5:97:a9:e3:86:ba: e5:67:61:89:12:f3:cf:ab:4c:d1:19:b0:7d:6d:dd: 40:59:dd:9b:f6:6c:1b:10:50:5f:07:64:f7:34:cd: e5:ff:01:36:4c:7f:ee:e7:23:c5:fc:9c:e7:bf:70: 4e:b7:c3:fc:57:5b:3a:35:48:63:60:ef:08:49:e2: 11:49:a3:05:30:1e:19:89:08:25:2b:d1:64:ae:cc: b2:99:0c:05:b8:23:7f:f0:54:d9:4f:67:d7:34:ed: 9a:63:98:e0:54:d0:de:d9:a2:1a:b7:09:79:81:93: b5:5c:1f:c3:d4:ba:06:ed:a9:88:1e:28:d2:8f:b1: 4c:c2:f7:3b:79:ca:2a:94:bc:05:56:df:18:a5:3e: bd:d0:9e:e2:87:36:2f:49:14:6c:3e:9c:71:6c:34: ba:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C1:3B:CD:9E:B1:40:BB:8C:2D:63:31:0B:9B:6D:1C:FE:C7:43:D7 X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS138421.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.67.64.0/18 116.198.0.0/16 IPv6: 2403:1ec0::/32 Signature Algorithm: sha256WithRSAEncryption b0:13:f5:57:7e:c1:94:47:03:d7:6d:a0:02:36:93:e2:83:14: 0e:60:16:98:ad:e5:17:16:d2:f8:b4:54:ee:f8:98:cf:92:6d: c4:f3:d7:c5:22:13:74:46:2e:bd:ee:44:46:a8:50:33:c5:03: 54:a6:e5:66:f9:d1:4d:03:10:c2:7c:f8:fc:06:d9:7e:99:f8: 79:63:8b:22:5a:9d:39:4e:5c:fa:0d:29:b2:de:f1:97:37:a7: 2b:60:84:d8:ff:3f:72:bb:3e:4b:20:4c:c8:c6:56:c4:85:4c: dc:3b:4d:72:27:cd:3f:60:d6:4d:96:24:d5:ad:81:c4:50:08: 7d:4a:02:54:8a:4c:46:3b:bf:fb:b6:e0:bc:ec:43:f4:67:1e: 0f:ca:89:9b:13:4f:6c:5f:28:c9:ce:f6:4c:30:8b:84:90:18: 8b:27:09:97:b7:ef:04:73:f5:fd:2b:e5:5b:56:8b:2f:ea:37: 6a:7e:b6:bc:09:bf:5e:11:e8:6e:d7:47:0e:92:ff:8b:5b:51: 00:6a:df:f1:b1:f5:1a:ac:a4:74:c4:96:63:81:73:03:17:e3: 03:ea:8e:2c:08:ee:51:76:52:33:b9:4e:d7:5e:87:72:2d:c6: dc:1e:f9:7a:58:6b:3f:36:12:5d:25:63:66:c6:5a:59:97:04: f4:0e:8b:80 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUWVrk2zosIkghhtRNhuxFoRFghVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA0MTYwNjE5MTRaFw0yNzA0MTUwNjI0MTRaMDMxMTAvBgNV BAMTKDc1QzEzQkNEOUVCMTQwQkI4QzJENjMzMTBCOUI2RDFDRkVDNzQzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKvH6Nsej7I1wTyJQlhX5iAX9 lecIMO/DYpDsep2iKwNRoESW7irwM6WS8++MOEILd+ufMrPRawGp0GW6LlZTk0xd nhXClVF3pdtIljPKYQTvb1U1OIWtaQWWbiyuoXkoTaWXqeOGuuVnYYkS88+rTNEZ sH1t3UBZ3Zv2bBsQUF8HZPc0zeX/ATZMf+7nI8X8nOe/cE63w/xXWzo1SGNg7whJ 4hFJowUwHhmJCCUr0WSuzLKZDAW4I3/wVNlPZ9c07ZpjmOBU0N7Zohq3CXmBk7Vc H8PUugbtqYgeKNKPsUzC9zt5yiqUvAVW3xilPr3QnuKHNi9JFGw+nHFsNLqtAgMB AAGjggH4MIIB9DAdBgNVHQ4EFgQUdcE7zZ6xQLuMLWMxC5ttHP7HQ9cwHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMC9BUzEzODQyMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwEQQC AAEwCwMEBnJDQAMDAHTGMA0EAgACMAcDBQAkAx7AMA0GCSqGSIb3DQEBCwUAA4IB AQCwE/VXfsGURwPXbaACNpPigxQOYBaYreUXFtL4tFTu+JjPkm3E89fFIhN0Ri69 7kRGqFAzxQNUpuVm+dFNAxDCfPj8Btl+mfh5Y4siWp05Tlz6DSmy3vGXN6crYITY /z9yuz5LIEzIxlbEhUzcO01yJ80/YNZNliTVrYHEUAh9SgJUikxGO7/7tuC87EP0 Zx4PyombE09sXyjJzvZMMIuEkBiLJwmXt+8Ec/X9K+VbVosv6jdqfra8Cb9eEehu 10cOkv+LW1EAat/xsfUarKR0xJZjgXMDF+MD6o4sCO5RdlIzuU7XXodyLcbcHvl6 WGs/NhJdJWNmxlpZlwT0DouA -----END CERTIFICATE-----Generated at Fri Apr 17 23:23:28 2026 by rpki-client