$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS24138.roa File: AS24138.roa (raw, json) Hash identifier: /USsfWV0Z0vIyvR1J+olo/d2Rz0EzCWv+X8F3vl51S4= Subject key identifier: 8C:E0:CC:76:81:06:19:C6:66:17:3D:0D:D9:0D:16:4B:9D:7A:77:B5 Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 68B9159C7321502EA65C66EE2CEC084368939B46 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS24138.roa Signing time: Mon 08 Jun 2026 09:03:46 +0000 ROA not before: Mon 08 Jun 2026 08:58:46 +0000 ROA not after: Mon 07 Jun 2027 09:03:46 +0000 asID: 24138 IP address blocks: 101.36.128.0/19 maxlen: 19 101.36.160.0/19 maxlen: 19 101.36.224.0/21 maxlen: 21 101.36.232.0/21 maxlen: 21 101.36.233.0/24 maxlen: 24 101.36.234.0/24 maxlen: 24 122.14.192.0/19 maxlen: 19 122.14.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b9:15:9c:73:21:50:2e:a6:5c:66:ee:2c:ec:08:43:68:93:9b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: Jun 8 08:58:46 2026 GMT Not After : Jun 7 09:03:46 2027 GMT Subject: CN=8CE0CC76810619C666173D0DD90D164B9D7A77B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:a8:2e:c5:12:e5:b2:c2:1b:e6:31:bc:13: 87:eb:e8:0c:ff:59:df:82:6d:cf:9d:d2:51:e7:b0: 72:6f:72:19:8b:f1:0a:39:0f:1b:1a:77:c2:c7:e9: c9:4e:07:12:42:02:27:0e:a0:7c:c3:19:3d:a8:05: 62:79:99:6e:6e:50:9e:09:b8:fd:b6:c0:d4:90:00: d8:7c:0f:51:44:3b:c4:7d:7a:d4:14:78:73:dd:f2: 35:7d:13:99:76:ab:5a:5a:10:1b:cb:a8:60:0c:3b: 83:b8:66:f3:1f:24:aa:63:6d:04:21:2e:7e:84:7f: 65:02:7a:ea:66:65:5a:0e:09:f6:6a:a3:8c:76:b0: fc:b1:4a:60:86:16:0d:ff:86:b8:81:83:61:65:82: c1:d6:42:e5:3d:51:34:b5:14:8f:3c:eb:23:fe:0f: d6:d5:03:8b:d9:d2:42:a8:a7:9c:17:88:1f:73:81: 37:02:cc:8d:d1:31:1b:1f:d8:12:00:43:cf:3d:bb: 39:84:4e:aa:f0:c5:ea:69:1e:b5:b2:02:f0:44:3b: 05:91:1c:e1:b6:cc:42:15:33:d2:49:a2:f3:ba:0e: 6b:2c:b2:26:28:0e:b6:ba:70:21:a7:f0:99:5a:ae: 9e:bb:b7:db:a6:a0:34:34:7a:78:0f:6d:7b:b9:11: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E0:CC:76:81:06:19:C6:66:17:3D:0D:D9:0D:16:4B:9D:7A:77:B5 X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS24138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.36.128.0/18 101.36.224.0/20 122.14.192.0/18 Signature Algorithm: sha256WithRSAEncryption 36:b4:8f:a1:e4:a7:99:2a:dd:0f:bf:7f:52:6d:a4:89:eb:4b: 44:49:c9:1c:d8:5c:ea:9f:ec:90:22:36:b4:64:f9:84:79:d3: ad:26:51:b7:c9:d0:1d:04:1b:52:7c:b8:47:76:55:4e:a8:0b: d3:c7:2a:a2:eb:30:e5:8d:10:4f:01:85:1d:08:ac:3b:b1:19: 4e:c2:34:a6:5d:ed:53:41:51:0b:6f:93:ad:8d:fc:b3:00:2d: 40:c4:cb:2c:4a:1c:86:8e:44:d4:20:2c:d7:76:35:cb:33:40: 3a:40:4a:70:99:3f:a6:ae:14:05:fb:98:d1:e7:4d:35:96:c8: 7b:eb:40:b2:5d:b3:11:86:dc:4c:89:07:4a:a0:c4:fc:96:73: e4:2c:b6:18:71:b7:20:04:60:64:51:f2:6a:9f:52:09:7a:58: 9b:36:48:f6:1c:20:0c:49:a5:62:6b:06:2e:ce:dc:a3:c6:94: 0e:ab:fe:bd:42:f1:09:23:2b:a1:f5:2f:e6:03:bd:55:d0:12: 24:0d:8e:95:36:09:91:c3:bf:47:bc:c3:25:48:46:c1:87:c7: 84:7b:cb:70:97:83:ce:d3:6f:e2:28:38:b2:50:67:44:47:10: 32:3d:d6:93:4e:74:64:dd:ea:f5:fb:79:78:46:6b:a7:14:54: 8f:9e:d8:52 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUaLkVnHMhUC6mXGbuLOwIQ2iTm0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA2MDgwODU4NDZaFw0yNzA2MDcwOTAzNDZaMDMxMTAvBgNV BAMTKDhDRTBDQzc2ODEwNjE5QzY2NjE3M0QwREQ5MEQxNjRCOUQ3QTc3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClI6guxRLlssIb5jG8E4fr6Az/ Wd+Cbc+d0lHnsHJvchmL8Qo5Dxsad8LH6clOBxJCAicOoHzDGT2oBWJ5mW5uUJ4J uP22wNSQANh8D1FEO8R9etQUeHPd8jV9E5l2q1paEBvLqGAMO4O4ZvMfJKpjbQQh Ln6Ef2UCeupmZVoOCfZqo4x2sPyxSmCGFg3/hriBg2FlgsHWQuU9UTS1FI886yP+ D9bVA4vZ0kKop5wXiB9zgTcCzI3RMRsf2BIAQ889uzmETqrwxeppHrWyAvBEOwWR HOG2zEIVM9JJovO6DmsssiYoDra6cCGn8Jlarp67t9umoDQ0engPbXu5ESxJAgMB AAGjggHvMIIB6zAdBgNVHQ4EFgQUjODMdoEGGcZmFz0N2Q0WS516d7UwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4OTA5ODUyMjY4NjI1OTUvMC9BUzI0MTM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIA ATASAwQGZSSAAwQEZSTgAwQGeg7AMA0GCSqGSIb3DQEBCwUAA4IBAQA2tI+h5KeZ Kt0Pv39SbaSJ60tESckc2Fzqn+yQIja0ZPmEedOtJlG3ydAdBBtSfLhHdlVOqAvT xyqi6zDljRBPAYUdCKw7sRlOwjSmXe1TQVELb5OtjfyzAC1AxMssShyGjkTUICzX djXLM0A6QEpwmT+mrhQF+5jR5001lsh760CyXbMRhtxMiQdKoMT8lnPkLLYYcbcg BGBkUfJqn1IJelibNkj2HCAMSaViawYuztyjxpQOq/69QvEJIyuh9S/mA71V0BIk DY6VNgmRw79HvMMlSEbBh8eEe8twl4PO02/iKDiyUGdERxAyPdaTTnRk3er1+3l4 RmunFFSPnthS -----END CERTIFICATE-----Generated at Sun Jun 14 03:35:41 2026 by rpki-client