$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS133118.roa File: AS133118.roa (raw, json) Hash identifier: 9Q1m+tLuY5yrS3UpJLfS/GxGrPkJBaC+3IB9Xe3ZMCA= Subject key identifier: A9:22:4A:9E:05:EB:19:4F:EE:2C:D3:DF:62:6B:06:25:B2:14:77:ED Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Certificate serial: 5F33EA5DF9F01A7EE627AC8B4EE2C5FFB70C1FAE Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS133118.roa Signing time: Thu 11 Jun 2026 12:19:40 +0000 ROA not before: Thu 11 Jun 2026 12:14:40 +0000 ROA not after: Thu 10 Jun 2027 12:19:40 +0000 asID: 133118 IP address blocks: 2408:877d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 05:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:33:ea:5d:f9:f0:1a:7e:e6:27:ac:8b:4e:e2:c5:ff:b7:0c:1f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Validity Not Before: Jun 11 12:14:40 2026 GMT Not After : Jun 10 12:19:40 2027 GMT Subject: CN=A9224A9E05EB194FEE2CD3DF626B0625B21477ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6d:84:14:e6:3e:41:5f:88:94:6d:12:99:c2: c4:32:b0:b1:d0:7b:dc:67:55:55:33:d2:3f:36:7d: 5c:89:d6:08:58:18:8d:40:1d:1c:7c:74:5f:6a:df: b3:e4:d4:ee:15:ae:ba:ee:a0:48:0e:34:5c:92:46: 56:9c:1c:51:4f:7a:98:fa:df:9b:23:78:e2:9c:2b: 03:9d:cb:70:3f:fd:22:37:00:13:81:65:e0:e9:e4: 9f:9c:43:ca:69:39:5f:71:09:e2:76:5a:ad:d3:66: e0:a9:7d:ad:be:cd:93:d5:ce:3f:5b:8d:a2:ef:e1: 39:fd:17:e9:83:70:3e:9a:07:f7:b8:b9:20:30:f0: ac:2c:f0:ce:95:d8:74:03:fc:21:9b:f1:fb:9f:83: 1c:56:2e:ac:58:fd:8e:d2:4b:5f:4b:15:59:f2:7d: d5:33:26:d4:40:76:fd:2a:17:3d:c1:4a:e5:80:cd: be:3d:63:a7:d7:a3:15:c6:23:3c:72:f5:3d:ac:3b: d7:12:fa:d5:f3:78:fe:85:8f:7d:7e:2a:ed:cb:66: 92:99:19:7c:fb:0c:ac:e7:66:01:57:00:7d:79:d3: f0:3d:ab:a8:41:39:ca:d3:f2:81:0a:61:85:60:03: 8e:63:fb:4d:20:99:f5:5d:02:ce:11:2d:7d:fd:68: 50:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:22:4A:9E:05:EB:19:4F:EE:2C:D3:DF:62:6B:06:25:B2:14:77:ED X509v3 Authority Key Identifier: keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS133118.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2408:877d::/32 Signature Algorithm: sha256WithRSAEncryption 07:f5:f0:49:5d:46:ba:4a:55:71:27:44:25:36:44:e8:b9:6b: b7:64:8f:61:cb:0e:91:04:a0:1f:a2:b5:07:92:b9:c8:8a:6e: 70:84:36:d2:da:fe:d3:89:19:b2:ab:24:7a:73:97:d3:d0:aa: 72:e2:ef:e2:6b:0d:77:bd:b1:cd:dd:3e:9e:a4:9b:86:74:b8: 04:5e:38:17:96:b4:8c:b4:34:a5:0e:54:b2:43:64:5b:f0:c8: e8:fc:cf:05:24:7d:36:b5:10:49:61:81:13:c6:23:53:34:01: 11:60:92:12:85:01:89:60:12:ba:b0:34:c8:0e:96:36:4e:d5: ee:38:ea:a7:cb:3c:6c:a4:32:f1:25:db:5a:00:de:46:5e:ce: 70:dd:92:ad:83:2b:93:59:fe:cb:39:0d:56:3f:cd:22:99:72: aa:95:f9:6a:26:e1:a2:c2:20:0a:fb:1b:16:03:d5:4e:bf:df: cb:b9:f2:31:75:21:76:54:fe:2e:46:62:b2:07:02:a6:b2:28: b7:ab:47:70:35:f2:ee:3f:45:b5:fc:d7:07:36:5b:23:f7:ca: 93:09:dc:36:60:01:d0:bd:63:60:a1:ba:c1:56:f2:54:31:53: f1:1a:bb:dc:59:ba:f3:79:b5:db:32:c2:e4:1b:f9:08:99:cf: d6:63:67:20 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUXzPqXfnwGn7mJ6yLTuLF/7cMH64wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDYxMTEyMTQ0MFoX DTI3MDYxMDEyMTk0MFowMzExMC8GA1UEAxMoQTkyMjRBOUUwNUVCMTk0RkVFMkNE M0RGNjI2QjA2MjVCMjE0NzdFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM5thBTmPkFfiJRtEpnCxDKwsdB73GdVVTPSPzZ9XInWCFgYjUAdHHx0X2rf s+TU7hWuuu6gSA40XJJGVpwcUU96mPrfmyN44pwrA53LcD/9IjcAE4Fl4Onkn5xD ymk5X3EJ4nZardNm4Kl9rb7Nk9XOP1uNou/hOf0X6YNwPpoH97i5IDDwrCzwzpXY dAP8IZvx+5+DHFYurFj9jtJLX0sVWfJ91TMm1EB2/SoXPcFK5YDNvj1jp9ejFcYj PHL1Paw71xL61fN4/oWPfX4q7ctmkpkZfPsMrOdmAVcAfXnT8D2rqEE5ytPygQph hWADjmP7TSCZ9V0CzhEtff1oULkCAwEAAaOCAeUwggHhMB0GA1UdDgQWBBSpIkqe BesZT+4s099iawYlshR37TAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5 NTM0MjU5My8xL0FTMTMzMTE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAiHfTANBgkqhkiG9w0BAQsF AAOCAQEAB/XwSV1GukpVcSdEJTZE6Llrt2SPYcsOkQSgH6K1B5K5yIpucIQ20tr+ 04kZsqskenOX09CqcuLv4msNd72xzd0+nqSbhnS4BF44F5a0jLQ0pQ5UskNkW/DI 6PzPBSR9NrUQSWGBE8YjUzQBEWCSEoUBiWASurA0yA6WNk7V7jjqp8s8bKQy8SXb WgDeRl7OcN2SrYMrk1n+yzkNVj/NIplyqpX5aibhosIgCvsbFgPVTr/fy7nyMXUh dlT+LkZisgcCprIot6tHcDXy7j9FtfzXBzZbI/fKkwncNmAB0L1jYKG6wVbyVDFT 8Rq73Fm683m12zLC5Bv5CJnP1mNnIA== -----END CERTIFICATE-----Generated at Wed Jun 17 09:16:23 2026 by rpki-client