$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS151058.roa File: AS151058.roa (raw, json) Hash identifier: mSzRVS75vBPa8uyPHLbMcuZW2KkpFKvPNE1wfvrC/UI= Subject key identifier: 38:09:A1:DA:62:4B:05:2F:28:63:15:9D:89:B5:C6:7E:5D:A4:D6:1C Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 41ECC822338037B8F0897EE89514C24523F97684 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS151058.roa Signing time: Tue 16 Jun 2026 17:54:06 +0000 ROA not before: Tue 16 Jun 2026 17:49:06 +0000 ROA not after: Tue 15 Jun 2027 17:54:06 +0000 asID: 151058 IP address blocks: 139.189.128.0/17 maxlen: 17 140.240.0.0/17 maxlen: 17 140.240.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ec:c8:22:33:80:37:b8:f0:89:7e:e8:95:14:c2:45:23:f9:76:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Jun 16 17:49:06 2026 GMT Not After : Jun 15 17:54:06 2027 GMT Subject: CN=3809A1DA624B052F2863159D89B5C67E5DA4D61C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fa:ec:6d:58:e9:d5:4a:be:3e:f9:2c:a8:ff: 51:19:59:ee:1e:4b:d5:b6:b6:ab:16:2b:7b:95:6c: a7:1a:b2:89:71:21:43:bd:60:74:0e:9d:49:d2:dd: c6:0d:63:38:ed:f6:ac:e3:7d:81:8d:b4:0d:21:f6: b1:5d:05:80:23:fc:a1:d8:fa:bb:66:37:28:11:50: 9c:43:09:c4:7f:9e:d3:c6:eb:69:e9:de:07:74:2c: 0d:0c:bc:5f:88:7b:0e:5c:1b:c6:1c:74:f2:49:29: 52:74:74:b9:cc:3f:2f:3e:32:32:9e:f0:75:e9:7b: 73:49:71:07:81:a5:12:8d:18:56:bb:02:79:42:af: e6:b7:c7:3f:43:44:10:7d:e9:b0:cc:e5:65:08:54: 78:cc:19:4b:be:dc:fb:40:d8:c9:3d:e5:97:f4:4f: 54:10:02:c2:be:73:55:ee:6c:5c:68:f1:3d:62:87: ff:69:e5:c5:e9:31:b5:05:0f:5d:c5:a8:2f:c8:64: a5:34:dc:44:94:e0:b0:c9:d3:c2:68:eb:c0:7b:83: cc:81:85:09:a7:5d:2c:0f:58:5d:8e:83:2b:9e:21: 5b:73:24:ed:a5:3d:14:cd:28:1f:89:84:d6:81:6c: 84:ac:51:13:25:af:c2:7c:e7:e2:b8:8e:c1:eb:57: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:09:A1:DA:62:4B:05:2F:28:63:15:9D:89:B5:C6:7E:5D:A4:D6:1C X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS151058.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.189.128.0/17 140.240.0.0/16 Signature Algorithm: sha256WithRSAEncryption 10:4f:e7:6b:28:c0:fe:bc:33:b9:11:80:01:6e:58:2e:24:d0: 53:fc:79:ce:b7:07:ee:28:ca:b2:c2:40:a7:94:23:13:e0:38: ef:52:75:f5:c1:17:a5:45:58:31:3e:b2:93:e1:69:12:96:40: 7f:d8:30:5b:7c:73:99:66:9c:66:b7:e9:cb:9c:d6:68:f9:55: 44:b6:5b:52:c4:13:2c:96:54:97:f3:d9:e3:5b:47:06:ef:4e: 93:c3:32:0c:b0:40:f2:f5:15:1e:ed:51:d0:12:2f:56:bd:01: 6f:cb:98:f2:60:3e:4a:4b:7f:ba:b9:c1:c3:7a:94:d2:c7:8f: bb:8c:57:33:7e:96:2e:60:09:28:76:04:af:c1:29:09:57:67: 44:98:22:9b:50:98:c1:e7:25:7a:d4:36:c3:b9:08:65:6b:8e: a3:d2:08:d1:eb:e8:39:93:63:43:03:f8:9c:43:ed:0b:e1:3c: 80:31:71:55:89:fd:10:da:70:2f:33:3e:99:38:c6:93:78:e9: 0c:b4:46:7b:01:fa:fe:cc:5d:2e:a3:97:b3:1e:07:c4:ec:1e: 72:79:e1:f1:1a:10:12:53:43:4d:d7:8c:af:37:04:0c:01:b9: 18:f3:bc:94:e3:9b:88:17:aa:e5:ec:06:91:ee:ea:b8:cc:cb: 21:bf:81:3e -----BEGIN CERTIFICATE----- MIIE9jCCA96gAwIBAgIUQezIIjOAN7jwiX7olRTCRSP5doQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYxNjE3NDkwNloX DTI3MDYxNTE3NTQwNlowMzExMC8GA1UEAxMoMzgwOUExREE2MjRCMDUyRjI4NjMx NTlEODlCNUM2N0U1REE0RDYxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/67G1Y6dVKvj75LKj/URlZ7h5L1ba2qxYre5VspxqyiXEhQ71gdA6dSdLd xg1jOO32rON9gY20DSH2sV0FgCP8odj6u2Y3KBFQnEMJxH+e08braeneB3QsDQy8 X4h7Dlwbxhx08kkpUnR0ucw/Lz4yMp7wdel7c0lxB4GlEo0YVrsCeUKv5rfHP0NE EH3psMzlZQhUeMwZS77c+0DYyT3ll/RPVBACwr5zVe5sXGjxPWKH/2nlxekxtQUP XcWoL8hkpTTcRJTgsMnTwmjrwHuDzIGFCaddLA9YXY6DK54hW3Mk7aU9FM0oH4mE 1oFshKxREyWvwnzn4riOwetX6pECAwEAAaOCAekwggHlMB0GA1UdDgQWBBQ4CaHa YksFLyhjFZ2JtcZ+XaTWHDAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8wL0FTMTUxMDU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwQHi72AAwMAjPAwDQYJKoZIhvcN AQELBQADggEBABBP52sowP68M7kRgAFuWC4k0FP8ec63B+4oyrLCQKeUIxPgOO9S dfXBF6VFWDE+spPhaRKWQH/YMFt8c5lmnGa36cuc1mj5VUS2W1LEEyyWVJfz2eNb RwbvTpPDMgywQPL1FR7tUdASL1a9AW/LmPJgPkpLf7q5wcN6lNLHj7uMVzN+li5g CSh2BK/BKQlXZ0SYIptQmMHnJXrUNsO5CGVrjqPSCNHr6DmTY0MD+JxD7QvhPIAx cVWJ/RDacC8zPpk4xpN46Qy0RnsB+v7MXS6jl7MeB8TsHnJ54fEaEBJTQ03XjK83 BAwBuRjzvJTjm4gXquXsBpHu6rjMyyG/gT4= -----END CERTIFICATE-----Generated at Wed Jun 17 11:11:34 2026 by rpki-client