$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS38283.roa File: AS38283.roa (raw, json) Hash identifier: byu4xG8+yTtwBscrS8iuOSWagzsulyP1XFC++sIeZwQ= Subject key identifier: 95:BC:AE:E7:76:D3:74:83:42:9A:F2:93:6D:74:4B:62:F4:39:A1:47 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 74F640708E3EC7B5D8E8DEDA2C615412A6E4EE23 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS38283.roa Signing time: Tue 16 Jun 2026 17:54:06 +0000 ROA not before: Tue 16 Jun 2026 17:49:06 +0000 ROA not after: Tue 15 Jun 2027 17:54:06 +0000 asID: 38283 IP address blocks: 139.206.135.0/24 maxlen: 24 139.206.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f6:40:70:8e:3e:c7:b5:d8:e8:de:da:2c:61:54:12:a6:e4:ee:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Jun 16 17:49:06 2026 GMT Not After : Jun 15 17:54:06 2027 GMT Subject: CN=95BCAEE776D37483429AF2936D744B62F439A147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:86:b2:46:b1:94:a9:dc:4e:68:36:79:aa: 8c:46:19:b7:96:20:9c:fb:40:7b:f3:3c:3c:b0:6a: 2e:c3:d2:b3:08:d4:2f:0c:10:f3:9d:f4:5a:d8:98: 82:a5:c3:b7:52:cb:e0:f2:ea:54:28:6c:cd:87:de: d7:3e:9b:6f:d1:ff:58:38:dc:38:19:bc:ca:7a:ae: cb:92:29:46:0e:1e:bc:10:9f:97:e2:c1:28:7c:2c: b1:a2:b4:7d:60:c6:79:35:c2:79:ff:1c:5b:07:37: dd:43:34:2b:08:a3:a5:1b:0f:5c:fd:7a:9c:41:84: 77:97:ce:3c:b7:3a:aa:63:ae:61:d4:e9:b1:3e:cd: 57:05:6f:c9:2b:6b:e5:e3:30:9d:df:42:63:3d:59: 03:dd:49:a8:65:95:73:64:4f:63:e1:e4:29:9d:79: 76:ca:3e:04:7a:19:4f:ec:44:64:0a:9e:d3:53:b9: 8d:cb:c6:6e:f2:1c:26:27:d7:08:c5:51:d1:24:2f: 28:10:92:f8:6e:f2:b4:de:97:5c:2c:e5:0d:8c:af: f6:c3:e7:cd:bd:aa:71:ec:46:4c:5c:b1:f3:1e:f2: f6:f0:e4:b7:8a:80:5c:29:65:0c:06:ac:06:d7:26: 8a:85:bd:56:67:cc:9c:ca:3d:a5:91:04:07:2b:db: b2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BC:AE:E7:76:D3:74:83:42:9A:F2:93:6D:74:4B:62:F4:39:A1:47 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS38283.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.206.135.0/24 139.206.198.0/24 Signature Algorithm: sha256WithRSAEncryption d0:7b:fc:37:99:fa:cf:02:30:52:a1:41:bb:5b:18:f7:13:aa: 63:37:5d:88:02:a9:5b:82:67:34:20:95:7c:fa:82:e0:f1:ed: 80:d2:db:ad:79:d7:17:9c:7a:a8:47:9c:25:01:85:e8:3d:a0: 8c:dd:b5:42:dc:42:dd:f8:09:9c:5a:d4:88:9a:c7:99:aa:34: 18:41:3f:f0:ce:b6:07:42:04:f9:64:e9:ef:d3:b8:21:f9:75: f3:d3:1b:0b:52:e4:f0:de:bb:8d:de:17:0c:a7:3b:3f:1e:f7: fa:fe:ab:e8:5b:1b:35:a2:b0:62:12:37:b5:d1:cd:b2:25:70: 8e:7d:03:1c:4d:93:ee:ae:01:ec:3b:fa:c5:d4:7c:a4:ae:0d: 97:2d:3a:35:04:36:da:3c:a7:6f:6d:9a:cb:e5:23:68:89:d1: 51:13:1d:96:1a:34:1c:5d:9e:6e:0b:67:3a:c3:df:25:9d:e0: 1c:d8:a6:1d:e7:16:44:14:11:7b:98:57:f8:e3:24:ec:ea:e2: 7f:22:cd:a3:b0:4c:5f:2a:c6:1e:a7:e8:56:cf:4f:2d:24:a8: d5:07:6c:3f:37:ac:33:c6:be:96:14:4b:1d:a9:b9:d3:91:9a: 9f:d3:c5:f0:e0:7b:c1:94:39:c5:39:3f:75:ce:96:a6:ce:f6: 1d:1d:4e:d6 -----BEGIN CERTIFICATE----- MIIE9jCCA96gAwIBAgIUdPZAcI4+x7XY6N7aLGFUEqbk7iMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYxNjE3NDkwNloX DTI3MDYxNTE3NTQwNlowMzExMC8GA1UEAxMoOTVCQ0FFRTc3NkQzNzQ4MzQyOUFG MjkzNkQ3NDRCNjJGNDM5QTE0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqQhrJGsZSp3E5oNnmqjEYZt5YgnPtAe/M8PLBqLsPSswjULwwQ8530WtiY gqXDt1LL4PLqVChszYfe1z6bb9H/WDjcOBm8ynquy5IpRg4evBCfl+LBKHwssaK0 fWDGeTXCef8cWwc33UM0KwijpRsPXP16nEGEd5fOPLc6qmOuYdTpsT7NVwVvyStr 5eMwnd9CYz1ZA91JqGWVc2RPY+HkKZ15dso+BHoZT+xEZAqe01O5jcvGbvIcJifX CMVR0SQvKBCS+G7ytN6XXCzlDYyv9sPnzb2qcexGTFyx8x7y9vDkt4qAXCllDAas BtcmioW9VmfMnMo9pZEEByvbsh0CAwEAAaOCAekwggHlMB0GA1UdDgQWBBSVvK7n dtN0g0Ka8pNtdEti9DmhRzAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8wL0FTMzgyODMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw JQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACLzocDBACLzsYwDQYJKoZIhvcN AQELBQADggEBANB7/DeZ+s8CMFKhQbtbGPcTqmM3XYgCqVuCZzQglXz6guDx7YDS 26151xeceqhHnCUBheg9oIzdtULcQt34CZxa1Iiax5mqNBhBP/DOtgdCBPlk6e/T uCH5dfPTGwtS5PDeu43eFwynOz8e9/r+q+hbGzWisGISN7XRzbIlcI59AxxNk+6u Aew7+sXUfKSuDZctOjUENto8p29tmsvlI2iJ0VETHZYaNBxdnm4LZzrD3yWd4BzY ph3nFkQUEXuYV/jjJOzq4n8izaOwTF8qxh6n6FbPTy0kqNUHbD83rDPGvpYUSx2p udORmp/TxfDge8GUOcU5P3XOlqbO9h0dTtY= -----END CERTIFICATE-----Generated at Wed Jun 17 09:31:16 2026 by rpki-client