$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS132833.roa File: AS132833.roa (raw, json) Hash identifier: K3aphdI4F+ULzQW9hE66C1o3ZBEhLJF1t5E35KmsrXM= Subject key identifier: 7E:40:E9:6D:5C:77:D9:62:E1:F8:79:BF:F9:C7:0E:23:41:78:B4:B0 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 0BDBC4D78BB5F6C80491FE34BCCFBC3447549DDC Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS132833.roa Signing time: Mon 01 Jun 2026 16:03:08 +0000 ROA not before: Mon 01 Jun 2026 15:58:08 +0000 ROA not after: Mon 31 May 2027 16:03:08 +0000 asID: 132833 IP address blocks: 223.247.112.0/20 maxlen: 20 240e:6:d120::/48 maxlen: 48 240e:958:2300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:db:c4:d7:8b:b5:f6:c8:04:91:fe:34:bc:cf:bc:34:47:54:9d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 1 15:58:08 2026 GMT Not After : May 31 16:03:08 2027 GMT Subject: CN=7E40E96D5C77D962E1F879BFF9C70E234178B4B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:67:ca:07:cf:aa:a0:4b:a7:3c:a1:92:49:2f: 19:48:dc:47:77:0b:20:ad:89:22:40:a0:24:3b:4f: 06:61:24:87:53:08:e1:64:f4:e6:76:fc:4f:3a:45: 16:cd:2f:41:ed:e6:0f:a2:98:f4:29:2d:ae:2d:bd: 53:4b:58:23:f4:dd:69:8d:54:21:30:01:a0:0a:b6: 26:05:3d:f3:4d:d1:cd:2b:f1:d1:72:b5:52:83:76: 37:a2:95:77:1d:7b:62:73:af:3b:93:04:a4:ab:60: 7e:d0:e0:46:25:5a:a4:08:a8:63:b5:7f:68:1e:e6: 0b:60:67:c9:f8:88:79:9c:20:4c:20:a6:8d:5b:74: e7:a6:6d:4c:90:21:92:bd:c9:50:86:ee:97:ea:f8: 63:41:2d:4d:27:71:ce:76:5c:a3:b1:df:88:ac:b7: 89:8d:82:a5:41:5b:c0:c4:e1:0f:66:07:0e:5c:65: 97:fa:63:f5:90:78:23:83:37:3a:14:46:56:3b:73: 93:35:f2:f9:94:4d:2d:5f:93:f9:88:d7:4f:61:9c: 9a:f8:4b:0f:08:e7:e2:13:99:17:e7:bc:08:24:43: c4:83:85:c7:e7:93:33:8e:64:71:ea:be:69:7f:4c: 64:3c:a0:75:6e:6c:2b:6b:be:e2:a9:67:82:55:b7: 54:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:40:E9:6D:5C:77:D9:62:E1:F8:79:BF:F9:C7:0E:23:41:78:B4:B0 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS132833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.247.112.0/20 IPv6: 240e:6:d120::/48 240e:958:2300::/48 Signature Algorithm: sha256WithRSAEncryption 1f:16:a7:18:a9:49:ac:6a:de:8d:93:94:1f:3a:b7:81:68:37: b1:1b:6e:ed:a3:b2:4d:d4:74:97:c6:5d:8f:d4:a0:98:4e:5a: ec:02:17:a1:4a:d0:8c:af:33:ea:53:58:f4:30:cd:8c:0e:25: 3b:c1:a5:20:59:a8:8a:8e:1c:8b:cf:b2:73:cf:ac:90:d6:85: a4:6b:e4:61:fd:4f:74:a6:cf:35:86:f7:99:4f:f4:4e:1e:ee: 89:81:db:30:cd:1d:d7:82:1a:d7:de:13:9d:21:2b:34:d2:2d: 2a:e7:f9:1d:e4:c3:29:87:8c:fe:ad:e2:7d:69:99:02:69:3e: 8c:c4:e5:f9:df:01:04:54:34:60:c2:64:d0:48:25:33:66:69: 43:9d:58:2c:f9:9a:15:1a:b4:f0:c6:89:5a:74:41:f4:6b:9c: 44:7e:18:3a:f4:e8:2a:7a:20:7a:62:71:30:e6:1a:eb:0e:48: f4:c2:c1:6b:f1:02:07:a6:af:53:8e:b8:0b:71:83:5f:86:ee: 42:93:0a:dd:66:68:ec:4c:fc:09:43:ac:38:9a:97:8c:af:0b: 9e:89:f2:c4:82:69:b2:f3:96:b0:92:8e:2d:de:64:35:bc:a9: bb:21:88:bd:06:b1:e4:04:05:23:d3:a9:f4:74:d5:0d:32:66: 51:df:cf:5d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUC9vE14u19sgEkf40vM+8NEdUndwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwMTE1NTgwOFoX DTI3MDUzMTE2MDMwOFowMzExMC8GA1UEAxMoN0U0MEU5NkQ1Qzc3RDk2MkUxRjg3 OUJGRjlDNzBFMjM0MTc4QjRCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOhnygfPqqBLpzyhkkkvGUjcR3cLIK2JIkCgJDtPBmEkh1MI4WT05nb8TzpF Fs0vQe3mD6KY9Cktri29U0tYI/TdaY1UITABoAq2JgU9803RzSvx0XK1UoN2N6KV dx17YnOvO5MEpKtgftDgRiVapAioY7V/aB7mC2BnyfiIeZwgTCCmjVt056ZtTJAh kr3JUIbul+r4Y0EtTSdxznZco7HfiKy3iY2CpUFbwMThD2YHDlxll/pj9ZB4I4M3 OhRGVjtzkzXy+ZRNLV+T+YjXT2GcmvhLDwjn4hOZF+e8CCRDxIOFx+eTM45kceq+ aX9MZDygdW5sK2u+4qlnglW3VMMCAwEAAaOCAf4wggH6MB0GA1UdDgQWBBR+QOlt XHfZYuH4eb/5xw4jQXi0sDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTMyODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQE3/dwMBgEAgACMBIDBwAkDgAG 0SADBwAkDglYIwAwDQYJKoZIhvcNAQELBQADggEBAB8WpxipSaxq3o2TlB86t4Fo N7Ebbu2jsk3UdJfGXY/UoJhOWuwCF6FK0IyvM+pTWPQwzYwOJTvBpSBZqIqOHIvP snPPrJDWhaRr5GH9T3SmzzWG95lP9E4e7omB2zDNHdeCGtfeE50hKzTSLSrn+R3k wymHjP6t4n1pmQJpPozE5fnfAQRUNGDCZNBIJTNmaUOdWCz5mhUatPDGiVp0QfRr nER+GDr06Cp6IHpicTDmGusOSPTCwWvxAgemr1OOuAtxg1+G7kKTCt1maOxM/AlD rDial4yvC56J8sSCabLzlrCSji3eZDW8qbshiL0GseQEBSPTqfR01Q0yZlHfz10= -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:43 2026 by rpki-client