$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134417.roa File: AS134417.roa (raw, json) Hash identifier: Y/9hnvK+RnLwxq+MHdaUiHrC6MJUIfsQC3YTzh2G9po= Subject key identifier: 81:24:DB:91:AE:92:49:C0:05:6D:9A:13:0C:60:2F:7D:CD:31:DB:0C Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 7E0BCA9BE4BD59D9546985CDFA277B59B0B4E4AF Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134417.roa Signing time: Thu 11 Jun 2026 15:43:06 +0000 ROA not before: Thu 11 Jun 2026 15:38:06 +0000 ROA not after: Thu 10 Jun 2027 15:43:06 +0000 asID: 134417 IP address blocks: 180.97.126.0/24 maxlen: 24 180.97.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:0b:ca:9b:e4:bd:59:d9:54:69:85:cd:fa:27:7b:59:b0:b4:e4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 11 15:38:06 2026 GMT Not After : Jun 10 15:43:06 2027 GMT Subject: CN=8124DB91AE9249C0056D9A130C602F7DCD31DB0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:1e:1f:ba:05:dd:49:dd:8c:9b:5b:d5:14: 2f:fa:a4:34:55:bb:51:e7:47:a3:93:5d:19:77:5e: 1f:37:87:13:c6:ab:17:50:b3:0f:6b:91:03:92:b5: 04:73:5d:a7:8f:d0:f9:c8:22:b4:56:e8:6d:c3:aa: 1f:36:0c:3f:35:39:f2:27:63:db:3d:dd:11:ea:fc: 3a:9e:1a:3a:f4:7a:4d:2c:8a:9f:1d:3e:ca:13:44: 68:95:c1:bc:02:37:e3:59:8f:11:41:2a:c6:39:55: 94:93:61:d7:84:98:70:4a:f8:41:48:6d:ab:f8:2d: fe:2c:67:79:34:04:da:ab:b8:8e:5c:61:65:81:c1: d8:15:90:24:98:db:98:b4:e1:32:0f:b6:11:29:2f: b4:d6:d8:0b:a4:09:9b:b8:1c:0c:8a:2f:69:78:32: 21:20:5a:72:30:47:5c:3e:a8:34:e4:b7:2d:b0:17: 0a:4a:e5:6c:c7:c3:38:d3:13:21:92:36:18:c9:a9: 70:83:d0:62:b3:40:db:e3:97:fd:8a:49:e2:b2:fe: 03:17:13:89:08:d2:da:f1:f9:ec:e6:8b:db:1e:f6: 5e:0b:a9:9c:dc:3f:d9:e6:68:7f:62:a3:e2:3c:b4: 62:12:d3:8b:ef:48:8c:68:97:f1:8b:8f:e9:68:5d: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:24:DB:91:AE:92:49:C0:05:6D:9A:13:0C:60:2F:7D:CD:31:DB:0C X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134417.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.97.126.0/23 Signature Algorithm: sha256WithRSAEncryption 10:44:e0:93:44:c2:97:81:9a:ef:51:b2:5d:d0:93:eb:16:08: 35:5f:2d:bc:77:ec:dd:35:b1:fd:a8:4c:a6:60:6f:bd:13:d9: ac:50:b8:3a:3d:0c:58:b6:c3:2e:c5:45:78:85:c5:cf:10:41: 4d:70:d3:d1:7a:4f:ce:3c:2c:82:61:c1:37:e6:fd:15:5b:56: 2e:d5:07:b0:a6:8c:e3:66:9d:74:5e:d0:e4:07:4b:b4:08:a4: de:2f:6d:49:cf:05:44:4d:f9:fd:39:ad:dd:8a:ee:dd:c4:f2: 26:95:cd:2c:ab:4d:6a:00:41:a7:7b:a3:94:39:83:7f:e4:92: bb:72:f8:07:80:29:20:c7:99:61:5b:93:1e:c1:25:20:94:c4: 8d:5a:54:04:b0:bd:e4:5f:c8:1f:60:ba:92:74:8f:5e:ab:12: 3f:ea:7c:c7:c3:61:5d:cc:c8:63:1e:76:f3:52:f0:13:a6:84: ae:57:4c:90:63:9e:ef:c2:56:a1:2d:bd:0b:15:28:50:76:52: 13:3d:ed:ee:ef:8f:09:56:73:36:38:84:6d:63:86:c1:1d:df: 06:08:05:d4:eb:62:59:f5:75:c2:0e:54:ed:e1:87:6f:fe:2e: ef:d4:d9:10:d1:b4:87:ec:f9:2e:27:71:9a:b1:5a:83:00:b0: 02:d7:51:24 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUfgvKm+S9WdlUaYXN+id7WbC05K8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxMTE1MzgwNloX DTI3MDYxMDE1NDMwNlowMzExMC8GA1UEAxMoODEyNERCOTFBRTkyNDlDMDA1NkQ5 QTEzMEM2MDJGN0RDRDMxREIwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKAtHh+6Bd1J3YybW9UUL/qkNFW7UedHo5NdGXdeHzeHE8arF1CzD2uRA5K1 BHNdp4/Q+cgitFbobcOqHzYMPzU58idj2z3dEer8Op4aOvR6TSyKnx0+yhNEaJXB vAI341mPEUEqxjlVlJNh14SYcEr4QUhtq/gt/ixneTQE2qu4jlxhZYHB2BWQJJjb mLThMg+2ESkvtNbYC6QJm7gcDIovaXgyISBacjBHXD6oNOS3LbAXCkrlbMfDONMT IZI2GMmpcIPQYrNA2+OX/YpJ4rL+AxcTiQjS2vH57OaL2x72XgupnNw/2eZof2Kj 4jy0YhLTi+9IjGiX8YuP6Whdu7ECAwEAAaOCAeQwggHgMB0GA1UdDgQWBBSBJNuR rpJJwAVtmhMMYC99zTHbDDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM0NDE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBtGF+MA0GCSqGSIb3DQEBCwUA A4IBAQAQROCTRMKXgZrvUbJd0JPrFgg1Xy28d+zdNbH9qEymYG+9E9msULg6PQxY tsMuxUV4hcXPEEFNcNPRek/OPCyCYcE35v0VW1Yu1QewpozjZp10XtDkB0u0CKTe L21JzwVETfn9Oa3diu7dxPImlc0sq01qAEGne6OUOYN/5JK7cvgHgCkgx5lhW5Me wSUglMSNWlQEsL3kX8gfYLqSdI9eqxI/6nzHw2FdzMhjHnbzUvATpoSuV0yQY57v wlahLb0LFShQdlITPe3u748JVnM2OIRtY4bBHd8GCAXU62JZ9XXCDlTt4Ydv/i7v 1NkQ0bSH7PkuJ3GasVqDALAC11Ek -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:38 2026 by rpki-client