$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134765.roa File: AS134765.roa (raw, json) Hash identifier: u7GvB7TphEojW/ecRZvttggbHna2l4FBCQabNx0DWUw= Subject key identifier: 42:38:E5:2E:42:49:10:25:6C:A7:46:C6:10:C4:FB:6C:24:DD:9B:0E Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 2C74AED739A4545B532A6783201F0FE8ED062C88 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134765.roa Signing time: Tue 26 May 2026 16:21:51 +0000 ROA not before: Tue 26 May 2026 16:16:51 +0000 ROA not after: Tue 25 May 2027 16:21:51 +0000 asID: 134765 IP address blocks: 240e:12:800::/37 maxlen: 37 240e:c9:4000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:74:ae:d7:39:a4:54:5b:53:2a:67:83:20:1f:0f:e8:ed:06:2c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 26 16:16:51 2026 GMT Not After : May 25 16:21:51 2027 GMT Subject: CN=4238E52E424910256CA746C610C4FB6C24DD9B0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:21:ea:8e:74:10:fc:76:bc:76:19:22:1b: ed:13:a2:99:02:f9:ef:4e:b0:5f:81:2f:2d:60:99: e9:22:95:5d:31:8e:c1:36:89:db:2a:32:89:cb:c9: 3f:78:a3:30:2e:53:22:14:60:3b:7f:5d:c4:ef:56: 41:94:ae:2f:65:e3:32:4c:79:48:84:69:00:50:3a: dd:31:8a:f1:29:dc:0d:2f:3e:cf:3a:a1:3c:0c:7f: 9f:f2:81:d6:0d:39:04:de:cd:14:b2:e1:29:4f:44: cc:00:2c:04:98:57:bc:33:56:51:9a:87:33:64:95: 7c:9a:f2:4a:9d:24:46:cb:01:21:ba:96:c1:0e:73: 8c:e4:1c:88:54:b7:3e:a8:de:b0:ae:83:f2:08:1f: e1:ff:57:89:f4:e0:26:ee:b1:ca:e5:a8:53:79:2d: 27:19:7d:38:4f:99:3e:56:15:f5:e9:f0:1b:59:1f: 43:f9:6f:d3:60:ea:67:01:7a:14:a2:c6:a1:7a:88: 52:ac:5a:d3:7c:67:17:16:92:12:bd:92:58:a1:fc: 73:d0:bd:98:c3:6b:3f:06:e8:bd:86:e0:c4:1e:ad: a9:14:6e:b6:77:7b:8a:0b:7f:b6:b3:8f:84:28:64: fe:64:55:77:11:67:81:6e:50:7e:a5:cb:0e:eb:ab: 93:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:38:E5:2E:42:49:10:25:6C:A7:46:C6:10:C4:FB:6C:24:DD:9B:0E X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134765.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:12:800::/37 240e:c9:4000::/35 Signature Algorithm: sha256WithRSAEncryption 14:ff:d0:33:c4:33:ff:e0:62:98:e4:82:2d:c8:2b:49:af:ff: 02:7f:c9:d6:8a:20:59:b9:72:f5:c6:e5:52:92:54:fc:f0:20: 0d:b1:4a:89:71:d5:57:14:23:67:6f:4f:ca:3b:b0:d7:2b:09: 1d:8b:8d:ca:15:18:a7:bb:82:12:75:7d:ed:62:8e:a1:11:b2: d3:91:fa:83:68:35:de:3a:b9:ec:dd:d7:10:ff:13:e4:0d:8c: 28:93:9f:fd:80:2a:e6:01:76:4a:b5:8e:69:63:3d:4c:b6:1a: 93:7e:e0:d0:55:9e:f7:de:b0:a1:1c:2e:90:18:0c:3c:4d:4d: 04:13:9d:d7:f6:d2:c0:9c:e6:45:58:0c:12:33:d6:cf:83:53: 67:d4:f6:1a:f4:f3:38:84:54:92:a5:ae:5e:8a:66:1e:ab:bb: ad:87:e4:4c:84:bc:a3:73:f9:20:37:80:2c:0e:4b:ec:54:44: 03:04:c2:62:f3:c9:fd:f6:0b:59:08:90:c1:9b:d8:ad:ec:a9: dd:f7:fb:fd:4d:be:49:84:3d:cd:c5:2b:1f:fa:fa:ca:7e:3e: 8f:2b:53:52:52:78:d6:bb:e2:43:e1:76:60:c1:88:21:c6:d2: 3c:87:91:92:9f:0f:97:2f:d0:a5:cf:a1:b4:3a:3b:55:17:79: 20:a6:79:dc -----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgIULHSu1zmkVFtTKmeDIB8P6O0GLIgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyNjE2MTY1MVoX DTI3MDUyNTE2MjE1MVowMzExMC8GA1UEAxMoNDIzOEU1MkU0MjQ5MTAyNTZDQTc0 NkM2MTBDNEZCNkMyNEREOUIwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/nIeqOdBD8drx2GSIb7ROimQL5706wX4EvLWCZ6SKVXTGOwTaJ2yoyicvJ P3ijMC5TIhRgO39dxO9WQZSuL2XjMkx5SIRpAFA63TGK8SncDS8+zzqhPAx/n/KB 1g05BN7NFLLhKU9EzAAsBJhXvDNWUZqHM2SVfJrySp0kRssBIbqWwQ5zjOQciFS3 PqjesK6D8ggf4f9XifTgJu6xyuWoU3ktJxl9OE+ZPlYV9enwG1kfQ/lv02DqZwF6 FKLGoXqIUqxa03xnFxaSEr2SWKH8c9C9mMNrPwbovYbgxB6tqRRutnd7igt/trOP hChk/mRVdxFngW5QfqXLDuurk4UCAwEAAaOCAe4wggHqMB0GA1UdDgQWBBRCOOUu QkkQJWynRsYQxPtsJN2bDjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM0NzY1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYDJA4AEggDBgUkDgDJQDANBgkq hkiG9w0BAQsFAAOCAQEAFP/QM8Qz/+BimOSCLcgrSa//An/J1oogWbly9cblUpJU /PAgDbFKiXHVVxQjZ29Pyjuw1ysJHYuNyhUYp7uCEnV97WKOoRGy05H6g2g13jq5 7N3XEP8T5A2MKJOf/YAq5gF2SrWOaWM9TLYak37g0FWe996woRwukBgMPE1NBBOd 1/bSwJzmRVgMEjPWz4NTZ9T2GvTzOIRUkqWuXopmHqu7rYfkTIS8o3P5IDeALA5L 7FREAwTCYvPJ/fYLWQiQwZvYreyp3ff7/U2+SYQ9zcUrH/r6yn4+jytTUlJ41rvi Q+F2YMGIIcbSPIeRkp8Ply/Qpc+htDo7VRd5IKZ53A== -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:41 2026 by rpki-client