$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136194.roa File: AS136194.roa (raw, json) Hash identifier: lFddO/DlFx28qBTgutCSHxB0wFrdzQrMwRs7siJc8t0= Subject key identifier: 3B:13:AB:C8:1A:F9:C7:EC:F4:5B:71:06:46:2D:CF:AE:4C:D1:13:13 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 3BE4426554175C9DDE9A72F319D859688E328C76 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136194.roa Signing time: Thu 28 May 2026 16:02:47 +0000 ROA not before: Thu 28 May 2026 15:57:47 +0000 ROA not after: Thu 27 May 2027 16:02:47 +0000 asID: 136194 IP address blocks: 111.174.0.0/20 maxlen: 20 111.174.60.0/22 maxlen: 22 111.178.233.0/24 maxlen: 24 240e:d:b800::/37 maxlen: 37 240e:95d:1800::/38 maxlen: 38 240e:95d:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e4:42:65:54:17:5c:9d:de:9a:72:f3:19:d8:59:68:8e:32:8c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 15:57:47 2026 GMT Not After : May 27 16:02:47 2027 GMT Subject: CN=3B13ABC81AF9C7ECF45B7106462DCFAE4CD11313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:29:8b:13:d8:bb:b1:ac:d2:49:82:81:b0:58: 7b:22:e4:96:dc:f9:0a:09:5d:d8:c8:48:e5:d7:da: 90:d5:3f:4c:33:05:1e:cf:d2:03:1e:3f:c0:9c:54: c6:7c:89:cd:92:77:d9:ec:55:d5:d7:7d:8a:32:25: 21:24:0f:5d:35:11:1f:1c:4e:0c:40:b4:86:76:55: 2a:ee:26:65:72:cf:91:82:a1:73:64:bc:14:ad:74: 30:b3:4d:8a:d8:d6:ef:33:cc:d4:a9:a4:46:2c:e3: 90:51:bd:af:00:86:18:b6:c9:95:d2:fa:b4:58:3e: 35:f0:d2:18:4c:39:5d:08:b8:6a:0b:9b:b5:60:87: fd:b6:b6:a4:6f:5c:ae:b2:f6:da:e2:c5:de:9d:28: b7:6f:04:4d:ba:56:89:8b:e1:db:e9:50:3b:32:77: f8:86:19:74:8b:01:22:2d:c8:c6:ca:fe:00:28:37: 35:5b:b1:a9:3a:5c:5e:fb:a8:7d:50:92:c9:43:07: aa:71:2f:0b:e4:b6:6f:82:71:cf:25:6a:22:10:d4: 7c:51:25:c2:da:ce:a9:a1:af:e5:09:fc:05:7a:35: f8:e5:ad:0d:58:f6:12:02:5d:7d:16:0f:6b:3b:56: 43:d9:40:35:c5:70:1d:f8:ab:d7:0f:32:9f:d6:0e: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:13:AB:C8:1A:F9:C7:EC:F4:5B:71:06:46:2D:CF:AE:4C:D1:13:13 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136194.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.174.0.0/20 111.174.60.0/22 111.178.233.0/24 IPv6: 240e:d:b800::/37 240e:95d:1800::/37 Signature Algorithm: sha256WithRSAEncryption 49:02:32:bb:35:d5:42:14:24:b3:b5:ae:04:9f:60:6e:32:4e: cf:1b:c3:24:59:aa:5b:1e:20:33:d4:82:43:6b:31:da:50:40: 00:ea:19:cb:19:08:3a:63:cb:14:d1:57:9f:45:e3:34:c4:d8: e1:4b:3a:1d:d8:d3:5b:93:51:d0:07:d8:fe:76:a5:ff:9b:3d: dd:91:8f:5f:6a:36:7c:b1:3f:d4:83:00:8b:ac:95:49:2a:05: 5b:68:15:4d:16:af:c4:f8:80:89:6a:7f:8b:3c:b8:1b:88:73: 14:e2:4f:c5:43:a0:e5:a3:9a:bb:fd:a6:1a:05:d6:c1:60:07: 35:99:c5:6a:17:eb:91:a0:33:e3:4f:6f:c8:af:05:66:9a:a8: 74:79:dd:af:85:fe:f1:e2:41:4f:31:12:f9:ab:72:36:ee:84: d3:30:99:ac:8d:c6:98:24:a7:b5:77:06:c8:d0:1d:83:24:70: eb:cc:bd:5e:d1:b6:ec:8d:c0:fa:80:2f:e4:10:01:f2:78:70: 67:9e:e7:dc:f2:5c:da:50:01:1a:72:2b:41:f7:ad:95:86:de: 0f:73:d3:73:9c:97:eb:16:df:04:4b:ca:4b:35:e7:b4:7f:ed: 5d:50:96:33:e4:86:5b:80:32:c1:32:ba:10:00:c6:ac:5b:86: e2:48:0e:74 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUO+RCZVQXXJ3emnLzGdhZaI4yjHYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE1NTc0N1oX DTI3MDUyNzE2MDI0N1owMzExMC8GA1UEAxMoM0IxM0FCQzgxQUY5QzdFQ0Y0NUI3 MTA2NDYyRENGQUU0Q0QxMTMxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIpixPYu7Gs0kmCgbBYeyLkltz5Cgld2MhI5dfakNU/TDMFHs/SAx4/wJxU xnyJzZJ32exV1dd9ijIlISQPXTURHxxODEC0hnZVKu4mZXLPkYKhc2S8FK10MLNN itjW7zPM1KmkRizjkFG9rwCGGLbJldL6tFg+NfDSGEw5XQi4agubtWCH/ba2pG9c rrL22uLF3p0ot28ETbpWiYvh2+lQOzJ3+IYZdIsBIi3Ixsr+ACg3NVuxqTpcXvuo fVCSyUMHqnEvC+S2b4JxzyVqIhDUfFElwtrOqaGv5Qn8BXo1+OWtDVj2EgJdfRYP aztWQ9lANcVwHfir1w8yn9YOS0kCAwEAAaOCAggwggIEMB0GA1UdDgQWBBQ7E6vI GvnH7PRbcQZGLc+uTNETEzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM2MTk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQEb64AAwQCb648AwQAb7LpMBYE AgACMBADBgMkDgANuAMGAyQOCV0YMA0GCSqGSIb3DQEBCwUAA4IBAQBJAjK7NdVC FCSzta4En2BuMk7PG8MkWapbHiAz1IJDazHaUEAA6hnLGQg6Y8sU0VefReM0xNjh Szod2NNbk1HQB9j+dqX/mz3dkY9fajZ8sT/UgwCLrJVJKgVbaBVNFq/E+ICJan+L PLgbiHMU4k/FQ6Dlo5q7/aYaBdbBYAc1mcVqF+uRoDPjT2/IrwVmmqh0ed2vhf7x 4kFPMRL5q3I27oTTMJmsjcaYJKe1dwbI0B2DJHDrzL1e0bbsjcD6gC/kEAHyeHBn nufc8lzaUAEacitB962Vht4Pc9NznJfrFt8ES8pLNee0f+1dUJYz5IZbgDLBMroQ AMasW4biSA50 -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:37 2026 by rpki-client