$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136198.roa File: AS136198.roa (raw, json) Hash identifier: WD0vUY1hSPIKFLotFmg/4b49Fh+UmmvY7szFUtx7qcY= Subject key identifier: 17:70:98:56:97:AD:9A:77:F6:08:71:94:A3:A9:4C:E4:59:75:73:F2 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 1148656497D9A02CFE26A2A7750CA27B5ED02B2E Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136198.roa Signing time: Tue 02 Jun 2026 16:24:20 +0000 ROA not before: Tue 02 Jun 2026 16:19:20 +0000 ROA not after: Tue 01 Jun 2027 16:24:20 +0000 asID: 136198 IP address blocks: 116.19.103.0/24 maxlen: 24 219.128.80.0/24 maxlen: 24 240e:108:4044::/48 maxlen: 48 240e:108:4844::/48 maxlen: 48 240e:3b0:222f::/48 maxlen: 48 240e:3b3:22f0::/44 maxlen: 44 240e:6b4:130::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:48:65:64:97:d9:a0:2c:fe:26:a2:a7:75:0c:a2:7b:5e:d0:2b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 2 16:19:20 2026 GMT Not After : Jun 1 16:24:20 2027 GMT Subject: CN=1770985697AD9A77F6087194A3A94CE4597573F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:c7:f6:e8:f6:fb:52:eb:48:d2:56:99:b6: 4e:05:61:89:71:05:a1:37:3a:1b:e5:a8:ae:81:91: 50:2b:ca:81:69:9b:1a:d4:64:30:dc:c7:e8:89:dd: 94:b2:cc:cb:ac:4f:4b:08:9c:f8:be:bc:86:d4:c9: 83:00:9a:41:a6:6b:b5:39:f7:99:9b:ab:1d:06:54: 00:71:4c:6f:49:84:39:62:7b:40:a4:b0:7e:e1:55: 59:0e:c8:81:3c:56:f7:31:ad:97:a7:cb:69:45:50: 1c:c1:b5:de:ef:ee:ee:64:2d:24:de:bd:41:be:0b: f8:34:35:50:14:01:78:65:7a:9b:87:0d:46:2e:08: ca:d3:e1:0b:e9:04:fa:b1:30:4a:f9:29:3d:06:39: d8:0a:b5:9f:90:fb:c8:ff:d1:eb:f5:4f:ff:52:d9: fb:c0:19:c4:69:7a:f4:9b:e3:de:14:25:47:97:58: 47:76:67:dd:44:a7:81:8d:0e:13:89:f1:61:1e:6d: a1:13:9b:60:f7:b2:58:55:4a:ef:36:53:c5:0b:76: c4:04:64:bb:d4:74:12:83:70:36:ed:6c:89:9e:55: e0:b8:25:29:89:66:99:c1:34:70:55:78:9d:2c:42: 7a:f0:46:77:7c:1b:33:80:d6:52:39:d3:7c:0f:6d: 87:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:70:98:56:97:AD:9A:77:F6:08:71:94:A3:A9:4C:E4:59:75:73:F2 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.19.103.0/24 219.128.80.0/24 IPv6: 240e:108:4044::/48 240e:108:4844::/48 240e:3b0:222f::/48 240e:3b3:22f0::/44 240e:6b4:130::/44 Signature Algorithm: sha256WithRSAEncryption 58:87:db:b6:d4:b6:31:a2:10:ed:66:34:1c:be:78:34:8a:38: 86:3d:c5:8f:ac:96:88:73:a4:03:36:41:13:8f:08:43:26:e5: 5e:1b:1e:fd:ca:2d:e7:aa:9a:d9:62:6e:ab:7f:34:a7:ba:f3: 0f:cd:1c:a2:95:f7:9c:75:e5:6f:ed:45:3d:6f:e5:bc:cb:86: 79:31:9c:77:fa:e9:69:46:65:05:8f:52:1b:ea:41:da:a8:0e: bf:28:e1:1c:e1:0b:fb:3a:82:88:9d:fb:a1:36:53:31:cc:0a: eb:54:0a:62:d0:c2:ff:40:14:18:2a:68:5d:49:68:f0:9b:9a: 93:00:17:31:41:dc:a0:41:cd:a4:f7:ac:c4:10:46:f6:61:bd: 98:8b:f3:3c:d5:9a:4c:25:d3:3f:cd:1a:90:d1:43:30:b2:8a: 58:1b:4c:40:0b:d1:96:55:d9:31:96:f1:4e:c4:98:50:07:54: a4:19:9a:15:5f:85:83:69:8b:99:17:4a:c4:39:f1:e8:2f:ef: 6e:8d:ab:3d:d7:c7:85:06:31:4b:2e:db:fc:6b:e2:04:aa:01: 01:2e:0e:1f:08:b5:7a:24:1e:8f:24:fb:f7:e8:46:9c:0e:c2: 7c:3b:cc:b0:7c:2e:d0:9c:73:93:ac:06:fd:e7:02:21:c2:d5: 9e:c4:0d:03 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEUhlZJfZoCz+JqKndQyie17QKy4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwMjE2MTkyMFoX DTI3MDYwMTE2MjQyMFowMzExMC8GA1UEAxMoMTc3MDk4NTY5N0FEOUE3N0Y2MDg3 MTk0QTNBOTRDRTQ1OTc1NzNGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALStx/bo9vtS60jSVpm2TgVhiXEFoTc6G+WoroGRUCvKgWmbGtRkMNzH6Ind lLLMy6xPSwic+L68htTJgwCaQaZrtTn3mZurHQZUAHFMb0mEOWJ7QKSwfuFVWQ7I gTxW9zGtl6fLaUVQHMG13u/u7mQtJN69Qb4L+DQ1UBQBeGV6m4cNRi4IytPhC+kE +rEwSvkpPQY52Aq1n5D7yP/R6/VP/1LZ+8AZxGl69Jvj3hQlR5dYR3Zn3USngY0O E4nxYR5toRObYPeyWFVK7zZTxQt2xARku9R0EoNwNu1siZ5V4LglKYlmmcE0cFV4 nSxCevBGd3wbM4DWUjnTfA9th/kCAwEAAaOCAh8wggIbMB0GA1UdDgQWBBQXcJhW l62ad/YIcZSjqUzkWXVz8jAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM2MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MFoGCCsGAQUFBwEHAQH/BEswSTASBAIAATAMAwQAdBNnAwQA24BQMDMEAgACMC0D BwAkDgEIQEQDBwAkDgEISEQDBwAkDgOwIi8DBwQkDgOzIvADBwQkDga0ATAwDQYJ KoZIhvcNAQELBQADggEBAFiH27bUtjGiEO1mNBy+eDSKOIY9xY+slohzpAM2QROP CEMm5V4bHv3KLeeqmtlibqt/NKe68w/NHKKV95x15W/tRT1v5bzLhnkxnHf66WlG ZQWPUhvqQdqoDr8o4RzhC/s6goid+6E2UzHMCutUCmLQwv9AFBgqaF1JaPCbmpMA FzFB3KBBzaT3rMQQRvZhvZiL8zzVmkwl0z/NGpDRQzCyilgbTEAL0ZZV2TGW8U7E mFAHVKQZmhVfhYNpi5kXSsQ58egv726Nqz3Xx4UGMUsu2/xr4gSqAQEuDh8ItXok Ho8k+/foRpwOwnw7zLB8LtCcc5OsBv3nAiHC1Z7EDQM= -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:34 2026 by rpki-client