$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137402.roa File: AS137402.roa (raw, json) Hash identifier: 5czeTAjkH1hv0T9o5mv/xsfS1mqjXhVLW6GrweC7bBI= Subject key identifier: 44:49:B5:66:AC:05:60:C2:52:46:E6:EC:0E:96:52:D8:9D:BD:EA:4C Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 5E75C86EA85DFF78E8CD67C2163C4F7B09F44C85 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137402.roa Signing time: Thu 28 May 2026 16:02:32 +0000 ROA not before: Thu 28 May 2026 15:57:32 +0000 ROA not after: Thu 27 May 2027 16:02:32 +0000 asID: 137402 IP address blocks: 240e:45c:2700::/40 maxlen: 40 240e:45c:2900::/40 maxlen: 40 240e:45c:2b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:75:c8:6e:a8:5d:ff:78:e8:cd:67:c2:16:3c:4f:7b:09:f4:4c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 15:57:32 2026 GMT Not After : May 27 16:02:32 2027 GMT Subject: CN=4449B566AC0560C25246E6EC0E9652D89DBDEA4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:62:0b:e6:17:24:63:31:87:ac:8e:73:a7:b1: 72:91:6f:dc:07:f7:9e:24:b8:66:6c:04:ba:a6:32: 6e:2d:32:2f:f6:4a:3a:83:12:3d:7a:06:f5:ba:11: 1c:62:c0:9a:f3:8d:00:11:99:d6:27:81:6d:df:bc: 0c:fa:6e:1f:92:3a:22:96:95:29:c7:f5:f6:0c:ea: 53:7e:5c:62:14:bd:90:8f:2c:f2:40:8f:75:fa:10: 45:66:3c:cf:6a:27:f0:fc:23:3d:e9:7a:f1:53:91: 06:12:60:6c:d4:fc:f1:e6:46:8f:f6:d4:ad:3d:74: 66:be:2b:b0:21:13:9f:16:3f:13:8f:0e:62:59:5e: 20:f8:74:47:e3:50:de:dd:43:18:7a:6e:f5:fb:cc: 5e:b2:e9:83:3e:28:5f:2a:66:20:7e:06:54:94:01: fa:dd:10:dc:1c:a5:4a:ae:6b:a7:29:25:a7:9a:71: 59:02:56:c4:15:27:21:3d:91:52:e2:57:95:83:4c: 4b:c4:16:94:bf:77:97:25:0f:bb:e7:ec:46:6c:b3: a2:b3:32:ea:b2:3f:7e:8f:05:fc:14:78:0f:90:fd: fb:eb:70:78:e8:92:5e:f3:24:14:57:b4:0b:ac:79: 44:9c:eb:25:5d:97:65:f1:98:73:b7:64:a7:9c:4e: 3a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:49:B5:66:AC:05:60:C2:52:46:E6:EC:0E:96:52:D8:9D:BD:EA:4C X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137402.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:45c:2700::/40 240e:45c:2900::/40 240e:45c:2b00::/40 Signature Algorithm: sha256WithRSAEncryption 5f:9b:99:ac:46:8c:47:9f:53:f6:5a:c9:6f:4d:13:71:58:ad: c4:db:5c:86:eb:a1:15:b5:7e:cb:0e:b0:e3:6c:67:a1:c7:be: 50:1b:a8:b9:b7:b4:1e:70:19:d7:44:a2:06:77:f6:44:56:9a: 1f:54:45:5d:3d:f2:e3:ac:e6:4b:cb:9b:ca:ac:a3:f8:fd:48: a7:6e:f6:4b:f7:05:c1:38:b7:a0:3c:ef:9d:4a:ad:7d:8c:76: af:b9:93:54:52:e8:de:ea:97:f0:50:03:64:42:29:74:ac:b0: 86:c5:eb:0a:0a:1f:5b:7b:05:e3:61:7e:9c:c3:f6:9a:a1:ac: 84:e2:e8:df:d9:5e:13:2d:c5:90:5c:89:7f:4e:6c:b1:62:1d: ef:20:c4:2f:c5:88:b2:57:aa:c4:30:cd:3f:43:a5:14:0f:03: b3:8c:74:56:8a:31:61:bd:b0:a4:36:ec:50:6d:46:46:75:bf: 07:88:2c:8c:ce:12:ff:8c:3b:46:05:65:d4:59:00:e6:11:77: 20:62:42:73:42:7e:9f:6e:e2:2b:7e:74:f4:d7:ac:67:9a:c4: f7:0d:76:65:00:c7:ac:e5:20:97:ce:34:bc:a0:f7:ed:e2:ae: d9:2c:11:13:38:55:04:f9:de:fb:7a:f4:b3:a1:fe:20:b8:9d: ae:87:ec:f3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUXnXIbqhd/3jozWfCFjxPewn0TIUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE1NTczMloX DTI3MDUyNzE2MDIzMlowMzExMC8GA1UEAxMoNDQ0OUI1NjZBQzA1NjBDMjUyNDZF NkVDMEU5NjUyRDg5REJERUE0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOliC+YXJGMxh6yOc6excpFv3Af3niS4ZmwEuqYybi0yL/ZKOoMSPXoG9boR HGLAmvONABGZ1ieBbd+8DPpuH5I6IpaVKcf19gzqU35cYhS9kI8s8kCPdfoQRWY8 z2on8PwjPel68VORBhJgbNT88eZGj/bUrT10Zr4rsCETnxY/E48OYlleIPh0R+NQ 3t1DGHpu9fvMXrLpgz4oXypmIH4GVJQB+t0Q3BylSq5rpyklp5pxWQJWxBUnIT2R UuJXlYNMS8QWlL93lyUPu+fsRmyzorMy6rI/fo8F/BR4D5D9++tweOiSXvMkFFe0 C6x5RJzrJV2XZfGYc7dkp5xOOgMCAwEAAaOCAfYwggHyMB0GA1UdDgQWBBRESbVm rAVgwlJG5uwOllLYnb3qTDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM3NDAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYAJA4EXCcDBgAkDgRcKQMGACQO BFwrMA0GCSqGSIb3DQEBCwUAA4IBAQBfm5msRoxHn1P2WslvTRNxWK3E21yG66EV tX7LDrDjbGehx75QG6i5t7QecBnXRKIGd/ZEVpofVEVdPfLjrOZLy5vKrKP4/Uin bvZL9wXBOLegPO+dSq19jHavuZNUUuje6pfwUANkQil0rLCGxesKCh9bewXjYX6c w/aaoayE4ujf2V4TLcWQXIl/TmyxYh3vIMQvxYiyV6rEMM0/Q6UUDwOzjHRWijFh vbCkNuxQbUZGdb8HiCyMzhL/jDtGBWXUWQDmEXcgYkJzQn6fbuIrfnT016xnmsT3 DXZlAMes5SCXzjS8oPft4q7ZLBETOFUE+d77evSzof4guJ2uh+zz -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:28 2026 by rpki-client