$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138436.roa File: AS138436.roa (raw, json) Hash identifier: rf/auzkdCtXonaI3M917YNfR8cj6C8Lp7OOAWoLKuCs= Subject key identifier: C8:A1:5E:44:CF:EE:D4:1E:14:CE:B7:C4:A1:B9:F5:38:22:23:91:6A Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 4CADF66C3AE9AF1E4A081B25CC82171C65651441 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138436.roa Signing time: Thu 28 May 2026 16:01:18 +0000 ROA not before: Thu 28 May 2026 15:56:18 +0000 ROA not after: Thu 27 May 2027 16:01:18 +0000 asID: 138436 IP address blocks: 240e:bf:b8fc::/48 maxlen: 48 240e:bf:b8fd::/48 maxlen: 48 240e:bf:b8fe::/48 maxlen: 48 240e:bf:b8ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ad:f6:6c:3a:e9:af:1e:4a:08:1b:25:cc:82:17:1c:65:65:14:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 15:56:18 2026 GMT Not After : May 27 16:01:18 2027 GMT Subject: CN=C8A15E44CFEED41E14CEB7C4A1B9F5382223916A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:00:63:0d:39:49:59:2e:db:77:a3:b2:bc: 97:4e:e2:6b:50:dc:7a:98:bf:87:cd:2e:b8:48:88: 7d:79:98:2b:a8:00:20:fc:72:3b:0e:db:a6:07:fa: 2f:39:57:e1:09:56:85:47:3c:11:08:6e:ab:85:2f: 40:8c:d2:4d:a5:f7:84:1d:80:07:3a:51:02:bd:ce: 8a:05:45:8f:f8:0d:6d:44:aa:fb:c7:86:50:3b:e9: a0:77:8e:60:3d:08:7a:d8:8d:21:b7:7a:0d:ac:cc: 1c:58:ae:34:5a:2e:48:de:4c:34:60:f6:b9:b0:80: 95:f0:3d:f9:df:b3:79:f7:94:a7:97:28:0a:6f:44: 3d:90:4d:61:b4:42:06:56:c8:84:a7:96:d1:26:76: 5c:cb:a6:a8:67:b5:6b:71:a7:03:fe:2e:49:df:57: 5b:3a:03:3a:b3:00:ad:da:1a:bf:6c:c5:82:b7:95: b8:52:07:bd:3e:36:c7:dd:25:70:84:0a:c1:85:ca: 62:f9:3d:1a:dc:58:5e:2a:c8:86:47:32:6c:29:e5: 86:d9:fe:f0:b9:fa:07:0c:d5:32:cf:bc:54:a1:cb: e6:a8:c6:15:9c:b5:e8:c8:5e:27:0a:e9:89:72:d6: 5c:ca:cc:88:87:34:f4:24:25:14:f6:b8:b0:6e:78: 99:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A1:5E:44:CF:EE:D4:1E:14:CE:B7:C4:A1:B9:F5:38:22:23:91:6A X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:bf:b8fc::/46 Signature Algorithm: sha256WithRSAEncryption 55:68:18:b7:db:ed:3f:fd:9d:73:b0:dd:9e:fa:fe:c4:25:1f: af:7d:14:23:ef:04:c1:a0:2c:4e:1a:8c:75:2a:ef:13:3d:2f: 29:65:92:e9:af:1c:21:ec:b5:10:70:51:fe:6c:c0:00:96:0b: 64:b6:26:a9:ec:dd:96:53:51:b3:d3:8b:16:a4:a9:4e:ec:52: 8b:15:52:88:6f:02:6d:44:1f:f7:a9:18:70:94:b2:75:08:e6: 7c:59:a2:d6:b9:24:51:45:30:f7:60:71:7d:2e:e0:ae:0a:0d: 25:bf:be:25:11:09:45:09:e6:b6:4d:05:ec:b6:7a:ee:22:8f: 1b:8a:3f:0d:36:64:37:73:45:f5:37:2a:d6:d8:54:a0:21:6d: 65:aa:23:93:96:53:0b:12:26:b2:d9:fb:19:91:36:de:1a:36: ba:35:55:a1:71:7b:0b:58:92:2c:be:2c:4f:00:ca:65:1a:9c: 28:d8:cb:eb:a4:d4:14:33:3e:dd:4b:ab:7e:39:f7:82:b6:92: c0:a0:0d:bb:44:2b:93:93:6b:f2:4b:b6:51:b7:19:5c:b9:39: f7:a8:96:17:b7:b0:1b:47:e4:d3:d6:74:ff:51:72:24:11:c0: 8b:3b:08:5c:f7:54:65:63:c2:3d:8e:d4:84:a3:d0:10:d6:4c: ca:a0:b1:bf -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUTK32bDrprx5KCBslzIIXHGVlFEEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE1NTYxOFoX DTI3MDUyNzE2MDExOFowMzExMC8GA1UEAxMoQzhBMTVFNDRDRkVFRDQxRTE0Q0VC N0M0QTFCOUY1MzgyMjIzOTE2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrtAGMNOUlZLtt3o7K8l07ia1Dcepi/h80uuEiIfXmYK6gAIPxyOw7bpgf6 LzlX4QlWhUc8EQhuq4UvQIzSTaX3hB2ABzpRAr3OigVFj/gNbUSq+8eGUDvpoHeO YD0IetiNIbd6DazMHFiuNFouSN5MNGD2ubCAlfA9+d+zefeUp5coCm9EPZBNYbRC BlbIhKeW0SZ2XMumqGe1a3GnA/4uSd9XWzoDOrMArdoav2zFgreVuFIHvT42x90l cIQKwYXKYvk9GtxYXirIhkcybCnlhtn+8Ln6BwzVMs+8VKHL5qjGFZy16MheJwrp iXLWXMrMiIc09CQlFPa4sG54mQcCAwEAAaOCAecwggHjMB0GA1UdDgQWBBTIoV5E z+7UHhTOt8ShufU4IiORajAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM4NDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJA4Av7j8MA0GCSqGSIb3DQEB CwUAA4IBAQBVaBi32+0//Z1zsN2e+v7EJR+vfRQj7wTBoCxOGox1Ku8TPS8pZZLp rxwh7LUQcFH+bMAAlgtktiap7N2WU1Gz04sWpKlO7FKLFVKIbwJtRB/3qRhwlLJ1 COZ8WaLWuSRRRTD3YHF9LuCuCg0lv74lEQlFCea2TQXstnruIo8bij8NNmQ3c0X1 NyrW2FSgIW1lqiOTllMLEiay2fsZkTbeGja6NVWhcXsLWJIsvixPAMplGpwo2Mvr pNQUMz7dS6t+OfeCtpLAoA27RCuTk2vyS7ZRtxlcuTn3qJYXt7AbR+TT1nT/UXIk EcCLOwhc91RlY8I9jtSEo9AQ1kzKoLG/ -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:34 2026 by rpki-client