$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138597.roa File: AS138597.roa (raw, json) Hash identifier: kZg9f2aSSEbfyAGaYq1K9NIF6xItu+50Lyjz8iSuTg8= Subject key identifier: B4:DD:A1:8A:91:94:97:1C:B2:84:F2:9C:82:5E:0E:23:96:A4:C3:4C Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 1B311400FDA29DD0417F742822C4E3B33D8911BA Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138597.roa Signing time: Thu 28 May 2026 16:01:18 +0000 ROA not before: Thu 28 May 2026 15:56:18 +0000 ROA not after: Thu 27 May 2027 16:01:18 +0000 asID: 138597 IP address blocks: 240e:bf:b8ec::/48 maxlen: 48 240e:bf:b8ed::/48 maxlen: 48 240e:bf:b8ee::/48 maxlen: 48 240e:bf:b8ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:31:14:00:fd:a2:9d:d0:41:7f:74:28:22:c4:e3:b3:3d:89:11:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 15:56:18 2026 GMT Not After : May 27 16:01:18 2027 GMT Subject: CN=B4DDA18A9194971CB284F29C825E0E2396A4C34C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:bb:36:1f:c2:41:3e:91:c2:f6:f3:f8:d1: 61:7e:65:d4:fe:eb:88:82:cf:9a:b6:1c:6c:31:69: f8:d9:18:2b:83:4a:d0:8f:11:c0:e7:2d:b5:7c:72: b5:fa:62:02:13:c1:9a:b8:50:92:fd:7e:26:eb:24: 04:22:37:8d:9b:06:52:92:ea:1f:e4:5c:76:db:c4: df:76:ea:79:bc:5f:4d:ca:ce:9b:7f:fa:fd:d1:12: a5:74:22:bf:79:96:97:91:e5:a7:ec:43:e2:4a:36: 5d:d9:2d:3f:cb:59:72:0f:d5:99:e9:ae:01:e4:62: 61:02:da:e8:7c:5e:50:13:ca:c8:da:35:56:d4:3f: 60:c6:8d:9b:e1:b0:c4:19:53:44:75:a1:cd:11:ec: 1a:5f:be:4b:24:47:c2:e3:c1:27:d7:d0:50:0c:7f: 3e:72:bf:4f:30:ea:e8:7b:7d:d5:38:21:10:03:aa: c1:24:2b:fa:da:77:60:32:20:25:0f:36:55:e6:4c: df:28:5f:ac:cf:82:7c:56:3f:53:f3:2d:03:28:75: 88:bc:c3:44:64:39:6a:56:c8:8c:24:d0:54:8b:2f: 4e:05:65:8d:f0:4e:26:63:e3:c2:79:00:25:ae:ac: 12:f3:6a:32:c5:05:37:79:f6:68:2d:75:f7:06:f0: cc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DD:A1:8A:91:94:97:1C:B2:84:F2:9C:82:5E:0E:23:96:A4:C3:4C X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138597.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:bf:b8ec::/46 Signature Algorithm: sha256WithRSAEncryption 22:5d:f1:2f:c2:0f:89:03:0d:51:5a:1a:bb:67:74:7a:98:43: a9:ec:12:8b:b8:cf:76:e1:97:13:07:94:02:5d:6f:f1:9c:ef: 55:0a:7d:76:8e:91:bd:97:ab:f1:85:9e:85:38:78:a3:ea:97: d5:70:2e:a9:6d:be:fe:48:4b:0b:be:7f:2e:54:26:c3:4c:61: 9d:6a:e8:8a:ca:b2:27:85:db:7b:e5:4b:e8:ed:a7:31:21:2d: 97:2b:17:77:2d:26:cb:30:d8:63:bf:23:0e:f9:5b:42:87:37: f3:0a:fc:1e:90:73:2c:f9:c0:3c:68:42:50:5f:44:9f:6f:af: bf:d3:9a:84:c6:31:17:6c:c3:70:cd:32:cc:25:16:b1:a6:d0: 04:1e:94:4a:5f:c9:4b:c1:cd:d9:48:26:dd:1e:8c:ba:7c:c8: 96:be:b3:ce:19:27:c8:da:f6:46:e6:12:55:36:87:97:4a:21: 33:21:07:78:9b:14:48:46:f2:b1:e3:ac:e9:7c:b2:ac:6a:e1: be:14:df:03:1e:9d:47:44:97:1a:4f:f4:86:8e:d7:5a:05:46: cb:d7:3b:01:f3:b8:18:ca:d5:f5:44:d4:f7:ae:cc:cc:2a:53: e6:fb:4b:24:2b:5a:35:cb:79:d9:bf:ca:b3:d4:00:da:11:cd: 48:07:82:be -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUGzEUAP2indBBf3QoIsTjsz2JEbowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE1NTYxOFoX DTI3MDUyNzE2MDExOFowMzExMC8GA1UEAxMoQjREREExOEE5MTk0OTcxQ0IyODRG MjlDODI1RTBFMjM5NkE0QzM0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZtuzYfwkE+kcL28/jRYX5l1P7riILPmrYcbDFp+NkYK4NK0I8RwOcttXxy tfpiAhPBmrhQkv1+JuskBCI3jZsGUpLqH+RcdtvE33bqebxfTcrOm3/6/dESpXQi v3mWl5Hlp+xD4ko2XdktP8tZcg/VmemuAeRiYQLa6HxeUBPKyNo1VtQ/YMaNm+Gw xBlTRHWhzRHsGl++SyRHwuPBJ9fQUAx/PnK/TzDq6Ht91TghEAOqwSQr+tp3YDIg JQ82VeZM3yhfrM+CfFY/U/MtAyh1iLzDRGQ5albIjCTQVIsvTgVljfBOJmPjwnkA Ja6sEvNqMsUFN3n2aC119wbwzOUCAwEAAaOCAecwggHjMB0GA1UdDgQWBBS03aGK kZSXHLKE8pyCXg4jlqTDTDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM4NTk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJA4Av7jsMA0GCSqGSIb3DQEB CwUAA4IBAQAiXfEvwg+JAw1RWhq7Z3R6mEOp7BKLuM924ZcTB5QCXW/xnO9VCn12 jpG9l6vxhZ6FOHij6pfVcC6pbb7+SEsLvn8uVCbDTGGdauiKyrInhdt75Uvo7acx IS2XKxd3LSbLMNhjvyMO+VtChzfzCvwekHMs+cA8aEJQX0Sfb6+/05qExjEXbMNw zTLMJRaxptAEHpRKX8lLwc3ZSCbdHoy6fMiWvrPOGSfI2vZG5hJVNoeXSiEzIQd4 mxRIRvKx46zpfLKsauG+FN8DHp1HRJcaT/SGjtdaBUbL1zsB87gYytX1RNT3rszM KlPm+0skK1o1y3nZv8qz1ADaEc1IB4K+ -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:25 2026 by rpki-client