$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138641.roa File: AS138641.roa (raw, json) Hash identifier: 5RgqQTc+WEycfb+4DAG2y7q5guSYTi41xBkY4HGifuc= Subject key identifier: 44:CB:F4:7B:66:77:1D:17:00:57:28:EF:F7:1C:D3:3A:0D:29:8E:2F Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 7D1CECD0E74954AB082CD70AF89E0731CB59CF6C Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138641.roa Signing time: Thu 28 May 2026 16:01:18 +0000 ROA not before: Thu 28 May 2026 15:56:18 +0000 ROA not after: Thu 27 May 2027 16:01:18 +0000 asID: 138641 IP address blocks: 240e:bf:b8e4::/48 maxlen: 48 240e:bf:b8e5::/48 maxlen: 48 240e:bf:b8e6::/48 maxlen: 48 240e:bf:b8e7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1c:ec:d0:e7:49:54:ab:08:2c:d7:0a:f8:9e:07:31:cb:59:cf:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 15:56:18 2026 GMT Not After : May 27 16:01:18 2027 GMT Subject: CN=44CBF47B66771D17005728EFF71CD33A0D298E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:7d:35:6b:5f:fd:d5:9e:be:39:75:ef:65: 3f:bc:e4:29:5f:17:de:9d:b9:77:5f:22:e0:2e:53: fa:b2:72:86:8c:3a:1b:23:64:da:9a:23:30:59:16: 25:5f:70:86:4b:89:94:51:8e:22:e4:84:22:78:30: 9d:09:99:70:95:ae:c8:9e:26:15:ea:94:e2:4d:a7: c9:b8:26:29:fa:ab:37:a1:50:2b:0c:4c:73:03:6e: 21:9c:a2:29:6a:40:4e:2e:a5:24:fb:65:6b:5c:09: c5:69:58:44:ca:78:03:b7:98:cd:a0:4a:7d:37:bc: 4e:20:96:d7:f3:ea:87:4a:f0:ca:80:07:88:4c:b6: 87:d1:f6:cf:80:52:d5:b1:c2:fc:f4:e9:9f:34:95: dd:7b:18:3e:47:d4:cd:3d:64:36:91:b9:b9:a4:9e: e8:06:f1:e0:eb:c0:27:d8:0f:ed:ff:45:2e:b9:cd: 4a:dd:35:11:8c:e2:f6:17:cc:df:08:27:5d:1c:0e: a1:be:73:0d:9d:26:5c:a2:cb:48:88:6e:03:75:b4: 42:c3:ad:72:08:f7:97:8e:02:0e:fb:e1:13:1b:68: 6d:06:8d:7e:72:7f:c8:9d:6d:cb:20:7a:a5:f7:f7: 7a:6e:ee:54:a2:ec:ac:3d:42:73:29:ec:ac:e1:86: 16:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CB:F4:7B:66:77:1D:17:00:57:28:EF:F7:1C:D3:3A:0D:29:8E:2F X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138641.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:bf:b8e4::/46 Signature Algorithm: sha256WithRSAEncryption 79:62:1a:2e:2c:11:5c:73:87:8a:fb:b2:79:a8:95:4b:ff:e2: 84:43:13:05:ed:4d:c8:2f:c1:e1:98:bd:5d:83:e2:d8:16:13: df:ba:3c:eb:f8:80:fd:27:bc:16:ac:ca:5a:91:d8:64:4c:7b: 8d:95:55:4c:85:f7:f8:f9:b5:c8:aa:66:15:f0:43:3f:fe:26: 8a:7b:ee:ec:65:cb:2b:49:d2:f8:44:71:20:b9:7e:a3:63:72: 95:52:aa:f4:ef:90:aa:aa:6a:56:ff:3e:09:d2:db:37:49:86: 68:9f:68:41:5e:bd:5a:09:85:3a:1a:7a:56:1b:65:0e:db:93: 71:76:0d:d2:74:21:d2:a9:5e:4e:d7:fc:42:44:c7:fa:cf:79: 22:3e:c1:90:9c:03:8a:90:e5:6b:6f:d7:fe:61:9b:49:3b:3b: 3e:36:39:b2:6e:da:bc:ab:59:98:c1:98:3a:ee:73:a3:dc:13: 23:16:92:4d:b3:87:fb:34:4c:de:f3:f1:90:de:51:40:a7:fa: f4:d0:6f:a6:d6:f5:b5:e8:0b:90:e7:a1:42:80:87:d8:8e:82: 2f:af:fe:b3:5d:a1:be:bf:bb:79:b2:01:2c:da:ae:c4:9b:2b: 18:7e:c5:1c:33:da:11:64:51:92:02:27:42:99:f0:66:f9:a1: 1c:41:97:08 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUfRzs0OdJVKsILNcK+J4HMctZz2wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE1NTYxOFoX DTI3MDUyNzE2MDExOFowMzExMC8GA1UEAxMoNDRDQkY0N0I2Njc3MUQxNzAwNTcy OEVGRjcxQ0QzM0EwRDI5OEUyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYmfTVrX/3Vnr45de9lP7zkKV8X3p25d18i4C5T+rJyhow6GyNk2pojMFkW JV9whkuJlFGOIuSEIngwnQmZcJWuyJ4mFeqU4k2nybgmKfqrN6FQKwxMcwNuIZyi KWpATi6lJPtla1wJxWlYRMp4A7eYzaBKfTe8TiCW1/Pqh0rwyoAHiEy2h9H2z4BS 1bHC/PTpnzSV3XsYPkfUzT1kNpG5uaSe6Abx4OvAJ9gP7f9FLrnNSt01EYzi9hfM 3wgnXRwOob5zDZ0mXKLLSIhuA3W0QsOtcgj3l44CDvvhExtobQaNfnJ/yJ1tyyB6 pff3em7uVKLsrD1CcynsrOGGFo0CAwEAAaOCAecwggHjMB0GA1UdDgQWBBREy/R7 ZncdFwBXKO/3HNM6DSmOLzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM4NjQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJA4Av7jkMA0GCSqGSIb3DQEB CwUAA4IBAQB5YhouLBFcc4eK+7J5qJVL/+KEQxMF7U3IL8HhmL1dg+LYFhPfujzr +ID9J7wWrMpakdhkTHuNlVVMhff4+bXIqmYV8EM//iaKe+7sZcsrSdL4RHEguX6j Y3KVUqr075CqqmpW/z4J0ts3SYZon2hBXr1aCYU6GnpWG2UO25Nxdg3SdCHSqV5O 1/xCRMf6z3kiPsGQnAOKkOVrb9f+YZtJOzs+Njmybtq8q1mYwZg67nOj3BMjFpJN s4f7NEze8/GQ3lFAp/r00G+m1vW16AuQ56FCgIfYjoIvr/6zXaG+v7t5sgEs2q7E mysYfsUcM9oRZFGSAidCmfBm+aEcQZcI -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:27 2026 by rpki-client