$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS133119.roa File: AS133119.roa (raw, json) Hash identifier: UwOt5tr2s7AJyQIvzsx549pVsgIpDht61NuHGXjQm18= Subject key identifier: 85:79:2D:11:9B:56:08:37:FC:8A:F1:95:7C:09:F8:7E:4B:59:93:22 Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 6F9CB6B953275342AEA0A6B6DB6F7229758B3DFD Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS133119.roa Signing time: Thu 11 Jun 2026 12:15:48 +0000 ROA not before: Thu 11 Jun 2026 12:10:48 +0000 ROA not after: Thu 10 Jun 2027 12:15:48 +0000 asID: 133119 IP address blocks: 116.181.0.0/16 maxlen: 16 220.192.72.0/24 maxlen: 24 220.192.73.0/24 maxlen: 24 220.192.74.0/24 maxlen: 24 220.192.75.0/24 maxlen: 24 220.192.76.0/24 maxlen: 24 220.192.77.0/24 maxlen: 24 220.192.78.0/24 maxlen: 24 220.192.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:9c:b6:b9:53:27:53:42:ae:a0:a6:b6:db:6f:72:29:75:8b:3d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Jun 11 12:10:48 2026 GMT Not After : Jun 10 12:15:48 2027 GMT Subject: CN=85792D119B560837FC8AF1957C09F87E4B599322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:55:f5:dd:99:97:ea:fa:8b:aa:88:ac:3c: f6:46:b6:75:fb:4c:d2:3f:f5:4c:0d:b9:43:cf:ee: a9:61:27:6d:87:a5:d7:9d:c6:20:34:be:02:46:33: 13:b1:c4:bb:e6:1d:18:c0:00:e8:b9:6a:33:cd:a3: b1:1d:9a:89:e2:f6:c0:42:6b:bd:24:92:a9:19:8a: f5:f7:f7:d9:88:40:4e:4f:17:d2:52:6d:4d:c7:16: 64:46:63:83:d8:d4:16:d6:76:98:e9:22:ea:ba:e7: f8:58:cf:6f:e9:b0:4e:3b:e8:96:82:c1:d5:eb:54: e4:7e:db:c3:f4:63:fc:5b:1d:4f:58:73:fe:db:63: 7d:ca:1e:6d:9d:d9:33:38:e9:c7:30:ce:fc:a2:7a: c2:a3:5d:b2:29:ad:19:58:52:58:96:1a:2b:3f:10: c0:bf:69:0f:b1:61:87:15:1b:f6:04:30:c7:fe:3d: 97:79:b9:19:2b:a1:fa:01:b7:4b:a3:49:c3:3a:d2: 21:32:a7:c3:92:74:93:47:62:9e:15:b8:59:b7:a1: b2:46:e9:92:38:da:85:d3:5c:69:c4:1a:cd:0f:7a: c6:da:a2:72:03:ad:a9:23:93:0a:7a:02:e8:87:82: 28:48:7a:84:d7:cc:f7:94:38:b2:f4:a4:a8:64:b1: 8c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:79:2D:11:9B:56:08:37:FC:8A:F1:95:7C:09:F8:7E:4B:59:93:22 X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS133119.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.181.0.0/16 220.192.72.0/21 Signature Algorithm: sha256WithRSAEncryption 07:f6:79:61:4b:22:7f:36:22:ea:a5:9f:db:8a:b3:5d:54:7c: 93:1e:93:30:6f:ab:3b:0f:94:bd:20:36:cb:f1:de:78:8a:fc: 2a:5c:14:4f:9b:b4:80:37:79:64:0b:c6:5c:18:be:ef:90:ce: 4e:62:31:cd:92:77:f5:d4:f2:94:9b:2b:92:58:f4:9a:22:0c: 8d:42:4b:f9:f7:a9:d4:b9:64:fa:49:76:79:5d:f1:9d:66:77: d6:89:56:72:43:75:65:92:e7:14:8c:6f:d0:3b:b9:d7:72:b6: 22:5c:d7:2a:4f:2f:58:ce:9a:e3:ea:02:22:2d:ac:e6:46:e8: 69:e9:ec:86:f1:a4:cc:4c:a3:e7:fd:a2:39:f3:0e:c5:90:b3: f0:71:1c:f0:1e:8e:f3:8a:cc:36:0f:73:50:7d:bb:5d:29:69: 9c:3a:1c:3b:ca:c2:f1:5b:e3:db:08:75:2b:f4:9d:1c:b5:db: 3f:5e:24:1c:68:f1:32:17:48:48:27:80:12:b3:5e:12:ff:92: 6e:1c:00:99:9a:65:b5:c8:d4:56:05:96:25:03:6e:dc:12:aa: e4:ce:d5:1f:df:35:a9:08:3d:86:8a:0b:b0:23:3a:f4:d5:6b: a9:3d:7c:e6:03:b5:e1:85:2e:8a:62:6a:09:a3:14:a9:14:10: 14:5d:d1:db -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUb5y2uVMnU0KuoKa2229yKXWLPf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA2MTExMjEwNDhaFw0yNzA2MTAxMjE1NDhaMDMxMTAvBgNV BAMTKDg1NzkyRDExOUI1NjA4MzdGQzhBRjE5NTdDMDlGODdFNEI1OTkzMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHeVX13ZmX6vqLqoisPPZGtnX7 TNI/9UwNuUPP7qlhJ22HpdedxiA0vgJGMxOxxLvmHRjAAOi5ajPNo7Edmoni9sBC a70kkqkZivX399mIQE5PF9JSbU3HFmRGY4PY1BbWdpjpIuq65/hYz2/psE476JaC wdXrVOR+28P0Y/xbHU9Yc/7bY33KHm2d2TM46ccwzvyiesKjXbIprRlYUliWGis/ EMC/aQ+xYYcVG/YEMMf+PZd5uRkrofoBt0ujScM60iEyp8OSdJNHYp4VuFm3obJG 6ZI42oXTXGnEGs0PesbaonIDrakjkwp6AuiHgihIeoTXzPeUOLL0pKhksYxfAgMB AAGjggHpMIIB5TAdBgNVHQ4EFgQUhXktEZtWCDf8ivGVfAn4fktZkyIwHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzEzMzExOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQVMBMwEQQC AAEwCwMDAHS1AwQD3MBIMA0GCSqGSIb3DQEBCwUAA4IBAQAH9nlhSyJ/NiLqpZ/b irNdVHyTHpMwb6s7D5S9IDbL8d54ivwqXBRPm7SAN3lkC8ZcGL7vkM5OYjHNknf1 1PKUmyuSWPSaIgyNQkv596nUuWT6SXZ5XfGdZnfWiVZyQ3VlkucUjG/QO7nXcrYi XNcqTy9Yzprj6gIiLazmRuhp6eyG8aTMTKPn/aI58w7FkLPwcRzwHo7zisw2D3NQ fbtdKWmcOhw7ysLxW+PbCHUr9J0ctds/XiQcaPEyF0hIJ4ASs14S/5JuHACZmmW1 yNRWBZYlA27cEqrkztUf3zWpCD2GiguwIzr01WupPXzmA7XhhS6KYmoJoxSpFBAU XdHb -----END CERTIFICATE-----Generated at Wed Jun 17 09:46:44 2026 by rpki-client