$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS139007.roa File: AS139007.roa (raw, json) Hash identifier: YiJ6BkElfnNZ700uQApYitDZq50ty+TSesXDCL+6OEE= Subject key identifier: D0:47:F0:95:2E:11:51:1A:26:6D:4D:57:92:7F:5D:19:A3:FE:4B:D0 Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 53880D9C3E2F89ADFDE7D4250EAB6AE3FEB7E9CA Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS139007.roa Signing time: Mon 01 Jun 2026 08:47:17 +0000 ROA not before: Mon 01 Jun 2026 08:42:17 +0000 ROA not after: Mon 31 May 2027 08:47:17 +0000 asID: 139007 IP address blocks: 116.135.224.0/24 maxlen: 24 116.135.225.0/24 maxlen: 24 116.135.226.0/24 maxlen: 24 116.135.227.0/24 maxlen: 24 116.135.228.0/24 maxlen: 24 116.135.229.0/24 maxlen: 24 116.135.230.0/24 maxlen: 24 116.135.231.0/24 maxlen: 24 116.135.232.0/24 maxlen: 24 116.135.233.0/24 maxlen: 24 116.135.234.0/24 maxlen: 24 116.135.235.0/24 maxlen: 24 116.135.236.0/24 maxlen: 24 116.135.237.0/24 maxlen: 24 116.135.238.0/24 maxlen: 24 116.135.239.0/24 maxlen: 24 116.135.240.0/24 maxlen: 24 116.135.241.0/24 maxlen: 24 116.135.242.0/24 maxlen: 24 116.135.243.0/24 maxlen: 24 116.135.244.0/24 maxlen: 24 116.135.245.0/24 maxlen: 24 116.135.246.0/24 maxlen: 24 116.135.247.0/24 maxlen: 24 116.135.248.0/24 maxlen: 24 116.135.249.0/24 maxlen: 24 116.135.250.0/24 maxlen: 24 116.135.251.0/24 maxlen: 24 116.135.252.0/24 maxlen: 24 116.135.253.0/24 maxlen: 24 116.135.254.0/24 maxlen: 24 116.135.255.0/24 maxlen: 24 116.136.152.0/24 maxlen: 24 116.136.153.0/24 maxlen: 24 116.136.154.0/24 maxlen: 24 116.136.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 23:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:88:0d:9c:3e:2f:89:ad:fd:e7:d4:25:0e:ab:6a:e3:fe:b7:e9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Jun 1 08:42:17 2026 GMT Not After : May 31 08:47:17 2027 GMT Subject: CN=D047F0952E11511A266D4D57927F5D19A3FE4BD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:9c:c2:53:dd:b1:0f:1a:8d:95:26:60:d8: 93:1d:c7:98:df:1c:70:5b:40:5b:9b:5e:8a:e1:cb: 8f:fa:e4:58:55:23:ac:b5:4e:96:55:b0:4b:a2:31: 3f:55:2a:b5:b9:7a:b8:3d:6c:cb:f2:57:c3:48:a6: 9d:95:c7:79:09:77:19:ac:35:a9:9d:64:09:7b:ed: 5e:a6:8b:c9:4e:5d:e8:14:30:57:8c:30:5e:06:f4: 01:f0:9b:3d:96:5b:06:49:9c:4d:15:ef:07:7d:b8: 1c:4a:e1:f1:af:4d:96:93:3f:46:90:00:d6:5e:76: a0:bb:a8:eb:e2:34:2f:72:ee:e4:43:f9:26:f7:59: 99:b6:e8:14:3a:a4:fa:a6:df:3b:5f:7d:04:1b:af: 7d:f5:8e:0d:d2:d8:61:52:52:27:25:0b:11:da:2d: 09:06:dc:ef:8f:d6:af:b2:6e:0e:1b:a1:8e:85:9d: 3d:98:46:39:fe:5a:a2:5c:62:12:b3:dc:6f:f3:0a: 2a:2d:f8:ea:b1:5b:49:c1:88:52:0b:06:e3:b4:45: f6:90:c2:af:04:2b:95:64:cc:95:31:d4:f3:94:05: 96:9c:9a:66:7e:84:9d:da:7c:f2:f3:d0:f6:5d:52: c3:61:0b:03:67:92:4d:06:3f:c0:90:c9:01:d2:11: bd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:47:F0:95:2E:11:51:1A:26:6D:4D:57:92:7F:5D:19:A3:FE:4B:D0 X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS139007.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.135.224.0/19 116.136.152.0/22 Signature Algorithm: sha256WithRSAEncryption 97:d2:ea:6a:8a:ab:e7:34:a6:6e:6b:bf:8f:89:85:bd:b1:27: 86:6e:6e:4d:c4:e1:64:f0:ec:32:e8:47:86:50:f2:5c:18:10: 46:2d:cc:1a:ad:91:76:3c:ea:fe:db:e6:9e:28:55:e1:db:aa: 7b:c3:58:5d:ca:0c:22:62:73:1c:05:32:31:a3:23:0a:e6:c3: f0:cb:f6:92:d8:12:c7:af:9b:7f:41:73:75:0f:8e:f1:1c:21: 1e:c1:dd:de:97:bb:ef:fe:36:a0:f8:ae:6f:36:ea:7f:54:c0: 7e:1d:23:3e:44:ed:76:d0:c4:81:5f:b8:76:c3:23:0e:06:6c: 3f:36:96:7c:a4:f1:bc:ca:f5:f2:4c:e6:93:2c:b1:41:3d:1e: 17:9d:18:20:11:3a:0a:01:42:f9:84:f9:26:95:18:41:3e:bc: 64:e4:0d:73:0c:ba:a6:91:7e:48:39:b6:f0:84:4b:64:c5:1b: 4a:4f:6d:01:c3:0e:6e:6e:ac:89:8e:ff:9d:0e:0d:bf:9b:cc: 26:81:3c:9b:e3:bc:ce:6b:53:ff:ba:f1:80:c3:cc:6b:01:52: 70:0b:c1:d9:fc:7a:ed:45:15:78:ef:0a:ca:ad:b6:59:5c:c3: 39:ef:99:dd:e4:dd:86:ba:71:f2:8b:cc:ff:af:1d:b7:04:55: 1d:37:b0:50 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUU4gNnD4via3959QlDqtq4/636cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA2MDEwODQyMTdaFw0yNzA1MzEwODQ3MTdaMDMxMTAvBgNV BAMTKEQwNDdGMDk1MkUxMTUxMUEyNjZENEQ1NzkyN0Y1RDE5QTNGRTRCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHpzCU92xDxqNlSZg2JMdx5jf HHBbQFubXorhy4/65FhVI6y1TpZVsEuiMT9VKrW5erg9bMvyV8NIpp2Vx3kJdxms NamdZAl77V6mi8lOXegUMFeMMF4G9AHwmz2WWwZJnE0V7wd9uBxK4fGvTZaTP0aQ ANZedqC7qOviNC9y7uRD+Sb3WZm26BQ6pPqm3ztffQQbr331jg3S2GFSUiclCxHa LQkG3O+P1q+ybg4boY6FnT2YRjn+WqJcYhKz3G/zCiot+OqxW0nBiFILBuO0RfaQ wq8EK5VkzJUx1POUBZacmmZ+hJ3afPLz0PZdUsNhCwNnkk0GP8CQyQHSEb2BAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU0EfwlS4RURombU1Xkn9dGaP+S9AwHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzEzOTAwNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEBXSH4AMEAnSImDANBgkqhkiG9w0BAQsFAAOCAQEAl9Lqaoqr5zSmbmu/ j4mFvbEnhm5uTcThZPDsMuhHhlDyXBgQRi3MGq2Rdjzq/tvmnihV4duqe8NYXcoM ImJzHAUyMaMjCubD8Mv2ktgSx6+bf0FzdQ+O8RwhHsHd3pe77/42oPiubzbqf1TA fh0jPkTtdtDEgV+4dsMjDgZsPzaWfKTxvMr18kzmkyyxQT0eF50YIBE6CgFC+YT5 JpUYQT68ZOQNcwy6ppF+SDm28IRLZMUbSk9tAcMObm6siY7/nQ4Nv5vMJoE8m+O8 zmtT/7rxgMPMawFScAvB2fx67UUVeO8Kyq22WVzDOe+Z3eTdhrpx8ovM/68dtwRV HTewUA== -----END CERTIFICATE-----Generated at Sat Jun 13 12:42:10 2026 by rpki-client