$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS136958.roa File: AS136958.roa (raw, json) Hash identifier: HEG2G2FDqpPcwg9U+B72KeFsxwTgTK4fYMDfE+rG2vc= Subject key identifier: 27:6E:6E:B6:3F:A7:FD:77:78:E2:37:66:CD:F1:6F:36:37:8B:AB:0E Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Certificate serial: 693C6D8A44EF631360F72BB4586A2A4988DA2550 Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS136958.roa Signing time: Sun 17 May 2026 10:00:01 +0000 ROA not before: Sun 17 May 2026 09:55:01 +0000 ROA not after: Sun 16 May 2027 10:00:01 +0000 asID: 136958 IP address blocks: 106.13.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:3c:6d:8a:44:ef:63:13:60:f7:2b:b4:58:6a:2a:49:88:da:25:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Validity Not Before: May 17 09:55:01 2026 GMT Not After : May 16 10:00:01 2027 GMT Subject: CN=276E6EB63FA7FD7778E23766CDF16F36378BAB0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1d:1a:7c:43:50:16:68:a6:20:64:db:9a:64: 9f:16:c9:fa:30:6b:7f:34:9d:f9:c3:4c:8c:78:90: cc:dd:22:ed:55:94:f4:cb:5a:83:ca:12:17:fa:b5: b7:7c:38:7d:97:44:0b:92:02:95:bb:f5:fe:00:05: 49:23:85:ef:d1:5d:b5:d4:00:ad:b5:73:e4:49:f8: cb:fd:dc:46:e1:b0:e1:fb:ca:d4:06:bd:15:8a:01: c5:eb:2c:8d:ff:cd:03:cd:ea:09:7e:f2:37:37:f0: 16:0d:89:1c:16:10:67:52:f1:14:66:f5:f8:6d:af: a0:aa:35:e1:bd:59:0d:ba:99:5b:30:8a:14:f7:54: f7:8a:86:c1:9b:eb:c4:8a:e9:dd:23:5a:de:88:08: 75:7e:a8:61:85:bf:e7:90:aa:34:82:bb:d4:ac:61: c7:f7:5b:a6:75:33:20:e3:9c:6c:28:ca:cd:37:f0: 71:9e:b6:d2:2c:5b:e6:b4:3a:d6:6b:70:7b:56:52: 5c:3e:1b:cc:50:df:be:c0:1d:25:64:78:b1:80:0b: ae:7b:7c:04:07:be:00:5c:7a:2a:0f:a4:ee:4b:fd: 9a:e9:ed:8d:7a:10:06:3a:b9:e4:0d:56:46:4d:51: 52:6c:e5:11:0c:0e:99:f0:9a:d9:0d:a9:c8:d7:90: 22:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6E:6E:B6:3F:A7:FD:77:78:E2:37:66:CD:F1:6F:36:37:8B:AB:0E X509v3 Authority Key Identifier: keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS136958.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.13.252.0/22 Signature Algorithm: sha256WithRSAEncryption 43:e3:4c:f7:1f:52:fc:e0:3b:5a:d8:1a:25:05:58:08:e0:93: cc:b1:ba:57:7e:bc:76:d6:e6:66:85:3c:3f:b9:c5:ce:bd:ea: d7:78:69:53:1c:4a:2e:2d:d7:e7:14:4b:52:92:d1:05:9b:a7: 6f:9f:dd:02:b1:84:5d:8c:1d:91:49:14:8f:da:3e:da:a5:ec: 7a:e2:66:2c:c3:74:ea:d2:21:f6:a7:9e:de:ae:59:69:6b:49: 98:3b:f0:31:df:09:18:59:5f:26:4e:0e:23:8a:ef:c4:04:bf: ae:b8:21:5c:50:cc:6e:49:cd:5b:e5:03:fe:4b:54:7d:85:4f: 59:a7:c4:b8:8a:6b:7d:2f:41:e2:87:9b:7e:e9:fc:04:37:27: ce:42:e9:bc:2e:bd:16:8b:04:9a:89:a9:01:4f:84:41:43:c7: 87:43:e5:e2:7c:0d:ed:9f:df:c4:f2:07:a0:37:c2:03:a2:77: bf:86:40:da:97:95:ab:40:0a:4d:05:b0:16:cc:67:6e:0c:51: c3:03:4b:79:f7:c9:9a:71:9f:b1:68:21:b3:73:3b:7a:b8:10: be:2c:22:fe:15:8a:4e:9e:8f:37:a3:b0:95:e7:5c:70:2f:3c: b6:42:53:ab:67:eb:e2:a2:f4:99:9f:3f:ba:a6:8c:46:a3:0b: 27:05:61:50 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUaTxtikTvYxNg9yu0WGoqSYjaJVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB OEVCQTcwRTAeFw0yNjA1MTcwOTU1MDFaFw0yNzA1MTYxMDAwMDFaMDMxMTAvBgNV BAMTKDI3NkU2RUI2M0ZBN0ZENzc3OEUyMzc2NkNERjE2RjM2Mzc4QkFCMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHRp8Q1AWaKYgZNuaZJ8Wyfow a380nfnDTIx4kMzdIu1VlPTLWoPKEhf6tbd8OH2XRAuSApW79f4ABUkjhe/RXbXU AK21c+RJ+Mv93EbhsOH7ytQGvRWKAcXrLI3/zQPN6gl+8jc38BYNiRwWEGdS8RRm 9fhtr6CqNeG9WQ26mVswihT3VPeKhsGb68SK6d0jWt6ICHV+qGGFv+eQqjSCu9Ss Ycf3W6Z1MyDjnGwoys038HGettIsW+a0OtZrcHtWUlw+G8xQ377AHSVkeLGAC657 fAQHvgBceioPpO5L/Zrp7Y16EAY6ueQNVkZNUVJs5REMDpnwmtkNqcjXkCLJAgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQUJ25utj+n/Xd44jdmzfFvNjeLqw4wHwYDVR0j BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BUzEzNjk1OC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmoN/DANBgkqhkiG9w0BAQsFAAOCAQEAQ+NM9x9S/OA7WtgaJQVYCOCT zLG6V368dtbmZoU8P7nFzr3q13hpUxxKLi3X5xRLUpLRBZunb5/dArGEXYwdkUkU j9o+2qXseuJmLMN06tIh9qee3q5ZaWtJmDvwMd8JGFlfJk4OI4rvxAS/rrghXFDM bknNW+UD/ktUfYVPWafEuIprfS9B4oebfun8BDcnzkLpvC69FosEmompAU+EQUPH h0Pl4nwN7Z/fxPIHoDfCA6J3v4ZA2peVq0AKTQWwFsxnbgxRwwNLeffJmnGfsWgh s3M7ergQviwi/hWKTp6PN6OwledccC88tkJTq2fr4qL0mZ8/uqaMRqMLJwVhUA== -----END CERTIFICATE-----Generated at Fri May 29 23:49:22 2026 by rpki-client