$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS138527.roa File: AS138527.roa (raw, json) Hash identifier: ONSMAuOvbH7RfIxQwPsXri8s6XRjzCo6/RpUxAMRBBM= Subject key identifier: 82:72:44:52:3E:89:D4:B3:16:DE:38:01:1D:AF:D4:65:AE:09:58:0E Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E Certificate serial: 065DC6650C51EDED84673B4AEEE2586F941F321F Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS138527.roa Signing time: Thu 28 May 2026 08:27:43 +0000 ROA not before: Thu 28 May 2026 08:22:43 +0000 ROA not after: Thu 27 May 2027 08:27:43 +0000 asID: 138527 IP address blocks: 45.252.8.0/22 maxlen: 24 45.252.12.0/22 maxlen: 24 45.252.16.0/22 maxlen: 24 45.252.20.0/22 maxlen: 24 45.252.24.0/22 maxlen: 24 45.252.28.0/22 maxlen: 24 45.252.32.0/22 maxlen: 24 45.252.36.0/22 maxlen: 24 45.252.40.0/22 maxlen: 24 45.252.44.0/22 maxlen: 24 45.252.48.0/22 maxlen: 24 103.221.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 23:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5d:c6:65:0c:51:ed:ed:84:67:3b:4a:ee:e2:58:6f:94:1f:32:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E Validity Not Before: May 28 08:22:43 2026 GMT Not After : May 27 08:27:43 2027 GMT Subject: CN=827244523E89D4B316DE38011DAFD465AE09580E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:04:50:6f:9e:c5:35:08:39:74:b6:91:6d:24: c6:58:75:6c:6b:56:20:0a:ec:88:1f:be:e8:d6:2b: 37:39:ae:61:df:b5:cf:19:c9:43:62:c8:81:9d:1b: 23:b4:fc:d0:d9:91:89:a8:fd:8b:bc:dd:59:f7:4e: f1:c2:26:7e:ef:e0:6e:fc:e0:56:49:34:cf:45:b9: 50:50:4d:df:ba:75:fe:92:80:91:cb:2b:89:02:5f: 44:bf:77:41:9f:83:e2:c9:c1:68:0b:2c:f1:45:d3: 4b:db:c7:59:84:67:06:b9:26:4a:9e:fe:6b:e7:0f: 0b:39:d8:3d:96:3c:db:b6:a6:25:e5:75:12:fa:cd: 3a:4d:b1:63:ad:b4:9d:10:f2:06:bb:c0:b0:c9:54: 09:4d:a1:80:7a:63:9d:c4:cd:5d:c4:e6:95:cb:8a: 75:2a:e7:5f:f5:8b:42:6b:17:8a:ba:c5:f4:33:70: c8:f7:4c:8a:75:e8:98:a6:49:5d:b7:24:60:4c:13: b3:85:78:a7:39:bd:bb:66:d1:2b:1b:1b:78:4f:f3: 6c:89:85:88:14:68:c3:f9:ea:cb:2a:ba:c6:57:a7: 7d:77:8d:02:62:fa:e5:fc:d3:e1:2e:c8:af:85:a1: b4:ac:db:37:09:ff:e1:6a:b0:76:5a:76:f3:11:ff: fe:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:72:44:52:3E:89:D4:B3:16:DE:38:01:1D:AF:D4:65:AE:09:58:0E X509v3 Authority Key Identifier: keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS138527.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.252.8.0-45.252.51.255 103.221.0.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:00:b6:1a:61:f2:b6:f4:d0:55:d1:24:fa:36:75:14:5e:f3: 6c:9c:0b:4a:b7:a5:c3:0d:8e:a2:82:27:2f:c9:3b:f8:b5:4a: fb:ab:08:85:df:76:6c:9c:2e:15:b3:f4:79:45:e3:53:8b:b7: 9e:f0:87:03:9d:e0:0a:3d:64:e3:8e:7d:ea:7a:26:21:48:e8: 25:10:75:8a:f1:85:8e:5c:58:aa:e7:2f:34:26:18:0d:e7:1b: 8a:5f:d3:d5:e5:11:9e:53:52:a1:a7:41:98:89:ba:dc:3e:c5: 72:be:00:82:75:8c:31:ba:9e:ec:7e:17:cb:a5:89:f2:a2:21: 09:cd:73:7b:4c:54:5f:ed:4a:20:dc:9a:17:b7:47:aa:7f:7d: 14:0e:13:ac:e7:70:9d:60:d4:c8:05:4d:0f:b4:03:ea:04:42: 30:ac:ab:13:46:ab:dc:8c:73:2a:92:0d:4a:04:6c:76:a0:fe: 73:da:44:13:4f:99:b9:68:f3:f1:e3:db:39:64:6b:a5:90:0b: 18:b9:7b:9e:e2:d1:64:45:bb:4f:b1:28:79:b5:ab:a0:03:6e: 66:21:7e:97:30:52:dc:2c:4c:db:a8:c2:57:5e:d2:cc:91:17: 39:f9:8b:9a:8b:bc:2e:b0:1a:ba:6a:25:c7:3d:7f:6a:c4:fc: ec:12:ff:6c -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUBl3GZQxR7e2EZztK7uJYb5QfMh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NC NTUzRDc1RTAeFw0yNjA1MjgwODIyNDNaFw0yNzA1MjcwODI3NDNaMDMxMTAvBgNV BAMTKDgyNzI0NDUyM0U4OUQ0QjMxNkRFMzgwMTFEQUZENDY1QUUwOTU4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYBFBvnsU1CDl0tpFtJMZYdWxr ViAK7IgfvujWKzc5rmHftc8ZyUNiyIGdGyO0/NDZkYmo/Yu83Vn3TvHCJn7v4G78 4FZJNM9FuVBQTd+6df6SgJHLK4kCX0S/d0Gfg+LJwWgLLPFF00vbx1mEZwa5Jkqe /mvnDws52D2WPNu2piXldRL6zTpNsWOttJ0Q8ga7wLDJVAlNoYB6Y53EzV3E5pXL inUq51/1i0JrF4q6xfQzcMj3TIp16JimSV23JGBME7OFeKc5vbtm0SsbG3hP82yJ hYgUaMP56ssqusZXp313jQJi+uX80+EuyK+FobSs2zcJ/+FqsHZadvMR//7RAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUgnJEUj6J1LMW3jgBHa/UZa4JWA4wHwYDVR0j BBgwFoAUH/8mPGQWO8WFFLU5wQN1zLVT114wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDMyNzA0My8wLzFGRkYyNjNDNjQxNjNCQzU4NTE0QjUzOUMxMDM3 NUNDQjU1M0Q3NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzMjcwNDMvMC9BUzEzODUyNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQC AAEwFDAMAwQDLfwIAwQCLfwwAwQCZ90AMA0GCSqGSIb3DQEBCwUAA4IBAQB/ALYa YfK29NBV0ST6NnUUXvNsnAtKt6XDDY6igicvyTv4tUr7qwiF33ZsnC4Vs/R5ReNT i7ee8IcDneAKPWTjjn3qeiYhSOglEHWK8YWOXFiq5y80JhgN5xuKX9PV5RGeU1Kh p0GYibrcPsVyvgCCdYwxup7sfhfLpYnyoiEJzXN7TFRf7Uog3JoXt0eqf30UDhOs 53CdYNTIBU0PtAPqBEIwrKsTRqvcjHMqkg1KBGx2oP5z2kQTT5m5aPPx49s5ZGul kAsYuXue4tFkRbtPsSh5taugA25mIX6XMFLcLEzbqMJXXtLMkRc5+Yuai7wusBq6 aiXHPX9qxPzsEv9s -----END CERTIFICATE-----Generated at Sat Jun 6 16:09:45 2026 by rpki-client