$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS138407.roa File: AS138407.roa (raw, json) Hash identifier: 9pI59+wkO8K1TbvAaS+xQRsm37cPG1Z7yaDk9DwqL7M= Subject key identifier: 7D:1D:D9:82:B5:71:B1:AF:82:79:92:3D:C3:11:90:1E:63:05:EE:28 Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 7C41C514E1097F7A423AB1DBC95F2239771C3E5E Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS138407.roa Signing time: Thu 11 Jun 2026 16:02:05 +0000 ROA not before: Thu 11 Jun 2026 15:57:05 +0000 ROA not after: Thu 10 Jun 2027 16:02:05 +0000 asID: 138407 IP address blocks: 103.161.220.0/23 maxlen: 23 116.63.128.0/18 maxlen: 18 122.9.128.0/19 maxlen: 19 122.9.160.0/20 maxlen: 20 2407:c080:1800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 17:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:41:c5:14:e1:09:7f:7a:42:3a:b1:db:c9:5f:22:39:77:1c:3e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: Jun 11 15:57:05 2026 GMT Not After : Jun 10 16:02:05 2027 GMT Subject: CN=7D1DD982B571B1AF8279923DC311901E6305EE28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:b4:b4:2c:2e:da:39:70:cd:6b:7f:f2:69: c9:e0:cb:c9:4c:a7:94:84:f5:32:37:0e:47:b3:54: eb:bf:17:c6:11:c5:58:16:fa:b3:78:5e:7e:89:30: 31:04:a9:a6:ad:f5:e8:cc:70:ff:82:dc:bc:d2:20: eb:57:19:4f:c7:3d:2c:b3:34:aa:a4:3b:cd:43:f1: b6:46:a9:fc:57:d2:17:18:6a:b4:75:b2:24:2f:5d: 36:7c:32:a5:38:94:76:7f:c1:93:41:65:37:ae:b0: 2d:53:47:d8:7a:38:8e:d4:04:ad:e4:11:32:1a:ef: 53:37:19:5a:73:71:e2:d9:0d:29:e3:94:84:8a:24: cb:dc:ab:54:fb:2c:d2:5a:b6:02:5d:4c:7c:50:fb: 8d:32:cf:89:d7:9a:54:09:f1:c9:87:d8:34:b5:f4: 9f:5e:a0:10:fc:d1:ab:03:db:b9:1f:c2:dc:24:80: 10:a1:74:03:47:f8:f9:b5:b6:c4:74:99:8f:ec:93: 64:6b:08:0d:c9:ca:5c:88:2c:c3:63:53:43:a9:69: 9d:ea:3d:34:11:7e:27:90:97:0c:23:da:ab:43:c7: 3b:a7:a1:5a:f6:73:7c:ff:51:22:1c:58:78:94:ea: c0:c5:ad:90:e1:4f:ef:71:f2:02:77:fd:be:83:81: cb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1D:D9:82:B5:71:B1:AF:82:79:92:3D:C3:11:90:1E:63:05:EE:28 X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS138407.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.220.0/23 116.63.128.0/18 122.9.128.0-122.9.175.255 IPv6: 2407:c080:1800::/37 Signature Algorithm: sha256WithRSAEncryption a5:2d:2a:d2:fa:65:cd:5b:ae:18:d1:75:fe:54:0a:8b:64:bc: ec:0e:46:95:58:8a:38:da:3b:77:fc:67:a0:01:14:b1:e4:ed: b9:d2:a0:74:f5:76:e5:0b:c1:70:3f:25:ff:ca:b0:e4:18:d9: 2d:60:80:e7:26:5e:76:75:ef:80:1d:c8:6b:25:4f:c0:4a:83: 87:68:1a:c9:2a:a2:0d:66:a4:ab:5b:49:e3:d1:f4:cc:95:8c: 37:49:0c:4d:29:80:7a:57:fc:4f:bb:56:06:b6:db:0c:a9:2c: c3:df:1f:cd:47:4b:af:fb:cc:72:10:3f:23:1a:88:60:15:c4: c2:07:2b:ce:ac:d5:be:01:72:d1:40:b0:71:2f:a4:78:24:0b: 34:b1:87:60:1a:25:7c:62:4c:7a:bc:de:25:82:d7:54:7e:8a: be:1f:01:77:d4:e2:03:cd:85:f4:13:86:fe:bc:d2:c6:db:63: c0:64:8b:76:d7:97:e7:de:71:55:e0:57:f3:40:96:4f:82:9e: 19:2f:30:b2:da:50:93:37:23:21:5d:51:b3:55:08:14:fd:c9: 51:06:11:0a:e7:63:01:1e:8f:09:04:55:56:9b:54:22:8c:e9: a1:8c:39:92:6f:08:4e:5c:43:97:f5:ca:80:22:21:ad:2f:68: 4d:4e:72:80 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUfEHFFOEJf3pCOrHbyV8iOXccPl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjA2MTExNTU3MDVaFw0yNzA2MTAxNjAyMDVaMDMxMTAvBgNV BAMTKDdEMUREOTgyQjU3MUIxQUY4Mjc5OTIzREMzMTE5MDFFNjMwNUVFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6arS0LC7aOXDNa3/yacngy8lM p5SE9TI3DkezVOu/F8YRxVgW+rN4Xn6JMDEEqaat9ejMcP+C3LzSIOtXGU/HPSyz NKqkO81D8bZGqfxX0hcYarR1siQvXTZ8MqU4lHZ/wZNBZTeusC1TR9h6OI7UBK3k ETIa71M3GVpzceLZDSnjlISKJMvcq1T7LNJatgJdTHxQ+40yz4nXmlQJ8cmH2DS1 9J9eoBD80asD27kfwtwkgBChdANH+Pm1tsR0mY/sk2RrCA3JylyILMNjU0OpaZ3q PTQRfieQlwwj2qtDxzunoVr2c3z/USIcWHiU6sDFrZDhT+9x8gJ3/b6DgcvzAgMB AAGjggIIMIICBDAdBgNVHQ4EFgQUfR3ZgrVxsa+CeZI9wxGQHmMF7igwHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC9BUzEzODQwNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBDBggrBgEFBQcBBwEB/wQ0MDIwIAQC AAEwGgMEAWeh3AMEBnQ/gDAMAwQHegmAAwQEegmgMA4EAgACMAgDBgMkB8CAGDAN BgkqhkiG9w0BAQsFAAOCAQEApS0q0vplzVuuGNF1/lQKi2S87A5GlViKONo7d/xn oAEUseTtudKgdPV25QvBcD8l/8qw5BjZLWCA5yZednXvgB3IayVPwEqDh2gaySqi DWakq1tJ49H0zJWMN0kMTSmAelf8T7tWBrbbDKksw98fzUdLr/vMchA/IxqIYBXE wgcrzqzVvgFy0UCwcS+keCQLNLGHYBolfGJMerzeJYLXVH6Kvh8Bd9TiA82F9BOG /rzSxttjwGSLdteX595xVeBX80CWT4KeGS8wstpQkzcjIV1Rs1UIFP3JUQYRCudj AR6PCQRVVptUIozpoYw5km8ITlxDl/XKgCIhrS9oTU5ygA== -----END CERTIFICATE-----Generated at Fri Jun 12 04:55:47 2026 by rpki-client