$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS138421.roa File: AS138421.roa (raw, json) Hash identifier: bLd+4o911pilo/4tPPkRFn8P+mVGRb1EM/LhafQUCps= Subject key identifier: 2D:67:08:CD:5C:5B:30:6B:B9:D2:31:44:FF:EC:D2:D1:BE:7D:F4:2A Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Certificate serial: 22D5B3869E66EDD74F1832A776E1F5F9C757DC9A Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS138421.roa Signing time: Tue 16 Jun 2026 14:57:16 +0000 ROA not before: Tue 16 Jun 2026 14:52:16 +0000 ROA not after: Tue 15 Jun 2027 14:57:16 +0000 asID: 138421 IP address blocks: 116.63.32.0/19 maxlen: 19 116.63.96.0/20 maxlen: 20 116.63.112.0/21 maxlen: 21 116.63.120.0/21 maxlen: 21 116.63.192.0/18 maxlen: 18 116.196.192.0/21 maxlen: 21 122.9.64.0/19 maxlen: 19 122.9.176.0/20 maxlen: 20 122.112.192.0/22 maxlen: 22 2409:27fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 22:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d5:b3:86:9e:66:ed:d7:4f:18:32:a7:76:e1:f5:f9:c7:57:dc:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Validity Not Before: Jun 16 14:52:16 2026 GMT Not After : Jun 15 14:57:16 2027 GMT Subject: CN=2D6708CD5C5B306BB9D23144FFECD2D1BE7DF42A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:aa:4e:aa:33:96:8b:7f:9b:05:27:6d:81: f6:03:c9:07:0d:2c:72:ec:65:64:d6:89:38:ba:2e: 78:c7:19:10:d0:bf:6e:2f:50:5a:ce:24:b3:07:77: f7:33:f4:37:7b:57:19:f8:dc:da:bd:00:4e:bf:6a: 63:18:0a:c6:9d:a7:22:17:5d:42:79:04:b6:4c:d3: fa:18:47:2f:d4:e2:51:73:91:23:22:3a:b8:46:e9: d4:c4:ed:e4:73:82:0b:f0:d3:de:36:16:1a:e6:47: 66:ee:a8:c1:ce:82:35:1b:03:54:bc:2c:7e:15:02: 57:48:ca:42:92:e7:5c:0a:f8:75:98:da:ca:60:e7: ce:e6:21:32:d4:89:3c:49:a9:b4:1d:6a:48:64:b6: 7f:6d:10:0e:0c:97:e1:82:8f:95:49:a4:5f:22:33: 4e:cd:13:67:1a:53:31:7b:df:22:b8:6d:de:84:2a: 3a:1e:3b:6e:6c:b0:47:c9:46:c7:c3:10:a1:4c:bb: 78:9f:2e:64:f2:49:66:06:a6:4f:f5:34:50:59:5d: 3e:2d:e0:b7:45:a5:5c:a5:2a:f4:ff:73:04:5e:a5: 89:7d:6f:66:fd:f6:40:e7:c5:f4:62:b1:bb:2e:2d: 54:6f:0c:10:11:71:cd:4a:9c:c2:b1:28:a9:d5:d4: 1c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:67:08:CD:5C:5B:30:6B:B9:D2:31:44:FF:EC:D2:D1:BE:7D:F4:2A X509v3 Authority Key Identifier: keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS138421.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.63.32.0/19 116.63.96.0/19 116.63.192.0/18 116.196.192.0/21 122.9.64.0/19 122.9.176.0/20 122.112.192.0/22 IPv6: 2409:27fb::/48 Signature Algorithm: sha256WithRSAEncryption 82:fd:08:7b:70:d2:39:be:d1:23:48:1d:56:e9:ca:fd:4c:5f: 3b:fb:88:a2:d2:b1:11:c6:7e:0f:27:0a:b7:24:7c:a2:28:c9: eb:d5:7b:bc:44:ac:99:ec:e0:ad:d3:fc:31:9b:62:f3:9f:e2: 48:b4:96:3e:1c:9e:8d:86:59:48:c4:2f:8d:ac:ca:2d:01:cd: 02:8a:4a:ce:24:de:8b:95:91:ac:02:27:f5:39:71:40:e3:14: 18:e6:67:3c:e3:04:fb:7b:75:d1:e0:ed:8d:be:06:c0:08:c5: c3:8e:4c:1e:d8:8b:5c:68:23:bf:24:1e:dc:b5:a1:05:cd:ce: f6:7b:79:d2:77:9f:55:cf:2b:24:e4:3d:f6:6f:9a:ef:11:53: 0f:a6:ed:60:d0:8c:54:5e:ff:ba:03:b4:dd:59:fc:eb:fb:69: 5f:79:c4:24:a9:e7:8d:61:7a:10:fb:80:21:4f:7b:88:e3:34: 8c:27:ea:76:18:42:9d:af:d5:cb:a8:24:a4:4f:37:6f:51:38: f6:d4:15:9d:62:b3:d6:75:80:83:84:59:21:e5:a3:5c:d6:f1: 7a:3d:3c:05:41:f1:76:b7:7a:3e:53:84:51:c5:44:4f:ee:bc: f5:b3:44:99:90:9a:34:9c:4c:6a:c0:7f:4b:2b:7e:8e:06:4a: c9:0c:04:9c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgIUItWzhp5m7ddPGDKnduH1+cdX3JowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1 REM1RThERTAeFw0yNjA2MTYxNDUyMTZaFw0yNzA2MTUxNDU3MTZaMDMxMTAvBgNV BAMTKDJENjcwOENENUM1QjMwNkJCOUQyMzE0NEZGRUNEMkQxQkU3REY0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+apOqjOWi3+bBSdtgfYDyQcN LHLsZWTWiTi6LnjHGRDQv24vUFrOJLMHd/cz9Dd7Vxn43Nq9AE6/amMYCsadpyIX XUJ5BLZM0/oYRy/U4lFzkSMiOrhG6dTE7eRzggvw0942FhrmR2buqMHOgjUbA1S8 LH4VAldIykKS51wK+HWY2spg587mITLUiTxJqbQdakhktn9tEA4Ml+GCj5VJpF8i M07NE2caUzF73yK4bd6EKjoeO25ssEfJRsfDEKFMu3ifLmTySWYGpk/1NFBZXT4t 4LdFpVylKvT/cwRepYl9b2b99kDnxfRisbsuLVRvDBARcc1KnMKxKKnV1BynAgMB AAGjggIZMIICFTAdBgNVHQ4EFgQULWcIzVxbMGu50jFE/+zS0b599CowHwYDVR0j BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC9BUzEzODQyMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBUBggrBgEFBQcBBwEB/wRFMEMwMAQC AAEwKgMEBXQ/IAMEBXQ/YAMEBnQ/wAMEA3TEwAMEBXoJQAMEBHoJsAMEAnpwwDAP BAIAAjAJAwcAJAkn+wAAMA0GCSqGSIb3DQEBCwUAA4IBAQCC/Qh7cNI5vtEjSB1W 6cr9TF87+4ii0rERxn4PJwq3JHyiKMnr1Xu8RKyZ7OCt0/wxm2Lzn+JItJY+HJ6N hllIxC+NrMotAc0CikrOJN6LlZGsAif1OXFA4xQY5mc84wT7e3XR4O2NvgbACMXD jkwe2ItcaCO/JB7ctaEFzc72e3nSd59Vzysk5D32b5rvEVMPpu1g0IxUXv+6A7Td Wfzr+2lfecQkqeeNYXoQ+4AhT3uI4zSMJ+p2GEKdr9XLqCSkTzdvUTj21BWdYrPW dYCDhFkh5aNc1vF6PTwFQfF2t3o+U4RRxURP7rz1s0SZkJo0nExqwH9LK36OBkrJ DASc -----END CERTIFICATE-----Generated at Wed Jul 22 00:36:52 2026 by rpki-client