$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS136958.roa File: AS136958.roa (raw, json) Hash identifier: 5MuxDvzh5jSL7gxh3flkF/2u78NC8pzzs/pM0KoP7Dk= Subject key identifier: 5E:06:7E:82:A9:04:55:5E:31:9A:27:28:97:55:E6:70:23:81:F3:8C Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 753CA00BF90BB26769CE115A68312B0024911D6A Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS136958.roa Signing time: Wed 01 Jul 2026 13:08:38 +0000 ROA not before: Wed 01 Jul 2026 13:03:38 +0000 ROA not after: Wed 30 Jun 2027 13:08:38 +0000 asID: 136958 IP address blocks: 118.145.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 16:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:3c:a0:0b:f9:0b:b2:67:69:ce:11:5a:68:31:2b:00:24:91:1d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jul 1 13:03:38 2026 GMT Not After : Jun 30 13:08:38 2027 GMT Subject: CN=5E067E82A904555E319A27289755E6702381F38C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1d:25:66:ff:cc:fe:eb:8c:3c:c1:25:c4:63: 0f:1a:f1:50:0d:44:83:22:c0:5d:75:eb:32:53:c6: d4:d3:78:6d:96:de:7d:99:d6:72:38:d2:7b:3d:a4: a0:c2:19:4c:e4:4f:37:89:9d:3f:47:cd:fc:c9:a4: c0:59:7e:a8:13:c9:ac:5b:5a:33:e0:2a:f3:12:f7: ec:03:41:ac:68:b5:31:77:29:22:c2:2d:71:99:11: cb:dd:9a:d8:74:f3:19:51:7d:2c:0c:d4:2a:aa:fc: 93:a4:70:33:c8:04:6c:cb:36:7b:8d:dc:bb:1d:26: 86:ad:6b:fc:8b:64:77:f5:36:f9:5b:3f:3c:6c:ed: b0:8f:1e:02:3b:38:20:38:11:0d:2c:f1:92:a1:f0: 08:41:4b:9d:d3:dd:f8:87:9a:63:5e:5f:38:f5:cf: c9:4e:49:01:51:c7:10:93:3b:ee:47:ff:c5:1a:e6: 95:c9:e9:21:6e:90:ae:f0:fa:fb:f6:79:02:2d:b9: ac:56:ca:80:0f:f2:c5:03:02:bb:d5:88:ab:3b:7d: 98:a0:ba:cd:57:7d:8d:62:b0:01:ce:c3:87:a1:06: 29:f1:e8:39:80:53:4f:77:bb:38:ab:42:84:ee:8e: e9:a6:1a:11:08:a6:66:6e:2a:7b:2c:1d:0e:de:d2: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:06:7E:82:A9:04:55:5E:31:9A:27:28:97:55:E6:70:23:81:F3:8C X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS136958.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.145.32.0/19 Signature Algorithm: sha256WithRSAEncryption 41:af:b3:02:ce:3f:0c:9a:5e:a1:33:de:03:3e:cf:f9:6b:03: a0:65:4e:b9:cf:18:51:63:51:63:d6:98:6c:03:2d:c2:01:64: 39:e4:f7:41:ea:a3:fb:e6:7b:1b:8f:be:fe:56:52:71:44:0c: a1:72:13:1b:94:85:0e:90:50:dd:d2:7b:fa:01:02:89:27:22: 60:c3:8d:42:94:97:00:dd:b4:05:e0:6a:e2:92:77:c4:a6:58: 8d:9b:e7:f0:18:ac:20:8b:fa:b0:ae:20:91:33:c9:56:a9:ef: cf:4e:77:df:22:f5:24:02:10:44:e9:4b:38:a3:ba:fb:5b:5a: 4d:a4:5a:45:24:a4:2f:92:08:99:67:3d:01:3d:7b:32:8c:0a: f6:14:30:40:1f:20:6d:91:df:47:8f:30:5d:04:77:1a:c3:27: dc:c8:28:97:d5:a9:31:e2:03:e0:51:94:6a:bf:57:0f:09:b1: e6:f2:ff:94:c5:3a:70:3c:66:ac:f3:f4:25:c3:71:34:a1:1e: 23:03:b2:60:ce:0b:c1:0b:0a:8e:23:58:cd:4a:19:51:3f:e3: b8:96:51:bb:c4:18:25:f4:67:72:a8:3f:82:03:d5:49:fe:0a: 6d:0f:35:8e:d5:26:e8:ec:1c:fa:92:83:a3:80:91:27:e1:a0: 49:0f:16:96 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUdTygC/kLsmdpzhFaaDErACSRHWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjA3MDExMzAzMzhaFw0yNzA2MzAxMzA4MzhaMDMxMTAvBgNV BAMTKDVFMDY3RTgyQTkwNDU1NUUzMTlBMjcyODk3NTVFNjcwMjM4MUYzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAHSVm/8z+64w8wSXEYw8a8VAN RIMiwF116zJTxtTTeG2W3n2Z1nI40ns9pKDCGUzkTzeJnT9HzfzJpMBZfqgTyaxb WjPgKvMS9+wDQaxotTF3KSLCLXGZEcvdmth08xlRfSwM1Cqq/JOkcDPIBGzLNnuN 3LsdJoata/yLZHf1NvlbPzxs7bCPHgI7OCA4EQ0s8ZKh8AhBS53T3fiHmmNeXzj1 z8lOSQFRxxCTO+5H/8Ua5pXJ6SFukK7w+vv2eQItuaxWyoAP8sUDArvViKs7fZig us1XfY1isAHOw4ehBinx6DmAU093uzirQoTujummGhEIpmZuKnssHQ7e0lP9AgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQUXgZ+gqkEVV4xmicol1XmcCOB84wwHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2OTE2NTAvMC9BUzEzNjk1OC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBXaRIDANBgkqhkiG9w0BAQsFAAOCAQEAQa+zAs4/DJpeoTPeAz7P+WsD oGVOuc8YUWNRY9aYbAMtwgFkOeT3Qeqj++Z7G4++/lZScUQMoXITG5SFDpBQ3dJ7 +gECiSciYMONQpSXAN20BeBq4pJ3xKZYjZvn8BisIIv6sK4gkTPJVqnvz0533yL1 JAIQROlLOKO6+1taTaRaRSSkL5IImWc9AT17MowK9hQwQB8gbZHfR48wXQR3GsMn 3Mgol9WpMeID4FGUar9XDwmx5vL/lMU6cDxmrPP0JcNxNKEeIwOyYM4LwQsKjiNY zUoZUT/juJZRu8QYJfRncqg/ggPVSf4KbQ81jtUm6Owc+pKDo4CRJ+GgSQ8Wlg== -----END CERTIFICATE-----Generated at Wed Jul 22 00:36:53 2026 by rpki-client