$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS138421.roa File: AS138421.roa (raw, json) Hash identifier: 1J1MoWEmlIzHO1jzmqXyT5+DCPwDEGkXxEOB97W9x6o= Subject key identifier: B0:91:68:E5:3B:6A:3C:AF:21:80:BE:52:6A:ED:FA:F6:DA:D4:A8:2D Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 22582B697180D3739792F061B4DE83BB06648726 Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS138421.roa Signing time: Wed 01 Jul 2026 13:08:39 +0000 ROA not before: Wed 01 Jul 2026 13:03:39 +0000 ROA not after: Wed 30 Jun 2027 13:08:39 +0000 asID: 138421 IP address blocks: 118.145.32.0/19 maxlen: 24 180.184.144.0/21 maxlen: 24 180.184.152.0/22 maxlen: 24 180.184.184.0/22 maxlen: 24 2406:d440:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 16:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:58:2b:69:71:80:d3:73:97:92:f0:61:b4:de:83:bb:06:64:87:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jul 1 13:03:39 2026 GMT Not After : Jun 30 13:08:39 2027 GMT Subject: CN=B09168E53B6A3CAF2180BE526AEDFAF6DAD4A82D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c3:18:3b:8b:3c:ed:d2:9b:b1:ec:d5:d7:e9: bf:4e:f9:70:b6:33:3b:5a:d8:ae:0c:16:d0:8d:e1: 53:f0:26:6a:70:84:a4:63:2b:e1:47:d9:ef:da:65: f7:69:05:95:c7:58:ff:3e:13:ac:ff:4c:ce:d6:d4: ec:a4:ba:fa:05:8c:b1:b1:e0:fa:13:0d:83:3e:60: 5a:ac:6d:31:ad:d5:7d:2a:ae:5c:7e:f3:f6:4a:f6: 1c:2e:3a:c8:86:23:61:83:01:9a:6c:04:77:47:27: 45:3d:f1:b2:e7:f2:0d:4d:e5:0a:7d:96:7a:5c:7d: da:7e:de:9c:70:44:f3:92:1d:7a:bc:e3:cb:23:76: 11:d5:a9:27:9c:6d:56:c9:07:b6:86:73:3a:9f:ef: aa:2c:f6:03:af:8b:dc:23:8d:89:b7:c8:89:87:6a: fe:b5:77:a9:5a:45:f2:25:f7:cf:5c:eb:5d:5c:48: d2:4f:62:4b:54:da:a1:61:52:df:11:c3:18:31:6d: 22:5d:2d:0d:7a:1a:59:58:97:5d:65:05:1e:c6:35: af:c6:2b:a6:c2:f1:58:50:3c:79:72:f4:77:38:ee: 69:5c:3a:00:3c:4f:43:1a:cd:3c:72:b3:af:0e:ab: 7b:a6:cd:14:1c:a4:e0:02:09:7a:d0:aa:57:6d:e9: 84:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:91:68:E5:3B:6A:3C:AF:21:80:BE:52:6A:ED:FA:F6:DA:D4:A8:2D X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS138421.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.145.32.0/19 180.184.144.0-180.184.155.255 180.184.184.0/22 IPv6: 2406:d440:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 23:0c:7f:89:df:57:78:b1:31:76:e5:8a:f1:c8:d0:a7:c8:da: 1e:37:82:bc:7f:52:b5:fb:4a:fb:19:b9:6e:54:7d:be:a5:82: cc:c1:d7:97:b3:ab:f0:94:b0:c0:e3:72:29:5f:8b:ff:f0:64: be:5f:3f:d5:89:c6:4b:bf:c8:ec:58:64:55:ff:de:96:fc:ef: 23:df:59:6c:2c:56:1d:3d:02:3b:6b:74:3d:c5:4e:a9:9f:0f: 96:df:03:e6:a5:f7:25:43:47:1f:a1:e6:8c:c9:6b:89:01:db: c4:1f:3b:1d:21:18:d1:36:66:d6:77:57:bc:31:33:c6:e2:a2: 92:12:8d:2b:76:1d:68:92:08:54:51:13:14:28:bd:e0:40:39: be:35:c2:91:47:ad:07:fc:0b:d6:c3:61:10:1a:6f:e5:5a:97: e1:7e:21:7b:6f:fa:83:f4:dc:b8:23:2c:32:b3:8b:95:5b:63: f6:98:8c:4f:4f:d0:4e:dd:4e:0e:54:f3:65:a7:07:3d:f1:2c: b8:ce:f5:d8:80:56:3a:82:f4:c8:49:d0:71:f3:56:45:71:7a: f7:fd:73:07:5f:54:00:9f:77:6e:83:46:d8:89:7c:89:02:35: 0a:66:e9:11:a9:0b:11:73:55:86:aa:03:fe:08:43:f8:85:69: 1e:41:df:e5 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUIlgraXGA03OXkvBhtN6DuwZkhyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjA3MDExMzAzMzlaFw0yNzA2MzAxMzA4MzlaMDMxMTAvBgNV BAMTKEIwOTE2OEU1M0I2QTNDQUYyMTgwQkU1MjZBRURGQUY2REFENEE4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiwxg7izzt0pux7NXX6b9O+XC2 Mzta2K4MFtCN4VPwJmpwhKRjK+FH2e/aZfdpBZXHWP8+E6z/TM7W1OykuvoFjLGx 4PoTDYM+YFqsbTGt1X0qrlx+8/ZK9hwuOsiGI2GDAZpsBHdHJ0U98bLn8g1N5Qp9 lnpcfdp+3pxwRPOSHXq848sjdhHVqSecbVbJB7aGczqf76os9gOvi9wjjYm3yImH av61d6laRfIl989c611cSNJPYktU2qFhUt8RwxgxbSJdLQ16GllYl11lBR7GNa/G K6bC8VhQPHly9Hc47mlcOgA8T0MazTxys68Oq3umzRQcpOACCXrQqldt6YQ/AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUsJFo5TtqPK8hgL5Sau369trUqC0wHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2OTE2NTAvMC9BUzEzODQyMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBEBggrBgEFBQcBBwEB/wQ1MDMwIAQC AAEwGgMEBXaRIDAMAwQEtLiQAwQCtLiYAwQCtLi4MA8EAgACMAkDBwAkBtRA//8w DQYJKoZIhvcNAQELBQADggEBACMMf4nfV3ixMXblivHI0KfI2h43grx/UrX7SvsZ uW5Ufb6lgszB15ezq/CUsMDjcilfi//wZL5fP9WJxku/yOxYZFX/3pb87yPfWWws Vh09AjtrdD3FTqmfD5bfA+al9yVDRx+h5ozJa4kB28QfOx0hGNE2ZtZ3V7wxM8bi opISjSt2HWiSCFRRExQoveBAOb41wpFHrQf8C9bDYRAab+Val+F+IXtv+oP03Lgj LDKzi5VbY/aYjE9P0E7dTg5U82WnBz3xLLjO9diAVjqC9MhJ0HHzVkVxevf9cwdf VACfd26DRtiJfIkCNQpm6RGpCxFzVYaqA/4IQ/iFaR5B3+U= -----END CERTIFICATE-----Generated at Wed Jul 22 00:36:53 2026 by rpki-client