$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS137508.roa File: AS137508.roa (raw, json) Hash identifier: IbmglsJdk/TfUQitwAWpgxdoxSY1a1O0Lf1Yi5UBmBA= Subject key identifier: BE:8E:70:67:D8:DB:D9:CA:47:FA:B1:E2:A3:54:0D:EB:BF:03:F6:90 Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976 Certificate serial: 475AC6E2531B8D0948FCDAD331271D665F1AEEC4 Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS137508.roa Signing time: Tue 19 May 2026 02:36:41 +0000 ROA not before: Tue 19 May 2026 02:31:41 +0000 ROA not after: Tue 18 May 2027 02:36:41 +0000 asID: 137508 IP address blocks: 103.118.204.0/22 maxlen: 24 103.118.208.0/22 maxlen: 24 103.118.212.0/22 maxlen: 24 103.118.216.0/22 maxlen: 24 103.118.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 10:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:5a:c6:e2:53:1b:8d:09:48:fc:da:d3:31:27:1d:66:5f:1a:ee:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976 Validity Not Before: May 19 02:31:41 2026 GMT Not After : May 18 02:36:41 2027 GMT Subject: CN=BE8E7067D8DBD9CA47FAB1E2A3540DEBBF03F690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:25:a5:c1:7d:0a:9d:ad:1a:be:b5:d2:73:0b: 97:54:70:2a:29:f0:bb:41:70:6a:0a:76:29:03:b5: 3e:07:7b:ad:b1:a2:4d:5e:e7:2d:60:5c:74:07:5c: 4f:e6:f7:3d:6f:61:d8:17:28:fd:4d:c6:54:fb:85: 25:24:a4:a6:27:9d:d2:8a:4a:e3:39:e8:f4:ee:65: 76:d8:e9:00:5c:ad:cf:6a:25:2b:47:03:00:15:6c: ff:6e:bb:3b:ee:39:36:a8:d3:35:b1:ad:0f:71:ba: 3a:cd:78:5f:d6:52:3f:ce:6d:84:9c:f2:ea:53:04: 94:37:d5:a6:7d:24:e6:51:16:83:dd:63:9e:9b:59: 4b:b3:28:b3:c4:7e:74:8b:6b:16:14:71:48:a5:b8: 02:cb:d2:3a:2e:e0:6b:9b:c8:76:5d:fe:42:de:d9: 1a:03:52:37:af:84:2a:47:71:21:9f:ba:d9:42:e6: c0:74:d7:4b:af:04:bd:e2:6e:da:34:5c:42:6b:d6: 51:b3:7f:a2:97:a2:ae:59:9e:7e:63:f7:c4:6a:7c: 9b:37:1c:60:75:42:f0:9c:0b:41:09:f9:2f:0e:85: c3:2e:8b:8c:e9:ca:16:40:42:a9:86:df:10:41:01: 02:fa:c2:af:90:59:78:8b:55:c1:a6:d3:a3:45:47: 48:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8E:70:67:D8:DB:D9:CA:47:FA:B1:E2:A3:54:0D:EB:BF:03:F6:90 X509v3 Authority Key Identifier: keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS137508.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.204.0-103.118.223.255 Signature Algorithm: sha256WithRSAEncryption 69:69:49:67:af:a6:24:c8:68:ab:80:43:ca:aa:7b:7c:18:b8: 27:d2:84:11:d4:4c:4f:dd:d6:aa:39:63:d6:24:25:15:e7:7c: fe:68:ca:1f:32:7b:8c:56:71:94:7d:90:a9:fb:34:40:54:4b: 5a:9f:8a:33:f3:45:02:86:2d:da:89:68:28:ba:84:ff:80:bf: 7a:8d:b1:91:1c:ae:35:41:02:8e:26:fd:0f:04:a1:71:7e:6d: 37:78:27:4c:e8:18:4f:4b:df:e1:df:a1:4c:57:df:d4:88:39: 0e:7a:83:af:64:58:71:52:ca:48:df:67:79:a6:0e:7b:90:89: 7b:24:35:2b:b0:24:0a:7a:f6:62:a9:ff:a1:ad:b5:1c:ad:f5: 8d:e5:f3:88:8b:0d:d6:7f:b6:0c:e9:45:2f:af:97:42:1a:c4: 6c:4c:c4:c9:8e:e3:60:e5:90:07:5d:95:63:82:d9:55:b4:a8: 13:ee:2d:13:20:bb:64:62:30:b9:21:48:f0:a9:6b:f4:e3:90: 59:51:e2:b0:03:9d:c1:8a:f6:4d:c5:95:51:67:b8:0f:54:fe: 6b:b6:a8:54:87:ea:8a:f1:19:b1:87:de:c1:85:f7:d3:5c:79: d0:55:78:28:d8:27:39:41:60:e2:60:3b:86:7f:41:13:43:3d: 44:42:6b:bc -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUR1rG4lMbjQlI/NrTMScdZl8a7sQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw MUY5RDk3NjAeFw0yNjA1MTkwMjMxNDFaFw0yNzA1MTgwMjM2NDFaMDMxMTAvBgNV BAMTKEJFOEU3MDY3RDhEQkQ5Q0E0N0ZBQjFFMkEzNTQwREVCQkYwM0Y2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXJaXBfQqdrRq+tdJzC5dUcCop 8LtBcGoKdikDtT4He62xok1e5y1gXHQHXE/m9z1vYdgXKP1NxlT7hSUkpKYnndKK SuM56PTuZXbY6QBcrc9qJStHAwAVbP9uuzvuOTao0zWxrQ9xujrNeF/WUj/ObYSc 8upTBJQ31aZ9JOZRFoPdY56bWUuzKLPEfnSLaxYUcUiluALL0jou4GubyHZd/kLe 2RoDUjevhCpHcSGfutlC5sB010uvBL3ibto0XEJr1lGzf6KXoq5Znn5j98RqfJs3 HGB1QvCcC0EJ+S8OhcMui4zpyhZAQqmG3xBBAQL6wq+QWXiLVcGm06NFR0iFAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUvo5wZ9jb2cpH+rHio1QN678D9pAwHwYDVR0j BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0 NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMC9BUzEzNzUwOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQC AAEwDjAMAwQCZ3bMAwQFZ3bAMA0GCSqGSIb3DQEBCwUAA4IBAQBpaUlnr6YkyGir gEPKqnt8GLgn0oQR1ExP3daqOWPWJCUV53z+aMofMnuMVnGUfZCp+zRAVEtan4oz 80UChi3aiWgouoT/gL96jbGRHK41QQKOJv0PBKFxfm03eCdM6BhPS9/h36FMV9/U iDkOeoOvZFhxUspI32d5pg57kIl7JDUrsCQKevZiqf+hrbUcrfWN5fOIiw3Wf7YM 6UUvr5dCGsRsTMTJjuNg5ZAHXZVjgtlVtKgT7i0TILtkYjC5IUjwqWv045BZUeKw A53BivZNxZVRZ7gPVP5rtqhUh+qK8Rmxh97BhffTXHnQVXgo2Cc5QWDiYDuGf0ET Qz1EQmu8 -----END CERTIFICATE-----Generated at Sat Jun 6 02:27:52 2026 by rpki-client