$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS138195.roa File: AS138195.roa (raw, json) Hash identifier: cqmrk4DgcsrfkxK88+hIcZfXziZoRHYC9i3pwpnv5v8= Subject key identifier: EA:19:7F:64:52:3C:F6:2F:9A:E2:57:3A:9A:D0:EE:1D:25:80:38:F5 Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976 Certificate serial: 75D8B33340C5BD242F4CA8ACA6F262FBC008FE43 Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS138195.roa Signing time: Mon 25 May 2026 21:20:55 +0000 ROA not before: Mon 25 May 2026 21:15:55 +0000 ROA not after: Mon 24 May 2027 21:20:55 +0000 asID: 138195 IP address blocks: 103.216.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 10:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d8:b3:33:40:c5:bd:24:2f:4c:a8:ac:a6:f2:62:fb:c0:08:fe:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976 Validity Not Before: May 25 21:15:55 2026 GMT Not After : May 24 21:20:55 2027 GMT Subject: CN=EA197F64523CF62F9AE2573A9AD0EE1D258038F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:29:e1:5c:f5:16:80:75:d4:f6:a9:d6:35: 36:89:f3:f4:df:60:89:e7:e9:31:44:e1:28:6f:c8: 91:c3:32:7f:d7:23:1e:07:96:d8:51:ff:54:6f:8f: d6:bd:20:ee:53:64:6b:1f:5b:7d:10:c3:ca:08:be: c0:d4:10:05:87:8f:15:86:cc:95:fc:07:17:7b:02: 8c:4d:fb:f2:2e:82:85:31:c1:36:b6:79:e7:cb:16: 07:03:77:c2:13:20:d6:6d:4b:3c:ea:16:61:a3:39: 33:d1:bb:fc:03:37:1b:26:7a:b0:7f:6b:9f:ab:36: df:fb:00:6e:08:4f:2d:05:91:97:83:40:63:49:34: 70:83:7c:f2:4e:44:8e:e8:1f:0b:68:fe:b6:69:cc: 0d:04:a5:70:ec:62:db:75:10:77:e5:ec:e2:e0:67: 9a:6a:49:67:26:b0:f8:37:77:75:5f:3c:07:81:e6: b9:92:4f:42:56:f2:86:da:45:9b:aa:34:ce:43:60: af:ef:ae:4c:59:46:91:69:e2:c3:91:4a:42:ab:c2: 48:73:8b:5c:6e:b3:47:a4:64:53:50:1c:81:b5:c1: 88:36:2e:b8:3a:e7:0c:05:45:68:60:52:b0:2e:9e: d3:cc:84:01:b0:50:78:52:50:47:ab:25:3b:6e:3f: 9c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:19:7F:64:52:3C:F6:2F:9A:E2:57:3A:9A:D0:EE:1D:25:80:38:F5 X509v3 Authority Key Identifier: keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS138195.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.216.231.0/24 Signature Algorithm: sha256WithRSAEncryption 27:39:42:ae:6a:a3:30:be:4a:1b:cd:96:b8:6c:df:a3:92:3c: e7:92:71:d0:58:75:cb:36:ef:4b:0b:b2:ce:71:9a:e0:2c:09: a8:76:3a:4d:8c:17:2a:8b:f1:37:61:13:cf:f4:76:f3:ce:64: 15:13:08:f5:54:5e:4e:ec:aa:45:b2:9b:cb:c3:af:2a:7a:4c: d7:8a:25:d1:e8:90:28:80:0e:97:a2:f7:36:be:7b:ee:91:55: 4c:b6:ee:7f:15:72:1b:e3:83:e2:7f:16:35:a5:53:7a:60:21: 65:a9:57:ef:5a:dc:10:ba:43:0d:da:2d:21:68:1b:8b:d2:57: e0:c3:f1:5b:e0:d6:39:96:96:bd:3e:dc:f2:d5:21:d7:31:13: cb:9f:f3:1d:e0:fe:49:a0:96:96:74:39:fb:24:50:9e:2f:90: 22:4b:26:fa:aa:02:d8:ea:d4:ea:f4:f7:9c:21:af:20:4b:5d: ea:8c:c6:8c:0f:1a:6f:f1:f1:00:bf:76:e4:ad:9b:f0:07:b8: 97:b0:7e:26:1b:40:36:4d:0c:89:d7:9a:a3:2e:6a:ad:ba:6c: c8:27:9b:4e:aa:27:c4:46:ca:25:e3:4b:c7:22:7e:48:04:67: f0:af:75:11:ed:cc:38:46:b9:97:3b:de:ad:0c:77:1a:b3:9a: b7:38:45:e6 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUddizM0DFvSQvTKispvJi+8AI/kMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw MUY5RDk3NjAeFw0yNjA1MjUyMTE1NTVaFw0yNzA1MjQyMTIwNTVaMDMxMTAvBgNV BAMTKEVBMTk3RjY0NTIzQ0Y2MkY5QUUyNTczQTlBRDBFRTFEMjU4MDM4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJPCnhXPUWgHXU9qnWNTaJ8/Tf YInn6TFE4ShvyJHDMn/XIx4HlthR/1Rvj9a9IO5TZGsfW30Qw8oIvsDUEAWHjxWG zJX8Bxd7AoxN+/IugoUxwTa2eefLFgcDd8ITINZtSzzqFmGjOTPRu/wDNxsmerB/ a5+rNt/7AG4ITy0FkZeDQGNJNHCDfPJORI7oHwto/rZpzA0EpXDsYtt1EHfl7OLg Z5pqSWcmsPg3d3VfPAeB5rmST0JW8obaRZuqNM5DYK/vrkxZRpFp4sORSkKrwkhz i1xus0ekZFNQHIG1wYg2Lrg65wwFRWhgUrAuntPMhAGwUHhSUEerJTtuP5xNAgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQU6hl/ZFI89i+a4lc6mtDuHSWAOPUwHwYDVR0j BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0 NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMC9BUzEzODE5NS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGfY5zANBgkqhkiG9w0BAQsFAAOCAQEAJzlCrmqjML5KG82WuGzfo5I8 55Jx0Fh1yzbvSwuyznGa4CwJqHY6TYwXKovxN2ETz/R2885kFRMI9VReTuyqRbKb y8OvKnpM14ol0eiQKIAOl6L3Nr577pFVTLbufxVyG+OD4n8WNaVTemAhZalX71rc ELpDDdotIWgbi9JX4MPxW+DWOZaWvT7c8tUh1zETy5/zHeD+SaCWlnQ5+yRQni+Q Iksm+qoC2OrU6vT3nCGvIEtd6ozGjA8ab/HxAL925K2b8Ae4l7B+JhtANk0Midea oy5qrbpsyCebTqonxEbKJeNLxyJ+SARn8K91Ee3MOEa5lzverQx3GrOatzhF5g== -----END CERTIFICATE-----Generated at Sat Jun 6 02:27:52 2026 by rpki-client