$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS134761.roa File: AS134761.roa (raw, json) Hash identifier: w5YmgeeaRW3UFo5vKDEeCdFJ0RO0OpTyeDGF2J35ZUk= Subject key identifier: AF:69:43:54:5A:05:63:D1:59:25:89:85:5F:27:C3:B9:17:D2:88:EC Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 0EC0DA679A5F0B12AC5A03D80A9A43CDCD03C48F Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS134761.roa Signing time: Fri 21 Aug 2026 06:18:30 +0000 ROA not before: Fri 21 Aug 2026 06:13:30 +0000 ROA not after: Fri 20 Aug 2027 06:18:30 +0000 asID: 134761 IP address blocks: 111.228.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c0:da:67:9a:5f:0b:12:ac:5a:03:d8:0a:9a:43:cd:cd:03:c4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Aug 21 06:13:30 2026 GMT Not After : Aug 20 06:18:30 2027 GMT Subject: CN=AF6943545A0563D1592589855F27C3B917D288EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9d:01:a0:04:7c:14:ae:dd:9e:32:09:0a:a7: 1c:9b:ce:e2:10:7b:9b:21:fa:8a:aa:9f:9b:41:62: e2:5c:00:f2:98:b5:f8:9f:ae:2c:92:a2:7d:d3:c0: 81:85:62:7c:13:ec:f9:14:79:ac:c2:80:ba:08:dd: a6:8f:d7:0a:05:39:cb:51:51:fc:ba:81:f3:ec:4f: 76:20:35:46:9f:28:c4:97:b3:ef:1d:bf:1f:4e:b6: a4:c5:b7:16:ed:5b:f0:9b:b2:23:2f:86:37:5e:8c: 04:d9:d5:30:e8:15:b2:c5:6c:08:f1:87:bb:40:13: fa:c4:cf:18:5a:08:6e:a9:b3:38:39:b8:94:38:c2: c7:6c:b5:53:2a:50:33:af:5c:cb:32:53:f8:82:17: 19:6b:be:ff:17:db:19:5a:d4:2e:ff:e6:ee:d2:92: 9d:44:2f:46:51:9f:11:d9:5e:75:3c:2c:da:6b:05: fb:5d:7e:31:fe:1a:bf:3c:a7:b0:52:58:c0:e2:ce: b2:de:e3:7a:1a:c7:2d:a3:c5:b0:9a:f1:f2:2f:27: 2f:e8:12:16:90:28:a2:92:11:a5:ec:b2:f0:bb:23: 11:d5:e8:d1:af:61:b5:ff:1c:15:e1:27:89:ec:eb: 9b:90:3f:c8:7d:08:ba:3e:72:05:8b:b2:21:28:3c: e3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:69:43:54:5A:05:63:D1:59:25:89:85:5F:27:C3:B9:17:D2:88:EC X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS134761.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.228.80.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:bb:f4:34:1d:1c:47:60:69:9e:62:1f:41:f6:52:ed:83:e2: e2:00:d8:2c:e4:8e:9d:ea:b9:be:32:54:46:80:d1:5a:00:ee: cc:de:c5:09:0e:f5:e5:5d:53:22:a8:82:17:1f:a2:eb:96:60: 79:a0:b6:d0:c7:bd:cc:d8:44:1d:b9:24:72:cf:08:f1:6b:af: 3f:d9:5e:d1:35:e0:6b:79:cb:ec:42:c5:0d:d6:9c:61:7a:da: 34:69:c0:09:17:7b:5e:e9:c7:fe:56:6d:e4:f8:bd:5e:32:cd: 83:70:23:c7:8a:b0:c3:de:ef:db:ee:f3:71:8b:e7:11:86:0f: b8:3e:94:5c:55:c0:7c:6c:c3:af:f0:3d:17:3d:bc:f0:06:f7: 36:3a:f4:a5:d2:69:2f:a4:3f:54:76:ed:d2:72:58:d0:30:f1: f8:83:90:85:f1:8f:e0:77:9b:16:1c:15:00:d7:e2:c5:65:37: 7b:90:ad:f9:11:dc:40:aa:56:08:11:47:51:64:11:8e:64:72: 30:a7:f4:c0:81:6d:48:a4:fe:c0:56:de:4d:5a:ae:82:2a:16: fa:f1:75:1a:0b:4a:7f:29:f7:8e:f1:cf:d0:3f:c0:11:19:ba: 39:45:12:b2:27:1a:e8:67:c1:bd:39:51:6c:a2:96:ff:5d:f9: ad:e0:05:2f -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUDsDaZ5pfCxKsWgPYCppDzc0DxI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA4MjEwNjEzMzBaFw0yNzA4MjAwNjE4MzBaMDMxMTAvBgNV BAMTKEFGNjk0MzU0NUEwNTYzRDE1OTI1ODk4NTVGMjdDM0I5MTdEMjg4RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcnQGgBHwUrt2eMgkKpxybzuIQ e5sh+oqqn5tBYuJcAPKYtfifriySon3TwIGFYnwT7PkUeazCgLoI3aaP1woFOctR Ufy6gfPsT3YgNUafKMSXs+8dvx9OtqTFtxbtW/CbsiMvhjdejATZ1TDoFbLFbAjx h7tAE/rEzxhaCG6pszg5uJQ4wsdstVMqUDOvXMsyU/iCFxlrvv8X2xla1C7/5u7S kp1EL0ZRnxHZXnU8LNprBftdfjH+Gr88p7BSWMDizrLe43oaxy2jxbCa8fIvJy/o EhaQKKKSEaXssvC7IxHV6NGvYbX/HBXhJ4ns65uQP8h9CLo+cgWLsiEoPON1AgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQUr2lDVFoFY9FZJYmFXyfDuRfSiOwwHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMC9BUzEzNDc2MS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAm/kUDANBgkqhkiG9w0BAQsFAAOCAQEAf7v0NB0cR2BpnmIfQfZS7YPi 4gDYLOSOneq5vjJURoDRWgDuzN7FCQ715V1TIqiCFx+i65ZgeaC20Me9zNhEHbkk cs8I8WuvP9le0TXga3nL7ELFDdacYXraNGnACRd7XunH/lZt5Pi9XjLNg3Ajx4qw w97v2+7zcYvnEYYPuD6UXFXAfGzDr/A9Fz288Ab3Njr0pdJpL6Q/VHbt0nJY0DDx +IOQhfGP4HebFhwVANfixWU3e5Ct+RHcQKpWCBFHUWQRjmRyMKf0wIFtSKT+wFbe TVqugioW+vF1GgtKfyn3jvHP0D/AERm6OUUSsica6GfBvTlRbKKW/135reAFLw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:13 2026 by rpki-client