$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS139128.roa File: AS139128.roa (raw, json) Hash identifier: Hf2+L5HEiYAU8V1aQ0mNqXM9xpZ3IJ5X6iRLcq15VHs= Subject key identifier: 33:E8:FB:78:90:3F:68:04:D5:63:F1:D3:B5:E1:F0:F6:07:C7:A8:B0 Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Certificate serial: 4871BE04C3BA8A0327FB930D92714D0E3AD95097 Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS139128.roa Signing time: Fri 22 May 2026 03:54:21 +0000 ROA not before: Fri 22 May 2026 03:49:21 +0000 ROA not after: Fri 21 May 2027 03:54:21 +0000 asID: 139128 IP address blocks: 115.182.0.0/24 maxlen: 24 115.182.2.0/24 maxlen: 24 115.182.5.0/24 maxlen: 24 115.182.6.0/24 maxlen: 24 115.182.7.0/24 maxlen: 24 115.182.216.0/24 maxlen: 24 115.182.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:71:be:04:c3:ba:8a:03:27:fb:93:0d:92:71:4d:0e:3a:d9:50:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Validity Not Before: May 22 03:49:21 2026 GMT Not After : May 21 03:54:21 2027 GMT Subject: CN=33E8FB78903F6804D563F1D3B5E1F0F607C7A8B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:76:d8:84:78:27:00:77:3b:b2:aa:90:0b: d5:2a:36:72:83:3e:5c:4a:ff:7a:72:5c:ba:76:ea: 4c:8b:1b:36:96:ac:f7:d4:70:66:57:01:da:ed:19: 38:a2:6a:b7:d6:e8:0c:c7:ac:09:b9:2d:47:85:34: 00:9e:44:4f:c1:21:d8:25:f2:d7:c0:9b:df:70:58: fd:ae:6b:4e:84:3f:4e:59:23:ef:d8:d9:3b:d3:4a: 61:63:4c:46:b3:b5:80:ee:4f:8d:54:a2:b9:9a:1d: 4a:66:b1:40:36:a8:0d:6b:79:f0:db:a8:01:18:80: fc:ff:f8:25:40:83:03:3f:e7:70:d6:a4:74:3a:c4: 68:51:ef:e1:18:31:e2:db:c7:b9:a7:12:79:bc:20: f3:96:cd:46:10:61:d0:56:9d:37:c8:ad:5c:ad:8b: 6c:24:61:5a:3c:72:3f:ea:04:4f:dc:b6:c0:26:97: 53:da:61:4a:08:9c:65:42:72:cf:77:72:af:72:ed: d9:55:00:4a:64:ed:5a:16:cf:2f:03:a1:9f:3f:2e: 58:4e:5f:f1:e1:67:d2:b0:6f:bd:0b:3b:81:62:7f: c5:95:dd:10:68:bd:d9:aa:b7:04:ed:ef:4c:1b:79: 91:d2:b0:9e:52:ca:f1:92:19:ba:c9:b2:33:75:f3: 63:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E8:FB:78:90:3F:68:04:D5:63:F1:D3:B5:E1:F0:F6:07:C7:A8:B0 X509v3 Authority Key Identifier: keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS139128.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.182.0.0/24 115.182.2.0/24 115.182.5.0-115.182.7.255 115.182.216.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:d6:5c:22:20:d4:8c:93:20:5c:8b:b7:ed:1d:3a:43:86:af: fb:b2:a4:18:b2:24:8a:01:e3:45:93:20:4b:01:5a:d5:9b:e8: 93:a3:f8:30:ab:1c:29:dd:35:7f:b9:8e:9d:6b:6d:38:08:a2: 6c:bf:f9:ef:e1:cb:6a:33:9e:39:e5:01:18:55:8f:f3:81:68: 2d:aa:b5:9e:1e:16:db:17:2c:17:e7:30:a8:33:18:43:10:8b: 1e:f0:fb:51:45:7c:a6:c2:c6:2e:83:36:c9:76:41:b7:30:4b: 2e:be:23:48:e9:9e:1b:da:a2:1b:79:b9:57:65:c7:41:5f:16: db:f0:18:01:79:44:32:be:fb:5e:ac:01:14:9b:9d:5b:19:1f: 24:af:6f:2e:8b:8f:95:32:5b:8e:c7:2e:d7:30:70:2c:e5:d1: 44:5c:98:a3:4a:a2:48:a1:bb:f4:cf:17:a3:1c:00:af:e2:8e: 85:2a:3d:5f:e2:a1:1a:28:db:c3:e8:43:66:3f:21:b5:c1:33: e1:47:0f:fc:db:62:b9:22:4c:00:b3:7c:c5:66:ea:ee:70:64: 01:fa:37:0e:4f:65:dd:72:e8:fa:15:0b:da:a1:7e:16:0a:8d: bd:47:32:7a:41:19:30:74:9c:c6:86:49:3b:30:9e:3a:59:8d: 91:f6:f2:89 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUSHG+BMO6igMn+5MNknFNDjrZUJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky MjJFOEY5RjAeFw0yNjA1MjIwMzQ5MjFaFw0yNzA1MjEwMzU0MjFaMDMxMTAvBgNV BAMTKDMzRThGQjc4OTAzRjY4MDRENTYzRjFEM0I1RTFGMEY2MDdDN0E4QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClunbYhHgnAHc7sqqQC9UqNnKD PlxK/3pyXLp26kyLGzaWrPfUcGZXAdrtGTiiarfW6AzHrAm5LUeFNACeRE/BIdgl 8tfAm99wWP2ua06EP05ZI+/Y2TvTSmFjTEaztYDuT41UormaHUpmsUA2qA1refDb qAEYgPz/+CVAgwM/53DWpHQ6xGhR7+EYMeLbx7mnEnm8IPOWzUYQYdBWnTfIrVyt i2wkYVo8cj/qBE/ctsAml1PaYUoInGVCcs93cq9y7dlVAEpk7VoWzy8DoZ8/LlhO X/HhZ9Kwb70LO4Fif8WV3RBovdmqtwTt70wbeZHSsJ5SyvGSGbrJsjN182NDAgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQUM+j7eJA/aATVY/HTteHw9gfHqLAwHwYDVR0j BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzA5NTU5MjQwNzM1NDU3MzEvMC9BUzEzOTEyOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwJgQC AAEwIAMEAHO2AAMEAHO2AjAMAwQAc7YFAwQDc7YAAwQBc7bYMA0GCSqGSIb3DQEB CwUAA4IBAQCc1lwiINSMkyBci7ftHTpDhq/7sqQYsiSKAeNFkyBLAVrVm+iTo/gw qxwp3TV/uY6da204CKJsv/nv4ctqM5455QEYVY/zgWgtqrWeHhbbFywX5zCoMxhD EIse8PtRRXymwsYugzbJdkG3MEsuviNI6Z4b2qIbeblXZcdBXxbb8BgBeUQyvvte rAEUm51bGR8kr28ui4+VMluOxy7XMHAs5dFEXJijSqJIobv0zxejHACv4o6FKj1f 4qEaKNvD6ENmPyG1wTPhRw/822K5IkwAs3zFZurucGQB+jcOT2Xdcuj6FQvaoX4W Co29RzJ6QRkwdJzGhkk7MJ46WY2R9vKJ -----END CERTIFICATE-----Generated at Fri May 29 22:56:11 2026 by rpki-client