$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS132510.roa File: AS132510.roa (raw, json) Hash identifier: RCGN4bjUzpiUIrzZWsR3QRUgYUOWLIfyyglTNJhkRoo= Subject key identifier: D8:59:FD:D0:21:E0:79:A2:38:F9:D2:16:76:83:C5:D9:DE:3F:8A:5F Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4 Certificate serial: 7FF5CCCDAE8725A66C01698FA0CF3E3FEC6D1326 Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS132510.roa Signing time: Mon 18 May 2026 02:37:05 +0000 ROA not before: Mon 18 May 2026 02:32:05 +0000 ROA not after: Mon 17 May 2027 02:37:05 +0000 asID: 132510 IP address blocks: 2409:800c:3001::/48 maxlen: 48 2409:800c:3002::/48 maxlen: 48 2409:8c0c:200::/40 maxlen: 40 2409:8c0c:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 11:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f5:cc:cd:ae:87:25:a6:6c:01:69:8f:a0:cf:3e:3f:ec:6d:13:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4 Validity Not Before: May 18 02:32:05 2026 GMT Not After : May 17 02:37:05 2027 GMT Subject: CN=D859FDD021E079A238F9D2167683C5D9DE3F8A5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:64:1a:e3:41:2a:7c:7d:ca:c5:bf:a7:f1:69: 00:f3:ae:92:6c:f4:7b:bf:6b:b2:c7:29:94:f0:cc: 84:f1:75:16:43:13:1a:17:73:0d:d6:46:85:13:f2: da:2f:ea:c2:77:81:46:be:04:31:81:a2:9f:40:ee: 52:d7:d6:7f:a9:f7:c2:fa:1c:f3:3a:a8:78:0b:6d: 5a:e6:3b:82:99:88:34:3b:a0:5a:f9:f2:d7:9d:e4: 9f:2e:a8:d7:8a:7b:2d:2f:bd:21:cc:94:a2:ea:e6: 1d:87:30:7d:ec:43:6d:c5:34:a2:e5:88:16:e6:73: 01:b5:05:83:43:0b:f1:23:90:5a:5f:8a:49:be:6c: 6e:cc:39:ee:ed:6e:5b:9e:1c:c7:32:6f:41:65:6a: 60:dc:53:07:2a:11:6e:71:81:52:e8:97:6f:07:b9: 18:3a:31:53:c8:aa:3a:87:9c:3a:ea:2e:d2:b5:bd: 3e:bd:3c:76:4c:94:0a:d2:84:23:0e:7a:98:15:fb: 9e:a0:e6:a5:62:a6:9a:e7:2a:25:5b:f1:6b:af:e3: 16:38:b7:6b:9a:19:42:56:47:8e:1c:89:c4:22:06: a1:9d:b8:6c:65:36:b8:78:fc:fd:6f:f6:cf:0b:7f: 0a:4f:a3:e9:63:37:78:73:eb:a3:0f:4d:e7:1d:dd: 64:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:59:FD:D0:21:E0:79:A2:38:F9:D2:16:76:83:C5:D9:DE:3F:8A:5F X509v3 Authority Key Identifier: keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS132510.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2409:800c:3001::-2409:800c:3002:ffff:ffff:ffff:ffff:ffff 2409:8c0c:200::/39 Signature Algorithm: sha256WithRSAEncryption 75:bd:e4:e8:cf:df:f3:af:5b:9f:44:29:a0:63:7a:16:7b:2c: a1:ab:19:cd:88:d3:96:2d:db:12:27:f6:ae:60:22:ea:1d:5f: d5:b9:93:3f:04:79:05:05:b1:4b:9f:56:a2:c2:bc:b0:d1:b3: af:f8:0a:13:c7:ef:c2:12:58:bc:11:99:90:84:3b:18:cd:66: c5:ff:2b:e2:31:a7:31:3e:9e:e1:67:ab:f7:af:fb:47:29:22: 00:ee:e2:a0:07:3b:1d:5a:e3:0f:8a:66:e5:75:a8:62:b0:f4: 8a:b8:bd:7c:ca:aa:1d:60:1b:ba:5a:17:0b:0f:b3:ca:9e:7c: 66:28:ad:d7:7f:34:6a:1b:2f:e4:26:b4:00:bb:ca:ea:64:92: 94:50:86:c0:85:bc:a6:e6:35:28:f3:08:4e:04:5a:07:32:5c: 48:ad:df:e7:29:41:98:0c:53:80:5d:70:81:cb:2a:59:df:95: 60:c4:72:28:fa:74:e0:5c:38:b6:23:20:a9:83:07:19:c3:61: 0b:16:85:48:01:0e:47:60:50:c6:6c:15:39:9d:84:b1:be:23: af:81:02:8a:f3:47:f8:1a:d1:d3:e5:20:dd:59:09:eb:bb:2d: 4d:ec:c1:c1:5c:82:9c:41:51:35:5b:51:d8:9e:a4:4c:45:fb: f3:d0:8e:e4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUf/XMza6HJaZsAWmPoM8+P+xtEyYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDVGM0QwMDAwMTEwLwYDVQQFEyhEQkIyM0M3RUU0 OTIyMTJFQTg1OEI3OEUxQzY2QkYyMjk4RTVBQ0Q0MB4XDTI2MDUxODAyMzIwNVoX DTI3MDUxNzAyMzcwNVowMzExMC8GA1UEAxMoRDg1OUZERDAyMUUwNzlBMjM4RjlE MjE2NzY4M0M1RDlERTNGOEE1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO5kGuNBKnx9ysW/p/FpAPOukmz0e79rsscplPDMhPF1FkMTGhdzDdZGhRPy 2i/qwneBRr4EMYGin0DuUtfWf6n3wvoc8zqoeAttWuY7gpmINDugWvny153kny6o 14p7LS+9IcyUourmHYcwfexDbcU0ouWIFuZzAbUFg0ML8SOQWl+KSb5sbsw57u1u W54cxzJvQWVqYNxTByoRbnGBUuiXbwe5GDoxU8iqOoecOuou0rW9Pr08dkyUCtKE Iw56mBX7nqDmpWKmmucqJVvxa6/jFji3a5oZQlZHjhyJxCIGoZ24bGU2uHj8/W/2 zwt/Ck+j6WM3eHProw9N5x3dZOkCAwEAAaOCAfowggH2MB0GA1UdDgQWBBTYWf3Q IeB5ojj50hZ2g8XZ3j+KXzAfBgNVHSMEGDAWgBTbsjx+5JIhLqhYt44cZr8imOWs 1DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODcyODM0MDk1Nzc1NzQ3LzAvREJCMjND N0VFNDkyMjEyRUE4NThCNzhFMUM2NkJGMjI5OEU1QUNENC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvMjdJOGZ1U1NJ UzZvV0xlT0hHYV9JcGpsck5RLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NDg3MjgzNDA5 NTc3NTc0Ny8wL0FTMTMyNTEwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcMBIDBwAkCYAMMAEDBwAkCYAMMAID BgEkCYwMAjANBgkqhkiG9w0BAQsFAAOCAQEAdb3k6M/f869bn0QpoGN6FnssoasZ zYjTli3bEif2rmAi6h1f1bmTPwR5BQWxS59WosK8sNGzr/gKE8fvwhJYvBGZkIQ7 GM1mxf8r4jGnMT6e4Wer96/7RykiAO7ioAc7HVrjD4pm5XWoYrD0iri9fMqqHWAb uloXCw+zyp58Ziit1380ahsv5Ca0ALvK6mSSlFCGwIW8puY1KPMITgRaBzJcSK3f 5ylBmAxTgF1wgcsqWd+VYMRyKPp04Fw4tiMgqYMHGcNhCxaFSAEOR2BQxmwVOZ2E sb4jr4ECivNH+BrR0+Ug3VkJ67stTezBwVyCnEFRNVtR2J6kTEX789CO5A== -----END CERTIFICATE-----Generated at Thu May 21 10:24:58 2026 by rpki-client