$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS133027.roa File: AS133027.roa (raw, json) Hash identifier: YhkINdqey/Z1YxH1bzo3tEa/boI0DGgDUFnuTXF9ZBw= Subject key identifier: 08:ED:31:3F:FB:90:AB:75:21:F4:25:90:97:A2:2F:1A:66:0E:E6:17 Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 135FBF9705567E5090F85EFAF4386062AB6F25D7 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS133027.roa Signing time: Tue 09 Jun 2026 09:14:18 +0000 ROA not before: Tue 09 Jun 2026 09:09:18 +0000 ROA not after: Tue 08 Jun 2027 09:14:18 +0000 asID: 133027 IP address blocks: 122.115.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5f:bf:97:05:56:7e:50:90:f8:5e:fa:f4:38:60:62:ab:6f:25:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: Jun 9 09:09:18 2026 GMT Not After : Jun 8 09:14:18 2027 GMT Subject: CN=08ED313FFB90AB7521F4259097A22F1A660EE617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:77:73:20:98:16:13:94:14:b7:7b:1a:0d: d2:26:43:16:ba:b4:a4:c8:59:7d:f0:cf:7c:03:1a: 0b:0f:d4:d9:89:32:26:d3:73:ad:05:05:ac:1e:ab: 90:21:66:04:dc:d2:23:42:8c:61:f7:37:14:fa:c7: 22:d1:6c:72:61:16:b7:64:65:6c:04:ee:2f:c2:84: 29:2a:72:a0:64:ae:0b:ea:e5:49:b3:4b:a4:20:2a: 4b:bf:a6:68:4a:6d:ad:02:47:95:79:6d:23:88:10: d5:bf:e4:04:6c:1b:0e:25:cc:2a:3a:16:10:a4:82: 95:13:21:71:3f:0f:e8:c5:d6:1a:5a:c6:90:fb:6a: 39:df:81:0f:40:5b:0e:85:aa:61:16:e6:c6:2a:d0: 2f:e5:05:14:90:6c:8f:d8:d3:94:9d:bd:18:41:a7: ca:87:8f:0f:5c:5d:57:f7:e5:b5:54:45:eb:e5:ad: 0f:c7:80:e4:ee:b3:d0:a2:a6:82:89:92:bb:1e:55: c9:39:02:67:6e:87:cf:34:c5:b0:50:79:89:6d:ff: e2:62:11:a9:71:de:5f:1f:97:fc:f9:a2:39:8e:c3: 74:c4:64:18:4f:82:59:d5:3d:f9:17:0a:df:89:53: 48:1f:1b:90:69:7d:df:c8:35:16:6b:b5:ba:00:c3: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:ED:31:3F:FB:90:AB:75:21:F4:25:90:97:A2:2F:1A:66:0E:E6:17 X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS133027.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.115.77.0/24 Signature Algorithm: sha256WithRSAEncryption a5:0d:86:49:ee:b4:2b:6e:c1:73:c9:7f:5e:c7:da:57:07:d4: e5:50:c4:8b:d9:76:ec:13:5c:eb:0b:cd:b3:75:15:7c:38:68: 97:a6:e6:d2:0e:63:eb:ea:ff:02:da:19:ca:8c:ab:31:9f:ac: 10:f0:5b:c3:73:ee:aa:af:6f:95:ee:0f:aa:dc:c1:04:ec:08: 6b:cc:6b:ef:26:30:1e:0e:7a:a2:55:8a:77:11:e7:24:8a:8f: 97:86:20:a0:dc:55:96:f1:17:4e:81:84:8e:0c:43:f0:80:d5: 1b:5f:3b:2f:bb:45:26:34:7b:b3:b4:4f:7d:0a:ca:7b:c7:7a: 74:d6:ac:54:d5:e0:32:83:68:82:7a:30:0a:37:de:7c:e7:23: cb:60:94:a9:6d:89:9c:75:0a:5f:a5:af:41:7e:c7:3b:b1:ed: fa:ca:85:6f:5b:4d:b3:9a:4c:45:db:b1:d2:86:81:cb:7e:16: 87:b1:5a:9a:c8:f2:55:90:0a:8e:58:6a:20:52:79:bd:a1:bd: 58:ce:5c:55:2e:fe:59:ef:c9:e5:8c:68:a1:06:ca:b5:81:49: 33:29:00:10:16:2f:af:02:0a:5d:30:c2:39:50:d1:59:c8:56: 15:5e:04:ef:87:a6:84:57:62:c3:62:9a:ca:9a:1a:03:1c:bf: 37:08:4b:01 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUE1+/lwVWflCQ+F769DhgYqtvJdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA2MDkwOTA5MThaFw0yNzA2MDgwOTE0MThaMDMxMTAvBgNV BAMTKDA4RUQzMTNGRkI5MEFCNzUyMUY0MjU5MDk3QTIyRjFBNjYwRUU2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7XdzIJgWE5QUt3saDdImQxa6 tKTIWX3wz3wDGgsP1NmJMibTc60FBaweq5AhZgTc0iNCjGH3NxT6xyLRbHJhFrdk ZWwE7i/ChCkqcqBkrgvq5UmzS6QgKku/pmhKba0CR5V5bSOIENW/5ARsGw4lzCo6 FhCkgpUTIXE/D+jF1hpaxpD7ajnfgQ9AWw6FqmEW5sYq0C/lBRSQbI/Y05SdvRhB p8qHjw9cXVf35bVURevlrQ/HgOTus9CipoKJkrseVck5Amduh880xbBQeYlt/+Ji Ealx3l8fl/z5ojmOw3TEZBhPglnVPfkXCt+JU0gfG5Bpfd/INRZrtboAw+wFAgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQUCO0xP/uQq3Uh9CWQl6IvGmYO5hcwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4OTA5ODUyMjY4NjI1OTUvMC9BUzEzMzAyNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHpzTTANBgkqhkiG9w0BAQsFAAOCAQEApQ2GSe60K27Bc8l/XsfaVwfU 5VDEi9l27BNc6wvNs3UVfDhol6bm0g5j6+r/AtoZyoyrMZ+sEPBbw3Puqq9vle4P qtzBBOwIa8xr7yYwHg56olWKdxHnJIqPl4YgoNxVlvEXToGEjgxD8IDVG187L7tF JjR7s7RPfQrKe8d6dNasVNXgMoNognowCjfefOcjy2CUqW2JnHUKX6WvQX7HO7Ht +sqFb1tNs5pMRdux0oaBy34Wh7FamsjyVZAKjlhqIFJ5vaG9WM5cVS7+We/J5Yxo oQbKtYFJMykAEBYvrwIKXTDCOVDRWchWFV4E74emhFdiw2KaypoaAxy/NwhLAQ== -----END CERTIFICATE-----Generated at Fri Jun 12 11:22:31 2026 by rpki-client