$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS133111.roa File: AS133111.roa (raw, json) Hash identifier: rJw4y15VRQPZxBegfqm3xJnT+xZqMk82nouZWxBNtZw= Subject key identifier: 10:6B:E3:91:08:58:3F:95:99:74:A9:79:42:A2:D8:E3:1C:A3:D6:9F Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 7EB476646DECDA6FEBE04C0AD9059D4B8550D7B3 Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS133111.roa Signing time: Mon 18 May 2026 03:34:43 +0000 ROA not before: Mon 18 May 2026 03:29:43 +0000 ROA not after: Mon 17 May 2027 03:34:43 +0000 asID: 133111 IP address blocks: 42.158.0.0/16 maxlen: 32 59.151.0.0/17 maxlen: 32 59.191.0.0/17 maxlen: 32 103.247.168.0/22 maxlen: 32 120.132.128.0/17 maxlen: 32 120.133.0.0/17 maxlen: 32 120.133.128.0/18 maxlen: 32 120.133.192.0/19 maxlen: 32 120.133.224.0/20 maxlen: 32 120.134.0.0/15 maxlen: 32 124.250.0.0/16 maxlen: 32 124.251.0.0/16 maxlen: 32 182.174.0.0/16 maxlen: 32 182.175.0.0/17 maxlen: 32 182.175.128.0/18 maxlen: 32 182.175.192.0/19 maxlen: 32 182.175.224.0/20 maxlen: 32 183.84.0.0/15 maxlen: 32 203.196.0.0/21 maxlen: 32 210.77.128.0/19 maxlen: 32 211.99.160.0/19 maxlen: 32 211.99.192.0/19 maxlen: 32 211.151.0.0/16 maxlen: 32 211.152.0.0/19 maxlen: 32 211.152.64.0/18 maxlen: 32 2403:a200::/32 maxlen: 64 2403:a200:a2ff::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b4:76:64:6d:ec:da:6f:eb:e0:4c:0a:d9:05:9d:4b:85:50:d7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: May 18 03:29:43 2026 GMT Not After : May 17 03:34:43 2027 GMT Subject: CN=106BE39108583F959974A97942A2D8E31CA3D69F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:12:5d:15:f8:cb:20:05:6e:ec:01:9d:f9:9a: 01:aa:05:c3:10:61:98:08:2f:89:e2:ea:ed:6e:12: aa:0d:19:cb:97:dd:a6:10:d9:91:c4:42:be:03:88: 42:ff:31:87:f8:d5:05:41:42:37:61:04:eb:b6:3e: 52:3d:84:7e:71:59:28:6c:35:22:16:7e:10:b7:f4: 7b:a6:43:6e:25:ee:65:ce:fc:09:0f:f7:fc:e3:31: 2b:25:9d:45:42:30:a6:e4:b4:cc:06:9d:20:07:cc: 14:5d:ee:3a:35:dc:39:4e:f7:25:79:7e:c6:24:b0: 3a:68:bf:ed:24:ad:7a:87:c3:5c:a6:62:34:6d:a8: b7:b9:2d:63:86:b6:b7:77:93:4d:db:14:7f:14:6f: 40:db:58:19:c1:02:bb:fa:ed:09:ef:75:fb:bd:0b: d6:2f:46:da:43:30:1e:de:00:25:9e:b9:08:95:40: d8:e0:a5:c8:44:82:c4:e1:ba:e4:9e:18:d0:fa:73: 0c:f0:1a:ee:61:71:61:7a:70:d7:a8:67:cd:e8:b6: 00:3f:20:c9:5c:5b:54:cc:b1:70:62:e5:59:78:4b: b2:25:93:b0:81:53:a2:25:67:ef:5d:52:70:61:a6: 60:fb:38:67:95:19:99:d4:0c:be:7f:6a:c7:d1:7d: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6B:E3:91:08:58:3F:95:99:74:A9:79:42:A2:D8:E3:1C:A3:D6:9F X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS133111.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.158.0.0/16 59.151.0.0/17 59.191.0.0/17 103.247.168.0/22 120.132.128.0-120.133.239.255 120.134.0.0/15 124.250.0.0/15 182.174.0.0-182.175.239.255 183.84.0.0/15 203.196.0.0/21 210.77.128.0/19 211.99.160.0-211.99.223.255 211.151.0.0-211.152.31.255 211.152.64.0/18 IPv6: 2403:a200::/32 Signature Algorithm: sha256WithRSAEncryption 0f:c6:f2:0c:6e:e0:60:4b:ea:56:18:9c:78:c6:a0:6e:4f:12: 6d:23:f4:8d:1c:ff:a0:59:df:6c:2c:38:72:65:bf:6f:70:35: 75:5c:af:ef:2a:0d:df:f1:18:a1:8c:c4:83:54:b6:01:5e:02: 05:96:5b:65:d3:30:e6:d2:ef:c8:c9:bd:11:ba:ca:6d:1e:5d: e9:84:13:f9:51:86:25:02:c1:9a:bb:5e:3a:ff:a4:98:55:30: 40:f9:0d:c3:45:78:f3:33:99:11:45:24:ca:d3:26:80:9d:ec: 0c:ac:ac:1f:c3:42:41:8d:1e:c0:1d:db:b4:64:5e:ac:5a:49: 26:64:72:07:7d:68:ad:b6:e4:12:48:4e:11:8b:d5:c6:fa:23: f8:70:a5:3f:58:9f:6a:60:e0:b9:4a:b3:62:a7:4a:85:5a:be: 93:17:b4:05:0d:be:0c:a8:74:bb:c9:a4:60:3e:eb:75:ed:f9: e8:2b:2a:0d:aa:88:3a:e6:6e:40:af:b8:22:7a:6e:85:eb:ba: d6:f3:71:a1:3e:f8:54:32:ad:c3:a7:4c:fb:aa:fb:b3:ff:98: 82:38:db:e6:13:37:05:4b:e6:9e:98:74:cf:12:f6:eb:cd:b6: a0:b3:4c:59:9d:67:b7:56:aa:66:6c:d5:dd:e5:1e:26:c7:2d: ad:fa:1b:70 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUfrR2ZG3s2m/r4EwK2QWdS4VQ17MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA1MTgwMzI5NDNaFw0yNzA1MTcwMzM0NDNaMDMxMTAvBgNV BAMTKDEwNkJFMzkxMDg1ODNGOTU5OTc0QTk3OTQyQTJEOEUzMUNBM0Q2OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFEl0V+MsgBW7sAZ35mgGqBcMQ YZgIL4ni6u1uEqoNGcuX3aYQ2ZHEQr4DiEL/MYf41QVBQjdhBOu2PlI9hH5xWShs NSIWfhC39HumQ24l7mXO/AkP9/zjMSslnUVCMKbktMwGnSAHzBRd7jo13DlO9yV5 fsYksDpov+0krXqHw1ymYjRtqLe5LWOGtrd3k03bFH8Ub0DbWBnBArv67Qnvdfu9 C9YvRtpDMB7eACWeuQiVQNjgpchEgsThuuSeGND6cwzwGu5hcWF6cNeoZ83otgA/ IMlcW1TMsXBi5Vl4S7Ilk7CBU6IlZ+9dUnBhpmD7OGeVGZnUDL5/asfRfTF/AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUEGvjkQhYP5WZdKl5QqLY4xyj1p8wHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzEzMzExMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBmAYIKwYBBQUHAQcBAf8EgYgwgYUw dAQCAAEwbgMDACqeAwQHO5cAAwQHO78AAwQCZ/eoMAwDBAd4hIADBAR4heADAwF4 hgMDAXz6MAsDAwG2rgMEBLav4AMDAbdUAwQDy8QAAwQF0k2AMAwDBAXTY6ADBAXT Y8AwCwMDANOXAwQF05gAAwQG05hAMA0EAgACMAcDBQAkA6IAMA0GCSqGSIb3DQEB CwUAA4IBAQAPxvIMbuBgS+pWGJx4xqBuTxJtI/SNHP+gWd9sLDhyZb9vcDV1XK/v Kg3f8RihjMSDVLYBXgIFlltl0zDm0u/Iyb0RusptHl3phBP5UYYlAsGau146/6SY VTBA+Q3DRXjzM5kRRSTK0yaAnewMrKwfw0JBjR7AHdu0ZF6sWkkmZHIHfWittuQS SE4Ri9XG+iP4cKU/WJ9qYOC5SrNip0qFWr6TF7QFDb4MqHS7yaRgPut17fnoKyoN qog65m5Ar7giem6F67rW83GhPvhUMq3Dp0z7qvuz/5iCONvmEzcFS+aemHTPEvbr zbags0xZnWe3VqpmbNXd5R4mxy2t+htw -----END CERTIFICATE-----Generated at Sat May 30 01:36:34 2026 by rpki-client