$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS141679.roa File: AS141679.roa (raw, json) Hash identifier: +Dz+vmsU4Nyyvwcx+gRYUKBEeW5WRorKlfoJ/42yBPw= Subject key identifier: 57:AE:A1:14:F2:60:C1:7B:05:2A:36:22:07:55:AE:72:C1:09:1B:41 Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 4A44E89CD7776F514412A2FC0F5C4DF18B379E54 Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS141679.roa Signing time: Mon 08 Jun 2026 02:23:33 +0000 ROA not before: Mon 08 Jun 2026 02:18:33 +0000 ROA not after: Mon 07 Jun 2027 02:23:33 +0000 asID: 141679 IP address blocks: 42.158.0.0/16 maxlen: 32 58.83.128.0/17 maxlen: 32 59.151.0.0/17 maxlen: 32 59.191.0.0/17 maxlen: 32 103.247.168.0/22 maxlen: 32 120.132.128.0/17 maxlen: 32 120.133.0.0/17 maxlen: 32 120.134.0.0/15 maxlen: 32 124.250.0.0/16 maxlen: 32 124.251.0.0/16 maxlen: 32 182.174.0.0/16 maxlen: 32 182.175.0.0/17 maxlen: 32 182.175.128.0/18 maxlen: 32 182.175.192.0/19 maxlen: 32 182.175.224.0/20 maxlen: 32 183.84.0.0/15 maxlen: 32 203.196.0.0/21 maxlen: 32 210.77.128.0/19 maxlen: 32 211.99.160.0/19 maxlen: 32 211.99.192.0/19 maxlen: 32 211.151.0.0/16 maxlen: 32 211.152.0.0/19 maxlen: 32 211.152.64.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:44:e8:9c:d7:77:6f:51:44:12:a2:fc:0f:5c:4d:f1:8b:37:9e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: Jun 8 02:18:33 2026 GMT Not After : Jun 7 02:23:33 2027 GMT Subject: CN=57AEA114F260C17B052A36220755AE72C1091B41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:72:3e:60:f6:b1:58:84:eb:4f:df:ba:24: 09:f2:6f:de:01:48:33:4b:52:eb:af:34:d3:06:ed: 59:02:60:1f:e3:aa:03:76:a5:6f:d1:48:73:ca:10: 2b:36:eb:e0:9a:93:85:ca:0b:68:11:0d:f7:99:45: f6:92:8d:96:47:04:9f:bb:7e:c0:f2:61:4b:8d:4d: 9e:59:b5:4a:4c:5b:99:02:98:27:0c:79:18:e1:42: 81:81:86:01:a0:70:87:c5:eb:66:ad:c7:05:75:72: 38:65:66:a7:55:51:4b:87:79:41:6f:7f:29:3c:8f: c6:fc:56:fc:d3:ae:f1:45:d4:32:be:80:b1:51:65: bc:6a:d7:54:fc:11:6e:03:ba:6b:5e:38:c5:91:2d: dc:b5:12:b0:fb:25:33:6c:e2:25:f2:75:c9:b2:d3: 5c:a1:57:8b:1a:da:20:56:35:9c:99:71:7f:71:32: e2:03:f1:fa:35:e9:9c:85:36:19:d6:79:b9:7b:e0: d0:07:8f:9c:e6:e7:71:cb:7c:00:fa:af:55:14:e3: 61:de:1d:4f:32:66:97:11:9b:9e:91:ab:36:e2:c6: 54:86:f6:8a:4d:4b:56:84:15:ae:44:f2:59:b3:e4: 08:a0:ee:ae:97:6d:56:b9:ff:a2:60:cb:39:2d:b9: 19:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AE:A1:14:F2:60:C1:7B:05:2A:36:22:07:55:AE:72:C1:09:1B:41 X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS141679.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.158.0.0/16 58.83.128.0/17 59.151.0.0/17 59.191.0.0/17 103.247.168.0/22 120.132.128.0-120.133.127.255 120.134.0.0/15 124.250.0.0/15 182.174.0.0-182.175.239.255 183.84.0.0/15 203.196.0.0/21 210.77.128.0/19 211.99.160.0-211.99.223.255 211.151.0.0-211.152.31.255 211.152.64.0/18 Signature Algorithm: sha256WithRSAEncryption b4:98:9a:6d:a1:03:13:f9:d5:59:bd:72:e8:aa:a3:1d:e8:54: db:f6:eb:bc:31:e1:a0:b2:e9:60:2f:58:05:69:0d:3c:0d:1e: 05:f6:39:5e:bb:18:c8:70:77:f6:41:c6:c3:58:02:68:32:a5: bb:41:b4:0b:9b:09:1d:bb:dc:7d:d8:76:00:f0:90:5a:df:84: f1:4e:52:62:a9:9e:c0:24:1d:eb:0e:1b:a8:93:a8:fa:c1:be: e0:35:99:1a:ef:59:a4:b1:18:27:01:73:a2:e5:ac:b2:6f:9e: 84:cd:2d:3b:fd:1e:c7:ac:d0:50:c9:56:fd:80:55:3e:05:e8: f6:d0:4c:f6:89:ee:5a:99:f2:61:54:8c:05:35:5f:0a:64:05: 1a:c6:64:8d:9f:8b:db:4a:fe:f1:d2:4e:18:43:dd:a8:a0:4b: e3:1e:87:ff:f8:59:53:41:be:b9:dd:8e:46:54:b1:da:35:0f: 6d:a8:57:da:d9:0c:1f:1e:ab:9b:d2:33:3a:40:66:e0:8e:d9: 96:bb:c3:69:13:bd:58:88:88:ca:d9:18:22:a4:4a:d8:e8:68: 72:f6:4d:23:16:dd:5f:09:67:49:c0:79:7d:4b:52:20:25:3f: 68:1c:26:ff:0c:5c:3b:c2:9d:fe:70:af:b1:ba:1f:f2:f9:b4: b8:8d:f2:32 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUSkTonNd3b1FEEqL8D1xN8Ys3nlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA2MDgwMjE4MzNaFw0yNzA2MDcwMjIzMzNaMDMxMTAvBgNV BAMTKDU3QUVBMTE0RjI2MEMxN0IwNTJBMzYyMjA3NTVBRTcyQzEwOTFCNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Y3I+YPaxWITrT9+6JAnyb94B SDNLUuuvNNMG7VkCYB/jqgN2pW/RSHPKECs26+Cak4XKC2gRDfeZRfaSjZZHBJ+7 fsDyYUuNTZ5ZtUpMW5kCmCcMeRjhQoGBhgGgcIfF62atxwV1cjhlZqdVUUuHeUFv fyk8j8b8VvzTrvFF1DK+gLFRZbxq11T8EW4DumteOMWRLdy1ErD7JTNs4iXydcmy 01yhV4sa2iBWNZyZcX9xMuID8fo16ZyFNhnWebl74NAHj5zm53HLfAD6r1UU42He HU8yZpcRm56RqzbixlSG9opNS1aEFa5E8lmz5Aig7q6XbVa5/6JgyzktuRk1AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUV66hFPJgwXsFKjYiB1WucsEJG0EwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzE0MTY3OS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBjQYIKwYBBQUHAQcBAf8EfjB8MHoE AgABMHQDAwAqngMEBzpTgAMEBzuXAAMEBzu/AAMEAmf3qDAMAwQHeISAAwQHeIUA AwMBeIYDAwF8+jALAwMBtq4DBAS2r+ADAwG3VAMEA8vEAAMEBdJNgDAMAwQF02Og AwQF02PAMAsDAwDTlwMEBdOYAAMEBtOYQDANBgkqhkiG9w0BAQsFAAOCAQEAtJia baEDE/nVWb1y6KqjHehU2/brvDHhoLLpYC9YBWkNPA0eBfY5XrsYyHB39kHGw1gC aDKlu0G0C5sJHbvcfdh2APCQWt+E8U5SYqmewCQd6w4bqJOo+sG+4DWZGu9ZpLEY JwFzouWssm+ehM0tO/0ex6zQUMlW/YBVPgXo9tBM9onuWpnyYVSMBTVfCmQFGsZk jZ+L20r+8dJOGEPdqKBL4x6H//hZU0G+ud2ORlSx2jUPbahX2tkMHx6rm9IzOkBm 4I7ZlrvDaRO9WIiIytkYIqRK2OhocvZNIxbdXwlnScB5fUtSICU/aBwm/wxcO8Kd /nCvsbof8vm0uI3yMg== -----END CERTIFICATE-----Generated at Fri Jun 12 02:40:50 2026 by rpki-client