$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS18244.roa File: AS18244.roa (raw, json) Hash identifier: 5yJK4ELO+Ql7zMnruxm9AyXZ6E0mJAXs2fYYGtt7U6s= Subject key identifier: 4F:0F:89:96:4C:AA:05:8C:BA:4C:40:FE:80:9F:71:02:35:D8:79:F2 Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 6FC232A3B950E40A8718D5E5F07604603D14E4B8 Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS18244.roa Signing time: Mon 18 May 2026 03:18:17 +0000 ROA not before: Mon 18 May 2026 03:13:17 +0000 ROA not after: Mon 17 May 2027 03:18:17 +0000 asID: 18244 IP address blocks: 120.132.128.0/17 maxlen: 32 120.133.240.0/20 maxlen: 32 211.148.17.0/24 maxlen: 32 211.148.18.0/23 maxlen: 32 211.148.20.0/22 maxlen: 32 211.148.24.0/23 maxlen: 32 211.148.27.0/24 maxlen: 32 211.148.28.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c2:32:a3:b9:50:e4:0a:87:18:d5:e5:f0:76:04:60:3d:14:e4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: May 18 03:13:17 2026 GMT Not After : May 17 03:18:17 2027 GMT Subject: CN=4F0F89964CAA058CBA4C40FE809F710235D879F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:71:b9:e4:37:56:b0:bf:72:d8:11:1d:cd: 76:98:91:94:7e:bc:90:9b:ae:3b:c6:52:31:f5:81: 5d:48:35:d1:b6:19:dc:f8:7f:87:fe:c3:91:d7:7f: de:5c:42:91:f9:77:0e:80:db:05:28:aa:5b:c9:33: 5b:b5:cf:a9:ac:68:00:95:b3:a0:8c:0f:ca:86:fd: 30:6c:d5:0c:17:20:2d:56:c9:dc:eb:c4:00:ec:b6: 5c:b1:45:0a:57:db:89:71:68:a2:3c:bb:33:30:ce: ac:69:45:83:dc:38:1d:3e:35:ad:80:11:fc:65:86: 2e:c0:19:fc:b1:d4:4d:ae:f8:83:82:29:44:f4:90: 39:af:df:0b:23:ba:4b:a5:cc:be:bd:30:41:4e:33: 8d:ab:c9:f8:83:a6:53:e1:7f:ed:8f:d4:c9:1d:af: ee:5a:f0:a4:dc:51:cc:f5:45:1e:e2:84:ba:e9:a7: 6e:02:35:d0:be:57:e6:bc:95:dd:26:c0:89:47:84: 3e:5d:32:23:44:ed:f5:85:2a:14:37:2e:d3:3d:1b: ad:7c:12:95:b2:93:d2:57:7e:0a:fe:df:db:bb:93: a5:f8:b1:3b:47:b9:4e:e2:c3:3f:6b:66:34:c4:52: 76:e3:4b:37:df:98:8a:fe:5a:ce:a4:f0:34:79:1d: 48:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0F:89:96:4C:AA:05:8C:BA:4C:40:FE:80:9F:71:02:35:D8:79:F2 X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS18244.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.132.128.0/17 120.133.240.0/20 211.148.17.0-211.148.25.255 211.148.27.0-211.148.31.255 Signature Algorithm: sha256WithRSAEncryption 6c:51:93:dd:b6:e1:b3:6f:d4:d7:8a:aa:4f:48:ba:6d:3b:62: 14:7b:e7:02:4f:74:7e:75:96:86:04:93:7f:7e:a6:03:d5:6b: a5:79:0d:c4:f3:54:83:a0:dc:f2:ce:d9:76:85:3e:7d:27:5e: 08:9f:87:9c:8a:8d:3a:3a:62:02:4c:02:55:7d:8a:bf:95:90: 56:9c:5b:9c:3e:56:f4:bc:20:91:48:62:d1:28:31:e8:f4:55: e2:4d:dc:82:5b:b0:df:06:c8:7d:01:8f:e5:29:a1:9a:95:59: f7:02:0a:cd:a1:63:f7:57:2c:05:c2:0f:9b:c6:a8:aa:1e:dd: 33:b8:5d:6d:0c:63:31:5e:d8:f7:97:7b:72:29:be:89:93:f5: 9e:0c:b3:f8:e3:68:fc:ca:66:27:eb:a6:6d:28:d7:93:7d:3f: 9d:7c:97:55:87:9e:82:95:26:95:b9:8c:49:0a:65:6a:5e:bc: cb:18:00:88:15:d9:e3:00:13:2a:56:21:72:68:a3:11:b4:7b: 08:cd:7e:79:ce:78:33:74:0b:ea:3d:9c:9a:ed:83:6c:77:bb: 63:ff:04:cc:6c:00:f7:e9:b7:cc:b8:7a:39:0e:b9:ef:1c:95: 6c:a4:d7:d8:cc:ca:fb:12:f7:36:f4:13:81:6d:5c:90:b8:4c: 8c:65:6e:6d -----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgIUb8Iyo7lQ5AqHGNXl8HYEYD0U5LgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA1MTgwMzEzMTdaFw0yNzA1MTcwMzE4MTdaMDMxMTAvBgNV BAMTKDRGMEY4OTk2NENBQTA1OENCQTRDNDBGRTgwOUY3MTAyMzVEODc5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkjXG55DdWsL9y2BEdzXaYkZR+ vJCbrjvGUjH1gV1INdG2Gdz4f4f+w5HXf95cQpH5dw6A2wUoqlvJM1u1z6msaACV s6CMD8qG/TBs1QwXIC1WydzrxADstlyxRQpX24lxaKI8uzMwzqxpRYPcOB0+Na2A Efxlhi7AGfyx1E2u+IOCKUT0kDmv3wsjukulzL69MEFOM42ryfiDplPhf+2P1Mkd r+5a8KTcUcz1RR7ihLrpp24CNdC+V+a8ld0mwIlHhD5dMiNE7fWFKhQ3LtM9G618 EpWyk9JXfgr+39u7k6X4sTtHuU7iwz9rZjTEUnbjSzffmIr+Ws6k8DR5HUgXAgMB AAGjggIFMIICATAdBgNVHQ4EFgQUTw+JlkyqBYy6TED+gJ9xAjXYefIwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzE4MjQ0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIA ATAoAwQHeISAAwQEeIXwMAwDBADTlBEDBAHTlBgwDAMEANOUGwMEBdOUADANBgkq hkiG9w0BAQsFAAOCAQEAbFGT3bbhs2/U14qqT0i6bTtiFHvnAk90fnWWhgSTf36m A9VrpXkNxPNUg6Dc8s7ZdoU+fSdeCJ+HnIqNOjpiAkwCVX2Kv5WQVpxbnD5W9Lwg kUhi0Sgx6PRV4k3cgluw3wbIfQGP5SmhmpVZ9wIKzaFj91csBcIPm8aoqh7dM7hd bQxjMV7Y95d7cim+iZP1ngyz+ONo/MpmJ+umbSjXk30/nXyXVYeegpUmlbmMSQpl al68yxgAiBXZ4wATKlYhcmijEbR7CM1+ec54M3QL6j2cmu2DbHe7Y/8EzGwA9+m3 zLh6OQ657xyVbKTX2MzK+xL3NvQTgW1ckLhMjGVubQ== -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:40 2026 by rpki-client