$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS38370.roa File: AS38370.roa (raw, json) Hash identifier: r67f/FHpksh2pXDDienni8fvzhcRro11FYuwh2hDxos= Subject key identifier: 31:08:BB:66:DD:E1:01:AF:AD:44:0D:72:5D:58:67:37:40:5F:89:E1 Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Certificate serial: 35E032343FF534B49827C4A2B20CA9119230AE8B Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS38370.roa Signing time: Wed 27 May 2026 07:20:00 +0000 ROA not before: Wed 27 May 2026 07:15:00 +0000 ROA not after: Wed 26 May 2027 07:20:00 +0000 asID: 38370 IP address blocks: 121.46.128.0/22 maxlen: 22 121.46.132.0/22 maxlen: 22 121.46.136.0/22 maxlen: 22 121.46.140.0/22 maxlen: 22 121.46.144.0/22 maxlen: 22 121.46.148.0/22 maxlen: 22 121.46.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 14:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e0:32:34:3f:f5:34:b4:98:27:c4:a2:b2:0c:a9:11:92:30:ae:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Validity Not Before: May 27 07:15:00 2026 GMT Not After : May 26 07:20:00 2027 GMT Subject: CN=3108BB66DDE101AFAD440D725D586737405F89E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:e7:41:8c:bb:5c:a3:9c:ea:2d:bf:ea:a3: f5:16:8b:6f:a7:ca:26:88:25:c5:e9:7f:9c:5a:33: 24:53:a5:2b:11:e5:1c:66:07:2c:de:44:c2:e3:f4: ac:0e:cc:ee:f1:3b:ad:7d:d6:54:b3:85:d7:68:e3: e9:e2:a8:5a:bc:53:9f:27:23:8d:ac:c1:8b:1c:6b: 57:60:4b:e5:e3:50:81:db:75:b5:22:50:9e:b4:7b: 20:86:b4:8a:0b:47:f0:c3:70:e8:4f:2e:b5:08:8d: e7:ba:9e:69:48:58:fb:a3:82:0a:78:25:f4:c5:96: 32:bd:3c:6d:47:fd:e9:a3:0a:75:57:a8:09:b7:30: bf:cd:ca:e3:36:a4:f1:a3:c9:eb:74:25:e2:a3:de: b6:93:1f:d4:62:01:f4:7a:91:17:25:e2:78:08:0c: db:f6:99:ff:93:91:31:26:83:e0:29:0b:fa:05:ec: 67:2c:b3:c3:f5:12:90:82:77:42:a7:cc:bd:cd:1a: 66:b9:0a:3b:f3:7c:e7:af:6a:26:3e:4a:e5:8d:20: e8:89:22:5a:4d:d7:ff:1c:e2:cf:8f:08:8a:61:e1: 03:76:7a:98:82:ab:97:51:a7:a1:5c:52:95:8b:b0: dc:c6:59:a1:70:75:15:0e:91:d5:47:5c:76:e0:57: 7b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:08:BB:66:DD:E1:01:AF:AD:44:0D:72:5D:58:67:37:40:5F:89:E1 X509v3 Authority Key Identifier: keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS38370.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.128.0-121.46.155.255 Signature Algorithm: sha256WithRSAEncryption c5:ae:0e:05:56:f6:5c:51:14:42:a6:1b:e3:f5:15:e9:ba:c3: d3:27:19:98:b0:09:0b:97:4c:d3:3e:32:1e:b8:90:a7:9e:7e: da:b6:25:da:3f:ae:ae:6b:60:51:8b:e3:5a:93:8f:74:e5:62: 98:5d:c6:30:cc:b8:ef:70:01:6d:7f:65:64:ac:f0:5c:e3:a0: 54:51:be:d4:a1:70:ed:04:54:c8:4b:cf:e8:fc:bc:f6:b9:ee: 45:da:1b:3c:74:8b:63:b9:02:9a:be:2a:5a:97:c0:40:aa:79: f6:97:be:5d:c4:1d:70:2e:2a:bf:8f:d9:f5:31:fe:8d:12:b6: 9e:d6:56:b4:fd:7c:1f:8b:61:2d:d0:28:80:40:56:20:43:d7: bb:75:1b:d7:0c:14:4f:fb:5b:25:7d:2d:6d:51:76:8b:19:38: 22:c1:2d:78:d2:9e:ff:c8:d6:53:b8:af:9b:89:e7:4d:b3:30: c0:2c:25:ba:2c:9b:4b:ac:ed:da:24:ba:dd:fe:3a:32:62:ef: c1:c1:32:40:45:ad:47:21:8b:3b:34:aa:e5:9d:4e:f4:4e:11: 6e:68:03:6b:b1:36:46:69:7a:b1:ba:cc:0f:35:84:b5:3f:1d: 69:72:43:df:78:00:5a:1d:ae:fb:ce:8e:30:50:b3:95:c3:b2: a2:5b:9e:7e -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUNeAyND/1NLSYJ8SisgypEZIwroswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD MUE4NjlFNjAeFw0yNjA1MjcwNzE1MDBaFw0yNzA1MjYwNzIwMDBaMDMxMTAvBgNV BAMTKDMxMDhCQjY2RERFMTAxQUZBRDQ0MEQ3MjVENTg2NzM3NDA1Rjg5RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpo+dBjLtco5zqLb/qo/UWi2+n yiaIJcXpf5xaMyRTpSsR5RxmByzeRMLj9KwOzO7xO6191lSzhddo4+niqFq8U58n I42swYsca1dgS+XjUIHbdbUiUJ60eyCGtIoLR/DDcOhPLrUIjee6nmlIWPujggp4 JfTFljK9PG1H/emjCnVXqAm3ML/NyuM2pPGjyet0JeKj3raTH9RiAfR6kRcl4ngI DNv2mf+TkTEmg+ApC/oF7Gcss8P1EpCCd0KnzL3NGma5CjvzfOevaiY+SuWNIOiJ IlpN1/8c4s+PCIph4QN2epiCq5dRp6FcUpWLsNzGWaFwdRUOkdVHXHbgV3vhAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUMQi7Zt3hAa+tRA1yXVhnN0BfieEwHwYDVR0j BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0 MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNzUzMzA3NzczNTAxNDYvMC9BUzM4MzcwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIA ATAOMAwDBAd5LoADBAJ5LpgwDQYJKoZIhvcNAQELBQADggEBAMWuDgVW9lxRFEKm G+P1Fem6w9MnGZiwCQuXTNM+Mh64kKeeftq2Jdo/rq5rYFGL41qTj3TlYphdxjDM uO9wAW1/ZWSs8FzjoFRRvtShcO0EVMhLz+j8vPa57kXaGzx0i2O5Apq+KlqXwECq efaXvl3EHXAuKr+P2fUx/o0Stp7WVrT9fB+LYS3QKIBAViBD17t1G9cMFE/7WyV9 LW1RdosZOCLBLXjSnv/I1lO4r5uJ502zMMAsJbosm0us7dokut3+OjJi78HBMkBF rUchizs0quWdTvROEW5oA2uxNkZperG6zA81hLU/HWlyQ994AFodrvvOjjBQs5XD sqJbnn4= -----END CERTIFICATE-----Generated at Fri Jun 12 04:55:48 2026 by rpki-client