$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS4134.roa File: AS4134.roa (raw, json) Hash identifier: pbBEiZBvdlrzSkUwoE6zC9388fVOYjGShgHk6XRCmy8= Subject key identifier: 35:48:F4:98:50:D1:74:D7:42:8E:70:78:EF:BA:F7:52:E7:C1:DE:4C Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Certificate serial: 30647155DE3C140AE2B8C431BC15E84637EC5CC0 Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS4134.roa Signing time: Wed 27 May 2026 07:20:00 +0000 ROA not before: Wed 27 May 2026 07:15:00 +0000 ROA not after: Wed 26 May 2027 07:20:00 +0000 asID: 4134 IP address blocks: 121.46.0.0/22 maxlen: 22 121.46.4.0/22 maxlen: 22 121.46.8.0/22 maxlen: 22 121.46.12.0/22 maxlen: 22 121.46.16.0/22 maxlen: 22 121.46.20.0/22 maxlen: 22 121.46.24.0/22 maxlen: 22 121.46.28.0/22 maxlen: 22 121.46.128.0/22 maxlen: 22 121.46.132.0/22 maxlen: 22 121.46.136.0/22 maxlen: 22 121.46.140.0/22 maxlen: 22 121.46.144.0/22 maxlen: 22 121.46.148.0/22 maxlen: 22 121.46.152.0/22 maxlen: 22 121.46.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 14:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:64:71:55:de:3c:14:0a:e2:b8:c4:31:bc:15:e8:46:37:ec:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Validity Not Before: May 27 07:15:00 2026 GMT Not After : May 26 07:20:00 2027 GMT Subject: CN=3548F49850D174D7428E7078EFBAF752E7C1DE4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:51:2d:c6:61:a0:1e:00:a1:4e:a1:ad:ed:e6: a2:d4:17:91:bd:71:7f:3e:01:b0:07:aa:67:fa:5a: 74:a7:6c:65:ea:3e:a2:1a:4c:2e:71:ba:53:e5:84: 58:4b:bd:63:2d:b1:af:8a:0d:6e:8c:1c:26:d5:2b: 5f:2c:8c:b7:5c:2f:8e:01:5d:52:64:76:b0:c8:16: 99:a0:68:c4:4c:a9:5f:9d:4a:12:b5:34:dc:7e:fe: 41:32:d8:2a:f4:1e:80:82:80:7d:d7:cf:86:8a:19: c9:97:c1:1b:93:8f:92:ec:0f:4f:bc:8d:5f:07:d4: c0:c1:57:d7:12:16:11:ff:ab:df:7c:94:ee:7e:78: 2e:61:2c:a2:15:c4:d9:5c:84:0d:81:8a:6f:4d:50: d2:95:06:76:2c:3a:1f:a1:92:d6:6f:85:64:68:d2: 52:9f:0c:19:32:c2:9e:d7:d6:1a:86:e6:d8:6b:d5: 84:86:98:4f:26:03:94:40:e9:03:7e:80:cc:24:2d: 6d:cf:68:ea:26:3e:5a:7d:5a:3b:0f:e3:54:bb:43: 8f:bc:56:cb:4e:6a:91:aa:df:02:c4:73:79:bb:da: 33:ca:c6:4d:28:ed:52:66:ca:04:88:75:fb:c1:3b: 68:97:6a:40:9b:11:8a:90:74:ac:13:d7:33:1e:53: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:48:F4:98:50:D1:74:D7:42:8E:70:78:EF:BA:F7:52:E7:C1:DE:4C X509v3 Authority Key Identifier: keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS4134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.0.0/19 121.46.128.0/19 Signature Algorithm: sha256WithRSAEncryption be:8e:ba:58:bf:8a:22:43:84:a8:88:c8:5f:f8:d4:59:d0:8c: c7:ec:c6:b9:0d:fd:b9:9a:24:05:c3:57:ea:c4:26:33:ee:ec: a0:b1:7a:39:a3:a1:33:ed:75:e0:b4:7b:a7:e7:98:b5:ff:e0: 1a:81:f4:2c:06:a8:0d:6d:ec:a6:00:2d:50:9a:ec:7a:bf:9a: 50:ee:32:b2:10:8f:6a:0a:2a:0a:33:69:9c:54:91:ef:31:81: 65:85:6e:f1:ba:4a:fe:1b:1b:b6:db:f2:ad:77:c4:cb:29:5a: f3:5d:ee:d5:55:a6:da:2d:8d:eb:3b:47:62:29:20:ab:df:d0: 4c:e4:8b:02:49:49:c8:06:ff:60:04:ae:ce:e7:74:55:fe:b5: 59:c2:36:f4:a0:be:52:56:9d:dc:71:a6:0a:f7:e6:fe:d7:b6: 8f:fa:17:37:83:4d:12:23:7a:95:ce:3f:ec:c4:ce:67:75:58: 8e:6a:d2:5f:a4:59:78:f0:59:74:7d:75:2f:a2:82:a0:a2:2c: fa:d1:e0:5f:43:35:ac:ac:89:2d:dd:2b:8e:2f:3f:a2:52:a8: 2b:49:13:7f:70:22:e2:0c:f3:d3:9d:3f:60:9c:94:ea:6d:7c: 29:da:6d:6c:a9:4a:63:d2:19:d7:ad:20:6c:57:7a:f4:25:42: 75:da:28:94 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUMGRxVd48FAriuMQxvBXoRjfsXMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD MUE4NjlFNjAeFw0yNjA1MjcwNzE1MDBaFw0yNzA1MjYwNzIwMDBaMDMxMTAvBgNV BAMTKDM1NDhGNDk4NTBEMTc0RDc0MjhFNzA3OEVGQkFGNzUyRTdDMURFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjUS3GYaAeAKFOoa3t5qLUF5G9 cX8+AbAHqmf6WnSnbGXqPqIaTC5xulPlhFhLvWMtsa+KDW6MHCbVK18sjLdcL44B XVJkdrDIFpmgaMRMqV+dShK1NNx+/kEy2Cr0HoCCgH3Xz4aKGcmXwRuTj5LsD0+8 jV8H1MDBV9cSFhH/q998lO5+eC5hLKIVxNlchA2Bim9NUNKVBnYsOh+hktZvhWRo 0lKfDBkywp7X1hqG5thr1YSGmE8mA5RA6QN+gMwkLW3PaOomPlp9WjsP41S7Q4+8 VstOapGq3wLEc3m72jPKxk0o7VJmygSIdfvBO2iXakCbEYqQdKwT1zMeU/WbAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUNUj0mFDRdNdCjnB477r3UufB3kwwHwYDVR0j BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0 MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNzUzMzA3NzczNTAxNDYvMC9BUzQxMzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgAB MAwDBAV5LgADBAV5LoAwDQYJKoZIhvcNAQELBQADggEBAL6Ouli/iiJDhKiIyF/4 1FnQjMfsxrkN/bmaJAXDV+rEJjPu7KCxejmjoTPtdeC0e6fnmLX/4BqB9CwGqA1t 7KYALVCa7Hq/mlDuMrIQj2oKKgozaZxUke8xgWWFbvG6Sv4bG7bb8q13xMspWvNd 7tVVptotjes7R2IpIKvf0EzkiwJJScgG/2AErs7ndFX+tVnCNvSgvlJWndxxpgr3 5v7Xto/6FzeDTRIjepXOP+zEzmd1WI5q0l+kWXjwWXR9dS+igqCiLPrR4F9DNays iS3dK44vP6JSqCtJE39wIuIM89OdP2CclOptfCnabWypSmPSGdetIGxXevQlQnXa KJQ= -----END CERTIFICATE-----Generated at Fri Jun 12 02:40:50 2026 by rpki-client