$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS138950.roa File: AS138950.roa (raw, json) Hash identifier: 7ICMiYl/IjsPpJzbcWBFmI2+SQd+D4pzZhR8Tlz7A+w= Subject key identifier: 1F:7D:86:11:63:09:81:21:4E:9C:25:A8:18:3C:19:8E:E4:84:25:D1 Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Certificate serial: 3ABACA792806814C996D20AC8EBED1347B06D7E3 Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS138950.roa Signing time: Mon 20 Apr 2026 05:05:15 +0000 ROA not before: Mon 20 Apr 2026 05:00:15 +0000 ROA not after: Mon 19 Apr 2027 05:05:15 +0000 asID: 138950 IP address blocks: 43.249.144.0/22 maxlen: 22 43.254.52.0/22 maxlen: 22 103.21.116.0/22 maxlen: 22 150.129.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ba:ca:79:28:06:81:4c:99:6d:20:ac:8e:be:d1:34:7b:06:d7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Validity Not Before: Apr 20 05:00:15 2026 GMT Not After : Apr 19 05:05:15 2027 GMT Subject: CN=1F7D8611630981214E9C25A8183C198EE48425D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:30:d6:76:25:4d:6b:df:33:b6:c0:6e:ca:69: 92:b4:99:50:65:88:b8:4e:13:bc:9a:d3:1a:96:81: 02:1b:94:c7:1c:2a:48:8b:5d:9e:b0:fa:6f:7a:82: 1a:81:f6:f6:ff:28:7b:cd:3b:48:6c:32:0d:8a:38: 80:c6:b9:06:89:d5:b5:00:2d:f0:92:10:e5:48:df: e1:e0:3b:09:09:3e:38:29:94:5a:4c:9f:82:74:86: 52:cb:8e:a1:3a:c9:01:38:ef:8b:2b:0a:ec:c2:5d: 1a:d7:3d:de:97:a8:93:6b:3a:bc:14:f1:94:9a:7b: 17:94:c4:a0:b1:07:77:dc:55:ce:97:36:cf:7c:3e: 74:7f:15:1b:61:5c:3b:6c:a8:53:5c:a4:ae:2a:cb: 4d:20:da:ee:82:50:c2:8a:ca:f0:c2:af:09:04:4a: 2e:e7:7f:a0:fd:a0:6d:a3:9a:fc:e9:d2:79:51:c0: ee:3d:7b:d8:f1:dc:8b:2b:a8:62:f8:b9:6a:26:b2: 44:b1:d5:5e:b6:73:c6:a6:e4:73:9a:f4:ac:62:b0: bf:75:37:6e:08:c9:f6:6d:22:fa:8d:b6:30:44:93: 35:d5:01:2c:aa:b6:39:cd:6c:08:2b:0f:67:72:9f: fa:0c:bb:7f:63:7a:b1:8f:7d:0f:10:cd:f9:b1:70: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7D:86:11:63:09:81:21:4E:9C:25:A8:18:3C:19:8E:E4:84:25:D1 X509v3 Authority Key Identifier: keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS138950.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.144.0/22 43.254.52.0/22 103.21.116.0/22 150.129.252.0/22 Signature Algorithm: sha256WithRSAEncryption 09:06:28:b6:55:ef:0c:55:38:21:2b:b6:b8:e3:1f:24:85:1b: 9e:eb:33:69:c6:38:60:00:e9:af:0e:f6:63:05:9d:5c:97:88: 7e:10:b4:24:2a:76:c2:e1:8e:5b:fb:7b:e9:1f:1e:9a:ab:58: 1c:77:ac:71:a3:e5:fd:72:82:85:6f:40:ec:4c:fb:70:a8:27: ee:a6:33:6f:37:b2:45:a1:2b:2e:6a:da:1f:40:51:fe:06:ae: a2:2c:d8:b2:9a:ba:a6:78:c4:a9:08:01:b7:3a:ea:4b:78:87: ab:92:14:51:4a:bd:fe:1b:67:9a:0b:d5:f4:2c:47:d0:67:01: 3e:58:a0:82:03:e3:b7:18:db:4d:d8:f4:9c:0c:9c:87:34:fc: d6:f7:83:42:1e:ba:af:65:87:55:62:03:9a:6b:2f:4d:f9:36: 31:6f:7d:50:3b:db:2b:36:e9:cc:74:20:1c:ed:d5:d3:10:8f: 47:fe:b0:5a:0f:64:f4:1a:a3:7f:69:8e:5c:88:a3:22:4f:e3: eb:94:f9:9f:d6:38:55:27:6a:e7:e7:85:5e:3f:1a:4b:40:40: fa:03:30:33:39:78:59:a9:81:4d:39:ad:6a:f6:73:86:a9:27: 30:48:8a:9f:2a:a2:96:f6:6d:a8:1d:dd:e0:17:17:04:15:ba: ae:6c:76:26 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUOrrKeSgGgUyZbSCsjr7RNHsG1+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy MjEwNjQyNjAeFw0yNjA0MjAwNTAwMTVaFw0yNzA0MTkwNTA1MTVaMDMxMTAvBgNV BAMTKDFGN0Q4NjExNjMwOTgxMjE0RTlDMjVBODE4M0MxOThFRTQ4NDI1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmMNZ2JU1r3zO2wG7KaZK0mVBl iLhOE7ya0xqWgQIblMccKkiLXZ6w+m96ghqB9vb/KHvNO0hsMg2KOIDGuQaJ1bUA LfCSEOVI3+HgOwkJPjgplFpMn4J0hlLLjqE6yQE474srCuzCXRrXPd6XqJNrOrwU 8ZSaexeUxKCxB3fcVc6XNs98PnR/FRthXDtsqFNcpK4qy00g2u6CUMKKyvDCrwkE Si7nf6D9oG2jmvzp0nlRwO49e9jx3IsrqGL4uWomskSx1V62c8am5HOa9KxisL91 N24IyfZtIvqNtjBEkzXVASyqtjnNbAgrD2dyn/oMu39jerGPfQ8QzfmxcBILAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUH32GEWMJgSFOnCWoGDwZjuSEJdEwHwYDVR0j BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwNjI5OTcxNjgxMzEvMC9BUzEzODk1MC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQC AAEwGAMEAiv5kAMEAiv+NAMEAmcVdAMEApaB/DANBgkqhkiG9w0BAQsFAAOCAQEA CQYotlXvDFU4ISu2uOMfJIUbnuszacY4YADprw72YwWdXJeIfhC0JCp2wuGOW/t7 6R8emqtYHHescaPl/XKChW9A7Ez7cKgn7qYzbzeyRaErLmraH0BR/gauoizYspq6 pnjEqQgBtzrqS3iHq5IUUUq9/htnmgvV9CxH0GcBPligggPjtxjbTdj0nAychzT8 1veDQh66r2WHVWIDmmsvTfk2MW99UDvbKzbpzHQgHO3V0xCPR/6wWg9k9Bqjf2mO XIijIk/j65T5n9Y4VSdq5+eFXj8aS0BA+gMwMzl4WamBTTmtavZzhqknMEiKnyqi lvZtqB3d4BcXBBW6rmx2Jg== -----END CERTIFICATE-----Generated at Mon Apr 20 14:59:54 2026 by rpki-client