$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS133775.roa File: AS133775.roa (raw, json) Hash identifier: KQC0NT/Wn83Bp9fqkbR3E2q2ApnfJ7XJPbE8L6z3O5I= Subject key identifier: 7C:F7:19:75:F7:E2:9C:1E:58:9B:04:B6:C1:91:A4:58:57:44:31:5F Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 1C96D7EB29827499D50A03C0323CC52D4720E35A Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS133775.roa Signing time: Tue 16 Jun 2026 17:54:06 +0000 ROA not before: Tue 16 Jun 2026 17:49:06 +0000 ROA not after: Tue 15 Jun 2027 17:54:06 +0000 asID: 133775 IP address blocks: 140.237.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:96:d7:eb:29:82:74:99:d5:0a:03:c0:32:3c:c5:2d:47:20:e3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Jun 16 17:49:06 2026 GMT Not After : Jun 15 17:54:06 2027 GMT Subject: CN=7CF71975F7E29C1E589B04B6C191A4585744315F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:65:98:f5:69:0e:7f:42:7b:09:f2:f8:fa:39: 85:50:3a:ed:1f:29:0c:4c:c0:83:48:67:26:ba:dc: 70:24:27:ca:f8:42:2e:07:a6:95:e7:e5:3a:bf:38: 96:92:d7:59:bf:df:8c:52:34:0f:e6:17:28:dd:68: 97:fc:d1:92:3c:09:17:ef:ef:9f:63:a4:95:ec:81: 9e:c9:b9:39:c7:d1:13:fc:c7:c9:62:47:76:58:d7: c6:ee:17:bb:a2:2d:5b:65:25:28:39:8b:4d:66:19: d1:0a:94:26:12:bd:7c:b8:27:b6:01:e1:db:b8:f7: 96:bc:fb:69:a7:62:3c:af:c9:03:12:d4:64:83:14: 1f:95:81:11:1c:c8:ba:e1:55:46:6b:0d:da:d5:29: b3:65:f8:b1:d6:5d:66:43:d5:00:e4:9a:e8:ce:70: ca:94:51:fd:74:57:f5:80:11:bb:1b:9a:34:37:05: 7f:85:d2:75:56:ba:97:57:ec:88:39:80:85:36:59: ec:d9:93:a4:d8:9e:20:83:d8:02:c3:81:b4:5d:05: e5:72:99:e2:df:f6:d3:75:75:49:ba:10:5a:42:e9: 2f:49:d3:1c:bb:bb:13:19:ea:15:c6:fd:e0:db:96: 0d:3c:ef:bd:eb:67:04:20:f2:0a:05:64:60:86:39: 82:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F7:19:75:F7:E2:9C:1E:58:9B:04:B6:C1:91:A4:58:57:44:31:5F X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS133775.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.237.73.0/24 Signature Algorithm: sha256WithRSAEncryption 72:2e:2d:28:3c:92:35:f5:21:70:ae:d7:c2:44:3c:cf:f0:d4: a8:9b:7e:8d:ea:57:5c:b5:ce:ab:02:9b:40:6d:69:7d:71:da: da:b9:59:2c:9d:68:3a:29:0f:6e:2b:db:1d:9e:73:da:b0:ee: b6:7e:28:3e:62:a1:65:4f:39:11:ac:aa:77:f8:0d:2d:fb:53: 3c:2b:09:2f:5a:18:59:6d:43:af:31:cf:1e:22:17:9c:65:38: bd:3f:bf:b8:1d:77:73:d0:0c:f4:8f:2f:e9:94:f8:86:39:50: e6:ce:73:cb:cf:2f:6a:81:83:c9:81:d2:98:81:05:0f:78:ba: a4:cb:dc:e4:56:ac:a3:31:27:50:84:df:09:94:ac:69:2c:de: a1:fb:b0:be:0d:dd:48:1c:9b:30:26:31:9d:f8:44:b1:15:16: 64:0e:a8:e1:90:51:c1:57:5d:96:26:55:02:72:22:2a:bf:eb: ff:0c:4d:79:78:00:24:97:4e:dc:ec:95:71:a6:75:16:81:50: 38:72:fd:6b:45:cb:3f:56:f6:3b:ab:ad:02:ef:03:e9:3d:95: cf:b0:ea:31:cf:22:e1:01:c9:65:f5:32:d3:36:77:11:79:f8: a9:e1:28:e9:92:f4:57:96:f5:77:23:d9:f4:ba:0c:d2:20:4b: 48:47:b9:83 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUHJbX6ymCdJnVCgPAMjzFLUcg41owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYxNjE3NDkwNloX DTI3MDYxNTE3NTQwNlowMzExMC8GA1UEAxMoN0NGNzE5NzVGN0UyOUMxRTU4OUIw NEI2QzE5MUE0NTg1NzQ0MzE1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhlmPVpDn9Cewny+Po5hVA67R8pDEzAg0hnJrrccCQnyvhCLgemleflOr84 lpLXWb/fjFI0D+YXKN1ol/zRkjwJF+/vn2OkleyBnsm5OcfRE/zHyWJHdljXxu4X u6ItW2UlKDmLTWYZ0QqUJhK9fLgntgHh27j3lrz7aadiPK/JAxLUZIMUH5WBERzI uuFVRmsN2tUps2X4sdZdZkPVAOSa6M5wypRR/XRX9YARuxuaNDcFf4XSdVa6l1fs iDmAhTZZ7NmTpNieIIPYAsOBtF0F5XKZ4t/203V1SboQWkLpL0nTHLu7ExnqFcb9 4NuWDTzvvetnBCDyCgVkYIY5gh8CAwEAAaOCAeQwggHgMB0GA1UdDgQWBBR89xl1 9+KcHlibBLbBkaRYV0QxXzAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8wL0FTMTMzNzc1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjO1JMA0GCSqGSIb3DQEBCwUA A4IBAQByLi0oPJI19SFwrtfCRDzP8NSom36N6ldctc6rAptAbWl9cdrauVksnWg6 KQ9uK9sdnnPasO62fig+YqFlTzkRrKp3+A0t+1M8KwkvWhhZbUOvMc8eIhecZTi9 P7+4HXdz0Az0jy/plPiGOVDmznPLzy9qgYPJgdKYgQUPeLqky9zkVqyjMSdQhN8J lKxpLN6h+7C+Dd1IHJswJjGd+ESxFRZkDqjhkFHBV12WJlUCciIqv+v/DE15eAAk l07c7JVxpnUWgVA4cv1rRcs/VvY7q60C7wPpPZXPsOoxzyLhAcll9TLTNncRefip 4SjpkvRXlvV3I9n0ugzSIEtIR7mD -----END CERTIFICATE-----Generated at Wed Jul 15 00:54:36 2026 by rpki-client