$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS139887.roa File: AS139887.roa (raw, json) Hash identifier: HDCjHLc51eYxBpG16liw1CPZPfJENeW/M+CCHxizFU0= Subject key identifier: F8:E8:74:AF:9C:7A:25:07:C0:AD:D8:1D:F5:68:3A:1C:EE:E8:B3:ED Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 60F23BF147554A52B7C9DDEAE3ED2A88E3547F11 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS139887.roa Signing time: Tue 16 Jun 2026 17:54:06 +0000 ROA not before: Tue 16 Jun 2026 17:49:06 +0000 ROA not after: Tue 15 Jun 2027 17:54:06 +0000 asID: 139887 IP address blocks: 144.123.24.0/24 maxlen: 24 144.123.25.0/24 maxlen: 24 144.123.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f2:3b:f1:47:55:4a:52:b7:c9:dd:ea:e3:ed:2a:88:e3:54:7f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Jun 16 17:49:06 2026 GMT Not After : Jun 15 17:54:06 2027 GMT Subject: CN=F8E874AF9C7A2507C0ADD81DF5683A1CEEE8B3ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:65:8e:72:f8:b8:e6:07:e0:d7:45:b3:04: 8c:ee:69:ff:87:62:db:4a:4d:17:98:fe:03:de:79: c5:78:35:0d:ac:39:4c:ae:99:9b:c3:fb:be:38:95: 65:46:1b:1b:3b:b6:4a:4e:92:06:e5:89:b2:60:cb: de:ea:5d:f9:6a:3f:14:fa:76:f4:36:72:be:dc:7b: 16:a3:0c:8c:6b:97:1d:83:b5:15:5d:d7:72:a5:46: 67:67:d1:3e:d3:99:60:8a:d9:fd:61:1d:6d:71:4e: 00:f0:92:4e:27:9e:67:05:9b:ae:17:28:55:56:12: 75:6f:52:c2:81:fe:ca:40:28:cd:8c:83:fc:7f:14: d8:c5:81:22:ae:ab:1f:f3:55:b8:32:6c:4e:31:ff: b4:22:5d:7e:df:9a:2a:f0:f7:09:85:d9:73:78:f4: 00:bc:79:2c:9f:6b:3e:1b:ea:df:6e:16:02:58:62: ec:25:62:75:d1:bd:3d:d6:1b:d7:44:7d:8b:cb:9b: b4:84:39:66:9e:93:c1:bd:14:2f:c7:2a:ac:b2:52: a3:3e:6a:cf:e9:84:11:61:b7:fb:02:f5:9a:48:9e: 49:04:bb:a5:58:e1:a1:cc:5a:00:fa:a3:e2:d9:03: f3:4e:ec:df:85:ff:00:90:de:32:31:f2:f6:63:13: 03:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E8:74:AF:9C:7A:25:07:C0:AD:D8:1D:F5:68:3A:1C:EE:E8:B3:ED X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS139887.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.123.24.0/23 144.123.31.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:17:ca:ea:c5:ed:cc:2d:b4:6b:08:f9:4d:2d:db:f4:70:f2: 17:82:9f:4e:b2:d9:f8:1b:3a:42:1d:cb:44:85:c6:96:bb:a9: 13:96:c9:ec:88:fd:62:8c:c1:60:8b:c7:1b:01:c2:24:9f:f3: cd:01:f6:b7:1b:77:61:ea:fc:c6:5e:17:0f:42:cc:7f:7d:7c: 59:26:75:06:cf:60:a3:2d:60:fd:e1:cc:57:c2:b1:a4:f7:3e: 3a:0e:bc:e7:1a:06:a4:c6:16:f1:b8:ce:a8:00:5f:04:b3:a5: 79:0d:ef:dd:b6:3a:9d:38:d6:4e:5f:0d:39:2e:b5:69:c3:2a: c6:fc:2c:60:f2:c8:af:82:41:63:f8:13:26:37:23:6d:e4:28: 11:4c:8d:6e:b0:45:99:f6:dc:73:36:bc:c0:29:12:82:44:3b: 4e:a2:87:ca:e3:40:b6:4e:15:df:2c:69:83:dd:95:c2:9b:62: 6d:2e:d9:64:b1:c3:c8:b0:0e:72:69:06:ea:42:51:28:be:5f: 6e:fd:1a:73:17:10:d6:ea:fb:8f:0c:0d:d2:82:ae:65:d6:da: ec:ee:30:b0:29:11:6d:8c:52:ee:5b:fd:4c:5d:7d:23:c6:a8: f0:b9:b4:06:24:7b:ee:a7:8f:ba:d6:75:15:d1:bc:f8:40:cd: d2:7d:c1:64 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUYPI78UdVSlK3yd3q4+0qiONUfxEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYxNjE3NDkwNloX DTI3MDYxNTE3NTQwNlowMzExMC8GA1UEAxMoRjhFODc0QUY5QzdBMjUwN0MwQURE ODFERjU2ODNBMUNFRUU4QjNFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+BZY5y+LjmB+DXRbMEjO5p/4di20pNF5j+A955xXg1Daw5TK6Zm8P7vjiV ZUYbGzu2Sk6SBuWJsmDL3upd+Wo/FPp29DZyvtx7FqMMjGuXHYO1FV3XcqVGZ2fR PtOZYIrZ/WEdbXFOAPCSTieeZwWbrhcoVVYSdW9SwoH+ykAozYyD/H8U2MWBIq6r H/NVuDJsTjH/tCJdft+aKvD3CYXZc3j0ALx5LJ9rPhvq324WAlhi7CViddG9PdYb 10R9i8ubtIQ5Zp6Twb0UL8cqrLJSoz5qz+mEEWG3+wL1mkieSQS7pVjhocxaAPqj 4tkD807s34X/AJDeMjHy9mMTA2ECAwEAAaOCAeowggHmMB0GA1UdDgQWBBT46HSv nHolB8Ct2B31aDoc7uiz7TAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8wL0FTMTM5ODg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBkHsYAwQAkHsfMA0GCSqGSIb3 DQEBCwUAA4IBAQBbF8rqxe3MLbRrCPlNLdv0cPIXgp9Ostn4GzpCHctEhcaWu6kT lsnsiP1ijMFgi8cbAcIkn/PNAfa3G3dh6vzGXhcPQsx/fXxZJnUGz2CjLWD94cxX wrGk9z46DrznGgakxhbxuM6oAF8Es6V5De/dtjqdONZOXw05LrVpwyrG/Cxg8siv gkFj+BMmNyNt5CgRTI1usEWZ9txzNrzAKRKCRDtOoofK40C2ThXfLGmD3ZXCm2Jt LtlkscPIsA5yaQbqQlEovl9u/RpzFxDW6vuPDA3Sgq5l1trs7jCwKRFtjFLuW/1M XX0jxqjwubQGJHvup4+61nUV0bz4QM3SfcFk -----END CERTIFICATE-----Generated at Wed Jul 15 00:54:36 2026 by rpki-client