$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134775.roa File: AS134775.roa (raw, json) Hash identifier: Du04Ql3ORZeKa66xo7q0NfhhkSK34g7iVOZfZYtBGxQ= Subject key identifier: 48:CC:D2:B5:DB:46:19:7A:A6:78:DE:8B:13:C8:7E:8E:2A:E9:D4:A0 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 45ECD7B27F1D86D2E54E5E270F229D3306FEBF30 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134775.roa Signing time: Tue 16 Jun 2026 16:02:25 +0000 ROA not before: Tue 16 Jun 2026 15:57:25 +0000 ROA not after: Tue 15 Jun 2027 16:02:25 +0000 asID: 134775 IP address blocks: 121.12.252.0/24 maxlen: 24 240e:108:404a::/48 maxlen: 48 240e:108:484a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 04:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ec:d7:b2:7f:1d:86:d2:e5:4e:5e:27:0f:22:9d:33:06:fe:bf:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 16 15:57:25 2026 GMT Not After : Jun 15 16:02:25 2027 GMT Subject: CN=48CCD2B5DB46197AA678DE8B13C87E8E2AE9D4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:38:dd:a8:b1:73:c4:fc:f0:ca:4c:72:5e: db:65:72:2f:16:9f:d4:fd:7d:4f:f5:d1:76:20:e8: 93:8a:29:b6:02:b5:17:b8:d2:2f:ad:e9:38:bf:03: 35:35:82:e0:8f:f2:f2:43:67:71:f7:04:08:64:ef: af:a2:f2:fe:4b:1c:b4:eb:b2:cd:30:c3:bb:e5:76: d4:14:11:6f:00:ef:4c:82:d6:95:48:65:0b:04:e0: 10:e7:b4:55:c3:ea:f3:50:c8:a7:96:f8:5e:1b:f8: b6:96:e2:2e:1d:8c:b4:37:4f:e1:38:0d:28:c3:61: fc:ae:9b:46:bf:54:01:bd:64:05:a1:d4:d3:1a:22: c5:fb:56:b7:03:71:23:65:a0:4a:20:52:da:0a:b7: 91:03:b1:33:0a:57:60:ee:cf:c5:2e:13:5b:79:ba: 89:e6:d7:5d:ef:9d:b4:c7:3b:49:a6:e4:05:e6:f6: c2:68:3f:88:e8:ed:3e:bb:6c:45:b7:e0:b9:ee:20: ea:09:4a:8e:93:06:3e:39:42:fa:04:43:c6:ea:0c: c1:ab:bf:a2:b3:16:94:e2:1a:35:ac:4e:28:4d:bb: 7a:03:35:ee:4c:61:a5:c0:81:8e:d7:d2:da:3d:3b: 44:1b:92:f9:aa:94:fd:52:2e:5f:d2:d0:aa:3f:53: 3d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CC:D2:B5:DB:46:19:7A:A6:78:DE:8B:13:C8:7E:8E:2A:E9:D4:A0 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134775.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.12.252.0/24 IPv6: 240e:108:404a::/48 240e:108:484a::/48 Signature Algorithm: sha256WithRSAEncryption 70:81:68:95:7f:9a:68:0f:d1:c6:42:ec:b1:18:f8:29:4f:19: 21:14:bf:6c:6a:82:80:c0:81:32:f8:2e:e4:74:0f:20:6b:d8: 39:19:e6:83:a9:c6:a5:56:28:9e:ba:a9:c3:c3:82:ca:e8:c6: de:80:98:07:26:55:19:f7:de:67:1d:49:a2:32:15:68:a5:89: bb:eb:62:47:56:d6:5c:03:ec:38:c3:c9:b8:92:c3:90:91:2b: 18:8a:38:64:fe:38:13:b4:19:95:e7:9d:e1:4c:35:df:23:00: 2f:be:09:76:7b:de:24:fa:1e:bc:cd:70:39:c6:1b:c5:0e:d9: 40:79:f2:22:81:d3:c0:f4:ac:d7:03:f9:75:d9:12:12:ff:35: 43:b1:09:45:14:d1:5e:02:9e:15:64:27:e2:82:10:3f:e7:ca: 6c:87:eb:85:a6:7f:01:50:c3:52:bd:88:81:36:ef:a0:2d:15: 77:6c:b3:88:7b:95:9b:6d:60:a5:49:8d:c3:36:1a:26:44:5b: 2c:2b:af:54:ac:f5:c1:c1:93:af:94:9b:6d:93:65:53:24:56: e0:9e:45:13:78:f2:82:10:e3:98:39:a1:e3:bf:72:82:e3:1a: e4:7e:d2:c0:b9:d0:85:ab:cd:a5:b3:57:9d:be:81:3d:38:dc: 61:bb:55:50 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIURezXsn8dhtLlTl4nDyKdMwb+vzAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxNjE1NTcyNVoX DTI3MDYxNTE2MDIyNVowMzExMC8GA1UEAxMoNDhDQ0QyQjVEQjQ2MTk3QUE2NzhE RThCMTNDODdFOEUyQUU5RDRBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZjON2osXPE/PDKTHJe22VyLxaf1P19T/XRdiDok4optgK1F7jSL63pOL8D NTWC4I/y8kNncfcECGTvr6Ly/ksctOuyzTDDu+V21BQRbwDvTILWlUhlCwTgEOe0 VcPq81DIp5b4Xhv4tpbiLh2MtDdP4TgNKMNh/K6bRr9UAb1kBaHU0xoixftWtwNx I2WgSiBS2gq3kQOxMwpXYO7PxS4TW3m6iebXXe+dtMc7SabkBeb2wmg/iOjtPrts Rbfgue4g6glKjpMGPjlC+gRDxuoMwau/orMWlOIaNaxOKE27egM17kxhpcCBjtfS 2j07RBuS+aqU/VIuX9LQqj9TPZUCAwEAAaOCAf4wggH6MB0GA1UdDgQWBBRIzNK1 20YZeqZ43osTyH6OKunUoDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM0Nzc1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAeQz8MBgEAgACMBIDBwAkDgEI QEoDBwAkDgEISEowDQYJKoZIhvcNAQELBQADggEBAHCBaJV/mmgP0cZC7LEY+ClP GSEUv2xqgoDAgTL4LuR0DyBr2DkZ5oOpxqVWKJ66qcPDgsroxt6AmAcmVRn33mcd SaIyFWilibvrYkdW1lwD7DjDybiSw5CRKxiKOGT+OBO0GZXnneFMNd8jAC++CXZ7 3iT6HrzNcDnGG8UO2UB58iKB08D0rNcD+XXZEhL/NUOxCUUU0V4CnhVkJ+KCED/n ymyH64WmfwFQw1K9iIE276AtFXdss4h7lZttYKVJjcM2GiZEWywrr1Ss9cHBk6+U m22TZVMkVuCeRRN48oIQ45g5oeO/coLjGuR+0sC50IWrzaWzV52+gT043GG7VVA= -----END CERTIFICATE-----Generated at Tue Jul 7 15:58:20 2026 by rpki-client