$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136167.roa File: AS136167.roa (raw, json) Hash identifier: dqVbM0dfV07bFJeVBZV5C11dx6s9456gMWQ2yj1wQaY= Subject key identifier: 60:79:79:9D:6D:2A:04:0B:9D:98:D9:32:BE:B0:5B:9A:2A:6C:A5:CF Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 788BB976F4EACAC8AA608F893757CB9BF4244AA8 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136167.roa Signing time: Wed 29 Jul 2026 16:31:59 +0000 ROA not before: Wed 29 Jul 2026 16:26:59 +0000 ROA not after: Wed 28 Jul 2027 16:31:59 +0000 asID: 136167 IP address blocks: 203.223.17.0/24 maxlen: 24 203.223.18.0/24 maxlen: 24 203.223.19.0/24 maxlen: 24 203.223.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 22:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8b:b9:76:f4:ea:ca:c8:aa:60:8f:89:37:57:cb:9b:f4:24:4a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jul 29 16:26:59 2026 GMT Not After : Jul 28 16:31:59 2027 GMT Subject: CN=6079799D6D2A040B9D98D932BEB05B9A2A6CA5CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3f:96:06:3b:05:e9:74:f0:1a:f3:ab:f0:77: 65:bf:b9:44:87:1d:99:ad:ee:53:e3:15:fd:90:f8: 28:f0:7a:36:41:0e:9e:ad:18:40:e4:f2:b7:77:07: de:4f:8e:0e:20:84:da:fe:f4:4a:ea:26:50:24:62: d7:14:0f:45:25:67:79:f5:23:0e:cc:81:8e:41:60: 0c:10:63:87:5f:8b:76:03:b3:81:4a:6f:15:fa:48: e2:8d:f9:56:95:82:4f:5e:a4:b9:31:c4:ca:c4:11: 7c:e4:3c:b2:19:0a:c2:b0:2a:4e:f4:63:c8:a2:c5: d1:0a:f1:39:c7:4e:4d:d2:31:4b:23:06:36:33:23: 6b:6a:58:38:ee:c1:c7:f3:fd:61:46:f9:c9:75:20: 06:d2:61:a3:20:3f:31:37:01:ba:0f:76:0f:da:61: 2c:29:7e:39:13:62:3e:b4:c9:6f:6c:37:a0:56:49: 52:06:94:43:7a:00:21:43:9b:0c:bb:81:84:17:2d: 2d:01:12:da:ca:d0:f5:2e:2e:da:0b:c7:76:69:61: e2:10:62:92:4d:40:ef:30:61:a3:48:5a:c1:0a:e3: 18:e5:86:1d:ea:bf:a0:c4:36:39:e6:b0:bf:c3:86: 44:78:44:09:ac:62:20:4c:5b:68:4d:ec:54:26:2d: da:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:79:79:9D:6D:2A:04:0B:9D:98:D9:32:BE:B0:5B:9A:2A:6C:A5:CF X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136167.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.223.17.0-203.223.20.255 Signature Algorithm: sha256WithRSAEncryption 19:a2:42:c2:ad:2c:28:6a:b2:cf:7f:e2:17:e7:89:4e:c2:1f: 96:c0:af:b1:83:b4:f5:9a:77:d7:2a:a4:4e:f3:2b:75:1e:1a: 33:2f:33:5e:ba:1e:7a:a8:fc:9a:ed:6d:aa:8c:7c:30:58:a8: 26:55:d3:b4:11:6b:88:9c:0d:d1:a8:f3:f3:ba:e0:46:73:10: c1:30:39:aa:f6:e0:0a:00:d9:7e:42:27:e4:ee:53:e4:a7:7c: 70:fc:c2:56:d7:72:5f:a9:67:94:98:46:8a:c0:e0:1c:6c:9f: 6b:f0:89:fe:2f:9d:7e:df:bc:b5:05:30:73:09:31:47:13:50: dc:74:18:6c:5c:10:da:7b:03:ad:44:be:56:3a:ec:13:2b:38: 54:fe:f6:ce:96:4b:84:54:11:10:c6:e5:9d:c6:69:d2:5c:17: 89:dc:8d:8a:52:85:6c:77:7f:e7:64:c5:64:d4:f5:7d:de:bd: 39:ef:c9:20:da:fb:54:7f:ba:7c:49:06:7f:64:2c:bc:34:e9: 38:80:7e:e2:12:35:24:25:aa:3e:4e:2c:c2:95:bb:9d:55:72: 55:12:62:9e:3f:7f:6c:d3:72:69:13:80:5c:74:df:e7:5b:3f: e0:58:9f:89:ee:a4:ea:be:19:df:63:e9:bc:12:22:f8:f2:3a: 94:b1:54:cc -----BEGIN CERTIFICATE----- MIIE+TCCA+GgAwIBAgIUeIu5dvTqysiqYI+JN1fLm/QkSqgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDcyOTE2MjY1OVoX DTI3MDcyODE2MzE1OVowMzExMC8GA1UEAxMoNjA3OTc5OUQ2RDJBMDQwQjlEOThE OTMyQkVCMDVCOUEyQTZDQTVDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANo/lgY7Bel08Brzq/B3Zb+5RIcdma3uU+MV/ZD4KPB6NkEOnq0YQOTyt3cH 3k+ODiCE2v70SuomUCRi1xQPRSVnefUjDsyBjkFgDBBjh1+LdgOzgUpvFfpI4o35 VpWCT16kuTHEysQRfOQ8shkKwrAqTvRjyKLF0QrxOcdOTdIxSyMGNjMja2pYOO7B x/P9YUb5yXUgBtJhoyA/MTcBug92D9phLCl+ORNiPrTJb2w3oFZJUgaUQ3oAIUOb DLuBhBctLQES2srQ9S4u2gvHdmlh4hBikk1A7zBho0hawQrjGOWGHeq/oMQ2Oeaw v8OGRHhECaxiIExbaE3sVCYt2ikCAwEAAaOCAewwggHoMB0GA1UdDgQWBBRgeXmd bSoEC52Y2TK+sFuaKmylzzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM2MTY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADL3xEDBADL3xQwDQYJKoZI hvcNAQELBQADggEBABmiQsKtLChqss9/4hfniU7CH5bAr7GDtPWad9cqpE7zK3Ue GjMvM166Hnqo/JrtbaqMfDBYqCZV07QRa4icDdGo8/O64EZzEMEwOar24AoA2X5C J+TuU+SnfHD8wlbXcl+pZ5SYRorA4Bxsn2vwif4vnX7fvLUFMHMJMUcTUNx0GGxc ENp7A61EvlY67BMrOFT+9s6WS4RUERDG5Z3GadJcF4ncjYpShWx3f+dkxWTU9X3e vTnvySDa+1R/unxJBn9kLLw06TiAfuISNSQlqj5OLMKVu51VclUSYp4/f2zTcmkT gFx03+dbP+BYn4nupOq+Gd9j6bwSIvjyOpSxVMw= -----END CERTIFICATE-----Generated at Sat Aug 22 03:40:23 2026 by rpki-client