$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136200.roa File: AS136200.roa (raw, json) Hash identifier: zxJA3igndPMiaN3okv95aYrS0DI6ow/KUluM4yeRde4= Subject key identifier: DE:C4:F1:E4:2F:87:50:6E:15:7E:57:FE:5A:50:09:6C:5C:23:B3:23 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 7AFFD1C736AC64A5724A7DE978448C4DCFDA3F81 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136200.roa Signing time: Tue 16 Jun 2026 16:16:09 +0000 ROA not before: Tue 16 Jun 2026 16:11:09 +0000 ROA not after: Tue 15 Jun 2027 16:16:09 +0000 asID: 136200 IP address blocks: 59.39.60.0/22 maxlen: 22 183.63.40.0/22 maxlen: 22 240e:108:4043::/48 maxlen: 48 240e:108:4843::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 04:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ff:d1:c7:36:ac:64:a5:72:4a:7d:e9:78:44:8c:4d:cf:da:3f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 16 16:11:09 2026 GMT Not After : Jun 15 16:16:09 2027 GMT Subject: CN=DEC4F1E42F87506E157E57FE5A50096C5C23B323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ed:26:34:1c:2c:5f:6e:65:d2:cd:19:06:56: 2f:46:63:cf:fd:99:8c:f2:14:ff:04:81:62:95:dc: b2:72:b8:ab:15:c9:c5:db:ae:f0:73:ae:35:68:fb: 0d:cf:93:65:91:04:20:d2:49:2c:50:fa:36:b9:91: 14:bc:c9:9b:d7:fa:ef:df:2d:a1:ad:61:11:d4:25: 57:d9:1e:9c:2a:b8:ad:32:04:78:4e:7d:57:0f:ee: 02:f3:30:c3:ac:24:f9:50:bb:66:68:bf:a1:03:c5: de:7f:c2:4b:c3:21:44:8f:eb:68:90:82:d2:db:45: cc:78:04:f4:79:c7:e0:cd:8c:27:83:ad:6f:d0:14: 3c:5f:e7:89:27:57:d3:eb:93:46:24:90:72:cc:b6: b1:6c:2b:8a:ab:67:6c:77:0c:b5:8d:4b:23:de:98: 09:cb:a6:95:64:d7:2f:95:ab:84:b8:24:2d:32:f3: 40:19:10:ea:02:46:70:0e:86:27:1f:fc:d5:80:72: 8c:6b:7e:20:c3:c3:64:4a:29:9c:4a:d5:d9:53:bc: b0:55:92:96:22:14:d9:be:4a:4c:75:6c:e5:e8:e6: 92:9c:5b:21:10:27:38:ff:a6:f2:cd:22:5c:e1:ae: ba:20:20:5b:dc:70:e0:f2:bf:78:07:d9:ba:9f:ff: 36:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C4:F1:E4:2F:87:50:6E:15:7E:57:FE:5A:50:09:6C:5C:23:B3:23 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS136200.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.39.60.0/22 183.63.40.0/22 IPv6: 240e:108:4043::/48 240e:108:4843::/48 Signature Algorithm: sha256WithRSAEncryption 90:3a:f0:b6:1e:5b:f0:3b:7f:f6:00:81:b6:12:6b:db:57:01: 9a:fe:ce:a0:94:81:15:25:c9:34:93:45:44:20:fe:e8:13:8e: eb:a2:f2:30:a9:1a:06:23:26:20:20:f2:06:8b:4b:8e:ca:a3: 53:79:6d:42:b2:86:21:ed:bb:5c:53:63:8d:3a:f1:94:b0:c2: 91:6e:53:15:43:16:a9:0a:4b:64:da:e9:5d:eb:fa:81:12:62: 85:91:2c:97:62:94:8b:08:03:09:42:76:2d:1f:2e:51:48:0f: 13:2a:68:6d:23:23:83:e8:75:70:a1:5b:a8:ce:46:33:1b:8e: 7d:c4:8d:d6:ab:38:6c:6b:46:ca:9e:bf:33:d7:ae:57:68:ca: 34:da:84:da:d6:63:8d:8f:5e:ee:4e:4e:37:c4:88:19:fe:c5: 04:e4:83:02:77:ac:7a:1d:29:2d:43:39:60:5e:51:58:bc:6f: ab:a3:64:1a:ee:58:03:aa:54:cb:69:ae:e0:9f:1d:66:f4:16: a5:98:98:ed:6f:8c:36:cd:95:6c:4e:a6:5a:b9:0a:bc:05:81: 88:35:9a:b3:ed:d1:75:4b:b2:bd:3e:0a:ae:56:20:64:c1:80: 9f:6c:47:6d:3a:d6:81:47:65:6d:df:54:23:6a:64:76:83:dc: 88:22:a0:ca -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUev/RxzasZKVySn3peESMTc/aP4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxNjE2MTEwOVoX DTI3MDYxNTE2MTYwOVowMzExMC8GA1UEAxMoREVDNEYxRTQyRjg3NTA2RTE1N0U1 N0ZFNUE1MDA5NkM1QzIzQjMyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOvtJjQcLF9uZdLNGQZWL0Zjz/2ZjPIU/wSBYpXcsnK4qxXJxduu8HOuNWj7 Dc+TZZEEINJJLFD6NrmRFLzJm9f6798toa1hEdQlV9kenCq4rTIEeE59Vw/uAvMw w6wk+VC7Zmi/oQPF3n/CS8MhRI/raJCC0ttFzHgE9HnH4M2MJ4Otb9AUPF/niSdX 0+uTRiSQcsy2sWwriqtnbHcMtY1LI96YCcumlWTXL5WrhLgkLTLzQBkQ6gJGcA6G Jx/81YByjGt+IMPDZEopnErV2VO8sFWSliIU2b5KTHVs5ejmkpxbIRAnOP+m8s0i XOGuuiAgW9xw4PK/eAfZup//NkMCAwEAAaOCAgQwggIAMB0GA1UdDgQWBBTexPHk L4dQbhV+V/5aUAlsXCOzIzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM2MjAwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQCOyc8AwQCtz8oMBgEAgACMBID BwAkDgEIQEMDBwAkDgEISEMwDQYJKoZIhvcNAQELBQADggEBAJA68LYeW/A7f/YA gbYSa9tXAZr+zqCUgRUlyTSTRUQg/ugTjuui8jCpGgYjJiAg8gaLS47Ko1N5bUKy hiHtu1xTY4068ZSwwpFuUxVDFqkKS2Ta6V3r+oESYoWRLJdilIsIAwlCdi0fLlFI DxMqaG0jI4PodXChW6jORjMbjn3EjdarOGxrRsqevzPXrldoyjTahNrWY42PXu5O TjfEiBn+xQTkgwJ3rHodKS1DOWBeUVi8b6ujZBruWAOqVMtpruCfHWb0FqWYmO1v jDbNlWxOplq5CrwFgYg1mrPt0XVLsr0+Cq5WIGTBgJ9sR2061oFHZW3fVCNqZHaD 3IgioMo= -----END CERTIFICATE-----Generated at Tue Jul 7 15:56:40 2026 by rpki-client