$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137687.roa File: AS137687.roa (raw, json) Hash identifier: k4BGFgkaRDoilUAPvTNU3ruCguYZ6DRDvttND+TlxyI= Subject key identifier: 0A:2C:95:85:93:10:03:AF:3B:05:47:68:CD:C3:0B:A2:42:A6:05:7A Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 79914ECC36916F4F7E9C139A96FB2F5516B16E44 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137687.roa Signing time: Thu 21 May 2026 16:31:58 +0000 ROA not before: Thu 21 May 2026 16:26:58 +0000 ROA not after: Thu 20 May 2027 16:31:58 +0000 asID: 137687 IP address blocks: 36.99.249.0/24 maxlen: 24 36.99.250.0/24 maxlen: 24 36.99.251.0/24 maxlen: 24 240e:108:4a03::/48 maxlen: 48 240e:93c::/40 maxlen: 40 240e:93c:100::/40 maxlen: 40 240e:93c:10b::/48 maxlen: 48 240e:93c:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 06:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:91:4e:cc:36:91:6f:4f:7e:9c:13:9a:96:fb:2f:55:16:b1:6e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 21 16:26:58 2026 GMT Not After : May 20 16:31:58 2027 GMT Subject: CN=0A2C9585931003AF3B054768CDC30BA242A6057A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b8:0e:1c:a8:9c:e9:ff:89:2a:0f:d3:14:ee: 8d:85:85:9f:81:40:f3:59:19:ad:3c:55:93:17:25: 6b:91:8b:46:a1:ec:f8:c0:2d:56:57:02:5e:f1:47: cd:93:0d:fa:5c:2d:d0:8d:9a:d9:ff:1d:c2:04:7a: 71:11:52:f5:d8:4a:50:a1:b9:c0:09:39:1a:42:02: 02:38:42:7a:89:f8:a6:c3:aa:50:33:f4:d6:e3:d8: 98:54:75:bb:38:d6:d8:bb:91:bd:e3:5f:cb:76:70: e6:4e:c7:09:b0:2a:8d:49:16:28:a4:88:8e:d1:4d: 5e:d3:49:19:ae:07:03:91:f8:7f:0c:0c:39:96:de: 31:23:86:54:b6:c8:81:c3:a6:f0:ad:af:8b:82:a8: 86:10:5a:79:b2:34:5b:50:e2:db:57:8c:dc:e8:3a: 42:5e:32:b7:8c:e9:08:00:52:a5:11:41:24:e7:a0: 78:3c:43:11:47:6d:7c:b6:d0:a3:c0:d0:fc:ad:a6: 2a:c0:cf:e2:34:2f:77:50:b2:03:d2:d3:b7:40:63: b0:9d:ea:c0:4a:4e:de:90:26:ad:7d:25:47:18:bd: 4a:20:32:81:48:f2:95:e4:25:7e:53:e0:6a:86:c5: 76:de:22:b3:0f:38:cb:d9:b1:42:2e:0e:a1:3a:31: 7d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2C:95:85:93:10:03:AF:3B:05:47:68:CD:C3:0B:A2:42:A6:05:7A X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS137687.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.99.249.0-36.99.251.255 IPv6: 240e:108:4a03::/48 240e:93c::-240e:93c:2ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 08:e0:16:38:e4:ba:27:08:dd:e2:c9:3d:a8:55:9c:a1:db:7e: fb:4b:cc:f7:a1:d2:11:c3:44:f3:7b:f6:cb:11:fe:d9:2e:b5: a0:30:2e:4f:61:2e:f4:73:55:30:e5:ee:85:12:58:f3:33:b7: 9f:82:a6:7a:6f:58:41:ea:24:d2:c4:f3:0d:56:3c:9c:cb:87: 94:32:1d:47:ce:79:4f:94:83:ea:d3:d7:b7:32:84:f9:55:4e: 56:df:ff:63:e6:5a:b3:d3:9a:b5:a4:e5:2e:72:62:93:6a:a5: 0e:19:1b:7e:0f:c4:c0:cd:0e:01:a8:79:2b:96:8f:36:53:0c: 54:86:1d:ea:ad:bf:a4:ef:40:6f:28:35:a9:ff:07:38:67:bc: 60:62:40:4c:34:1c:f6:e1:d6:67:1b:1a:ca:60:c2:57:95:65: da:c0:1d:ed:03:b8:0e:c3:a5:f7:06:ea:30:8d:06:88:af:ea: 52:1e:44:94:99:cd:64:3e:0c:66:ad:72:4a:22:36:f4:b9:92: 51:2e:1e:29:c0:65:c0:e9:84:c5:ab:98:eb:27:88:8e:a1:ff: 80:83:da:4a:ca:67:47:57:67:bb:6f:77:db:9e:3d:e3:7b:28: a8:74:5e:f8:0c:37:c9:30:a9:df:bc:3b:ed:24:fa:8a:c0:ab: 04:17:7e:d3 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUeZFOzDaRb09+nBOalvsvVRaxbkQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyMTE2MjY1OFoX DTI3MDUyMDE2MzE1OFowMzExMC8GA1UEAxMoMEEyQzk1ODU5MzEwMDNBRjNCMDU0 NzY4Q0RDMzBCQTI0MkE2MDU3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALW4DhyonOn/iSoP0xTujYWFn4FA81kZrTxVkxcla5GLRqHs+MAtVlcCXvFH zZMN+lwt0I2a2f8dwgR6cRFS9dhKUKG5wAk5GkICAjhCeon4psOqUDP01uPYmFR1 uzjW2LuRveNfy3Zw5k7HCbAqjUkWKKSIjtFNXtNJGa4HA5H4fwwMOZbeMSOGVLbI gcOm8K2vi4KohhBaebI0W1Di21eM3Og6Ql4yt4zpCABSpRFBJOegeDxDEUdtfLbQ o8DQ/K2mKsDP4jQvd1CyA9LTt0BjsJ3qwEpO3pAmrX0lRxi9SiAygUjyleQlflPg aobFdt4isw84y9mxQi4OoToxffECAwEAAaOCAg4wggIKMB0GA1UdDgQWBBQKLJWF kxADrzsFR2jNwwuiQqYFejAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM3Njg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MEkGCCsGAQUFBwEHAQH/BDowODAUBAIAATAOMAwDBAAkY/kDBAIkY/gwIAQCAAIw GgMHACQOAQhKAzAPAwUCJA4JPAMGACQOCTwCMA0GCSqGSIb3DQEBCwUAA4IBAQAI 4BY45LonCN3iyT2oVZyh2377S8z3odIRw0Tze/bLEf7ZLrWgMC5PYS70c1Uw5e6F EljzM7efgqZ6b1hB6iTSxPMNVjycy4eUMh1HznlPlIPq09e3MoT5VU5W3/9j5lqz 05q1pOUucmKTaqUOGRt+D8TAzQ4BqHkrlo82UwxUhh3qrb+k70BvKDWp/wc4Z7xg YkBMNBz24dZnGxrKYMJXlWXawB3tA7gOw6X3BuowjQaIr+pSHkSUmc1kPgxmrXJK Ijb0uZJRLh4pwGXA6YTFq5jrJ4iOof+Ag9pKymdHV2e7b3fbnj3jeyiodF74DDfJ MKnfvDvtJPqKwKsEF37T -----END CERTIFICATE-----Generated at Sat May 23 07:08:25 2026 by rpki-client