$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139721.roa File: AS139721.roa (raw, json) Hash identifier: drIwOEG+sr7m1/uWxpU5rVn7GNz8D+YQmtGfybayoHA= Subject key identifier: 70:8B:4D:B7:28:5B:2A:73:DE:A2:F7:90:57:5F:78:EE:7C:0D:B8:3C Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 423C942558788A88B03DA0BA3480DB7BA3E4129B Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139721.roa Signing time: Thu 21 May 2026 16:03:15 +0000 ROA not before: Thu 21 May 2026 15:58:15 +0000 ROA not after: Thu 20 May 2027 16:03:15 +0000 asID: 139721 IP address blocks: 240e:6:d800::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 06:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3c:94:25:58:78:8a:88:b0:3d:a0:ba:34:80:db:7b:a3:e4:12:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 21 15:58:15 2026 GMT Not After : May 20 16:03:15 2027 GMT Subject: CN=708B4DB7285B2A73DEA2F790575F78EE7C0DB83C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:be:95:ec:eb:6b:09:1d:73:31:0a:b3:27: 5f:09:75:99:89:02:6c:de:f9:49:7e:c6:1d:ef:d8: 91:e1:2e:20:f7:c3:41:e5:13:08:36:b6:f7:40:22: 25:d3:c5:a1:d8:ce:ae:cd:69:42:4f:02:4a:34:90: 21:c3:23:af:79:75:53:70:a6:a7:4b:dd:14:6b:70: 2a:98:70:30:82:66:e5:ab:a4:a6:b2:e0:91:48:31: a4:ff:8c:49:5f:81:a7:9a:ca:df:0e:00:69:f3:a0: e3:fc:6f:a9:af:b7:96:fd:ef:4b:e6:bb:b1:dc:d0: e7:3c:b6:fa:42:5f:44:35:97:cb:0b:6b:0f:9e:ac: 81:0b:bd:ac:fd:8b:4f:02:7d:1f:08:b2:f8:ba:e8: fa:ce:67:ff:fa:2b:12:79:7c:bc:6b:c9:91:cb:9a: 84:ec:40:e2:36:f0:72:d2:dd:2a:60:3b:17:0b:e1: 2d:4d:d1:58:e2:f5:ab:96:73:c4:dd:8c:0f:96:ae: 99:67:88:87:2f:d3:55:49:34:98:98:a4:3b:bc:6d: f9:ed:b6:2d:15:eb:54:35:b0:4a:fc:e8:1a:e4:76: bc:04:1f:da:88:ea:1b:75:94:8e:93:55:98:1a:c5: 96:21:88:db:a8:da:16:fc:7d:b8:c4:ab:1a:9b:f8: 6f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8B:4D:B7:28:5B:2A:73:DE:A2:F7:90:57:5F:78:EE:7C:0D:B8:3C X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139721.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:6:d800::/44 Signature Algorithm: sha256WithRSAEncryption 2c:2e:81:45:f1:99:dd:fb:29:3c:5f:c0:be:73:3d:81:55:87: ba:ad:fb:66:48:43:3c:b5:12:67:ce:f8:d3:f8:57:e8:11:b9: 1f:b0:8c:d1:ee:d2:20:9a:f1:fe:41:24:22:ca:23:33:84:36: 3e:85:d3:dc:24:86:5a:7c:1c:57:fa:f5:2e:6b:01:b0:29:e3: ae:2f:86:f9:9b:7e:47:06:a1:97:3b:d2:92:64:79:58:e2:f1: af:5c:15:73:92:04:0d:ff:02:b7:f2:d4:6e:fd:e5:4e:dc:66: dd:de:21:3e:dc:2c:ed:ad:9a:57:28:4d:f8:32:7c:05:0e:b5: ec:67:a9:e8:51:7b:e5:11:7f:ba:f8:57:b3:24:ea:80:d7:ca: d9:27:44:cf:07:1e:d0:f2:a9:93:cf:c1:6f:03:74:13:ad:76: 5b:2d:a0:0a:05:15:49:29:dc:87:9f:f6:cb:83:0c:64:28:4f: 43:a4:93:ec:46:6f:b4:56:f4:59:65:94:3a:9d:d9:f2:6e:86: 2e:29:46:cd:ef:a5:a8:2b:8d:c1:11:d4:ac:d0:75:80:a4:d8: 1b:6c:ed:2a:e5:85:a1:ef:52:86:f4:a7:38:78:b4:05:1d:01: 8b:5b:35:d8:be:86:b9:c1:b5:48:94:74:7a:0f:a2:61:15:ac: 8c:49:f5:d0 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUQjyUJVh4ioiwPaC6NIDbe6PkEpswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyMTE1NTgxNVoX DTI3MDUyMDE2MDMxNVowMzExMC8GA1UEAxMoNzA4QjREQjcyODVCMkE3M0RFQTJG NzkwNTc1Rjc4RUU3QzBEQjgzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0evpXs62sJHXMxCrMnXwl1mYkCbN75SX7GHe/YkeEuIPfDQeUTCDa290Ai JdPFodjOrs1pQk8CSjSQIcMjr3l1U3Cmp0vdFGtwKphwMIJm5aukprLgkUgxpP+M SV+Bp5rK3w4AafOg4/xvqa+3lv3vS+a7sdzQ5zy2+kJfRDWXywtrD56sgQu9rP2L TwJ9Hwiy+Lro+s5n//orEnl8vGvJkcuahOxA4jbwctLdKmA7FwvhLU3RWOL1q5Zz xN2MD5aumWeIhy/TVUk0mJikO7xt+e22LRXrVDWwSvzoGuR2vAQf2ojqG3WUjpNV mBrFliGI26jaFvx9uMSrGpv4b6sCAwEAAaOCAecwggHjMB0GA1UdDgQWBBRwi023 KFsqc96i95BXX3jufA24PDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM5NzIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJA4ABtgAMA0GCSqGSIb3DQEB CwUAA4IBAQAsLoFF8Znd+yk8X8C+cz2BVYe6rftmSEM8tRJnzvjT+FfoEbkfsIzR 7tIgmvH+QSQiyiMzhDY+hdPcJIZafBxX+vUuawGwKeOuL4b5m35HBqGXO9KSZHlY 4vGvXBVzkgQN/wK38tRu/eVO3Gbd3iE+3CztrZpXKE34MnwFDrXsZ6noUXvlEX+6 +FezJOqA18rZJ0TPBx7Q8qmTz8FvA3QTrXZbLaAKBRVJKdyHn/bLgwxkKE9DpJPs Rm+0VvRZZZQ6ndnyboYuKUbN76WoK43BEdSs0HWApNgbbO0q5YWh71KG9Kc4eLQF HQGLWzXYvoa5wbVIlHR6D6JhFayMSfXQ -----END CERTIFICATE-----Generated at Sat May 23 07:08:25 2026 by rpki-client