$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS151823.roa File: AS151823.roa (raw, json) Hash identifier: kvG3DrVAhalacaEHIMUHDPU07nvbED0yPJQLYyhzOn0= Subject key identifier: 99:69:03:88:8A:F7:07:83:B3:F4:7A:E3:86:1C:E4:D2:A3:0F:AA:3D Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 4C33DF96F98083459BA38DF9270C823EEB71B82E Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS151823.roa Signing time: Thu 21 May 2026 16:22:19 +0000 ROA not before: Thu 21 May 2026 16:17:19 +0000 ROA not after: Thu 20 May 2027 16:22:19 +0000 asID: 151823 IP address blocks: 240e:106:aa00::/39 maxlen: 39 240e:982:9b00::/40 maxlen: 40 240e:982:9d00::/40 maxlen: 40 240e:982:9e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 06:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:33:df:96:f9:80:83:45:9b:a3:8d:f9:27:0c:82:3e:eb:71:b8:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 21 16:17:19 2026 GMT Not After : May 20 16:22:19 2027 GMT Subject: CN=996903888AF70783B3F47AE3861CE4D2A30FAA3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:e8:7c:53:8c:ca:90:48:e2:ce:ef:74:e1: 6c:80:f0:cb:b4:fb:9e:7c:a2:6b:3a:9c:4b:63:e2: 2a:81:b3:3a:06:2f:4d:cb:68:5a:25:35:09:85:78: 15:57:46:51:86:44:e4:22:46:d2:58:87:d5:b0:0c: 5b:d5:f3:26:bc:79:f0:b4:8d:5c:d9:99:97:4b:24: b2:02:87:7f:1a:49:67:84:d3:ef:22:39:cb:ca:8a: ae:95:2a:40:28:20:e8:66:6f:97:95:2c:9f:80:48: 34:5c:b1:75:f0:bd:4c:50:a6:89:eb:1b:ca:70:63: 71:54:0c:16:13:0c:8c:c7:f4:49:01:52:d3:20:78: a0:09:dc:59:0c:e7:23:08:fc:1c:13:6c:37:23:af: 69:2d:64:d4:64:2f:21:0a:49:fb:6b:f0:19:8b:63: 61:10:55:6f:94:c6:2a:2a:a3:b7:07:4a:39:29:71: 0f:d0:0c:2b:f4:90:0d:3a:bb:22:34:6b:b8:bc:1f: e2:26:41:db:da:c7:93:11:3d:34:d2:f5:99:cd:ac: 8c:1f:5c:b9:7c:93:b8:56:06:8f:68:52:04:40:6e: c2:1d:15:52:fe:27:c2:80:ea:ff:ac:6e:35:56:eb: 77:eb:d8:23:8d:66:26:68:b6:a0:37:a6:67:a4:37: 55:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:69:03:88:8A:F7:07:83:B3:F4:7A:E3:86:1C:E4:D2:A3:0F:AA:3D X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS151823.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:106:aa00::/39 240e:982:9b00::/40 240e:982:9d00::-240e:982:9eff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 52:b5:24:e2:d6:bb:36:d4:3d:08:1f:c4:68:3b:3b:d6:e5:3c: b5:97:15:c6:d3:a0:b8:54:44:07:b5:ef:5a:f2:2c:14:4d:b4: 43:a1:49:6e:e5:de:a2:a1:e9:db:b1:43:2d:16:fe:ca:5e:4d: e7:1e:3c:7e:0d:ca:12:e5:97:5a:99:a1:d7:c0:ff:4c:f3:c4: f8:72:7a:f4:28:b3:c4:91:bc:7b:49:a8:f0:9d:b5:66:10:d1: 5c:c4:e1:ec:52:cc:63:cf:db:10:47:b4:21:03:a4:e5:7f:48: 78:0a:b3:e9:ea:dd:d5:a5:5f:5c:88:d0:38:ff:c9:60:0a:d1: 0a:3c:42:f8:3b:5d:e2:24:5e:77:87:35:28:68:09:37:df:b3: ed:b1:a5:51:01:cb:49:0e:a8:3b:0c:4d:6e:2a:7b:87:2e:d7: 3f:89:dd:1e:60:71:a4:fc:f9:e2:58:ed:10:16:c9:0a:11:30: 42:f1:f5:ab:45:c7:22:fb:88:4b:4e:f1:a7:31:e0:ad:7d:2b: 4d:2b:3d:cb:80:e2:65:aa:e3:d2:7d:fe:95:cb:55:2f:81:0a: a3:d0:03:9d:19:c7:42:85:b7:4d:b3:0e:76:16:c0:d2:12:a6: 3d:f0:89:f0:89:b6:4b:93:0c:27:6b:de:14:07:71:a4:98:98: 8e:68:7a:f7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUTDPflvmAg0Wbo435JwyCPutxuC4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyMTE2MTcxOVoX DTI3MDUyMDE2MjIxOVowMzExMC8GA1UEAxMoOTk2OTAzODg4QUY3MDc4M0IzRjQ3 QUUzODYxQ0U0RDJBMzBGQUEzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSh6HxTjMqQSOLO73ThbIDwy7T7nnyiazqcS2PiKoGzOgYvTctoWiU1CYV4 FVdGUYZE5CJG0liH1bAMW9XzJrx58LSNXNmZl0sksgKHfxpJZ4TT7yI5y8qKrpUq QCgg6GZvl5Usn4BINFyxdfC9TFCmiesbynBjcVQMFhMMjMf0SQFS0yB4oAncWQzn Iwj8HBNsNyOvaS1k1GQvIQpJ+2vwGYtjYRBVb5TGKiqjtwdKOSlxD9AMK/SQDTq7 IjRruLwf4iZB29rHkxE9NNL1mc2sjB9cuXyTuFYGj2hSBEBuwh0VUv4nwoDq/6xu NVbrd+vYI41mJmi2oDemZ6Q3Ve8CAwEAAaOCAgAwggH8MB0GA1UdDgQWBBSZaQOI ivcHg7P0euOGHOTSow+qPTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTUxODIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAAjAiAwYBJA4BBqoDBgAkDgmCmzAQAwYA JA4Jgp0DBgAkDgmCnjANBgkqhkiG9w0BAQsFAAOCAQEAUrUk4ta7NtQ9CB/EaDs7 1uU8tZcVxtOguFREB7XvWvIsFE20Q6FJbuXeoqHp27FDLRb+yl5N5x48fg3KEuWX Wpmh18D/TPPE+HJ69CizxJG8e0mo8J21ZhDRXMTh7FLMY8/bEEe0IQOk5X9IeAqz 6erd1aVfXIjQOP/JYArRCjxC+Dtd4iRed4c1KGgJN9+z7bGlUQHLSQ6oOwxNbip7 hy7XP4ndHmBxpPz54ljtEBbJChEwQvH1q0XHIvuIS07xpzHgrX0rTSs9y4DiZarj 0n3+lctVL4EKo9ADnRnHQoW3TbMOdhbA0hKmPfCJ8Im2S5MMJ2veFAdxpJiYjmh6 9w== -----END CERTIFICATE-----Generated at Sat May 23 07:08:17 2026 by rpki-client