$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS136958.roa File: AS136958.roa (raw, json) Hash identifier: 5NVMdMzPvY4Sfxb4/r3IMRajbOXIUyEqGrPk010/sPY= Subject key identifier: E8:A5:9D:84:24:EF:E7:7E:62:F5:D8:32:A0:32:83:BC:53:38:0B:0B Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 54CF5C47BD8E28FAD04F498D40C8B183BBAB154C Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS136958.roa Signing time: Wed 20 May 2026 07:07:51 +0000 ROA not before: Wed 20 May 2026 07:02:51 +0000 ROA not after: Wed 19 May 2027 07:07:51 +0000 asID: 136958 IP address blocks: 117.51.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 14:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:cf:5c:47:bd:8e:28:fa:d0:4f:49:8d:40:c8:b1:83:bb:ab:15:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: May 20 07:02:51 2026 GMT Not After : May 19 07:07:51 2027 GMT Subject: CN=E8A59D8424EFE77E62F5D832A03283BC53380B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:23:a3:d5:e8:23:5d:93:e5:90:44:5f:5b:97: 7e:3f:e9:9b:84:a1:d2:49:74:6b:21:85:d2:8b:e0: 6b:b6:79:a2:2d:c3:e0:21:f7:73:09:d9:6c:0f:77: 4d:65:ce:b2:30:69:4c:f7:38:1f:94:cf:80:05:10: 77:50:76:da:64:64:59:31:2a:83:c0:45:69:42:00: ab:1e:60:35:fe:45:e7:dc:8e:df:18:04:d3:96:e7: ff:34:ea:4a:fe:f9:fe:5a:a7:f8:f4:0d:38:13:ba: ff:55:b5:0f:5b:01:f1:39:4b:a1:bb:da:10:9b:e7: 03:db:d7:36:81:b4:0c:dc:32:61:f4:93:40:20:ce: 45:1d:64:00:c0:da:b7:a9:21:5c:ef:9c:91:86:51: f4:c0:d5:70:7a:e9:2a:8d:5c:f5:c2:91:e6:50:47: 90:6b:c1:ad:8d:ff:1b:5b:fd:7d:66:84:07:27:76: 70:b9:b6:f3:05:b3:9b:82:3e:43:ed:f0:03:18:aa: b2:d9:87:e7:da:b7:cb:a6:8a:7c:ce:93:2c:27:53: 00:b7:64:14:c9:0a:32:28:aa:e5:6d:51:c9:df:90: c0:da:15:e9:c5:49:0c:5b:e3:68:15:c5:ff:53:58: ac:38:ee:07:bd:e8:62:3e:85:2d:b3:9a:cf:77:96: 70:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A5:9D:84:24:EF:E7:7E:62:F5:D8:32:A0:32:83:BC:53:38:0B:0B X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS136958.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.51.172.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:c7:64:6c:47:06:2e:de:59:d3:6b:f4:b8:0e:a6:ec:95:91: c6:42:42:f6:92:df:4e:e6:cf:24:ce:a3:96:a6:82:67:4e:24: b6:3a:68:be:c9:e7:b5:a1:ad:b7:e0:d8:a8:25:23:f6:5a:69: 7d:4e:29:7c:8d:ff:a0:8e:33:c5:be:1a:13:a3:33:21:2c:4b: 1a:73:76:94:a5:e8:6d:15:8a:f4:4a:31:eb:23:95:35:31:60: 6b:a3:2e:ad:96:eb:3d:40:0a:05:78:b9:5b:45:32:7a:1b:75: 3f:49:ac:be:80:f8:07:e7:b2:32:9b:bc:ce:16:54:75:fb:cd: 21:c7:20:9b:1e:b2:01:4c:3b:ee:d7:93:95:3a:d8:99:8a:38: 4d:62:1e:fe:e2:9f:a6:44:88:5e:4f:ff:1c:99:a9:98:d1:26: bb:bd:70:ac:c6:ee:c7:2e:ea:aa:f4:ae:1a:57:d6:8e:cd:de: 79:05:43:01:3b:9b:25:1d:91:c6:a7:b4:a9:9a:5c:1d:24:d3: fc:ea:9e:36:ee:da:f9:3c:d2:00:d4:72:ee:95:e4:54:22:39: 79:54:c5:22:79:63:cb:b7:25:19:3a:5d:88:07:e0:bf:50:00: 8d:4c:a2:d6:e3:e9:37:2a:7d:97:af:b9:34:0c:f1:ea:e8:20: 89:f1:f7:38 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUVM9cR72OKPrQT0mNQMixg7urFUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA1MjAwNzAyNTFaFw0yNzA1MTkwNzA3NTFaMDMxMTAvBgNV BAMTKEU4QTU5RDg0MjRFRkU3N0U2MkY1RDgzMkEwMzI4M0JDNTMzODBCMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeI6PV6CNdk+WQRF9bl34/6ZuE odJJdGshhdKL4Gu2eaItw+Ah93MJ2WwPd01lzrIwaUz3OB+Uz4AFEHdQdtpkZFkx KoPARWlCAKseYDX+Refcjt8YBNOW5/806kr++f5ap/j0DTgTuv9VtQ9bAfE5S6G7 2hCb5wPb1zaBtAzcMmH0k0AgzkUdZADA2repIVzvnJGGUfTA1XB66SqNXPXCkeZQ R5Brwa2N/xtb/X1mhAcndnC5tvMFs5uCPkPt8AMYqrLZh+fat8uminzOkywnUwC3 ZBTJCjIoquVtUcnfkMDaFenFSQxb42gVxf9TWKw47ge96GI+hS2zms93lnAbAgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQU6KWdhCTv535i9dgyoDKDvFM4CwswHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MDI2MzYzNjcyMDAyNTkvMC9BUzEzNjk1OC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAnUzrDANBgkqhkiG9w0BAQsFAAOCAQEAjMdkbEcGLt5Z02v0uA6m7JWR xkJC9pLfTubPJM6jlqaCZ04ktjpovsnntaGtt+DYqCUj9lppfU4pfI3/oI4zxb4a E6MzISxLGnN2lKXobRWK9Eox6yOVNTFga6MurZbrPUAKBXi5W0Uyeht1P0msvoD4 B+eyMpu8zhZUdfvNIccgmx6yAUw77teTlTrYmYo4TWIe/uKfpkSIXk//HJmpmNEm u71wrMbuxy7qqvSuGlfWjs3eeQVDATubJR2Rxqe0qZpcHSTT/OqeNu7a+TzSANRy 7pXkVCI5eVTFInljy7clGTpdiAfgv1AAjUyi1uPpNyp9l6+5NAzx6uggifH3OA== -----END CERTIFICATE-----Generated at Sat May 23 05:07:16 2026 by rpki-client