$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS138421.roa File: AS138421.roa (raw, json) Hash identifier: MLMfQ1q7pHygmrYwZcMKBf+f4KOyegKvSafF3lQSvVY= Subject key identifier: 03:A5:87:2B:EC:60:3D:34:12:56:5A:04:BC:70:DA:6F:4D:69:A8:44 Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 7685A54EB00CCFFE8E5B0B9452638B4DFBD7953E Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS138421.roa Signing time: Thu 04 Jun 2026 06:45:50 +0000 ROA not before: Thu 04 Jun 2026 06:40:50 +0000 ROA not after: Thu 03 Jun 2027 06:45:50 +0000 asID: 138421 IP address blocks: 220.196.184.0/24 maxlen: 24 220.196.185.0/24 maxlen: 24 220.196.186.0/24 maxlen: 24 220.196.187.0/24 maxlen: 24 220.196.188.0/24 maxlen: 24 220.196.189.0/24 maxlen: 24 220.196.240.0/24 maxlen: 24 220.196.241.0/24 maxlen: 24 220.196.242.0/24 maxlen: 24 220.196.243.0/24 maxlen: 24 220.196.244.0/24 maxlen: 24 220.196.245.0/24 maxlen: 24 220.196.246.0/24 maxlen: 24 220.196.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:85:a5:4e:b0:0c:cf:fe:8e:5b:0b:94:52:63:8b:4d:fb:d7:95:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Jun 4 06:40:50 2026 GMT Not After : Jun 3 06:45:50 2027 GMT Subject: CN=03A5872BEC603D3412565A04BC70DA6F4D69A844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3f:94:c8:bb:c3:62:25:f4:a6:1d:b3:f9:7f: f0:6b:f0:70:37:15:94:e7:e6:36:41:98:9f:01:63: 88:07:c1:00:77:0e:4b:0b:4d:31:d6:56:c6:13:53: f1:6e:7e:30:7f:4d:fd:8a:56:47:6a:9b:8f:71:85: 25:1c:84:fd:fb:a5:e2:1a:ba:e7:12:8e:14:5e:6f: 32:33:a8:85:e0:3d:d2:7b:bb:21:55:d4:3c:af:d0: 37:a6:a1:36:59:1f:a5:38:62:c9:31:d5:6d:18:d8: 0d:c8:2a:f4:cf:9e:6f:6d:08:b9:e4:67:3f:bd:21: 1c:4a:79:cb:aa:06:6a:00:b6:4c:54:20:3f:e6:54: 60:ca:da:7f:ac:24:28:df:ce:26:8e:3c:2d:de:28: e9:57:b4:e4:15:7c:24:bf:a2:15:ff:3a:9d:ca:87: 83:99:e2:7b:02:a6:56:65:34:a5:a8:0e:4f:60:3f: de:19:50:64:f9:52:bf:c5:3e:5d:ff:91:27:10:3c: 53:b8:cb:9a:c5:20:79:e6:e4:fa:3c:41:aa:d1:60: ed:05:4e:36:0b:7a:9b:4b:f4:09:b8:f1:39:86:13: ba:e9:f9:f7:a4:2c:a4:48:da:6f:e4:d7:af:78:d5: 18:0a:4c:84:7c:21:91:20:c4:93:8c:a3:59:ab:8d: b3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A5:87:2B:EC:60:3D:34:12:56:5A:04:BC:70:DA:6F:4D:69:A8:44 X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS138421.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.196.184.0-220.196.189.255 220.196.240.0/21 Signature Algorithm: sha256WithRSAEncryption 60:ff:d1:06:36:4c:d3:80:fb:c4:77:80:b6:8b:74:63:64:0b: e1:e0:8c:53:b4:74:9f:31:12:9e:0e:ec:98:1e:df:17:e1:b0: 26:b2:36:9b:ae:c4:15:a4:9f:da:16:c2:2c:6f:48:a4:d6:95: 60:ce:b6:a7:2d:c0:af:53:5e:ba:e0:e6:84:42:8a:0e:fc:7a: e7:c1:0a:21:62:8f:ef:96:91:7e:f2:f3:f9:16:68:4a:50:af: 2d:e4:f2:9b:f3:2e:40:c8:cb:98:83:59:fc:53:cc:dd:7f:b2: 5f:2a:f9:1e:59:a2:a3:4b:38:6e:3d:74:05:4b:57:de:1a:d6: 77:f9:c3:e6:60:57:84:f6:9b:76:ec:47:e3:54:f0:75:d3:6f: a4:04:a2:fe:b9:7a:a8:4d:69:fa:59:ed:eb:cc:a6:90:59:92: 19:17:5f:5d:18:c6:9f:64:28:07:9a:f2:f0:2d:7a:42:20:df: 46:03:9d:c6:bc:84:4d:e6:9a:26:56:df:87:3f:ac:7a:ef:6d: 7b:c8:95:59:3a:af:0c:56:30:db:89:d9:11:6e:b7:c6:60:94: 5e:9e:82:33:b6:0d:61:b7:66:aa:74:80:33:2d:79:86:6b:c3: 78:08:a0:d4:39:8a:27:5f:43:a6:82:ec:88:29:81:19:3e:67: 54:47:9a:f1 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUdoWlTrAMz/6OWwuUUmOLTfvXlT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA2MDQwNjQwNTBaFw0yNzA2MDMwNjQ1NTBaMDMxMTAvBgNV BAMTKDAzQTU4NzJCRUM2MDNEMzQxMjU2NUEwNEJDNzBEQTZGNEQ2OUE4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRP5TIu8NiJfSmHbP5f/Br8HA3 FZTn5jZBmJ8BY4gHwQB3DksLTTHWVsYTU/FufjB/Tf2KVkdqm49xhSUchP37peIa uucSjhRebzIzqIXgPdJ7uyFV1Dyv0DemoTZZH6U4Yskx1W0Y2A3IKvTPnm9tCLnk Zz+9IRxKecuqBmoAtkxUID/mVGDK2n+sJCjfziaOPC3eKOlXtOQVfCS/ohX/Op3K h4OZ4nsCplZlNKWoDk9gP94ZUGT5Ur/FPl3/kScQPFO4y5rFIHnm5Po8QarRYO0F TjYLeptL9Am48TmGE7rp+fekLKRI2m/k16941RgKTIR8IZEgxJOMo1mrjbMXAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUA6WHK+xgPTQSVloEvHDab01pqEQwHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzEzODQyMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQC AAEwFDAMAwQD3MS4AwQB3MS8AwQD3MTwMA0GCSqGSIb3DQEBCwUAA4IBAQBg/9EG NkzTgPvEd4C2i3RjZAvh4IxTtHSfMRKeDuyYHt8X4bAmsjabrsQVpJ/aFsIsb0ik 1pVgzranLcCvU1664OaEQooO/HrnwQohYo/vlpF+8vP5FmhKUK8t5PKb8y5AyMuY g1n8U8zdf7JfKvkeWaKjSzhuPXQFS1feGtZ3+cPmYFeE9pt27EfjVPB102+kBKL+ uXqoTWn6We3rzKaQWZIZF19dGMafZCgHmvLwLXpCIN9GA53GvIRN5pomVt+HP6x6 7217yJVZOq8MVjDbidkRbrfGYJRenoIztg1ht2aqdIAzLXmGa8N4CKDUOYonX0Om guyIKYEZPmdUR5rx -----END CERTIFICATE-----Generated at Thu Jun 4 19:43:24 2026 by rpki-client