$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS138950.roa File: AS138950.roa (raw, json) Hash identifier: DbkPU2ZX0Y/eqp/1/0QGiQHqnKulDvaq2c7HH/qasx4= Subject key identifier: 7C:60:9E:C6:6C:D5:59:52:88:AB:40:8C:9D:5F:8F:ED:8A:2D:AD:5E Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Certificate serial: 7101A2BBC88055F76AC1C6AF5EB670C466DF9267 Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS138950.roa Signing time: Thu 11 Jun 2026 08:19:35 +0000 ROA not before: Thu 11 Jun 2026 08:14:35 +0000 ROA not after: Thu 10 Jun 2027 08:19:35 +0000 asID: 138950 IP address blocks: 118.191.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:01:a2:bb:c8:80:55:f7:6a:c1:c6:af:5e:b6:70:c4:66:df:92:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Validity Not Before: Jun 11 08:14:35 2026 GMT Not After : Jun 10 08:19:35 2027 GMT Subject: CN=7C609EC66CD5595288AB408C9D5F8FED8A2DAD5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:de:14:73:8b:c8:8b:d6:44:79:29:c7:0d:3e: f4:8c:2c:34:c8:60:f8:13:e7:af:07:80:28:3f:b5: c3:e7:d0:b5:e3:ce:f2:94:ac:b8:b9:45:e5:4f:58: fb:c6:54:f8:38:9c:02:a3:ce:99:89:d4:3c:fa:91: ba:e5:25:88:40:9b:86:c4:b7:ad:ea:a7:ec:b4:db: fc:2b:97:48:ef:15:35:c6:ae:e9:04:49:b2:95:b8: 01:44:45:d0:33:02:0b:64:a7:08:b1:81:bf:75:f6: 62:a5:28:f5:9f:07:d0:3a:cb:74:17:7f:d2:51:e6: 40:32:25:be:29:d2:67:a0:6e:b6:e0:60:ee:d2:56: 32:98:bc:29:12:a0:d0:ed:6b:3d:8a:50:0a:46:87: 4c:37:5e:91:5a:59:28:f6:a2:be:e7:76:d1:b2:87: 5d:aa:0d:40:af:f4:61:a1:ce:46:d4:2f:3a:51:d7: cc:ff:88:27:75:a2:ca:ae:5e:41:c5:2f:15:84:2d: d2:83:2c:d6:d4:64:8b:0a:71:26:9c:75:c3:50:06: 72:38:3e:65:29:21:67:52:af:83:6d:e2:57:b2:a6: b7:40:37:5e:c1:db:4c:ed:d0:9e:54:a7:5f:0d:5e: 56:e2:4e:1b:df:3b:33:0c:63:ec:69:3f:50:77:30: 44:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:60:9E:C6:6C:D5:59:52:88:AB:40:8C:9D:5F:8F:ED:8A:2D:AD:5E X509v3 Authority Key Identifier: keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS138950.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.191.0.0/22 Signature Algorithm: sha256WithRSAEncryption ad:84:8a:ae:50:53:c5:f2:4e:ff:28:f2:b2:97:54:8b:40:64: 66:d9:57:eb:81:43:7f:3e:c9:71:d9:60:8e:3f:b0:87:5a:fe: 16:d4:76:8e:6e:20:48:86:e3:38:8a:da:10:e8:52:39:2b:03: b4:0d:b0:7c:3b:ec:4b:c3:fe:55:26:17:16:45:be:6b:b8:bf: 66:0b:c2:79:c6:f4:42:46:28:98:10:c4:56:1d:b9:d6:5b:f3: 54:b3:16:a7:d4:82:fd:42:10:f3:3d:28:d8:af:a3:9c:35:6e: a2:12:87:d0:d7:10:1c:36:c7:09:78:22:d1:20:d7:d3:64:b3: c4:7a:1c:24:92:d5:d3:83:89:95:ed:a0:bb:aa:ef:a1:fd:8b: 6b:01:39:c4:1f:16:fa:71:dd:50:dd:0c:c0:93:dd:af:89:47: a9:30:87:de:6c:80:34:48:a6:ba:ed:ab:54:aa:30:47:a2:d2: f1:93:dc:67:a9:3f:49:7d:99:ac:39:ff:d7:84:07:36:50:38: 1b:94:e8:14:bf:f1:7d:cc:59:80:37:33:cb:01:2a:c6:bd:d9: 0b:b4:dd:c4:c8:bf:1e:11:51:09:1b:3b:2f:92:6c:d3:f5:f2: 62:11:a3:fc:15:6b:99:0f:a1:09:72:0c:cb:49:a1:93:49:44: 65:56:cd:d0 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUcQGiu8iAVfdqwcavXrZwxGbfkmcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTM3MEYwMDAwMTEwLwYDVQQFEygwMTgyRDRDRDBD NkQyMURDMkMyOTZFRDI2MDZBNzBENzk2RDVCQkI5MB4XDTI2MDYxMTA4MTQzNVoX DTI3MDYxMDA4MTkzNVowMzExMC8GA1UEAxMoN0M2MDlFQzY2Q0Q1NTk1Mjg4QUI0 MDhDOUQ1RjhGRUQ4QTJEQUQ1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJTeFHOLyIvWRHkpxw0+9IwsNMhg+BPnrweAKD+1w+fQtePO8pSsuLlF5U9Y +8ZU+DicAqPOmYnUPPqRuuUliECbhsS3reqn7LTb/CuXSO8VNcau6QRJspW4AURF 0DMCC2SnCLGBv3X2YqUo9Z8H0DrLdBd/0lHmQDIlvinSZ6ButuBg7tJWMpi8KRKg 0O1rPYpQCkaHTDdekVpZKPaivud20bKHXaoNQK/0YaHORtQvOlHXzP+IJ3Wiyq5e QcUvFYQt0oMs1tRkiwpxJpx1w1AGcjg+ZSkhZ1Kvg23iV7Kmt0A3XsHbTO3QnlSn Xw1eVuJOG987Mwxj7Gk/UHcwRN8CAwEAAaOCAeQwggHgMB0GA1UdDgQWBBR8YJ7G bNVZUoirQIydX4/tii2tXjAfBgNVHSMEGDAWgBQBgtTNDG0h3CwpbtJganDXltW7 uTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEzNjU0ODA2MzY0NDIyMTYzLzAvMDE4MkQ0 Q0QwQzZEMjFEQzJDMjk2RUQyNjA2QTcwRDc5NkQ1QkJCOS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvQVlMVXpReHRJ ZHdzS1c3U1lHcHcxNWJWdTdrLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMzY1NDgwNjM2 NDQyMjE2My8wL0FTMTM4OTUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCdr8AMA0GCSqGSIb3DQEBCwUA A4IBAQCthIquUFPF8k7/KPKyl1SLQGRm2VfrgUN/Pslx2WCOP7CHWv4W1HaObiBI huM4itoQ6FI5KwO0DbB8O+xLw/5VJhcWRb5ruL9mC8J5xvRCRiiYEMRWHbnWW/NU sxan1IL9QhDzPSjYr6OcNW6iEofQ1xAcNscJeCLRINfTZLPEehwkktXTg4mV7aC7 qu+h/YtrATnEHxb6cd1Q3QzAk92viUepMIfebIA0SKa67atUqjBHotLxk9xnqT9J fZmsOf/XhAc2UDgblOgUv/F9zFmANzPLASrGvdkLtN3EyL8eEVEJGzsvkmzT9fJi EaP8FWuZD6EJcgzLSaGTSURlVs3Q -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:38 2026 by rpki-client