$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/2/AS132203.roa File: AS132203.roa (raw, json) Hash identifier: LCoS0er/7zh/bY2O8Xb/4U/28JPzEL9/b42FKGTNuk0= Subject key identifier: 39:54:AC:7D:18:A5:57:24:D3:7D:C0:9D:6A:55:81:9A:60:3D:A3:72 Certificate issuer: /CN=A91209740000/serialNumber=6845D331C417296D3A93181DD9010591B1F70D50 Certificate serial: 07B15C7863F0D8A38B46701E7FBC1F2203AEA798 Authority key identifier: 68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/AS132203.roa Signing time: Tue 30 Jun 2026 09:12:28 +0000 ROA not before: Tue 30 Jun 2026 09:07:28 +0000 ROA not after: Tue 29 Jun 2027 09:12:28 +0000 asID: 132203 IP address blocks: 101.33.128.0/22 maxlen: 22 101.33.132.0/22 maxlen: 22 101.33.136.0/22 maxlen: 22 101.33.140.0/22 maxlen: 22 101.33.144.0/22 maxlen: 22 101.33.148.0/22 maxlen: 22 101.33.152.0/22 maxlen: 22 101.33.156.0/22 maxlen: 22 101.33.160.0/22 maxlen: 22 101.33.164.0/22 maxlen: 22 101.33.168.0/22 maxlen: 22 101.33.172.0/22 maxlen: 22 101.33.176.0/22 maxlen: 22 101.33.180.0/22 maxlen: 22 101.33.184.0/22 maxlen: 22 101.33.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Jul 2026 01:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b1:5c:78:63:f0:d8:a3:8b:46:70:1e:7f:bc:1f:22:03:ae:a7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=6845D331C417296D3A93181DD9010591B1F70D50 Validity Not Before: Jun 30 09:07:28 2026 GMT Not After : Jun 29 09:12:28 2027 GMT Subject: CN=3954AC7D18A55724D37DC09D6A55819A603DA372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:38:80:bb:a5:25:fb:d8:54:1a:65:01:c2: 01:07:db:5d:c4:41:43:02:ef:09:14:06:47:6d:32: 68:e9:1a:da:17:84:74:66:62:44:5a:71:03:49:d0: ac:f4:df:e0:44:7e:84:0d:29:86:6b:b8:c3:84:29: 6b:d6:0b:c5:37:74:65:1e:0e:10:83:32:34:e1:f5: fd:40:4d:bf:9c:30:78:85:42:cc:16:31:9d:da:23: 50:e0:76:64:e6:09:47:7c:97:0a:0a:c0:ce:26:a9: 48:0c:f2:59:c2:00:aa:13:ed:53:6c:75:31:40:d9: 7d:a8:40:60:52:71:c3:c9:80:df:f2:c8:46:64:98: 74:d0:bc:59:e6:55:4a:96:a4:db:06:4c:fd:1d:b7: 52:00:51:aa:68:45:83:20:4b:89:ec:bb:f9:50:a5: 26:f8:16:9a:04:b7:a5:e2:82:74:9b:08:4b:e7:ef: 3f:7e:f4:63:17:0c:92:30:10:ab:2d:7a:f0:2d:01: b7:9e:d7:57:0a:56:9c:ef:4b:30:2c:17:97:e7:ed: 2d:69:43:fb:32:ca:24:57:32:cd:00:45:98:a9:ff: 46:b7:4f:32:01:f8:48:a0:7e:bc:a1:f5:8a:c6:6c: 6d:11:56:49:7a:4a:97:ef:72:5b:a7:57:69:d5:66: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:54:AC:7D:18:A5:57:24:D3:7D:C0:9D:6A:55:81:9A:60:3D:A3:72 X509v3 Authority Key Identifier: keyid:68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/AS132203.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.33.128.0/18 Signature Algorithm: sha256WithRSAEncryption 58:fc:ca:09:8e:87:98:8e:41:6a:55:ae:e3:ef:8f:7b:f2:1a: ed:94:9c:8f:7e:63:e2:f0:f7:ac:ab:be:d6:5f:4e:8e:22:a9: 65:a0:57:63:95:5a:43:38:1e:9a:31:d1:a6:a8:b3:df:68:d9: ba:20:27:8c:fc:ab:f6:b7:6b:a0:aa:43:e2:c2:dc:f4:f3:7e: 37:d5:ed:84:c0:6e:3f:10:1d:77:08:63:71:fe:bc:c7:0d:a2: 62:f5:54:38:0f:8f:0f:be:d4:53:b3:2d:1a:a3:11:ff:91:88: a5:a7:43:3e:65:c1:77:6c:a7:fa:b2:3c:d4:82:40:11:9d:1d: 26:65:83:ca:76:c7:e3:4b:35:12:1b:b5:f9:3f:26:d9:25:56: a8:6b:53:e0:76:a5:ab:5f:ad:09:f6:ac:80:d1:cc:51:dd:7d: d2:2c:29:91:92:15:02:9d:09:d5:b3:f6:38:de:3f:42:62:80: ee:4e:40:3e:7f:2b:30:3d:65:92:a6:f0:01:75:8c:aa:35:33: 51:af:f2:7b:6c:8b:a2:c9:03:3b:9c:7c:26:c0:67:74:57:ea: dd:0e:82:32:67:8e:a9:76:dc:52:db:9d:3a:fc:9e:d2:25:28: 76:fb:74:ff:ec:c9:fc:28:65:e4:ca:89:73:b3:b7:20:38:59: 8c:18:5a:9a -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUB7FceGPw2KOLRnAef7wfIgOup5gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyg2ODQ1RDMzMUM0 MTcyOTZEM0E5MzE4MUREOTAxMDU5MUIxRjcwRDUwMB4XDTI2MDYzMDA5MDcyOFoX DTI3MDYyOTA5MTIyOFowMzExMC8GA1UEAxMoMzk1NEFDN0QxOEE1NTcyNEQzN0RD MDlENkE1NTgxOUE2MDNEQTM3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaZOIC7pSX72FQaZQHCAQfbXcRBQwLvCRQGR20yaOka2heEdGZiRFpxA0nQ rPTf4ER+hA0phmu4w4Qpa9YLxTd0ZR4OEIMyNOH1/UBNv5wweIVCzBYxndojUOB2 ZOYJR3yXCgrAziapSAzyWcIAqhPtU2x1MUDZfahAYFJxw8mA3/LIRmSYdNC8WeZV Spak2wZM/R23UgBRqmhFgyBLiey7+VClJvgWmgS3peKCdJsIS+fvP370YxcMkjAQ qy168C0Bt57XVwpWnO9LMCwXl+ftLWlD+zLKJFcyzQBFmKn/RrdPMgH4SKB+vKH1 isZsbRFWSXpKl+9yW6dXadVmecECAwEAAaOCAeQwggHgMB0GA1UdDgQWBBQ5VKx9 GKVXJNN9wJ1qVYGaYD2jcjAfBgNVHSMEGDAWgBRoRdMxxBcpbTqTGB3ZAQWRsfcN UDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzIvNjg0NUQz MzFDNDE3Mjk2RDNBOTMxODFERDkwMTA1OTFCMUY3MEQ1MC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvYUVYVE1jUVhL VzA2a3hnZDJRRUZrYkgzRFZBLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8yL0FTMTMyMjAzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGZSGAMA0GCSqGSIb3DQEBCwUA A4IBAQBY/MoJjoeYjkFqVa7j74978hrtlJyPfmPi8Pesq77WX06OIqlloFdjlVpD OB6aMdGmqLPfaNm6ICeM/Kv2t2ugqkPiwtz083431e2EwG4/EB13CGNx/rzHDaJi 9VQ4D48PvtRTsy0aoxH/kYilp0M+ZcF3bKf6sjzUgkARnR0mZYPKdsfjSzUSG7X5 PybZJVaoa1PgdqWrX60J9qyA0cxR3X3SLCmRkhUCnQnVs/Y43j9CYoDuTkA+fysw PWWSpvABdYyqNTNRr/J7bIuiyQM7nHwmwGd0V+rdDoIyZ46pdtxS2506/J7SJSh2 +3T/7Mn8KGXkyolzs7cgOFmMGFqa -----END CERTIFICATE-----Generated at Sun Jul 5 09:20:49 2026 by rpki-client