$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS133111.roa File: AS133111.roa (raw, json) Hash identifier: Ah0t+o3oIOs5pNYtiHY2DaI+WVsJKaziuR7m/5YNkBg= Subject key identifier: 37:BC:36:43:B3:D5:08:EE:6B:FA:7F:19:9E:25:D5:F5:E3:43:0E:43 Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE Certificate serial: 344D354A139641E611AEA1C86C606D25BAA4EE11 Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS133111.roa Signing time: Wed 13 May 2026 09:58:15 +0000 ROA not before: Wed 13 May 2026 09:53:15 +0000 ROA not after: Wed 12 May 2027 09:58:15 +0000 asID: 133111 IP address blocks: 123.103.4.0/24 maxlen: 24 123.103.10.0/24 maxlen: 24 123.103.11.0/24 maxlen: 24 123.103.17.0/24 maxlen: 24 123.103.18.0/24 maxlen: 24 123.103.23.0/24 maxlen: 24 123.103.62.0/24 maxlen: 24 123.103.75.0/24 maxlen: 24 123.103.83.0/24 maxlen: 24 123.103.84.0/24 maxlen: 24 123.103.85.0/24 maxlen: 24 123.103.91.0/24 maxlen: 24 123.103.92.0/24 maxlen: 24 123.103.112.0/24 maxlen: 24 123.103.113.0/24 maxlen: 24 123.103.114.0/24 maxlen: 24 123.103.115.0/24 maxlen: 24 123.103.116.0/24 maxlen: 24 123.103.117.0/24 maxlen: 24 123.103.118.0/24 maxlen: 24 123.103.119.0/24 maxlen: 24 123.103.120.0/24 maxlen: 24 123.103.121.0/24 maxlen: 24 123.103.122.0/24 maxlen: 24 123.103.123.0/24 maxlen: 24 123.103.124.0/24 maxlen: 24 123.103.125.0/24 maxlen: 24 123.103.126.0/24 maxlen: 24 123.103.127.0/24 maxlen: 24 203.130.40.0/24 maxlen: 24 203.130.41.0/24 maxlen: 24 203.130.42.0/24 maxlen: 24 203.130.44.0/24 maxlen: 24 203.130.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4d:35:4a:13:96:41:e6:11:ae:a1:c8:6c:60:6d:25:ba:a4:ee:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE Validity Not Before: May 13 09:53:15 2026 GMT Not After : May 12 09:58:15 2027 GMT Subject: CN=37BC3643B3D508EE6BFA7F199E25D5F5E3430E43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5c:b9:1c:f0:37:3b:a3:fc:80:b1:2c:02:f8: 3d:0c:56:2a:b4:d4:19:d0:49:cd:f5:5a:c8:52:b2: 39:f6:01:db:8c:76:95:43:83:c6:d2:49:b6:ce:69: f0:74:ee:18:a7:d3:57:df:f1:bc:33:3c:4f:b6:0a: c0:fd:7a:ed:30:44:7e:95:51:be:ff:c9:37:07:84: 5e:90:d9:fd:ca:0f:21:bd:64:13:02:85:20:0e:b9: a1:dc:5b:61:1f:fc:5b:7c:e0:46:96:ba:f1:71:71: f3:2e:7d:a4:3d:a3:31:3f:0f:86:0c:77:78:26:b6: 0b:4b:5d:93:af:cf:17:a8:77:bf:7d:0d:d0:24:e6: cd:0f:97:66:f7:e0:73:3a:3f:32:30:64:72:41:39: f5:27:a0:ec:a5:52:ed:12:3f:25:0e:48:e9:56:8f: 5f:5a:32:b4:72:50:c5:98:98:17:99:35:d8:b0:70: bc:95:cb:bb:3f:87:76:09:6e:8a:77:33:6a:39:34: 9b:76:ed:2f:8e:d5:58:84:b9:3c:1d:e8:ab:9c:67: e5:0f:19:6a:3f:7a:5d:8a:58:49:47:4f:00:dc:23: 55:ab:56:f6:63:15:ce:ee:9d:9e:2b:96:70:b6:c7: f0:d2:13:50:ed:bd:73:b4:7a:ad:b2:90:ad:ac:5e: c4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BC:36:43:B3:D5:08:EE:6B:FA:7F:19:9E:25:D5:F5:E3:43:0E:43 X509v3 Authority Key Identifier: keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/AS133111.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.103.4.0/24 123.103.10.0/23 123.103.17.0-123.103.18.255 123.103.23.0/24 123.103.62.0/24 123.103.75.0/24 123.103.83.0-123.103.85.255 123.103.91.0-123.103.92.255 123.103.112.0/20 203.130.40.0-203.130.42.255 203.130.44.0/24 203.130.46.0/24 Signature Algorithm: sha256WithRSAEncryption 93:9f:02:6f:06:9e:cc:87:de:98:30:f7:c9:ba:03:45:03:e1: eb:88:4d:d2:53:0f:57:f8:75:32:be:18:3d:c6:fa:dc:d1:22: 32:ff:ca:fb:3e:a6:a1:24:62:03:e6:4e:5a:20:8d:2f:83:07: 2c:2d:f2:29:9a:1a:29:06:45:85:15:c4:2c:a2:6b:51:75:cd: dc:cf:91:4a:d6:09:52:5d:ba:7e:89:38:8b:81:b7:ed:46:cc: 11:c5:31:be:5e:83:b0:9f:b0:1d:f2:7f:d5:7b:be:c9:eb:c7: 22:f9:e2:32:ca:a1:f2:53:6b:13:0c:18:8a:c4:26:54:3f:cc: bd:8f:c3:5b:05:f5:3b:f8:92:66:a1:74:f3:e1:ef:2b:d1:83: ff:c9:f9:6f:1d:82:6c:34:af:06:3a:11:05:41:fe:93:9e:15: 3c:dc:b5:75:ca:f2:62:4f:a3:53:61:f2:91:4d:2d:07:be:d5: 61:14:d5:ee:23:b6:14:e5:77:1b:f2:71:c4:60:8d:c4:6d:5a: a9:bc:d0:17:16:b0:5c:f4:d6:52:51:13:1e:99:6d:52:4a:03: 58:0c:7e:1e:a3:ab:74:9d:5b:74:fc:70:51:0d:af:cf:a3:cd: 0a:5d:3e:af:e4:86:1a:d4:06:fb:e8:7a:f2:4d:e4:7b:f0:0d: e9:cd:e3:61 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNE01ShOWQeYRrqHIbGBtJbqk7hEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0 MjNBOTBBRTAeFw0yNjA1MTMwOTUzMTVaFw0yNzA1MTIwOTU4MTVaMDMxMTAvBgNV BAMTKDM3QkMzNjQzQjNENTA4RUU2QkZBN0YxOTlFMjVENUY1RTM0MzBFNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtXLkc8Dc7o/yAsSwC+D0MViq0 1BnQSc31WshSsjn2AduMdpVDg8bSSbbOafB07hin01ff8bwzPE+2CsD9eu0wRH6V Ub7/yTcHhF6Q2f3KDyG9ZBMChSAOuaHcW2Ef/Ft84EaWuvFxcfMufaQ9ozE/D4YM d3gmtgtLXZOvzxeod799DdAk5s0Pl2b34HM6PzIwZHJBOfUnoOylUu0SPyUOSOlW j19aMrRyUMWYmBeZNdiwcLyVy7s/h3YJbop3M2o5NJt27S+O1ViEuTwd6KucZ+UP GWo/el2KWElHTwDcI1WrVvZjFc7unZ4rlnC2x/DSE1DtvXO0eq2ykK2sXsQpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUN7w2Q7PVCO5r+n8ZniXV9eNDDkMwHwYDVR0j BBgwFoAU1VSQ+4hVUjB6HSceAlE7TUI6kK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTk4Mjg1MC8wL0Q1NTQ5MEZCODg1NTUyMzA3QTFEMjcxRTAyNTEz QjRENDIzQTkwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5ODI4NTAvMC9BUzEzMzExMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBgQYIKwYBBQUHAQcBAf8EcjBwMG4E AgABMGgDBAB7ZwQDBAF7ZwowDAMEAHtnEQMEAHtnEgMEAHtnFwMEAHtnPgMEAHtn SzAMAwQAe2dTAwQBe2dUMAwDBAB7Z1sDBAB7Z1wDBAR7Z3AwDAMEA8uCKAMEAMuC KgMEAMuCLAMEAMuCLjANBgkqhkiG9w0BAQsFAAOCAQEAk58CbwaezIfemDD3yboD RQPh64hN0lMPV/h1Mr4YPcb63NEiMv/K+z6moSRiA+ZOWiCNL4MHLC3yKZoaKQZF hRXELKJrUXXN3M+RStYJUl26fok4i4G37UbMEcUxvl6DsJ+wHfJ/1Xu+yevHIvni Msqh8lNrEwwYisQmVD/MvY/DWwX1O/iSZqF08+HvK9GD/8n5bx2CbDSvBjoRBUH+ k54VPNy1dcryYk+jU2HykU0tB77VYRTV7iO2FOV3G/JxxGCNxG1aqbzQFxawXPTW UlETHpltUkoDWAx+HqOrdJ1bdPxwUQ2vz6PNCl0+r+SGGtQG++h68k3ke/AN6c3j YQ== -----END CERTIFICATE-----Generated at Wed May 13 17:09:38 2026 by rpki-client