$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS135377.roa File: AS135377.roa (raw, json) Hash identifier: o11I7KoW09P9vk7abM9yBKCI57QV083jGUMXETS2wvU= Subject key identifier: AE:DA:58:FF:CE:F7:5B:7C:4D:44:E2:4E:A5:88:86:9B:E4:28:3C:BF Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 7E629776A5F17485E027863B82ED69B512282D81 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS135377.roa Signing time: Tue 12 May 2026 09:41:10 +0000 ROA not before: Tue 12 May 2026 09:36:10 +0000 ROA not after: Tue 11 May 2027 09:41:10 +0000 asID: 135377 IP address blocks: 42.240.250.0/24 maxlen: 24 42.240.251.0/24 maxlen: 24 42.240.252.0/24 maxlen: 24 42.240.253.0/24 maxlen: 24 42.240.254.0/24 maxlen: 24 42.240.255.0/24 maxlen: 24 101.237.230.0/24 maxlen: 24 101.237.231.0/24 maxlen: 24 101.237.232.0/24 maxlen: 24 101.237.233.0/24 maxlen: 24 101.237.234.0/24 maxlen: 24 101.237.235.0/24 maxlen: 24 101.237.236.0/24 maxlen: 24 101.237.237.0/24 maxlen: 24 101.237.238.0/24 maxlen: 24 101.237.239.0/24 maxlen: 24 101.237.240.0/24 maxlen: 24 101.237.241.0/24 maxlen: 24 101.237.242.0/24 maxlen: 24 101.237.243.0/24 maxlen: 24 101.237.244.0/24 maxlen: 24 101.237.246.0/24 maxlen: 24 101.237.247.0/24 maxlen: 24 101.237.248.0/24 maxlen: 24 101.237.249.0/24 maxlen: 24 101.237.251.0/24 maxlen: 24 101.237.252.0/24 maxlen: 24 101.237.253.0/24 maxlen: 24 101.237.254.0/24 maxlen: 24 101.237.255.0/24 maxlen: 24 106.75.192.0/24 maxlen: 24 106.75.193.0/24 maxlen: 24 106.75.194.0/24 maxlen: 24 106.75.195.0/24 maxlen: 24 106.75.196.0/24 maxlen: 24 106.75.197.0/24 maxlen: 24 106.75.198.0/24 maxlen: 24 106.75.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:62:97:76:a5:f1:74:85:e0:27:86:3b:82:ed:69:b5:12:28:2d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: May 12 09:36:10 2026 GMT Not After : May 11 09:41:10 2027 GMT Subject: CN=AEDA58FFCEF75B7C4D44E24EA588869BE4283CBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:72:1d:f6:24:21:76:63:67:6e:75:cf:45:68: a2:5e:40:2d:1b:3b:28:d1:11:f3:63:a6:eb:6e:ad: ee:28:8c:2c:39:49:36:56:e7:80:57:f3:30:d0:de: 90:52:78:e0:d5:71:8c:3a:2d:5b:e5:3f:7e:19:85: b3:eb:c5:57:ac:a3:72:ba:1c:92:b4:40:56:12:bb: e4:d0:01:4c:1a:44:eb:00:81:37:4e:bb:d8:0a:58: 15:d4:bd:1b:0d:d4:db:96:a5:74:57:3a:65:07:b7: 75:50:c8:2d:f4:85:a5:c3:6f:23:80:da:f5:c3:ae: a5:91:25:03:a4:be:d0:da:54:42:59:a2:a6:35:c7: 3e:78:7f:66:61:de:ad:ed:31:b2:a9:08:fb:ba:bb: 0a:90:49:a2:68:e9:2f:21:c5:27:cf:b7:e8:b2:dc: 10:f0:0b:19:0d:b4:a7:26:08:c9:d9:d7:e6:13:ce: 84:b7:8b:59:95:5c:f9:04:47:58:fa:eb:0a:9a:17: 60:29:24:93:76:ed:23:87:bf:7a:af:9a:0b:bc:df: 35:a3:cd:3a:5c:15:79:01:1c:fc:3f:b5:c8:11:54: b8:6a:ea:1f:58:9a:89:04:60:e2:99:90:57:83:8e: 2d:f5:97:85:78:bb:93:c5:67:00:5d:58:cc:50:46: ba:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DA:58:FF:CE:F7:5B:7C:4D:44:E2:4E:A5:88:86:9B:E4:28:3C:BF X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS135377.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.240.250.0-42.240.255.255 101.237.230.0-101.237.244.255 101.237.246.0-101.237.249.255 101.237.251.0-101.237.255.255 106.75.192.0/21 Signature Algorithm: sha256WithRSAEncryption 6a:c7:72:27:91:18:80:d5:4c:ad:9c:44:94:d6:ac:b8:a5:8f: 61:92:3c:75:e1:bf:6e:51:fb:17:a1:ea:e2:be:3e:2b:48:27: 54:64:cd:7a:7f:d0:54:34:b5:04:2a:72:b3:f6:9e:9e:03:a9: cc:bb:ae:c6:c3:c8:73:62:ce:9d:a0:55:d0:5e:d6:af:93:31: c9:e3:67:86:48:12:01:5d:e2:b8:e3:e5:68:19:57:cd:61:00: 22:a1:34:45:be:8d:2c:5d:0f:7e:d1:23:17:24:ae:9e:be:bb: 27:8f:cc:2e:07:38:38:5d:f2:3e:eb:3d:49:1f:ab:74:dd:2d: c0:88:82:87:71:21:28:31:38:04:d7:ef:e4:ba:f5:55:e8:3b: ad:15:c6:44:6d:de:d8:3d:03:11:2b:c1:ad:af:c5:5c:5d:71: 45:4d:0d:d5:33:2c:b1:64:fe:d3:49:43:83:36:b8:9a:b9:28: 9e:72:61:5a:e8:91:dd:a4:c8:d9:a2:86:3f:79:c2:2d:34:24: 6a:2a:ba:9e:70:de:32:82:6f:61:f6:04:b5:66:5e:ea:59:2f: 70:81:3d:bc:7b:ba:8d:35:66:95:43:5a:8e:f8:b2:d3:cc:0b: 90:a8:b9:46:95:c2:3c:97:4a:7c:bc:79:86:d1:53:4e:fb:7e: e7:c9:08:29 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUfmKXdqXxdIXgJ4Y7gu1ptRIoLYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA1MTIwOTM2MTBaFw0yNzA1MTEwOTQxMTBaMDMxMTAvBgNV BAMTKEFFREE1OEZGQ0VGNzVCN0M0RDQ0RTI0RUE1ODg4NjlCRTQyODNDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTch32JCF2Y2dudc9FaKJeQC0b OyjREfNjputure4ojCw5STZW54BX8zDQ3pBSeODVcYw6LVvlP34ZhbPrxVeso3K6 HJK0QFYSu+TQAUwaROsAgTdOu9gKWBXUvRsN1NuWpXRXOmUHt3VQyC30haXDbyOA 2vXDrqWRJQOkvtDaVEJZoqY1xz54f2Zh3q3tMbKpCPu6uwqQSaJo6S8hxSfPt+iy 3BDwCxkNtKcmCMnZ1+YTzoS3i1mVXPkER1j66wqaF2ApJJN27SOHv3qvmgu83zWj zTpcFXkBHPw/tcgRVLhq6h9YmokEYOKZkFeDji31l4V4u5PFZwBdWMxQRrqLAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUrtpY/873W3xNROJOpYiGm+QoPL8wHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC9BUzEzNTM3Ny5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBVBggrBgEFBQcBBwEB/wRGMEQwQgQC AAEwPDALAwQBKvD6AwMAKvAwDAMEAWXt5gMEAGXt9DAMAwQBZe32AwQBZe34MAsD BABl7fsDAwFl7AMEA2pLwDANBgkqhkiG9w0BAQsFAAOCAQEAasdyJ5EYgNVMrZxE lNasuKWPYZI8deG/blH7F6Hq4r4+K0gnVGTNen/QVDS1BCpys/aengOpzLuuxsPI c2LOnaBV0F7Wr5MxyeNnhkgSAV3iuOPlaBlXzWEAIqE0Rb6NLF0PftEjFySunr67 J4/MLgc4OF3yPus9SR+rdN0twIiCh3EhKDE4BNfv5Lr1Veg7rRXGRG3e2D0DESvB ra/FXF1xRU0N1TMssWT+00lDgza4mrkonnJhWuiR3aTI2aKGP3nCLTQkaiq6nnDe MoJvYfYEtWZe6lkvcIE9vHu6jTVmlUNajviy08wLkKi5RpXCPJdKfLx5htFTTvt+ 58kIKQ== -----END CERTIFICATE-----Generated at Wed May 13 05:26:21 2026 by rpki-client