$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS139327.roa File: AS139327.roa (raw, json) Hash identifier: a5Dkc0fVZIGTanaavReJwU+PJlDnMqrU8dAV2vuOe9Y= Subject key identifier: 3F:47:1A:66:79:E4:20:CB:8A:65:2C:10:A2:C5:0A:F5:36:8B:1F:EE Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 57C39A5A20909E24A67C950A5EF79108D9CDEBF2 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS139327.roa Signing time: Tue 12 May 2026 09:40:17 +0000 ROA not before: Tue 12 May 2026 09:35:17 +0000 ROA not after: Tue 11 May 2027 09:40:17 +0000 asID: 139327 IP address blocks: 42.240.252.0/24 maxlen: 24 42.240.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c3:9a:5a:20:90:9e:24:a6:7c:95:0a:5e:f7:91:08:d9:cd:eb:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: May 12 09:35:17 2026 GMT Not After : May 11 09:40:17 2027 GMT Subject: CN=3F471A6679E420CB8A652C10A2C50AF5368B1FEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:3a:43:73:06:20:3a:66:31:c5:e6:34:f0: 9c:2b:99:2f:0c:88:eb:ff:3a:1c:6a:e0:a7:e0:42: dc:be:90:60:91:0b:07:75:d0:3e:33:cc:ce:ee:d2: 00:94:e1:44:67:76:42:49:cf:3f:a8:4a:0c:b5:6d: 7d:c0:87:ac:76:58:6c:80:b7:a9:7f:83:8b:8c:de: 05:fd:54:19:31:a4:e6:19:85:40:d0:b5:97:0b:3d: 19:bc:54:24:cd:3b:a5:15:09:6d:c2:dd:08:e3:3f: c7:53:05:c2:d4:0d:eb:8e:5f:2a:72:3d:c6:cd:ba: 7a:6f:3b:60:85:6c:f3:fd:70:f0:89:18:9f:d3:67: a4:85:59:44:03:2e:94:84:ad:36:cd:ea:f9:2f:81: 97:99:ee:88:d0:16:cd:84:26:d8:4b:93:5b:98:51: b7:7b:59:73:49:d8:73:83:86:14:7e:3b:c8:7d:91: d2:72:67:0e:e9:00:2c:23:d6:d5:e9:cc:d3:5b:5c: ae:48:37:61:88:5b:08:19:97:8f:b9:70:21:27:c1: 4f:3a:7e:f0:58:32:75:5c:b6:84:4a:42:ee:53:ee: e8:15:f7:97:d3:01:6b:90:f0:69:a3:cd:1f:4e:71: 70:61:af:8c:c7:3e:7c:16:29:e5:a8:98:3c:31:00: 78:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:47:1A:66:79:E4:20:CB:8A:65:2C:10:A2:C5:0A:F5:36:8B:1F:EE X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS139327.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.240.252.0/24 42.240.255.0/24 Signature Algorithm: sha256WithRSAEncryption ae:52:dc:32:63:3e:a9:4d:13:31:8a:bc:2a:fb:72:bb:c9:06: 5e:04:b5:1d:23:02:e1:16:43:33:8a:da:71:81:8f:c5:c4:dd: 9f:ac:e3:3c:06:86:34:d2:72:64:05:10:b6:9a:70:90:83:39: 72:12:e5:4a:9e:b4:ee:40:8d:b0:31:66:4f:d0:bf:30:7d:de: 4d:61:3f:f3:6c:33:6e:35:e5:6e:86:3c:89:a5:f4:c5:0d:09: 59:03:cb:4b:7a:74:d3:2d:40:e6:d4:4c:2b:b7:fb:de:3c:b2: ed:64:3f:0d:b4:ab:83:f2:4a:9c:81:b4:b6:51:52:89:30:52: 13:e4:04:e7:db:cb:cd:8a:81:2e:0c:03:3f:d1:a6:70:fd:7a: d3:c2:7b:cc:d7:e0:d6:9b:d4:9d:31:10:55:6e:57:e2:82:a2: 40:ac:ff:91:c1:24:65:03:4a:8a:06:13:78:13:41:b3:2f:6c: 97:08:a0:3c:80:fc:11:f6:4a:6f:a9:0b:c7:7a:c2:cc:95:75: c6:f5:c4:0e:02:84:d2:9c:23:c8:35:aa:70:04:9d:43:30:be: dc:11:b0:d8:25:02:02:e6:69:a2:9e:28:35:87:ad:aa:30:b1: d0:4f:78:d7:f2:82:fe:91:18:45:a5:74:33:9b:5b:1b:dc:df: c9:b1:69:6c -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUV8OaWiCQniSmfJUKXveRCNnN6/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA1MTIwOTM1MTdaFw0yNzA1MTEwOTQwMTdaMDMxMTAvBgNV BAMTKDNGNDcxQTY2NzlFNDIwQ0I4QTY1MkMxMEEyQzUwQUY1MzY4QjFGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKMTpDcwYgOmYxxeY08JwrmS8M iOv/Ohxq4KfgQty+kGCRCwd10D4zzM7u0gCU4URndkJJzz+oSgy1bX3Ah6x2WGyA t6l/g4uM3gX9VBkxpOYZhUDQtZcLPRm8VCTNO6UVCW3C3QjjP8dTBcLUDeuOXypy PcbNunpvO2CFbPP9cPCJGJ/TZ6SFWUQDLpSErTbN6vkvgZeZ7ojQFs2EJthLk1uY Ubd7WXNJ2HODhhR+O8h9kdJyZw7pACwj1tXpzNNbXK5IN2GIWwgZl4+5cCEnwU86 fvBYMnVctoRKQu5T7ugV95fTAWuQ8GmjzR9OcXBhr4zHPnwWKeWomDwxAHjdAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUP0caZnnkIMuKZSwQosUK9TaLH+4wHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC9BUzEzOTMyNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEACrw/AMEACrw/zANBgkqhkiG9w0BAQsFAAOCAQEArlLcMmM+qU0TMYq8 Kvtyu8kGXgS1HSMC4RZDM4racYGPxcTdn6zjPAaGNNJyZAUQtppwkIM5chLlSp60 7kCNsDFmT9C/MH3eTWE/82wzbjXlboY8iaX0xQ0JWQPLS3p00y1A5tRMK7f73jyy 7WQ/DbSrg/JKnIG0tlFSiTBSE+QE59vLzYqBLgwDP9GmcP1608J7zNfg1pvUnTEQ VW5X4oKiQKz/kcEkZQNKigYTeBNBsy9slwigPID8EfZKb6kLx3rCzJV1xvXEDgKE 0pwjyDWqcASdQzC+3BGw2CUCAuZpop4oNYetqjCx0E941/KC/pEYRaV0M5tbG9zf ybFpbA== -----END CERTIFICATE-----Generated at Wed May 13 14:09:31 2026 by rpki-client