$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS142002.roa File: AS142002.roa (raw, json) Hash identifier: zVemb8CF/M72zE2Sya5aIWcssEz9PjZO0UbY2/kpgv4= Subject key identifier: FE:4D:68:39:4F:96:08:EE:91:41:00:F4:51:62:0A:48:D7:16:9A:93 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 1E391605B8AF57A24585BDD17552F0D17FCAE3FE Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS142002.roa Signing time: Tue 12 May 2026 09:40:16 +0000 ROA not before: Tue 12 May 2026 09:35:16 +0000 ROA not after: Tue 11 May 2027 09:40:16 +0000 asID: 142002 IP address blocks: 101.237.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:39:16:05:b8:af:57:a2:45:85:bd:d1:75:52:f0:d1:7f:ca:e3:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: May 12 09:35:16 2026 GMT Not After : May 11 09:40:16 2027 GMT Subject: CN=FE4D68394F9608EE914100F451620A48D7169A93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:db:2e:13:e1:0a:be:08:76:11:1e:3e:8e: d7:5c:0a:24:25:3f:1d:cf:2a:3c:62:45:2a:16:9d: 2b:cb:31:cd:93:05:d2:d2:08:b4:57:cb:a8:b5:6d: 9a:fe:7e:e2:60:e8:e5:b5:59:05:48:12:61:33:d8: a8:72:6f:43:cd:eb:26:e2:44:0b:ba:bb:4d:34:07: 74:de:4b:26:41:e6:5d:5c:72:99:5f:57:f0:c9:1d: 35:9a:db:01:54:94:c7:4b:de:f9:a2:ef:fa:1c:8e: 29:45:73:8d:03:cb:f8:e3:69:76:0b:5f:1a:54:34: cb:94:96:d3:9e:68:d5:53:1c:ed:03:15:2d:59:ab: cf:d1:85:34:25:90:f1:0a:65:eb:0d:c0:11:b6:95: 26:2f:81:73:b9:99:4d:b3:72:73:ee:8a:9a:6e:59: ba:6c:24:9b:b4:2a:04:bc:da:d6:bc:66:8c:89:23: 8e:83:a4:a1:b2:76:f0:7e:bd:d6:79:fc:dc:28:22: de:91:2d:c2:17:f2:08:fe:21:b2:68:8d:f5:ce:29: 3e:22:5a:1a:d2:82:9c:75:25:d5:76:aa:d6:2c:fb: e1:9f:e8:98:81:8d:85:e3:6e:2d:2c:d7:00:97:50: 55:bd:07:2a:f2:ad:c4:e8:02:14:c7:aa:70:6b:9d: 3f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4D:68:39:4F:96:08:EE:91:41:00:F4:51:62:0A:48:D7:16:9A:93 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS142002.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.237.245.0/24 Signature Algorithm: sha256WithRSAEncryption b8:28:d6:57:93:68:ef:9e:9a:d1:d5:62:1f:e1:9b:fb:da:89: f8:24:c4:99:57:b8:25:ec:82:5e:cd:4a:b0:48:61:be:b2:7f: b0:e7:8e:8f:da:f8:48:29:52:35:13:bd:86:f8:75:4f:75:a3: 89:8e:92:26:d6:38:40:73:56:77:6f:2f:0b:de:20:52:65:c5: e8:83:75:a2:05:ca:3e:c7:a3:34:62:8a:31:ff:5e:48:95:ff: 20:c5:9f:40:11:37:1c:15:49:90:2a:96:66:07:8f:58:99:5c: 50:53:8c:d3:5d:0a:3e:95:ee:b0:84:76:0a:62:fd:9f:f7:f4: 64:bf:04:a8:3e:bb:e0:bd:51:dc:72:a3:3a:54:26:06:4a:7f: a5:67:b4:40:81:b4:23:86:31:a9:51:a1:03:70:fb:08:6f:20: 9e:40:95:19:2b:e5:14:ab:02:81:ed:0e:0a:80:41:26:69:ac: bc:81:05:15:3c:e2:13:4b:d5:ae:0d:36:f7:dd:e1:66:7c:ef: 0e:c0:74:2b:0b:e1:fd:39:71:53:d3:80:df:77:20:d2:d7:e0: 79:54:9a:a0:cf:5d:f1:db:f0:65:85:59:3d:fc:42:e7:e2:9e: 2d:2a:af:97:64:f2:ec:fb:c2:7e:21:47:3f:ef:60:47:63:a1: 4b:16:2d:d9 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUHjkWBbivV6JFhb3RdVLw0X/K4/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA1MTIwOTM1MTZaFw0yNzA1MTEwOTQwMTZaMDMxMTAvBgNV BAMTKEZFNEQ2ODM5NEY5NjA4RUU5MTQxMDBGNDUxNjIwQTQ4RDcxNjlBOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXdsuE+EKvgh2ER4+jtdcCiQl Px3PKjxiRSoWnSvLMc2TBdLSCLRXy6i1bZr+fuJg6OW1WQVIEmEz2Khyb0PN6ybi RAu6u000B3TeSyZB5l1ccplfV/DJHTWa2wFUlMdL3vmi7/ocjilFc40Dy/jjaXYL XxpUNMuUltOeaNVTHO0DFS1Zq8/RhTQlkPEKZesNwBG2lSYvgXO5mU2zcnPuippu WbpsJJu0KgS82ta8ZoyJI46DpKGydvB+vdZ5/NwoIt6RLcIX8gj+IbJojfXOKT4i WhrSgpx1JdV2qtYs++Gf6JiBjYXjbi0s1wCXUFW9ByryrcToAhTHqnBrnT+ZAgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQU/k1oOU+WCO6RQQD0UWIKSNcWmpMwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC9BUzE0MjAwMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGXt9TANBgkqhkiG9w0BAQsFAAOCAQEAuCjWV5No756a0dViH+Gb+9qJ +CTEmVe4JeyCXs1KsEhhvrJ/sOeOj9r4SClSNRO9hvh1T3WjiY6SJtY4QHNWd28v C94gUmXF6IN1ogXKPsejNGKKMf9eSJX/IMWfQBE3HBVJkCqWZgePWJlcUFOM010K PpXusIR2CmL9n/f0ZL8EqD674L1R3HKjOlQmBkp/pWe0QIG0I4YxqVGhA3D7CG8g nkCVGSvlFKsCge0OCoBBJmmsvIEFFTziE0vVrg02993hZnzvDsB0Kwvh/TlxU9OA 33cg0tfgeVSaoM9d8dvwZYVZPfxC5+KeLSqvl2Ty7PvCfiFHP+9gR2OhSxYt2Q== -----END CERTIFICATE-----Generated at Wed May 13 06:56:58 2026 by rpki-client