$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS139128.roa File: AS139128.roa (raw, json) Hash identifier: jjQOsoTI4ciNJZRRLR3qhwj6EHyP2ISDBZmfvSvh3wo= Subject key identifier: F8:89:2B:89:77:EC:9A:A7:74:BE:1A:97:34:A8:53:33:9D:64:11:59 Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Certificate serial: 46F9B0C285015FF1DD3ED0E99CF5916E47DC865C Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS139128.roa Signing time: Mon 20 Apr 2026 08:45:03 +0000 ROA not before: Mon 20 Apr 2026 08:40:03 +0000 ROA not after: Mon 19 Apr 2027 08:45:03 +0000 asID: 139128 IP address blocks: 115.182.0.0/24 maxlen: 24 115.182.2.0/24 maxlen: 24 115.182.5.0/24 maxlen: 24 115.182.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f9:b0:c2:85:01:5f:f1:dd:3e:d0:e9:9c:f5:91:6e:47:dc:86:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Validity Not Before: Apr 20 08:40:03 2026 GMT Not After : Apr 19 08:45:03 2027 GMT Subject: CN=F8892B8977EC9AA774BE1A9734A853339D641159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:16:91:56:92:f7:f3:f8:d6:48:56:51:51: 84:3f:76:a0:a4:5e:7b:95:1c:18:0a:0a:47:7b:37: 41:e6:4e:f1:91:8c:dc:f6:da:cd:59:cf:8d:1f:86: 21:55:c9:7b:5c:08:5a:79:b4:fd:86:f3:40:e1:d2: 8d:a4:d6:15:e9:b6:d0:61:c3:e6:f8:59:04:9c:c9: b6:ae:a3:76:2a:ce:7a:4e:98:d1:42:91:f8:ac:0d: dd:56:7f:c8:5d:3e:15:f2:a3:f1:68:29:eb:1f:4b: 69:91:c7:03:24:2a:2a:b5:a5:a5:58:09:b5:6b:d6: d6:9a:0e:82:f6:9f:a9:1b:af:2c:c9:2c:95:35:69: 35:c5:44:01:73:21:d4:bb:b1:36:d0:81:08:f3:97: 92:a7:dd:a2:e7:f5:63:b8:d8:b5:8b:03:97:8b:0f: d9:50:62:02:46:e9:e5:6f:f0:f0:ac:3e:71:0e:b7: 93:27:1c:7f:18:27:c2:56:48:b3:cd:15:96:6a:91: 8b:ae:44:ae:d4:00:53:b4:14:d1:ef:79:4b:be:a1: 15:e4:95:ab:cd:90:e0:be:b6:45:a1:44:fc:55:c1: 2e:e8:80:9d:f2:e2:17:e6:09:a5:1e:26:4c:7f:11: 8d:62:3b:a1:0d:aa:1b:2e:fd:63:37:08:42:31:d5: c7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:89:2B:89:77:EC:9A:A7:74:BE:1A:97:34:A8:53:33:9D:64:11:59 X509v3 Authority Key Identifier: keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS139128.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.182.0.0/24 115.182.2.0/24 115.182.5.0/24 115.182.7.0/24 Signature Algorithm: sha256WithRSAEncryption 32:38:c1:b8:64:35:98:59:0a:53:5b:d3:f2:4e:56:e7:03:d5: 4e:2a:cb:ef:99:b9:ed:1b:af:2f:80:35:ff:f9:b7:ad:92:0a: f4:46:92:1a:d5:1c:bb:5d:8d:28:7d:ff:7b:4f:b9:c7:76:6b: e7:f2:9b:0f:d9:34:aa:e5:c9:03:38:01:24:8c:42:cf:f0:e4: 0a:ca:f8:31:6d:30:ef:63:a2:02:d9:c7:47:18:b3:34:09:47: c9:35:d0:9c:a9:f1:97:58:e3:15:91:89:9f:3a:f7:1b:48:04: 0c:83:f2:14:c5:ad:4b:0d:b1:ae:49:10:70:f2:bd:87:88:1b: d7:87:e4:15:c2:c4:44:c9:a1:30:11:32:e2:b7:49:45:e2:22: 9c:d2:b3:6e:e1:c5:a6:dd:30:77:6f:14:27:42:4f:be:ee:4d: 0d:63:55:14:49:43:fc:f0:25:b0:02:76:13:37:6b:7b:c5:4c: 73:aa:b2:9a:16:67:73:08:d6:21:93:e7:90:41:64:8f:f1:ab: 24:ee:fb:90:ed:9c:ce:93:a3:70:85:1d:7f:e6:8f:9d:e9:37: bf:69:d2:44:2f:cc:88:75:bd:55:be:b4:76:dc:ab:e0:cb:b0: 0a:e5:17:d3:eb:83:ba:99:35:02:c8:de:d9:41:b4:c6:57:f7: c4:fa:d2:62 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIURvmwwoUBX/HdPtDpnPWRbkfchlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky MjJFOEY5RjAeFw0yNjA0MjAwODQwMDNaFw0yNzA0MTkwODQ1MDNaMDMxMTAvBgNV BAMTKEY4ODkyQjg5NzdFQzlBQTc3NEJFMUE5NzM0QTg1MzMzOUQ2NDExNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnBaRVpL38/jWSFZRUYQ/dqCk XnuVHBgKCkd7N0HmTvGRjNz22s1Zz40fhiFVyXtcCFp5tP2G80Dh0o2k1hXpttBh w+b4WQScybauo3YqznpOmNFCkfisDd1Wf8hdPhXyo/FoKesfS2mRxwMkKiq1paVY CbVr1taaDoL2n6kbryzJLJU1aTXFRAFzIdS7sTbQgQjzl5Kn3aLn9WO42LWLA5eL D9lQYgJG6eVv8PCsPnEOt5MnHH8YJ8JWSLPNFZZqkYuuRK7UAFO0FNHveUu+oRXk lavNkOC+tkWhRPxVwS7ogJ3y4hfmCaUeJkx/EY1iO6ENqhsu/WM3CEIx1ceVAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQU+IkriXfsmqd0vhqXNKhTM51kEVkwHwYDVR0j BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzA5NTU5MjQwNzM1NDU3MzEvMC9BUzEzOTEyOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQC AAEwGAMEAHO2AAMEAHO2AgMEAHO2BQMEAHO2BzANBgkqhkiG9w0BAQsFAAOCAQEA MjjBuGQ1mFkKU1vT8k5W5wPVTirL75m57RuvL4A1//m3rZIK9EaSGtUcu12NKH3/ e0+5x3Zr5/KbD9k0quXJAzgBJIxCz/DkCsr4MW0w72OiAtnHRxizNAlHyTXQnKnx l1jjFZGJnzr3G0gEDIPyFMWtSw2xrkkQcPK9h4gb14fkFcLERMmhMBEy4rdJReIi nNKzbuHFpt0wd28UJ0JPvu5NDWNVFElD/PAlsAJ2Ezdre8VMc6qymhZncwjWIZPn kEFkj/GrJO77kO2czpOjcIUdf+aPnek3v2nSRC/MiHW9Vb60dtyr4MuwCuUX0+uD upk1Asje2UG0xlf3xPrSYg== -----END CERTIFICATE-----Generated at Wed May 13 01:38:39 2026 by rpki-client