$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139767.roa File: AS139767.roa (raw, json) Hash identifier: 81/m4r3NwuahNCpuhrSpNzBygkuQpPxrJwB8DlLpJqQ= Subject key identifier: 5D:04:56:38:69:49:1B:D2:3D:86:A2:97:5C:F8:D2:2B:EC:64:D1:B1 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 5EDDA6325EE30E902B52995FCD114D0E71E2FB59 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139767.roa Signing time: Fri 11 Sep 2026 16:04:26 +0000 ROA not before: Fri 11 Sep 2026 15:59:26 +0000 ROA not after: Fri 10 Sep 2027 16:04:26 +0000 asID: 139767 IP address blocks: 42.99.63.0/24 maxlen: 24 240e:40:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:dd:a6:32:5e:e3:0e:90:2b:52:99:5f:cd:11:4d:0e:71:e2:fb:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Sep 11 15:59:26 2026 GMT Not After : Sep 10 16:04:26 2027 GMT Subject: CN=5D04563869491BD23D86A2975CF8D22BEC64D1B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:8a:7b:4f:06:0f:b8:fa:de:bd:2a:77:cb: 76:1c:0d:2d:f8:b4:53:8c:ee:e1:2b:e3:b5:a1:77: 76:54:5c:61:f0:c1:c2:f6:5b:61:66:f7:5f:6a:21: 0e:a5:a3:b5:bb:06:93:5b:aa:34:76:db:bc:12:06: b5:bc:62:fc:6a:7d:b9:33:12:32:e8:c4:43:22:15: a8:63:8f:c8:eb:79:cf:32:7c:fd:b6:22:de:88:3b: f5:43:8f:1e:14:e9:46:ea:24:32:99:90:52:6c:b3: 97:60:6e:c6:a3:1a:b6:8e:bc:7a:9e:72:42:70:f8: b3:25:1f:c6:87:d6:d9:b5:04:7f:c2:2c:32:43:ef: d5:c4:64:c4:90:46:7f:65:f1:25:b9:2f:3c:15:dd: 06:d6:4a:b4:ef:19:ce:8b:fd:f7:f6:c7:e1:03:db: 0e:4a:cf:e0:73:7c:b3:a1:8b:eb:34:7f:07:47:30: 7b:bd:30:0f:cf:74:12:36:74:50:b0:46:e7:11:2d: d0:39:35:3d:99:bc:d9:29:61:d7:70:c7:88:d3:2b: e3:2e:48:79:a5:cf:d9:aa:67:20:71:8d:b4:5d:78: 27:78:fa:85:7f:22:37:1f:ea:c5:3a:68:d2:34:b1: 97:63:c6:89:9d:c2:a7:0c:2f:07:fe:8b:0f:d2:35: f9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:04:56:38:69:49:1B:D2:3D:86:A2:97:5C:F8:D2:2B:EC:64:D1:B1 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139767.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.99.63.0/24 IPv6: 240e:40:14::/48 Signature Algorithm: sha256WithRSAEncryption 05:ff:a9:c2:3a:87:7d:7d:dd:13:2e:12:4d:19:08:63:08:d3: 9f:56:15:41:ec:86:f3:2f:bd:a7:84:73:dd:c6:52:c1:99:4d: ac:53:09:b5:0d:00:05:5a:23:e5:71:e3:54:2e:1c:26:11:59: 1b:fa:e2:f5:6b:85:a7:0e:d5:94:e4:fa:34:2a:38:62:cc:10: 75:b5:50:2c:88:6b:ba:49:8d:b3:74:c4:25:28:e5:88:ac:d0: 18:26:45:f9:1c:af:1d:22:f7:62:0b:3a:16:36:f7:01:56:03: c7:59:75:56:52:8d:9a:c3:c1:93:04:dc:5e:48:70:8e:05:d5: 30:13:0f:4b:a7:b2:97:b7:19:2d:19:60:f3:0f:58:b1:f5:11: 27:8d:bd:0a:c9:9d:e1:29:f2:f5:c9:e8:41:8d:1c:6d:14:61: b8:7d:de:36:7c:24:19:18:ab:60:1d:c8:d6:72:17:ab:b9:78: c6:ab:87:68:81:42:9f:3b:69:e0:5f:9f:5e:fd:26:f3:03:de: 0c:ad:e8:e9:4e:a4:59:9a:1c:9c:6c:10:95:cd:4c:fa:c4:26: 98:f4:b1:1f:5c:ce:36:0f:20:fe:8d:9a:2a:34:b7:89:16:07: 74:5a:ab:89:bb:ef:22:13:32:f5:29:77:14:12:e0:c7:47:98: 6a:ea:75:04 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUXt2mMl7jDpArUplfzRFNDnHi+1kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDkxMTE1NTkyNloX DTI3MDkxMDE2MDQyNlowMzExMC8GA1UEAxMoNUQwNDU2Mzg2OTQ5MUJEMjNEODZB Mjk3NUNGOEQyMkJFQzY0RDFCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9VintPBg+4+t69KnfLdhwNLfi0U4zu4SvjtaF3dlRcYfDBwvZbYWb3X2oh DqWjtbsGk1uqNHbbvBIGtbxi/Gp9uTMSMujEQyIVqGOPyOt5zzJ8/bYi3og79UOP HhTpRuokMpmQUmyzl2BuxqMato68ep5yQnD4syUfxofW2bUEf8IsMkPv1cRkxJBG f2XxJbkvPBXdBtZKtO8Zzov99/bH4QPbDkrP4HN8s6GL6zR/B0cwe70wD890EjZ0 ULBG5xEt0Dk1PZm82Slh13DHiNMr4y5IeaXP2apnIHGNtF14J3j6hX8iNx/qxTpo 0jSxl2PGiZ3CpwwvB/6LD9I1+bUCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRdBFY4 aUkb0j2Gopdc+NIr7GTRsTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM5NzY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAKmM/MA8EAgACMAkDBwAkDgBA ABQwDQYJKoZIhvcNAQELBQADggEBAAX/qcI6h3193RMuEk0ZCGMI059WFUHshvMv vaeEc93GUsGZTaxTCbUNAAVaI+Vx41QuHCYRWRv64vVrhacO1ZTk+jQqOGLMEHW1 UCyIa7pJjbN0xCUo5Yis0BgmRfkcrx0i92ILOhY29wFWA8dZdVZSjZrDwZME3F5I cI4F1TATD0unspe3GS0ZYPMPWLH1ESeNvQrJneEp8vXJ6EGNHG0UYbh93jZ8JBkY q2AdyNZyF6u5eMarh2iBQp87aeBfn179JvMD3gyt6OlOpFmaHJxsEJXNTPrEJpj0 sR9czjYPIP6Nmio0t4kWB3Raq4m77yITMvUpdxQS4MdHmGrqdQQ= -----END CERTIFICATE-----Generated at Sat Sep 26 18:05:47 2026 by rpki-client