$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS132525.roa File: AS132525.roa (raw, json) Hash identifier: afahKFQ6Bt8YGNoqXZhU34laJEPbN+Z+WjhST1lW/Jc= Subject key identifier: EB:B8:0A:C3:FA:1B:8D:19:D1:08:18:26:93:80:7F:31:EF:7B:34:7E Certificate issuer: /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Certificate serial: 6E155E7202395962DDF58838E2771FF4C616627D Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS132525.roa Signing time: Wed 13 May 2026 08:26:56 +0000 ROA not before: Wed 13 May 2026 08:21:56 +0000 ROA not after: Wed 12 May 2027 08:26:56 +0000 asID: 132525 IP address blocks: 36.212.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:15:5e:72:02:39:59:62:dd:f5:88:38:e2:77:1f:f4:c6:16:62:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Validity Not Before: May 13 08:21:56 2026 GMT Not After : May 12 08:26:56 2027 GMT Subject: CN=EBB80AC3FA1B8D19D108182693807F31EF7B347E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:68:47:87:17:fd:6e:9f:79:25:55:3b:c0:5e: 1c:50:51:bd:be:7f:5e:e3:7e:d4:f4:b1:43:31:dc: e4:7b:90:43:10:b1:11:64:34:bb:64:dd:0f:e5:d2: cc:6c:33:65:b4:d5:41:f8:91:1f:53:17:b2:09:35: a7:77:bd:d1:82:1a:61:66:af:73:4d:1c:48:00:1e: e1:8d:c9:1c:b7:85:8e:57:75:57:0d:57:43:f3:97: db:ee:4f:28:3a:78:f3:5a:f8:87:5c:53:d1:6d:5c: 4e:9d:bf:4c:0e:7c:74:16:73:a9:c9:df:2f:f3:43: 31:6a:55:2a:34:c7:ce:36:d8:16:f6:28:dd:d8:27: 27:c2:26:e7:35:5f:04:14:e8:f3:4f:5b:7e:92:9e: ce:c6:d5:2c:f5:21:b6:09:e4:94:3f:f4:fb:8e:2a: 50:73:b9:92:d1:59:b1:54:fb:89:c8:60:b5:b5:cf: eb:ac:94:97:e4:3b:01:52:e3:a4:bf:ee:0d:21:17: 8b:62:37:44:bf:cd:75:d7:60:37:55:db:16:e5:9a: 20:60:86:eb:82:ca:2b:00:45:2c:0f:fe:64:42:40: cf:99:33:5b:22:d2:a7:79:66:07:9d:9f:21:95:e0: 28:57:35:5e:33:26:dc:82:cc:65:4e:fa:03:7d:5b: 79:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B8:0A:C3:FA:1B:8D:19:D1:08:18:26:93:80:7F:31:EF:7B:34:7E X509v3 Authority Key Identifier: keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS132525.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.212.181.0/24 Signature Algorithm: sha256WithRSAEncryption 84:26:6d:17:b4:62:e9:6d:28:43:54:a1:0a:a3:02:1d:66:36: 9a:55:17:ab:01:71:fd:61:e5:03:af:3b:e9:95:cb:84:95:b1: 7b:19:27:c1:ac:4f:a3:ae:dd:e9:90:01:49:f4:85:65:47:6e: 62:08:b8:5f:5d:2b:76:0b:90:fe:b8:5d:bf:b1:01:59:77:2e: b4:63:ff:7b:e2:4c:28:b7:7e:c5:46:c5:b2:1c:4c:6d:b6:5c: 2d:da:3e:ad:e1:19:c1:46:0b:05:c3:a7:ca:f2:fb:dd:d8:e1: 98:c7:0e:31:8a:b2:cb:53:9d:44:6f:14:0e:35:11:1e:f9:5a: d6:a5:7e:a9:5d:d8:67:47:62:44:f9:19:b9:04:23:c1:a0:e6: b5:98:f1:50:65:ac:bf:70:f8:e6:9c:03:5d:dc:a7:4c:70:3b: f6:d1:17:12:f5:35:73:5f:45:66:94:fc:2c:73:be:a2:25:a0: 1f:e8:e9:6e:c9:57:e1:98:71:c7:40:13:d5:af:fb:5e:ce:4f: 25:52:eb:2e:b3:ca:90:a4:c7:c6:14:c9:f3:7f:af:b5:25:69: fc:68:53:24:23:5a:bc:ee:75:0c:96:b9:f1:fd:f8:00:07:b2: 67:57:54:1e:07:32:0f:27:d2:0f:f9:74:06:74:61:b0:43:8b: bb:90:72:49 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUbhVecgI5WWLd9Yg44ncf9MYWYn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2 MzdFMEY2NjAeFw0yNjA1MTMwODIxNTZaFw0yNzA1MTIwODI2NTZaMDMxMTAvBgNV BAMTKEVCQjgwQUMzRkExQjhEMTlEMTA4MTgyNjkzODA3RjMxRUY3QjM0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoaEeHF/1un3klVTvAXhxQUb2+ f17jftT0sUMx3OR7kEMQsRFkNLtk3Q/l0sxsM2W01UH4kR9TF7IJNad3vdGCGmFm r3NNHEgAHuGNyRy3hY5XdVcNV0Pzl9vuTyg6ePNa+IdcU9FtXE6dv0wOfHQWc6nJ 3y/zQzFqVSo0x8422Bb2KN3YJyfCJuc1XwQU6PNPW36Sns7G1Sz1IbYJ5JQ/9PuO KlBzuZLRWbFU+4nIYLW1z+uslJfkOwFS46S/7g0hF4tiN0S/zXXXYDdV2xblmiBg huuCyisARSwP/mRCQM+ZM1si0qd5ZgednyGV4ChXNV4zJtyCzGVO+gN9W3n1AgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQU67gKw/objRnRCBgmk4B/Me97NH4wHwYDVR0j BBgwFoAUOrRHeDmeV+xNmy32rIBCxmN+D2YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjgzMjc4NzUwNTE1MjAxOS8wLzNBQjQ0Nzc4Mzk5RTU3RUM0RDlCMkRGNkFDODA0 MkM2NjM3RTBGNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2MzdFMEY2Ni5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4MzI3ODc1MDUxNTIwMTkvMC9BUzEzMjUyNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACTUtTANBgkqhkiG9w0BAQsFAAOCAQEAhCZtF7Ri6W0oQ1ShCqMCHWY2 mlUXqwFx/WHlA6876ZXLhJWxexknwaxPo67d6ZABSfSFZUduYgi4X10rdguQ/rhd v7EBWXcutGP/e+JMKLd+xUbFshxMbbZcLdo+reEZwUYLBcOnyvL73djhmMcOMYqy y1OdRG8UDjURHvla1qV+qV3YZ0diRPkZuQQjwaDmtZjxUGWsv3D45pwDXdynTHA7 9tEXEvU1c19FZpT8LHO+oiWgH+jpbslX4Zhxx0AT1a/7Xs5PJVLrLrPKkKTHxhTJ 83+vtSVp/GhTJCNavO51DJa58f34AAeyZ1dUHgcyDyfSD/l0BnRhsEOLu5BySQ== -----END CERTIFICATE-----Generated at Wed May 13 13:31:42 2026 by rpki-client