$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS141425.roa File: AS141425.roa (raw, json) Hash identifier: 52D7WEYcm8k7Y2m4nU3pSNgewAODaPiuk+mLjCKjZEI= Subject key identifier: 17:77:11:8B:3D:72:41:B9:D9:38:C0:BB:13:90:74:A5:2E:8C:A7:EC Certificate issuer: /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Certificate serial: 548709C1DA57B2266B17744646F711B515A7879B Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS141425.roa Signing time: Wed 13 May 2026 08:33:58 +0000 ROA not before: Wed 13 May 2026 08:28:58 +0000 ROA not after: Wed 12 May 2027 08:33:58 +0000 asID: 141425 IP address blocks: 36.212.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:87:09:c1:da:57:b2:26:6b:17:74:46:46:f7:11:b5:15:a7:87:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Validity Not Before: May 13 08:28:58 2026 GMT Not After : May 12 08:33:58 2027 GMT Subject: CN=1777118B3D7241B9D938C0BB139074A52E8CA7EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:46:32:aa:ed:51:74:25:71:0d:60:a6:60: bf:3c:8c:3b:09:08:0d:35:19:ea:c2:52:d7:07:ea: 7d:5c:d6:ee:91:af:21:ae:29:1a:08:dd:28:dc:bf: 6e:8e:17:a4:ef:26:d6:b5:bb:eb:c8:b2:9f:e3:86: 1f:92:94:28:33:49:c7:9a:40:66:86:93:b2:a0:f6: d9:20:f3:26:bb:03:31:1c:e0:32:31:ef:c6:60:ba: b4:aa:d2:94:32:e7:4a:6b:92:b7:7f:e3:d0:09:a1: 85:8e:4f:99:3a:51:1a:dc:d4:c8:a2:b0:ad:f4:48: 26:43:88:f6:6a:cf:43:75:ba:5c:d8:a3:df:7c:1e: 4b:6e:e2:2b:e3:73:14:10:9e:9e:d8:fc:85:74:7e: 4d:9e:8f:a5:4c:1a:7b:f8:f9:45:52:97:26:c0:df: af:6f:35:b7:cd:d2:79:51:de:fb:b4:7c:30:49:0b: d8:ce:61:a3:ae:72:45:36:3a:f2:70:23:58:73:ee: 69:a6:21:8f:ff:3c:f9:98:a6:f9:46:e9:b4:4e:81: 3e:8c:23:68:5e:cd:c9:e1:ce:3d:d4:e4:2e:a8:bc: 41:3b:d8:f5:74:51:ce:15:81:3f:6d:0c:52:8a:61: 4e:b0:90:09:42:6a:ea:cf:6d:4a:2d:18:46:83:1e: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:77:11:8B:3D:72:41:B9:D9:38:C0:BB:13:90:74:A5:2E:8C:A7:EC X509v3 Authority Key Identifier: keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS141425.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.212.224.0/24 Signature Algorithm: sha256WithRSAEncryption 59:2d:60:36:80:c6:22:88:6b:4b:b0:21:8d:7a:a7:d4:98:fa: a5:67:fa:b4:6f:c6:be:a7:ca:07:9b:43:68:01:6b:e0:63:f3: 61:8c:41:1f:09:0e:3c:ca:6a:0a:21:d8:e6:da:8a:0a:e2:49: 5a:a2:69:85:17:0f:2d:d5:41:e1:e6:e3:ac:f7:b1:b0:9a:e8: 8c:1c:de:16:b2:d6:8c:15:cf:6b:f8:87:39:c1:35:64:55:7c: 97:75:34:bb:ce:72:b9:ff:81:f3:7f:17:82:2f:ca:80:76:25: 1a:c6:b6:94:30:33:54:3f:1c:c8:f1:51:86:a1:b3:98:38:26: 49:0d:91:66:f8:04:96:66:ea:d0:d5:a7:83:68:44:a7:1e:a2: 8a:f7:2b:ab:0f:4c:79:41:70:98:3a:b8:40:51:3b:ed:ef:a3: 81:86:e7:04:cb:b3:30:ab:e1:98:c5:93:78:74:90:f0:dd:78: d5:af:e1:6f:ac:88:06:e0:92:0b:a9:a9:69:25:fd:d8:ef:b3: 80:e5:e3:21:3f:20:16:42:b7:f6:8d:dd:9d:40:47:07:61:05: 99:59:99:9d:90:35:d6:58:72:63:aa:90:d5:7c:d6:dd:9e:f3: 68:66:59:27:0b:bd:b5:aa:83:f9:62:b9:bf:02:77:11:42:bb: 50:92:9a:5b -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUVIcJwdpXsiZrF3RGRvcRtRWnh5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2 MzdFMEY2NjAeFw0yNjA1MTMwODI4NThaFw0yNzA1MTIwODMzNThaMDMxMTAvBgNV BAMTKDE3NzcxMThCM0Q3MjQxQjlEOTM4QzBCQjEzOTA3NEE1MkU4Q0E3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNf0Yyqu1RdCVxDWCmYL88jDsJ CA01GerCUtcH6n1c1u6RryGuKRoI3Sjcv26OF6TvJta1u+vIsp/jhh+SlCgzScea QGaGk7Kg9tkg8ya7AzEc4DIx78ZgurSq0pQy50prkrd/49AJoYWOT5k6URrc1Mii sK30SCZDiPZqz0N1ulzYo998Hktu4ivjcxQQnp7Y/IV0fk2ej6VMGnv4+UVSlybA 369vNbfN0nlR3vu0fDBJC9jOYaOuckU2OvJwI1hz7mmmIY//PPmYpvlG6bROgT6M I2hezcnhzj3U5C6ovEE72PV0Uc4VgT9tDFKKYU6wkAlCaurPbUotGEaDHlabAgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQUF3cRiz1yQbnZOMC7E5B0pS6Mp+wwHwYDVR0j BBgwFoAUOrRHeDmeV+xNmy32rIBCxmN+D2YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjgzMjc4NzUwNTE1MjAxOS8wLzNBQjQ0Nzc4Mzk5RTU3RUM0RDlCMkRGNkFDODA0 MkM2NjM3RTBGNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2MzdFMEY2Ni5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4MzI3ODc1MDUxNTIwMTkvMC9BUzE0MTQyNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACTU4DANBgkqhkiG9w0BAQsFAAOCAQEAWS1gNoDGIohrS7AhjXqn1Jj6 pWf6tG/GvqfKB5tDaAFr4GPzYYxBHwkOPMpqCiHY5tqKCuJJWqJphRcPLdVB4ebj rPexsJrojBzeFrLWjBXPa/iHOcE1ZFV8l3U0u85yuf+B838Xgi/KgHYlGsa2lDAz VD8cyPFRhqGzmDgmSQ2RZvgElmbq0NWng2hEpx6iivcrqw9MeUFwmDq4QFE77e+j gYbnBMuzMKvhmMWTeHSQ8N141a/hb6yIBuCSC6mpaSX92O+zgOXjIT8gFkK39o3d nUBHB2EFmVmZnZA11lhyY6qQ1XzW3Z7zaGZZJwu9taqD+WK5vwJ3EUK7UJKaWw== -----END CERTIFICATE-----Generated at Wed May 13 13:31:42 2026 by rpki-client