$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS38283.roa File: AS38283.roa (raw, json) Hash identifier: b+LNtB8BnlfAgJOygGrMMt2yq1yQieV7mM6TBSUOHTg= Subject key identifier: 3C:1E:2C:18:FF:19:E0:30:64:69:2E:1F:1B:DD:44:98:F2:07:8D:69 Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Certificate serial: 1F132CF0199EAEFEB95080B5F45990E3311A2043 Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS38283.roa Signing time: Sun 17 May 2026 10:00:01 +0000 ROA not before: Sun 17 May 2026 09:55:01 +0000 ROA not after: Sun 16 May 2027 10:00:01 +0000 asID: 38283 IP address blocks: 120.49.192.0/21 maxlen: 24 202.181.120.0/22 maxlen: 24 202.181.124.0/22 maxlen: 24 240c:409f:3000::/46 maxlen: 48 240c:409f:3004::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:13:2c:f0:19:9e:ae:fe:b9:50:80:b5:f4:59:90:e3:31:1a:20:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Validity Not Before: May 17 09:55:01 2026 GMT Not After : May 16 10:00:01 2027 GMT Subject: CN=3C1E2C18FF19E03064692E1F1BDD4498F2078D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:77:76:97:7e:54:4a:fe:5b:ee:fc:40:67: 18:67:9a:00:1d:81:62:52:61:c7:58:46:9f:db:ed: 42:ed:f4:63:71:26:8f:15:13:41:e8:d7:4f:31:dd: ec:9d:64:82:36:c2:f6:97:8a:68:f7:0f:48:ed:bf: 2d:29:cd:35:d9:b2:c6:10:b9:1b:2a:d6:10:7f:71: f8:ca:9a:ce:db:af:48:ce:15:7b:fa:a0:c1:bb:dd: 2e:45:c5:36:b0:65:75:09:fc:86:32:26:a8:90:6f: 1c:3f:aa:c8:a2:88:44:0c:8e:43:00:2e:f1:52:cb: 90:bc:d4:6f:e0:5a:39:17:d3:1b:52:6e:2d:5a:77: f7:b8:0f:c2:49:02:33:c0:19:8a:f3:09:c2:89:c9: bf:56:25:c1:46:4c:aa:bc:bb:d9:a5:f9:3d:50:a6: 2f:21:8c:21:00:68:37:ab:fb:0f:16:64:da:1e:cd: c7:40:86:34:23:cf:6f:bc:11:88:03:96:a9:72:16: 9f:7e:72:ab:54:98:ae:a9:39:7c:e6:72:db:3b:61: 24:b7:b3:8f:ab:48:64:74:c4:cd:4a:dc:82:a8:75: 87:31:5d:9b:6b:57:4f:26:e8:ec:45:92:ed:17:c5: bf:83:a4:14:b0:2a:ea:7d:0c:ea:5f:49:1a:20:63: c7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1E:2C:18:FF:19:E0:30:64:69:2E:1F:1B:DD:44:98:F2:07:8D:69 X509v3 Authority Key Identifier: keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS38283.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.49.192.0/21 202.181.120.0/21 IPv6: 240c:409f:3000::/45 Signature Algorithm: sha256WithRSAEncryption 04:02:7c:73:4c:0f:37:27:a5:63:16:79:f0:a8:c6:b3:9b:20: b9:4a:1a:e6:59:62:f3:34:64:66:17:72:9f:80:93:ad:ed:36: 23:59:ce:15:79:d9:d1:5f:86:60:38:cd:a2:c1:f7:27:fb:a7: 1f:d7:37:99:ef:3d:f5:ef:d9:c2:78:d6:50:0e:1a:b5:0a:06: f8:0d:e1:72:3d:fe:98:a8:3e:f1:7d:b6:d5:92:5e:12:b7:d0: 10:fe:53:40:e2:ea:53:c4:cf:59:7a:e1:32:8d:40:25:72:73: b9:75:1e:16:42:88:da:fc:8a:46:38:3b:37:cf:5b:df:9a:d0: 27:5b:4a:e4:1d:a9:93:e6:c4:e3:59:e9:12:12:e9:39:f8:4b: 2b:21:9d:91:51:0e:3d:0c:18:d3:64:ac:e6:83:b0:c1:8d:ba: 6e:30:45:b5:41:3d:18:d6:28:65:02:4e:1c:5f:57:01:db:1b: 46:91:34:1f:56:15:4b:32:b3:ab:a8:c4:48:b6:42:12:b3:a9: bb:30:d1:86:fc:41:bc:e6:28:82:54:b5:d5:b7:07:89:d9:b8: a4:42:61:c8:20:df:eb:4d:e7:83:13:b2:46:b0:e5:c3:ba:b8: a1:a8:cc:1d:eb:6a:9a:d7:93:8b:6b:6a:fd:4d:90:c7:e7:f4: 55:87:4b:34 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUHxMs8Bmerv65UIC19FmQ4zEaIEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB OEVCQTcwRTAeFw0yNjA1MTcwOTU1MDFaFw0yNzA1MTYxMDAwMDFaMDMxMTAvBgNV BAMTKDNDMUUyQzE4RkYxOUUwMzA2NDY5MkUxRjFCREQ0NDk4RjIwNzhENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFnd2l35USv5b7vxAZxhnmgAd gWJSYcdYRp/b7ULt9GNxJo8VE0Ho108x3eydZII2wvaXimj3D0jtvy0pzTXZssYQ uRsq1hB/cfjKms7br0jOFXv6oMG73S5FxTawZXUJ/IYyJqiQbxw/qsiiiEQMjkMA LvFSy5C81G/gWjkX0xtSbi1ad/e4D8JJAjPAGYrzCcKJyb9WJcFGTKq8u9ml+T1Q pi8hjCEAaDer+w8WZNoezcdAhjQjz2+8EYgDlqlyFp9+cqtUmK6pOXzmcts7YSS3 s4+rSGR0xM1K3IKodYcxXZtrV08m6OxFku0Xxb+DpBSwKup9DOpfSRogY8dJAgMB AAGjggH6MIIB9jAdBgNVHQ4EFgQUPB4sGP8Z4DBkaS4fG91EmPIHjWkwHwYDVR0j BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BUzM4MjgzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIA ATAMAwQDeDHAAwQDyrV4MA8EAgACMAkDBwMkDECfMAAwDQYJKoZIhvcNAQELBQAD ggEBAAQCfHNMDzcnpWMWefCoxrObILlKGuZZYvM0ZGYXcp+Ak63tNiNZzhV52dFf hmA4zaLB9yf7px/XN5nvPfXv2cJ41lAOGrUKBvgN4XI9/pioPvF9ttWSXhK30BD+ U0Di6lPEz1l64TKNQCVyc7l1HhZCiNr8ikY4OzfPW9+a0CdbSuQdqZPmxONZ6RIS 6Tn4SyshnZFRDj0MGNNkrOaDsMGNum4wRbVBPRjWKGUCThxfVwHbG0aRNB9WFUsy s6uoxEi2QhKzqbsw0Yb8QbzmKIJUtdW3B4nZuKRCYcgg3+tN54MTskaw5cO6uKGo zB3raprXk4trav1NkMfn9FWHSzQ= -----END CERTIFICATE-----Generated at Fri May 29 23:49:10 2026 by rpki-client