$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS13444.roa File: AS13444.roa (raw, json) Hash identifier: +X0olCc0xu0SyWwtuBjNMSx1pfUPwP7AiRpJF4RbydU= Subject key identifier: C6:AA:CE:AF:4B:BA:20:EB:0C:F9:70:EE:68:C7:C8:7F:1A:67:3E:A3 Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E Certificate serial: 071354FD8FBF03410110CF5576EE8A07B5FD8DDB Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS13444.roa Signing time: Thu 28 May 2026 08:28:13 +0000 ROA not before: Thu 28 May 2026 08:23:13 +0000 ROA not after: Thu 27 May 2027 08:28:13 +0000 asID: 13444 IP address blocks: 45.252.84.0/22 maxlen: 24 45.252.84.0/24 maxlen: 24 103.6.108.0/24 maxlen: 24 103.6.109.0/24 maxlen: 24 103.6.110.0/24 maxlen: 24 103.6.111.0/24 maxlen: 24 103.6.228.0/24 maxlen: 24 103.221.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 23:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:13:54:fd:8f:bf:03:41:01:10:cf:55:76:ee:8a:07:b5:fd:8d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E Validity Not Before: May 28 08:23:13 2026 GMT Not After : May 27 08:28:13 2027 GMT Subject: CN=C6AACEAF4BBA20EB0CF970EE68C7C87F1A673EA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:93:ed:ff:95:d9:3f:87:eb:3e:a0:f8:0f:bc: 7a:de:10:b7:c9:b3:4a:d6:8c:ae:c0:63:7c:5e:0b: 80:d1:ec:24:37:6b:03:1d:1e:f9:17:f0:67:a8:6f: 4b:8e:aa:4d:ae:fc:3b:4b:4b:3b:d6:78:3d:4d:9b: 75:ff:3d:19:c2:48:5d:b3:18:c0:46:16:58:71:8d: 65:fd:e7:fd:b8:13:dc:8b:06:e0:21:00:60:f2:39: d9:c9:bf:c9:b3:11:6a:d3:db:85:8f:e5:c6:97:98: ab:ac:2f:a1:ef:b3:54:9b:c4:a1:d7:33:f7:23:ce: 4e:e2:fd:56:e1:7e:f4:c6:c9:d1:79:a1:08:2a:7d: 1d:61:d9:ba:6c:0e:fb:c3:c3:fc:70:df:df:ff:43: d4:20:6f:c1:04:7c:89:09:33:36:62:ac:6d:eb:a0: 52:f2:0f:25:da:a2:86:7c:58:b4:0a:14:9c:42:50: 11:67:bf:47:8f:8f:bb:59:e6:cb:2b:8a:08:87:bc: 38:54:58:1b:cb:3a:dd:96:3e:a7:c9:ff:5f:24:47: 4b:61:0d:ec:56:94:86:31:2a:e4:70:56:6f:90:0e: 88:f0:71:09:d4:ee:a8:da:fd:e4:c2:69:2d:d7:53: e2:0f:6d:21:a8:ad:7a:c5:c5:41:3b:84:b4:dc:93: 1c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AA:CE:AF:4B:BA:20:EB:0C:F9:70:EE:68:C7:C8:7F:1A:67:3E:A3 X509v3 Authority Key Identifier: keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS13444.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.252.84.0/22 103.6.108.0/22 103.6.228.0/24 103.221.94.0/24 Signature Algorithm: sha256WithRSAEncryption 63:8d:93:da:21:e6:1e:26:e7:59:53:c3:2b:c7:b2:e6:62:4e: bd:66:50:c6:b0:f3:83:16:c6:b1:1f:4c:e7:49:b0:9d:1d:20: fe:1b:1c:e5:dd:1d:cc:80:1b:34:af:c2:2b:6f:73:0a:ca:21: 2a:45:96:f8:e3:1a:bc:22:1f:05:6f:ff:8e:f1:89:02:db:20: a8:a4:ee:2f:3d:7b:f4:32:98:59:7e:0d:d7:53:2a:a0:40:ce: ac:99:02:95:ce:80:c4:54:80:3e:10:ed:0a:7b:d9:23:bd:fb: f0:1a:85:d5:2e:d8:ac:f5:23:26:ee:21:b9:b3:95:1d:36:7b: 58:5e:0c:0c:b9:64:ce:92:9c:31:d5:0f:78:88:71:0f:7d:ff: c5:49:45:9c:d1:8c:0d:f5:c2:07:6a:2a:05:16:24:6e:54:f6: 16:13:be:28:57:9b:48:93:9e:26:1d:a0:0b:51:83:3e:dc:ee: e5:67:0d:ab:a2:b3:51:ad:fe:ab:f5:16:a6:cd:e7:2c:3f:b4: a0:c8:57:67:21:83:0a:d1:77:63:31:e2:72:5b:4a:9d:64:0e: 1f:c4:06:d8:96:f2:89:45:4d:d8:47:1a:65:91:9f:b5:8d:e1: db:c3:45:f4:a4:ae:eb:bb:56:60:18:6a:ff:8c:76:1f:f7:04: 92:c3:d7:fe -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUBxNU/Y+/A0EBEM9Vdu6KB7X9jdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NC NTUzRDc1RTAeFw0yNjA1MjgwODIzMTNaFw0yNzA1MjcwODI4MTNaMDMxMTAvBgNV BAMTKEM2QUFDRUFGNEJCQTIwRUIwQ0Y5NzBFRTY4QzdDODdGMUE2NzNFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvk+3/ldk/h+s+oPgPvHreELfJ s0rWjK7AY3xeC4DR7CQ3awMdHvkX8Geob0uOqk2u/DtLSzvWeD1Nm3X/PRnCSF2z GMBGFlhxjWX95/24E9yLBuAhAGDyOdnJv8mzEWrT24WP5caXmKusL6Hvs1SbxKHX M/cjzk7i/VbhfvTGydF5oQgqfR1h2bpsDvvDw/xw39//Q9Qgb8EEfIkJMzZirG3r oFLyDyXaooZ8WLQKFJxCUBFnv0ePj7tZ5ssrigiHvDhUWBvLOt2WPqfJ/18kR0th DexWlIYxKuRwVm+QDojwcQnU7qja/eTCaS3XU+IPbSGorXrFxUE7hLTckxxdAgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUxqrOr0u6IOsM+XDuaMfIfxpnPqMwHwYDVR0j BBgwFoAUH/8mPGQWO8WFFLU5wQN1zLVT114wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDMyNzA0My8wLzFGRkYyNjNDNjQxNjNCQzU4NTE0QjUzOUMxMDM3 NUNDQjU1M0Q3NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzMjcwNDMvMC9BUzEzNDQ0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIA ATAYAwQCLfxUAwQCZwZsAwQAZwbkAwQAZ91eMA0GCSqGSIb3DQEBCwUAA4IBAQBj jZPaIeYeJudZU8Mrx7LmYk69ZlDGsPODFsaxH0znSbCdHSD+Gxzl3R3MgBs0r8Ir b3MKyiEqRZb44xq8Ih8Fb/+O8YkC2yCopO4vPXv0MphZfg3XUyqgQM6smQKVzoDE VIA+EO0Ke9kjvfvwGoXVLtis9SMm7iG5s5UdNntYXgwMuWTOkpwx1Q94iHEPff/F SUWc0YwN9cIHaioFFiRuVPYWE74oV5tIk54mHaALUYM+3O7lZw2rorNRrf6r9Ram zecsP7SgyFdnIYMK0XdjMeJyW0qdZA4fxAbYlvKJRU3YRxplkZ+1jeHbw0X0pK7r u1ZgGGr/jHYf9wSSw9f+ -----END CERTIFICATE-----Generated at Sat Jun 6 16:09:06 2026 by rpki-client