$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS394881.roa File: AS394881.roa (raw, json) Hash identifier: uNlkd6JnCXliDu3t+qzOd5BwmcVsibO2dilTIlXUcXQ= Subject key identifier: 72:97:F2:1C:4D:AE:C2:49:0C:17:B8:46:85:F0:61:12:45:9B:E1:63 Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E Certificate serial: 19398D5FCF3ECAA3F04B2ECC52AC01F0C627DA01 Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS394881.roa Signing time: Thu 28 May 2026 08:28:20 +0000 ROA not before: Thu 28 May 2026 08:23:20 +0000 ROA not after: Thu 27 May 2027 08:28:20 +0000 asID: 394881 IP address blocks: 103.6.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 23:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:39:8d:5f:cf:3e:ca:a3:f0:4b:2e:cc:52:ac:01:f0:c6:27:da:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E Validity Not Before: May 28 08:23:20 2026 GMT Not After : May 27 08:28:20 2027 GMT Subject: CN=7297F21C4DAEC2490C17B84685F06112459BE163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a9:65:4e:70:0d:79:22:16:94:c4:17:e5:a2: 9e:4e:3a:e2:50:55:ce:c2:78:f3:41:b5:6e:3d:c2: 6f:ca:ef:92:98:30:99:d1:0b:93:10:7f:7a:92:dc: 71:12:dc:c4:63:b9:fa:a7:49:c7:3e:bf:05:39:25: 06:4c:38:4b:f3:f2:20:92:d7:85:50:37:7d:2d:33: 62:bf:4e:26:05:6d:68:da:d4:24:d7:75:ed:0a:ce: 56:30:d8:07:1d:43:f0:d1:64:44:26:f9:9a:63:8d: 35:b1:b4:78:dc:5b:5f:da:3f:3f:86:79:4b:ac:e2: 74:9b:de:bb:2c:8f:60:8a:93:54:bb:13:e5:46:27: 15:d2:34:1a:a8:94:cc:d0:ad:88:de:9a:78:26:95: 97:49:f7:fa:56:0b:7c:e5:d4:c1:18:59:3c:bb:a7: dd:e3:11:c3:c9:fc:35:4e:b1:46:c5:0d:14:f0:c4: 3d:f9:a3:b5:46:4c:74:4b:31:73:a6:ac:13:ac:56: c7:32:66:01:69:d4:ae:c2:cd:79:a1:ee:e6:9a:34: 73:cf:a9:ac:b0:86:00:9f:d1:83:58:15:32:17:e3: a4:2d:d3:41:93:6e:59:33:29:49:e2:e9:2a:40:04: cc:62:54:72:7b:7e:27:7b:cc:68:a9:f3:5a:ea:b7: 47:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:97:F2:1C:4D:AE:C2:49:0C:17:B8:46:85:F0:61:12:45:9B:E1:63 X509v3 Authority Key Identifier: keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS394881.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.6.108.0/22 Signature Algorithm: sha256WithRSAEncryption 93:82:92:e7:63:b3:10:b9:63:f8:06:11:c1:f1:8f:81:61:e5: b2:95:b5:05:cc:4b:e2:de:18:04:67:5d:f0:61:67:32:e9:19: ec:55:2d:a8:7a:fd:a4:8e:0d:44:55:ee:ee:9e:df:79:16:51: c4:93:2d:1c:c2:18:37:b6:9d:40:07:24:8b:7d:d0:f1:61:a2: 7c:4e:f3:35:b1:22:1a:b8:25:f1:b3:a4:ab:f3:a8:a9:f8:ef: 68:9c:a3:79:13:20:b0:ee:a5:ff:f0:77:01:6b:d4:7c:ec:13: a6:fd:ce:78:69:f6:7c:a5:62:c1:3b:25:7e:d9:b6:40:4c:51: c9:61:57:bc:ee:1a:d3:71:35:78:ba:d2:81:65:f6:3e:2a:98: 6c:15:63:51:f8:b3:cd:97:65:b8:28:72:f5:ed:f0:2f:d7:36: 24:f1:4d:c4:2d:35:d0:30:8d:8a:e5:d7:56:48:70:bf:d0:28: 37:35:37:f5:11:17:de:3d:c7:28:1a:52:ee:1e:9c:51:7d:8e: dd:88:49:af:79:88:00:e9:f1:19:32:32:4d:38:3f:33:a5:fd: 04:7d:e2:33:02:ff:a6:ee:db:b0:84:88:83:5d:bc:f9:4d:e5: 08:34:87:44:94:a3:e8:e7:b7:e1:7b:d1:10:40:5b:07:fe:70: 50:e5:46:23 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUGTmNX88+yqPwSy7MUqwB8MYn2gEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NC NTUzRDc1RTAeFw0yNjA1MjgwODIzMjBaFw0yNzA1MjcwODI4MjBaMDMxMTAvBgNV BAMTKDcyOTdGMjFDNERBRUMyNDkwQzE3Qjg0Njg1RjA2MTEyNDU5QkUxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTqWVOcA15IhaUxBflop5OOuJQ Vc7CePNBtW49wm/K75KYMJnRC5MQf3qS3HES3MRjufqnScc+vwU5JQZMOEvz8iCS 14VQN30tM2K/TiYFbWja1CTXde0KzlYw2AcdQ/DRZEQm+ZpjjTWxtHjcW1/aPz+G eUus4nSb3rssj2CKk1S7E+VGJxXSNBqolMzQrYjemngmlZdJ9/pWC3zl1MEYWTy7 p93jEcPJ/DVOsUbFDRTwxD35o7VGTHRLMXOmrBOsVscyZgFp1K7CzXmh7uaaNHPP qaywhgCf0YNYFTIX46Qt00GTblkzKUni6SpABMxiVHJ7fid7zGip81rqt0cbAgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQUcpfyHE2uwkkMF7hGhfBhEkWb4WMwHwYDVR0j BBgwFoAUH/8mPGQWO8WFFLU5wQN1zLVT114wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDMyNzA0My8wLzFGRkYyNjNDNjQxNjNCQzU4NTE0QjUzOUMxMDM3 NUNDQjU1M0Q3NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzMjcwNDMvMC9BUzM5NDg4MS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmcGbDANBgkqhkiG9w0BAQsFAAOCAQEAk4KS52OzELlj+AYRwfGPgWHl spW1BcxL4t4YBGdd8GFnMukZ7FUtqHr9pI4NRFXu7p7feRZRxJMtHMIYN7adQAck i33Q8WGifE7zNbEiGrgl8bOkq/OoqfjvaJyjeRMgsO6l//B3AWvUfOwTpv3OeGn2 fKViwTslftm2QExRyWFXvO4a03E1eLrSgWX2PiqYbBVjUfizzZdluChy9e3wL9c2 JPFNxC010DCNiuXXVkhwv9AoNzU39REX3j3HKBpS7h6cUX2O3YhJr3mIAOnxGTIy TTg/M6X9BH3iMwL/pu7bsISIg128+U3lCDSHRJSj6Oe34XvREEBbB/5wUOVGIw== -----END CERTIFICATE-----Generated at Sat Jun 6 16:09:45 2026 by rpki-client