$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS59077.roa File: AS59077.roa (raw, json) Hash identifier: jqEAS4vl3v8Scmg4fltQNIqu4A4F1urMvQwrsEz6fzQ= Subject key identifier: C1:51:75:60:54:AE:75:F6:0A:CD:83:68:FA:24:42:27:92:AB:60:E1 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 7A2FDA10F1C26A84184851435DD7D8699AB204F3 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS59077.roa Signing time: Thu 20 Aug 2026 08:34:35 +0000 ROA not before: Thu 20 Aug 2026 08:29:35 +0000 ROA not after: Thu 19 Aug 2027 08:34:35 +0000 asID: 59077 IP address blocks: 106.75.128.0/20 maxlen: 20 106.75.144.0/20 maxlen: 20 106.75.160.0/20 maxlen: 20 106.75.176.0/20 maxlen: 20 113.31.160.0/20 maxlen: 20 113.31.192.0/20 maxlen: 20 113.31.208.0/20 maxlen: 20 113.31.224.0/20 maxlen: 20 113.31.240.0/20 maxlen: 20 163.53.164.0/22 maxlen: 24 2401:3480::/36 maxlen: 36 2401:3480:2000::/36 maxlen: 36 2401:3480:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 15:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2f:da:10:f1:c2:6a:84:18:48:51:43:5d:d7:d8:69:9a:b2:04:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Aug 20 08:29:35 2026 GMT Not After : Aug 19 08:34:35 2027 GMT Subject: CN=C151756054AE75F60ACD8368FA24422792AB60E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:d0:8b:44:73:13:0e:1b:29:57:88:d4:11: 74:29:c3:4a:25:d9:5a:5a:88:61:61:9a:76:92:95: 8f:75:fe:6c:2d:5f:5d:8f:89:11:02:83:31:28:b0: 54:44:a2:f0:c3:88:33:05:af:54:ff:a1:15:51:1d: 98:1b:19:cb:11:c0:37:b6:39:90:85:5f:0b:89:a3: 83:90:b0:43:d1:da:21:f0:25:55:42:63:8f:25:11: a1:55:7d:14:2f:4d:f9:75:18:47:c8:0f:96:46:81: a1:32:7f:6b:ac:32:56:69:be:b2:e6:9c:eb:23:b8: 88:83:df:5c:97:d0:46:0c:9d:55:1d:ce:01:82:c2: d9:7d:6f:36:77:6a:df:de:a9:13:f7:13:07:f9:34: 22:4a:0c:fd:01:8d:7f:67:34:96:2a:4d:0e:e3:a0: 99:da:1e:6d:bf:5a:fe:8e:9a:90:df:d4:e7:99:37: 26:2d:2e:b0:71:20:28:58:ed:17:c5:d7:e2:18:9a: 16:da:f6:db:71:79:f0:20:f4:99:e8:ae:87:1a:5e: 5d:7b:b7:52:eb:7b:54:ee:4c:f6:f6:85:ce:57:5c: bd:ef:e9:79:a5:53:46:30:77:ca:06:0c:30:a8:5b: 42:89:f6:a8:7d:13:19:71:0a:a0:5e:cc:e3:6f:c5: 6a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:51:75:60:54:AE:75:F6:0A:CD:83:68:FA:24:42:27:92:AB:60:E1 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS59077.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.75.128.0/18 113.31.160.0/20 113.31.192.0/18 163.53.164.0/22 IPv6: 2401:3480::/36 2401:3480:2000::/35 Signature Algorithm: sha256WithRSAEncryption 80:c6:ce:01:60:c8:09:ec:cd:91:83:f0:ac:cc:c2:ec:fd:8d: 1b:62:f5:4f:08:6e:a6:ea:b7:9f:44:bd:71:ae:98:1a:ca:97: d4:a3:8a:86:94:93:2d:fd:7c:05:ac:6f:d1:ca:08:8c:51:50: 15:c1:33:22:61:42:63:aa:da:82:72:34:b1:53:84:8d:48:e6: 8a:eb:d2:a4:da:8a:80:e0:75:17:06:de:46:f0:79:d5:bd:42: cc:fd:b5:2d:ad:38:c3:ed:17:fe:59:d2:d1:15:b2:19:0c:ab: 41:c6:7e:7c:5c:b7:64:6c:37:4c:83:e0:fc:31:e4:49:27:b1: 5a:d6:4b:9e:d1:96:4b:3e:a7:5a:94:1b:db:2a:f8:e5:f4:9d: 2f:b9:2b:59:60:d4:91:ae:d6:82:d0:00:a0:a5:3f:21:e9:5f: 3e:72:e4:9e:51:03:b5:ba:ac:1a:36:d1:a4:2f:91:a9:50:5d: 3d:3a:cc:de:2e:24:01:e7:f0:78:0b:83:ec:ca:c3:5c:f0:91: c3:7c:8c:e9:9c:37:e7:c8:ea:3d:e5:01:01:88:55:1b:70:fd: d7:fd:a3:2a:e0:5a:cd:64:2e:fc:1a:e6:10:f3:e9:60:c6:18: 68:5c:4b:b1:f1:98:21:cf:42:8c:a1:2d:c1:d1:50:07:ce:d7: 7e:76:24:20 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUei/aEPHCaoQYSFFDXdfYaZqyBPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA4MjAwODI5MzVaFw0yNzA4MTkwODM0MzVaMDMxMTAvBgNV BAMTKEMxNTE3NTYwNTRBRTc1RjYwQUNEODM2OEZBMjQ0MjI3OTJBQjYwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7dCLRHMTDhspV4jUEXQpw0ol 2VpaiGFhmnaSlY91/mwtX12PiRECgzEosFREovDDiDMFr1T/oRVRHZgbGcsRwDe2 OZCFXwuJo4OQsEPR2iHwJVVCY48lEaFVfRQvTfl1GEfID5ZGgaEyf2usMlZpvrLm nOsjuIiD31yX0EYMnVUdzgGCwtl9bzZ3at/eqRP3Ewf5NCJKDP0BjX9nNJYqTQ7j oJnaHm2/Wv6OmpDf1OeZNyYtLrBxIChY7RfF1+IYmhba9ttxefAg9JnorocaXl17 t1Lre1TuTPb2hc5XXL3v6XmlU0Ywd8oGDDCoW0KJ9qh9ExlxCqBezONvxWrPAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUwVF1YFSudfYKzYNo+iRCJ5KrYOEwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC9BUzU5MDc3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAeBAIA ATAYAwQGakuAAwQEcR+gAwQGcR/AAwQCozWkMBYEAgACMBADBgQkATSAAAMGBSQB NIAgMA0GCSqGSIb3DQEBCwUAA4IBAQCAxs4BYMgJ7M2Rg/CszMLs/Y0bYvVPCG6m 6refRL1xrpgaypfUo4qGlJMt/XwFrG/RygiMUVAVwTMiYUJjqtqCcjSxU4SNSOaK 69Kk2oqA4HUXBt5G8HnVvULM/bUtrTjD7Rf+WdLRFbIZDKtBxn58XLdkbDdMg+D8 MeRJJ7Fa1kue0ZZLPqdalBvbKvjl9J0vuStZYNSRrtaC0ACgpT8h6V8+cuSeUQO1 uqwaNtGkL5GpUF09OszeLiQB5/B4C4PsysNc8JHDfIzpnDfnyOo95QEBiFUbcP3X /aMq4FrNZC78GuYQ8+lgxhhoXEux8Zghz0KMoS3B0VAHztd+diQg -----END CERTIFICATE-----Generated at Sat Sep 5 03:50:44 2026 by rpki-client