$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS0.roa File: AS0.roa (raw, json) Hash identifier: 2whuGFj5CSwsR/pdhiLgE8oiFshD2k+kToFmQb91xT4= Subject key identifier: C7:AE:F1:80:F9:3D:18:CE:D3:8B:64:1B:FE:A8:91:26:09:55:14:B9 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 3CF94FA644603D41A326406514E3BC018F35786B Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS0.roa Signing time: Sat 16 May 2026 05:08:07 +0000 ROA not before: Sat 16 May 2026 05:03:07 +0000 ROA not after: Sat 15 May 2027 05:08:07 +0000 asID: 0 IP address blocks: 43.226.96.0/20 maxlen: 20 43.247.92.0/22 maxlen: 22 43.248.80.0/20 maxlen: 20 43.248.176.0/20 maxlen: 20 103.98.140.0/22 maxlen: 22 103.98.144.0/22 maxlen: 22 2403:3380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 12:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f9:4f:a6:44:60:3d:41:a3:26:40:65:14:e3:bc:01:8f:35:78:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: May 16 05:03:07 2026 GMT Not After : May 15 05:08:07 2027 GMT Subject: CN=C7AEF180F93D18CED38B641BFEA89126095514B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:6a:ca:c8:a4:f9:e1:96:a5:7d:7b:f1:3d: f9:c0:9e:ee:4c:93:bc:b2:f4:da:0e:4a:18:8c:34: 89:f2:0e:35:dc:b4:fa:18:03:d5:cf:29:fc:69:40: 53:34:71:2e:f0:04:39:2d:ad:b6:9f:8b:8f:b5:c9: d4:09:dc:b0:27:d9:f4:8b:1e:77:44:cb:af:93:33: ad:10:c0:60:d4:c7:27:b2:8e:25:25:48:53:ae:8c: 3b:41:81:d3:b9:77:59:80:00:57:24:15:69:29:ec: 42:68:fe:16:90:92:7b:74:d2:56:0d:11:75:f0:7a: c5:09:7f:60:45:fd:f7:96:48:db:66:81:6d:e7:4a: 50:53:17:84:50:ce:6b:cc:41:e6:fe:0b:14:b5:1c: dc:6b:dd:38:91:7a:fe:10:89:40:67:8e:83:d5:cb: c3:05:ca:86:76:d3:72:28:4e:be:94:f1:d8:55:14: 1c:e1:64:49:e2:f0:60:5e:b0:de:c2:85:d2:9f:f5: 84:12:7a:e0:75:67:3b:c8:7e:47:b7:d1:be:1b:cb: a2:63:fe:9f:ba:5a:f2:78:35:37:20:f2:11:7d:db: 83:0f:43:3c:42:14:9b:c3:fa:73:97:1b:27:e7:a1: 34:43:62:53:ab:ce:e7:ea:6b:c7:13:7b:b5:3c:c3: 9f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AE:F1:80:F9:3D:18:CE:D3:8B:64:1B:FE:A8:91:26:09:55:14:B9 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS0.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.96.0/20 43.247.92.0/22 43.248.80.0/20 43.248.176.0/20 103.98.140.0-103.98.147.255 IPv6: 2403:3380::/32 Signature Algorithm: sha256WithRSAEncryption 6d:c1:da:8c:78:59:6a:e7:70:16:ea:22:63:3f:d3:62:a1:0e: 72:d9:5b:eb:9a:f7:44:40:ed:54:fa:c2:47:b9:ed:c4:23:62: 00:0e:50:3b:89:74:5a:dc:d5:b2:08:3d:66:a0:13:61:28:48: dc:4e:a7:8e:e0:ad:6f:5c:1f:9b:a0:f3:b0:0b:11:87:c0:0b: b4:6d:0c:65:ad:ab:90:c5:3f:db:56:49:b5:56:be:94:c6:4b: c1:62:68:18:3e:e8:fc:e8:dd:6c:28:b6:79:bb:8a:7f:37:b9: 10:1c:69:6c:1b:81:74:0a:db:0c:c5:56:17:0d:09:27:81:bd: 49:55:ce:a0:57:6e:13:d3:d3:b6:e2:f7:2d:1b:22:1c:2b:3d: 4f:58:83:17:55:e7:97:31:17:02:26:93:96:e3:11:12:8f:27: a9:4e:7d:bd:a1:85:97:73:80:c6:02:33:78:a3:ec:f7:80:6f: e2:36:7d:d8:a9:70:2b:a2:4d:25:82:79:f8:ee:e7:c7:01:31: e4:a5:15:56:c4:86:ed:ac:b2:a7:ec:ad:5b:1f:4e:09:b0:aa: ed:0b:0d:31:6b:75:d6:bd:89:c9:33:91:14:de:54:3e:1d:c8: 03:2b:82:34:f3:0e:e2:ad:da:01:48:1a:a9:73:d6:ba:d9:50: d7:57:58:0a -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUPPlPpkRgPUGjJkBlFOO8AY81eGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA1MTYwNTAzMDdaFw0yNzA1MTUwNTA4MDdaMDMxMTAvBgNV BAMTKEM3QUVGMTgwRjkzRDE4Q0VEMzhCNjQxQkZFQTg5MTI2MDk1NTE0QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGWrKyKT54ZalfXvxPfnAnu5M k7yy9NoOShiMNInyDjXctPoYA9XPKfxpQFM0cS7wBDktrbafi4+1ydQJ3LAn2fSL HndEy6+TM60QwGDUxyeyjiUlSFOujDtBgdO5d1mAAFckFWkp7EJo/haQknt00lYN EXXwesUJf2BF/feWSNtmgW3nSlBTF4RQzmvMQeb+CxS1HNxr3TiRev4QiUBnjoPV y8MFyoZ203IoTr6U8dhVFBzhZEni8GBesN7ChdKf9YQSeuB1ZzvIfke30b4by6Jj /p+6WvJ4NTcg8hF924MPQzxCFJvD+nOXGyfnoTRDYlOrzufqa8cTe7U8w5+hAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUx67xgPk9GM7Ti2Qb/qiRJglVFLkwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw WQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1yc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwTgYIKwYBBQUHAQcBAf8EPzA9MCwEAgABMCYD BAQr4mADBAIr91wDBAQr+FADBAQr+LAwDAMEAmdijAMEAmdikDANBAIAAjAHAwUA JAMzgDANBgkqhkiG9w0BAQsFAAOCAQEAbcHajHhZaudwFuoiYz/TYqEOctlb65r3 REDtVPrCR7ntxCNiAA5QO4l0WtzVsgg9ZqATYShI3E6njuCtb1wfm6DzsAsRh8AL tG0MZa2rkMU/21ZJtVa+lMZLwWJoGD7o/OjdbCi2ebuKfze5EBxpbBuBdArbDMVW Fw0JJ4G9SVXOoFduE9PTtuL3LRsiHCs9T1iDF1XnlzEXAiaTluMREo8nqU59vaGF l3OAxgIzeKPs94Bv4jZ92KlwK6JNJYJ5+O7nxwEx5KUVVsSG7ayyp+ytWx9OCbCq 7QsNMWt11r2JyTORFN5UPh3IAyuCNPMO4q3aAUgaqXPWutlQ11dYCg== -----END CERTIFICATE-----Generated at Sat May 23 03:03:24 2026 by rpki-client