$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS63567.roa File: AS63567.roa (raw, json) Hash identifier: HXIBAbJioMxKItc/6BQG3swrCpfiZ/fSDPm1ZIJKC6g= Subject key identifier: 6F:7F:BA:D9:98:6B:32:36:C5:D7:4C:7F:1C:E0:D3:2A:9B:85:62:EA Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 402C401B4192E91A772D9C02AA5FD6EEEB62C2F2 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS63567.roa Signing time: Wed 12 Aug 2026 15:35:43 +0000 ROA not before: Wed 12 Aug 2026 15:30:43 +0000 ROA not after: Wed 11 Aug 2027 15:35:43 +0000 asID: 63567 IP address blocks: 43.248.184.0/21 maxlen: 21 103.40.12.0/22 maxlen: 22 103.45.160.0/22 maxlen: 24 103.205.252.0/22 maxlen: 22 103.239.244.0/22 maxlen: 24 111.223.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2c:40:1b:41:92:e9:1a:77:2d:9c:02:aa:5f:d6:ee:eb:62:c2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Aug 12 15:30:43 2026 GMT Not After : Aug 11 15:35:43 2027 GMT Subject: CN=6F7FBAD9986B3236C5D74C7F1CE0D32A9B8562EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:96:3b:dd:cf:04:e7:21:80:50:44:bd:e1: eb:af:df:83:db:50:5c:1d:37:1b:0e:e9:b8:7d:09: ea:fd:03:31:c6:87:b4:c5:52:44:fa:34:f2:11:16: 5e:64:e7:18:0f:1a:1b:83:b5:94:e7:5d:48:93:45: b7:7b:f6:16:78:37:c4:cf:8e:ae:49:2d:ab:61:08: 53:0a:f4:23:43:1b:3f:44:61:17:dc:9f:e3:8d:94: a2:4d:61:22:c0:e0:97:66:31:fa:a9:19:fc:f0:0d: 77:da:4a:02:2c:b9:f2:e5:ab:12:f1:0c:43:87:b6: 21:fc:1a:2b:30:af:52:a0:4e:dc:9f:8b:fb:8e:f5: 53:24:ef:16:94:83:47:54:bc:d5:09:43:bf:3d:37: 54:da:1b:48:62:9c:2e:5c:22:1d:f6:ee:41:cb:a4: a2:59:07:fa:fb:0d:b4:3f:d4:bf:8a:ea:37:db:0c: 4a:a0:a6:c1:cc:2a:97:9b:5e:cb:40:36:7a:7c:19: 5a:24:89:05:50:dc:f0:81:9f:27:1d:fd:30:9e:8a: 14:fa:1e:61:b8:ac:f4:46:89:84:50:16:88:ff:73: 18:dc:dd:35:39:44:59:ab:8b:06:81:a0:9c:2f:3e: 38:09:a3:a0:89:a3:b3:e9:47:b8:77:43:bf:3c:f1: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7F:BA:D9:98:6B:32:36:C5:D7:4C:7F:1C:E0:D3:2A:9B:85:62:EA X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS63567.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 103.40.12.0/22 103.45.160.0/22 103.205.252.0/22 103.239.244.0/22 111.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption 89:b0:ac:2f:c1:1e:72:fa:52:d1:10:af:46:78:47:97:fc:4c: c1:59:47:dc:92:ab:4b:f2:1c:de:42:57:b4:86:5b:d4:87:01: d7:fe:07:9f:83:61:02:e8:08:9e:66:8b:0a:55:8a:58:3f:41: 7e:fd:d0:0c:2b:17:87:46:5b:de:0d:12:6f:6b:99:d0:1f:a3: d9:48:ff:92:17:37:04:ee:24:05:db:4a:5f:f6:28:5d:d6:4b: 41:c7:76:de:e1:9f:1f:c4:b1:e5:0c:99:ba:30:49:ed:18:89: e5:43:b5:27:1c:fd:7d:68:a0:9e:1c:64:3b:ab:ef:25:1b:db: bf:d6:d8:9a:24:c7:7b:1d:4c:c0:f1:12:e0:b4:bc:b0:f4:7f: 30:ce:f1:ba:5d:01:c9:f8:dc:48:51:54:84:a2:f7:ae:25:3e: ef:51:b8:74:42:25:55:53:11:a4:14:3f:85:ff:64:74:35:ba: d5:c7:0d:f4:d0:c9:d1:89:78:8f:17:37:4f:00:e0:0a:17:eb: 7c:35:ee:45:10:50:69:bc:ff:c8:47:b0:4b:bd:cf:43:63:cb: f4:71:18:90:a3:85:d9:56:b5:96:30:4e:8f:7e:0e:dc:1f:89: f1:e5:25:df:8d:ce:dc:b6:a1:73:ee:78:85:24:d7:4e:6c:c5: 73:24:91:81 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUQCxAG0GS6Rp3LZwCql/W7utiwvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA4MTIxNTMwNDNaFw0yNzA4MTExNTM1NDNaMDMxMTAvBgNV BAMTKDZGN0ZCQUQ5OTg2QjMyMzZDNUQ3NEM3RjFDRTBEMzJBOUI4NTYyRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2opY73c8E5yGAUES94euv34Pb UFwdNxsO6bh9Cer9AzHGh7TFUkT6NPIRFl5k5xgPGhuDtZTnXUiTRbd79hZ4N8TP jq5JLathCFMK9CNDGz9EYRfcn+ONlKJNYSLA4JdmMfqpGfzwDXfaSgIsufLlqxLx DEOHtiH8Giswr1KgTtyfi/uO9VMk7xaUg0dUvNUJQ789N1TaG0hinC5cIh327kHL pKJZB/r7DbQ/1L+K6jfbDEqgpsHMKpebXstANnp8GVokiQVQ3PCBnycd/TCeihT6 HmG4rPRGiYRQFoj/cxjc3TU5RFmriwaBoJwvPjgJo6CJo7PpR7h3Q7888eJtAgMB AAGjggIBMIIB/TAdBgNVHQ4EFgQUb3+62ZhrMjbF10x/HODTKpuFYuowHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzYzNTY3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIA ATAkAwQDK/i4AwQCZygMAwQCZy2gAwQCZ838AwQCZ+/0AwQCb98MMA0GCSqGSIb3 DQEBCwUAA4IBAQCJsKwvwR5y+lLREK9GeEeX/EzBWUfckqtL8hzeQle0hlvUhwHX /gefg2EC6AieZosKVYpYP0F+/dAMKxeHRlveDRJva5nQH6PZSP+SFzcE7iQF20pf 9ihd1ktBx3be4Z8fxLHlDJm6MEntGInlQ7UnHP19aKCeHGQ7q+8lG9u/1tiaJMd7 HUzA8RLgtLyw9H8wzvG6XQHJ+NxIUVSEoveuJT7vUbh0QiVVUxGkFD+F/2R0NbrV xw300MnRiXiPFzdPAOAKF+t8Ne5FEFBpvP/IR7BLvc9DY8v0cRiQo4XZVrWWME6P fg7cH4nx5SXfjc7ctqFz7niFJNdObMVzJJGB -----END CERTIFICATE-----Generated at Thu Sep 10 18:12:29 2026 by rpki-client