$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/AS399468.roa File: AS399468.roa (raw, json) Hash identifier: c+dAYI7XbD/hjR9FL/qh34mP7HnaxWbGOh1UvLq5PUo= Subject key identifier: 60:A5:64:ED:84:CA:41:06:3B:D9:8C:2D:05:87:CE:F2:95:A3:80:8F Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 39EAC1423EFF253809D3896DFC36492DC29CD950 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/AS399468.roa Signing time: Tue 02 Jun 2026 08:07:59 +0000 ROA not before: Tue 02 Jun 2026 08:02:59 +0000 ROA not after: Tue 01 Jun 2027 08:07:59 +0000 asID: 399468 IP address blocks: 124.42.144.0/22 maxlen: 24 124.42.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 10:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ea:c1:42:3e:ff:25:38:09:d3:89:6d:fc:36:49:2d:c2:9c:d9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jun 2 08:02:59 2026 GMT Not After : Jun 1 08:07:59 2027 GMT Subject: CN=60A564ED84CA41063BD98C2D0587CEF295A3808F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:1d:df:1d:8f:3c:1d:b1:f3:f4:ab:14:9c: 34:00:24:04:b4:fa:a1:6a:e7:94:c8:d2:83:4a:98: 69:ea:e0:6b:c7:ab:f0:96:fb:dc:21:d7:ff:8c:e7: 0c:61:96:fe:e6:f8:e6:09:62:6f:a5:51:01:bf:1a: c2:b0:21:5a:e6:27:af:d9:cd:f7:4d:ef:ea:63:68: 9f:05:ba:5b:ec:9d:80:5d:6c:36:72:59:0a:56:d9: 7a:14:09:00:3b:7c:cf:8a:66:4e:81:12:d9:73:4d: b1:5b:93:bf:49:6d:f9:17:cc:ce:31:dc:b2:db:95: ce:32:24:cb:c5:3f:08:29:49:5e:b5:5d:1b:b2:d6: b9:62:d4:47:39:97:5c:fd:e2:21:23:fc:4c:1c:5f: 12:c2:6e:7a:5a:0b:a0:80:24:e9:87:03:fb:59:ab: 50:14:9c:9e:7e:75:48:b6:07:27:91:bd:11:96:e4: e7:b3:0d:b6:6a:33:ac:dd:6b:3b:16:c7:c9:26:cf: a7:ea:bb:3f:6d:65:f9:a1:eb:af:a8:7c:df:d3:5f: 88:0f:53:af:66:1a:37:57:ca:13:cb:91:d7:7b:3f: 91:da:2b:35:6b:65:86:ed:8b:64:22:5c:c0:3d:7f: 31:3d:21:8a:78:7f:03:b3:0e:c9:bf:95:18:12:aa: 20:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A5:64:ED:84:CA:41:06:3B:D9:8C:2D:05:87:CE:F2:95:A3:80:8F X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/AS399468.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.42.144.0/22 124.42.156.0/22 Signature Algorithm: sha256WithRSAEncryption 80:66:23:8d:79:69:de:cf:92:61:b9:2a:1f:cd:9f:f1:65:58: 67:8f:a7:4f:fd:96:ff:55:b2:e0:e7:1d:e7:da:6f:af:dd:72: 12:f1:7d:b8:eb:e7:7c:d3:28:df:10:69:fe:df:8d:60:ed:60: 90:5f:f0:9e:15:f1:a5:7a:28:08:0e:65:c9:eb:e9:c4:5b:00: d0:2c:76:24:28:51:07:9e:e2:be:2e:60:ac:83:ff:10:46:69: 9c:96:4c:50:68:ee:99:9f:68:93:b8:f6:d5:1c:74:13:ae:62: 27:11:9a:80:36:05:7c:2c:da:4a:81:56:98:08:cb:fa:57:f9: 46:b9:6c:0c:18:e9:07:62:6c:b7:04:63:d0:63:26:09:39:4d: 0d:5a:77:85:3c:2e:c6:d2:12:14:d9:fa:9b:c0:51:5e:48:0d: e8:05:76:4a:77:ac:81:a6:f8:21:31:26:66:8d:b3:27:11:14: 99:a2:b3:b8:57:6f:25:86:f8:fd:90:95:7a:04:e8:8e:b7:12: 55:97:90:b2:1a:08:bf:4c:e7:2a:de:b1:f7:21:47:b0:0e:9f: e6:22:bf:c9:e8:f2:9c:92:c7:d2:94:63:e0:a3:ec:fb:a4:cd: 64:a9:38:e7:4c:23:74:99:b2:82:25:12:51:2f:4f:9c:15:2c: fa:1e:6d:b6 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUOerBQj7/JTgJ04lt/DZJLcKc2VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA2MDIwODAyNTlaFw0yNzA2MDEwODA3NTlaMDMxMTAvBgNV BAMTKDYwQTU2NEVEODRDQTQxMDYzQkQ5OEMyRDA1ODdDRUYyOTVBMzgwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Cx3fHY88HbHz9KsUnDQAJAS0 +qFq55TI0oNKmGnq4GvHq/CW+9wh1/+M5wxhlv7m+OYJYm+lUQG/GsKwIVrmJ6/Z zfdN7+pjaJ8FulvsnYBdbDZyWQpW2XoUCQA7fM+KZk6BEtlzTbFbk79JbfkXzM4x 3LLblc4yJMvFPwgpSV61XRuy1rli1Ec5l1z94iEj/EwcXxLCbnpaC6CAJOmHA/tZ q1AUnJ5+dUi2ByeRvRGW5OezDbZqM6zdazsWx8kmz6fquz9tZfmh66+ofN/TX4gP U69mGjdXyhPLkdd7P5HaKzVrZYbti2QiXMA9fzE9IYp4fwOzDsm/lRgSqiDJAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUYKVk7YTKQQY72YwtBYfO8pWjgI8wHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC9BUzM5OTQ2OC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEAnwqkAMEAnwqnDANBgkqhkiG9w0BAQsFAAOCAQEAgGYjjXlp3s+SYbkq H82f8WVYZ4+nT/2W/1Wy4Ocd59pvr91yEvF9uOvnfNMo3xBp/t+NYO1gkF/wnhXx pXooCA5lyevpxFsA0Cx2JChRB57ivi5grIP/EEZpnJZMUGjumZ9ok7j21Rx0E65i JxGagDYFfCzaSoFWmAjL+lf5RrlsDBjpB2JstwRj0GMmCTlNDVp3hTwuxtISFNn6 m8BRXkgN6AV2Snesgab4ITEmZo2zJxEUmaKzuFdvJYb4/ZCVegTojrcSVZeQshoI v0znKt6x9yFHsA6f5iK/yejynJLH0pRj4KPs+6TNZKk450wjdJmygiUSUS9PnBUs +h5ttg== -----END CERTIFICATE-----Generated at Thu Jun 4 03:19:44 2026 by rpki-client