$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS395886.roa File: AS395886.roa (raw, json) Hash identifier: CfoVZbR+/lwELN84bOdI9oThdD7UMoaNZ9TF+1TA5Og= Subject key identifier: 76:B3:FF:CB:67:C6:75:82:26:F7:07:8D:09:61:F2:4A:63:50:A2:88 Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976 Certificate serial: 6756CCACE49A610027703C8FBCFD52C737BC0C44 Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS395886.roa Signing time: Tue 19 May 2026 02:36:42 +0000 ROA not before: Tue 19 May 2026 02:31:42 +0000 ROA not after: Tue 18 May 2027 02:36:42 +0000 asID: 395886 IP address blocks: 45.248.88.0/22 maxlen: 24 103.216.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 10:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:56:cc:ac:e4:9a:61:00:27:70:3c:8f:bc:fd:52:c7:37:bc:0c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976 Validity Not Before: May 19 02:31:42 2026 GMT Not After : May 18 02:36:42 2027 GMT Subject: CN=76B3FFCB67C6758226F7078D0961F24A6350A288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d7:46:d5:95:7d:c5:ce:12:7e:1b:5c:38:67: 8b:e0:61:9e:3c:1e:de:04:e1:8b:15:9d:4e:03:f4: df:4d:6f:01:be:89:58:09:49:a6:68:8a:7c:83:89: 32:10:26:23:1b:c2:70:86:57:d6:cf:4f:c2:ef:d8: 87:77:15:ff:af:9f:25:cd:c6:84:21:7d:ba:e1:ef: 75:e2:ce:bb:39:99:f9:5d:9f:02:43:46:c9:ba:88: 86:40:cc:4b:fe:33:14:82:41:30:25:07:86:70:fa: 80:23:2a:75:8a:ef:09:16:20:b3:16:0b:a3:0d:98: 8f:bb:3a:e6:55:51:da:56:08:b4:c7:02:44:85:41: e9:5f:ac:17:34:0d:bf:8a:fd:97:66:4c:3c:93:54: 49:a9:42:b8:a2:2a:0f:2d:e3:3f:af:85:9e:c0:b9: 77:25:62:ca:cb:0b:04:67:86:1a:f3:47:f9:ba:ec: 94:db:b1:4b:29:29:c3:5f:1a:0a:4b:5f:fd:a4:e9: 6b:26:69:87:6d:f5:75:db:ab:d2:b4:66:b0:3b:33: 49:21:68:61:b1:a0:ec:98:13:4c:e9:3f:f0:29:d4: d3:7e:e7:b1:32:ea:ac:e4:44:2b:34:c5:da:64:46: cd:33:7d:3b:94:e9:c6:a6:32:be:5b:7b:52:9f:d5: 91:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B3:FF:CB:67:C6:75:82:26:F7:07:8D:09:61:F2:4A:63:50:A2:88 X509v3 Authority Key Identifier: keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS395886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.88.0/22 103.216.228.0/24 Signature Algorithm: sha256WithRSAEncryption 38:6e:de:32:ee:3c:e2:e6:2b:74:c8:21:70:be:6b:49:5f:06: d4:db:ab:4c:77:58:29:44:48:ec:72:dc:dc:fc:83:fb:b0:8c: 2d:71:48:ab:0b:da:6f:91:f9:ec:8b:2f:c4:86:20:34:4e:af: c8:21:82:5b:cb:25:78:b1:39:a1:28:0a:a8:18:83:e5:7c:16: 75:86:34:56:00:2a:62:71:2c:3f:a4:c1:d4:6a:51:44:ad:07: 79:c5:cf:2b:25:27:81:fc:3e:f6:34:08:7c:4d:ed:ce:39:ab: 3f:ec:34:9c:95:1d:e5:5b:22:37:61:b4:7d:a6:5d:0a:da:06: 79:f1:21:a8:9d:18:72:dc:09:7c:ac:04:e2:48:6f:fd:03:dc: bf:53:c1:9a:26:a6:3c:a2:e8:d2:8e:52:5d:82:da:30:4f:71: 15:21:54:ef:2a:ac:05:c1:7a:26:9f:87:8d:f7:50:b1:91:a8: 22:59:0e:a5:13:69:e7:32:6f:1e:e6:e6:2b:26:27:10:aa:8a: a0:70:6e:83:2a:91:7a:45:71:9e:cf:4b:fa:8c:76:4e:03:25: 46:3a:f8:a6:fb:22:52:f3:db:6f:99:d5:81:f6:a0:7f:ca:4d: d1:26:c6:9f:56:63:b9:fc:e2:ce:11:d8:23:46:ba:f8:be:dd: 31:38:a2:aa -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUZ1bMrOSaYQAncDyPvP1Sxze8DEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw MUY5RDk3NjAeFw0yNjA1MTkwMjMxNDJaFw0yNzA1MTgwMjM2NDJaMDMxMTAvBgNV BAMTKDc2QjNGRkNCNjdDNjc1ODIyNkY3MDc4RDA5NjFGMjRBNjM1MEEyODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC710bVlX3FzhJ+G1w4Z4vgYZ48 Ht4E4YsVnU4D9N9NbwG+iVgJSaZoinyDiTIQJiMbwnCGV9bPT8Lv2Id3Ff+vnyXN xoQhfbrh73Xizrs5mfldnwJDRsm6iIZAzEv+MxSCQTAlB4Zw+oAjKnWK7wkWILMW C6MNmI+7OuZVUdpWCLTHAkSFQelfrBc0Db+K/ZdmTDyTVEmpQriiKg8t4z+vhZ7A uXclYsrLCwRnhhrzR/m67JTbsUspKcNfGgpLX/2k6WsmaYdt9XXbq9K0ZrA7M0kh aGGxoOyYE0zpP/Ap1NN+57Ey6qzkRCs0xdpkRs0zfTuU6camMr5be1Kf1ZG5AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUdrP/y2fGdYIm9weNCWHySmNQoogwHwYDVR0j BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0 NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMC9BUzM5NTg4Ni5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEAi34WAMEAGfY5DANBgkqhkiG9w0BAQsFAAOCAQEAOG7eMu484uYrdMgh cL5rSV8G1NurTHdYKURI7HLc3PyD+7CMLXFIqwvab5H57IsvxIYgNE6vyCGCW8sl eLE5oSgKqBiD5XwWdYY0VgAqYnEsP6TB1GpRRK0HecXPKyUngfw+9jQIfE3tzjmr P+w0nJUd5VsiN2G0faZdCtoGefEhqJ0YctwJfKwE4khv/QPcv1PBmiamPKLo0o5S XYLaME9xFSFU7yqsBcF6Jp+HjfdQsZGoIlkOpRNp5zJvHubmKyYnEKqKoHBugyqR ekVxns9L+ox2TgMlRjr4pvsiUvPbb5nVgfagf8pN0SbGn1ZjufzizhHYI0a6+L7d MTiiqg== -----END CERTIFICATE-----Generated at Sat Jun 6 02:27:36 2026 by rpki-client