$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS55933.roa File: AS55933.roa (raw, json) Hash identifier: 8HLVC0fXCtD4zFw4aN+yrkLF/KlwTbHVaE7XVJPUgYE= Subject key identifier: DA:41:A3:C3:49:AD:7A:1C:87:F0:1F:75:EB:5F:77:62:6F:E8:3C:E8 Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976 Certificate serial: 2AFD62FD52370AF25A9BB56B23D8FC4D08E839C7 Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS55933.roa Signing time: Fri 29 May 2026 13:03:27 +0000 ROA not before: Fri 29 May 2026 12:58:27 +0000 ROA not after: Fri 28 May 2027 13:03:27 +0000 asID: 55933 IP address blocks: 103.112.172.0/22 maxlen: 24 103.112.184.0/22 maxlen: 24 103.115.40.0/22 maxlen: 24 103.115.44.0/22 maxlen: 24 103.115.48.0/22 maxlen: 24 103.115.56.0/22 maxlen: 24 103.115.60.0/22 maxlen: 24 103.115.64.0/22 maxlen: 24 103.118.192.0/22 maxlen: 24 103.118.196.0/22 maxlen: 24 103.118.200.0/22 maxlen: 24 103.118.208.0/22 maxlen: 24 103.118.212.0/22 maxlen: 24 103.118.220.0/22 maxlen: 24 103.118.240.0/22 maxlen: 24 103.118.244.0/22 maxlen: 24 103.118.248.0/22 maxlen: 24 103.118.252.0/22 maxlen: 24 103.119.0.0/22 maxlen: 24 103.119.12.0/22 maxlen: 24 103.119.16.0/22 maxlen: 24 103.132.160.0/22 maxlen: 24 103.132.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 09:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fd:62:fd:52:37:0a:f2:5a:9b:b5:6b:23:d8:fc:4d:08:e8:39:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976 Validity Not Before: May 29 12:58:27 2026 GMT Not After : May 28 13:03:27 2027 GMT Subject: CN=DA41A3C349AD7A1C87F01F75EB5F77626FE83CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:76:8a:54:81:e1:9a:68:25:ce:0d:a6:73:8b: 8f:13:cd:20:46:73:b1:a0:79:8d:c3:94:b9:50:e7: 1b:18:6b:1f:72:54:cd:23:34:70:7a:8b:7d:b0:ff: f5:1e:27:fd:e1:65:8d:b4:81:8e:eb:ae:24:15:b7: 80:bb:d5:e7:c6:ce:e7:ac:83:19:b1:60:1d:ab:99: 25:d6:ac:51:3e:05:aa:f2:1b:c0:09:57:5d:21:4f: ec:52:25:a0:25:4a:f1:a4:5a:0d:7a:e2:09:7a:39: 54:e8:e6:b1:f4:bc:8c:52:c2:8d:62:ee:a3:74:55: d9:be:ca:0a:5e:6d:8b:9d:9a:99:26:17:f1:a0:63: f0:13:26:a8:a7:c2:69:b5:7d:8e:70:fd:03:eb:dd: 91:d4:8b:35:b2:63:18:6b:be:da:a7:dc:1b:a2:5d: 28:67:dd:e3:b1:c7:db:0c:b2:b3:f9:91:37:59:24: 69:54:7c:5e:d5:e2:61:43:1b:8d:c5:8d:51:42:c3: ad:13:1a:c7:11:dd:ec:df:d7:c9:ed:f3:c6:86:90: be:8d:a7:97:bc:57:c2:33:29:9d:3f:a0:52:24:3b: b3:34:30:40:32:7a:84:4a:88:fc:d3:96:ef:6d:57: 44:56:0b:fb:00:f2:18:25:d0:ae:62:95:ff:3f:82: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:41:A3:C3:49:AD:7A:1C:87:F0:1F:75:EB:5F:77:62:6F:E8:3C:E8 X509v3 Authority Key Identifier: keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS55933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.172.0/22 103.112.184.0/22 103.115.40.0-103.115.51.255 103.115.56.0-103.115.67.255 103.118.192.0-103.118.203.255 103.118.208.0/21 103.118.220.0/22 103.118.240.0-103.119.3.255 103.119.12.0-103.119.19.255 103.132.160.0/21 Signature Algorithm: sha256WithRSAEncryption 71:8c:74:de:4a:a0:5d:a6:a9:ff:69:0c:11:40:9c:c6:54:34: 75:e9:69:3b:38:6a:43:36:ab:de:ee:9d:7d:0a:84:1f:54:76: 58:d6:81:47:2e:01:c5:4c:8f:63:d9:24:28:b9:58:06:b1:90: a7:09:63:20:f5:dd:7e:ff:ba:de:13:46:71:36:b0:65:43:25: ea:d3:4e:2c:26:06:0a:28:97:f8:0c:4b:cf:62:e1:12:9e:0d: 1b:9a:67:fa:d5:96:46:51:67:b6:5f:54:9b:10:6b:b2:64:e5: ce:66:ec:99:cf:59:12:94:6b:f9:7b:40:3a:67:91:cd:29:60: 20:7b:5a:e3:b0:c8:64:f1:33:eb:18:06:d0:54:e8:33:2e:6d: 27:96:79:4d:bd:59:52:a8:a6:f5:15:57:fe:81:17:c0:17:07: 52:ff:1c:ba:a2:69:fa:7d:3e:ea:ed:f3:ba:07:8f:7d:c8:c8: ec:2d:32:68:6b:a6:b4:c7:54:44:5f:eb:cb:b3:b9:32:ac:0c: 83:1f:12:c6:43:7b:12:ad:61:5c:3f:4e:ef:75:3c:97:93:40: ed:ef:64:00:3b:77:63:c8:e3:7d:2a:7e:cc:79:c5:09:6f:ba: 8d:9f:2a:f9:af:f1:45:de:4b:e0:4b:5f:98:c9:ee:87:18:07: 0d:af:40:51 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUKv1i/VI3CvJam7VrI9j8TQjoOccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw MUY5RDk3NjAeFw0yNjA1MjkxMjU4MjdaFw0yNzA1MjgxMzAzMjdaMDMxMTAvBgNV BAMTKERBNDFBM0MzNDlBRDdBMUM4N0YwMUY3NUVCNUY3NzYyNkZFODNDRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXdopUgeGaaCXODaZzi48TzSBG c7GgeY3DlLlQ5xsYax9yVM0jNHB6i32w//UeJ/3hZY20gY7rriQVt4C71efGzues gxmxYB2rmSXWrFE+BaryG8AJV10hT+xSJaAlSvGkWg164gl6OVTo5rH0vIxSwo1i 7qN0Vdm+ygpebYudmpkmF/GgY/ATJqinwmm1fY5w/QPr3ZHUizWyYxhrvtqn3Bui XShn3eOxx9sMsrP5kTdZJGlUfF7V4mFDG43FjVFCw60TGscR3ezf18nt88aGkL6N p5e8V8IzKZ0/oFIkO7M0MEAyeoRKiPzTlu9tV0RWC/sA8hgl0K5ilf8/gghFAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU2kGjw0mtehyH8B916193Ym/oPOgwHwYDVR0j BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0 NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMC9BUzU1OTMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIA ATBkAwQCZ3CsAwQCZ3C4MAwDBANncygDBAJnczAwDAMEA2dzOAMEAmdzQDAMAwQG Z3bAAwQCZ3bIAwQDZ3bQAwQCZ3bcMAwDBARndvADBAJndwAwDAMEAmd3DAMEAmd3 EAMEA2eEoDANBgkqhkiG9w0BAQsFAAOCAQEAcYx03kqgXaap/2kMEUCcxlQ0delp OzhqQzar3u6dfQqEH1R2WNaBRy4BxUyPY9kkKLlYBrGQpwljIPXdfv+63hNGcTaw ZUMl6tNOLCYGCiiX+AxLz2LhEp4NG5pn+tWWRlFntl9UmxBrsmTlzmbsmc9ZEpRr +XtAOmeRzSlgIHta47DIZPEz6xgG0FToMy5tJ5Z5Tb1ZUqim9RVX/oEXwBcHUv8c uqJp+n0+6u3zugePfcjI7C0yaGumtMdURF/ry7O5MqwMgx8SxkN7Eq1hXD9O73U8 l5NA7e9kADt3Y8jjfSp+zHnFCW+6jZ8q+a/xRd5L4EtfmMnuhxgHDa9AUQ== -----END CERTIFICATE-----Generated at Tue Jun 2 22:00:50 2026 by rpki-client