$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS0.roa File: AS0.roa (raw, json) Hash identifier: RP719C/p+4L/R72LvYNQZ8eNRfMqbKGt2ZLEtqp8Yuo= Subject key identifier: 11:B6:E9:2A:2A:7A:B4:46:D0:8C:77:E4:4D:68:D0:AC:C4:4E:A7:F9 Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 66EDC6DD7FF3D30A78585AACC9C396A2D67CCB22 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS0.roa Signing time: Fri 31 Jul 2026 02:35:22 +0000 ROA not before: Fri 31 Jul 2026 02:30:22 +0000 ROA not after: Fri 30 Jul 2027 02:35:22 +0000 asID: 0 IP address blocks: 49.4.132.0/22 maxlen: 22 49.4.136.0/21 maxlen: 21 49.4.144.0/20 maxlen: 20 49.4.160.0/19 maxlen: 19 49.5.0.0/16 maxlen: 16 58.99.128.0/17 maxlen: 17 106.3.32.0/19 maxlen: 19 106.3.84.0/22 maxlen: 22 106.3.160.0/20 maxlen: 20 114.113.0.0/17 maxlen: 17 121.201.0.0/17 maxlen: 17 210.2.16.0/21 maxlen: 21 211.100.96.0/19 maxlen: 19 211.102.192.0/20 maxlen: 20 219.232.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 14:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ed:c6:dd:7f:f3:d3:0a:78:58:5a:ac:c9:c3:96:a2:d6:7c:cb:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: Jul 31 02:30:22 2026 GMT Not After : Jul 30 02:35:22 2027 GMT Subject: CN=11B6E92A2A7AB446D08C77E44D68D0ACC44EA7F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a6:d8:00:6a:2a:94:23:ce:02:7e:b5:2c:92: 02:c2:af:ea:69:8e:e0:c4:0f:24:fa:b4:6d:e0:be: ee:bb:71:b0:d2:8c:96:e4:55:91:01:1a:c3:e7:29: 04:b0:1c:07:dd:51:72:3d:48:4f:92:82:5d:43:3c: 72:51:1c:01:e7:71:91:81:9d:c4:a7:4d:40:11:d3: a8:17:0b:58:6f:22:5a:d9:20:30:6e:7c:32:fd:9f: 77:65:a0:16:2a:5f:5a:ac:02:36:7f:8e:b4:5b:8c: 93:94:1b:18:5a:3f:28:01:ca:90:ce:d6:32:95:05: 45:e1:e7:b8:2f:3a:46:59:ff:06:52:a9:69:e2:47: 3d:a6:20:b7:7e:cd:75:8a:ac:1a:87:aa:21:08:5b: 15:60:f2:e8:65:7c:b3:8b:da:4e:2c:bc:e9:1f:d6: 79:01:29:89:ec:fe:a8:09:f3:de:25:e8:ca:ba:e7: 61:0a:4e:61:89:da:99:95:d1:1d:87:64:04:c1:61: d4:78:e5:41:d2:22:12:95:91:0c:0b:b7:a1:97:68: 72:ef:bd:88:c7:5b:a0:2c:f6:7c:ab:6a:f1:34:37: 9f:04:4b:ba:e4:ef:60:96:2f:92:4e:ee:00:fe:b7: a4:f5:bd:28:b4:e0:82:00:4d:42:41:1f:b6:4d:7c: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B6:E9:2A:2A:7A:B4:46:D0:8C:77:E4:4D:68:D0:AC:C4:4E:A7:F9 X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS0.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.4.132.0-49.4.191.255 49.5.0.0/16 58.99.128.0/17 106.3.32.0/19 106.3.84.0/22 106.3.160.0/20 114.113.0.0/17 121.201.0.0/17 210.2.16.0/21 211.100.96.0/19 211.102.192.0/20 219.232.224.0/21 Signature Algorithm: sha256WithRSAEncryption 97:19:24:06:99:70:69:7a:1c:13:26:29:b3:8a:66:69:23:83: 8b:90:13:18:46:16:54:d7:0a:08:00:fd:14:e9:71:18:47:0f: 6c:a8:d3:23:b7:bb:9c:1a:26:62:d8:8e:ac:d3:a2:e4:01:44: 21:7b:a8:99:98:7e:92:74:01:1a:db:8c:0e:03:5c:16:65:45: 7a:fe:9a:63:5d:4e:16:bc:6e:81:e5:45:7f:9e:e0:da:ba:30: ae:a5:b4:88:e7:37:34:d5:3d:d2:c6:33:69:9f:ce:96:12:3d: dd:8d:ec:e3:8b:00:6f:f0:57:50:e8:cc:ff:87:e3:a1:fc:a2: f1:b2:03:8a:a2:0f:46:92:e4:20:d8:51:1d:f9:f0:b2:a7:97: 3a:3c:1b:42:ca:d2:5a:99:b6:29:ac:14:d1:f2:1d:be:dd:d0: 31:84:db:12:21:ad:f4:0e:2f:c7:c5:77:36:6a:c7:d0:70:cb: ee:4b:fb:f5:f3:45:bd:41:04:5a:26:99:18:8e:c2:7a:14:77: a8:a5:00:c6:68:bf:8e:a4:a1:b3:6a:55:c7:ed:d1:7e:cb:d2: 78:95:33:a5:43:7f:9c:68:95:ce:c9:c7:eb:84:3e:ab:bc:8e: 46:99:67:93:b1:01:2b:95:c5:e9:ae:e0:b0:fa:74:ba:7f:7e: 17:e8:3d:0e -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUZu3G3X/z0wp4WFqsycOWotZ8yyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA3MzEwMjMwMjJaFw0yNzA3MzAwMjM1MjJaMDMxMTAvBgNV BAMTKDExQjZFOTJBMkE3QUI0NDZEMDhDNzdFNDRENjhEMEFDQzQ0RUE3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgptgAaiqUI84CfrUskgLCr+pp juDEDyT6tG3gvu67cbDSjJbkVZEBGsPnKQSwHAfdUXI9SE+Sgl1DPHJRHAHncZGB ncSnTUAR06gXC1hvIlrZIDBufDL9n3dloBYqX1qsAjZ/jrRbjJOUGxhaPygBypDO 1jKVBUXh57gvOkZZ/wZSqWniRz2mILd+zXWKrBqHqiEIWxVg8uhlfLOL2k4svOkf 1nkBKYns/qgJ894l6Mq652EKTmGJ2pmV0R2HZATBYdR45UHSIhKVkQwLt6GXaHLv vYjHW6As9nyravE0N58ES7rk72CWL5JO7gD+t6T1vSi04IIATUJBH7ZNfA4TAgMB AAGjggIoMIICJDAdBgNVHQ4EFgQUEbbpKip6tEbQjHfkTWjQrMROp/kwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw WQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1yc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4OTA5ODUyMjY4NjI1OTUvMC9BUzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwaAYIKwYBBQUHAQcBAf8EWTBXMFUEAgABME8w DAMEAjEEhAMEBjEEgAMDADEFAwQHOmOAAwQFagMgAwQCagNUAwQEagOgAwQHcnEA AwQHeckAAwQD0gIQAwQF02RgAwQE02bAAwQD2+jgMA0GCSqGSIb3DQEBCwUAA4IB AQCXGSQGmXBpehwTJimzimZpI4OLkBMYRhZU1woIAP0U6XEYRw9sqNMjt7ucGiZi 2I6s06LkAUQhe6iZmH6SdAEa24wOA1wWZUV6/ppjXU4WvG6B5UV/nuDaujCupbSI 5zc01T3SxjNpn86WEj3djezjiwBv8FdQ6Mz/h+Oh/KLxsgOKog9GkuQg2FEd+fCy p5c6PBtCytJambYprBTR8h2+3dAxhNsSIa30Di/HxXc2asfQcMvuS/v180W9QQRa JpkYjsJ6FHeopQDGaL+OpKGzalXH7dF+y9J4lTOlQ3+caJXOycfrhD6rvI5GmWeT sQErlcXpruCw+nS6f34X6D0O -----END CERTIFICATE-----Generated at Fri Aug 21 22:25:49 2026 by rpki-client