$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS0.roa File: AS0.roa (raw, json) Hash identifier: 7P+xS5Uh//JW2IJk9zdH3FEkoAg1EEOEwKcHSYZ+HRU= Subject key identifier: 9B:7E:5B:C4:B2:9B:BB:BE:4B:FB:B3:67:51:6A:01:4B:E7:DE:33:E3 Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 6786BECAC5353DF665B998EF2CBEDE2539F3AD29 Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS0.roa Signing time: Mon 18 May 2026 02:42:49 +0000 ROA not before: Mon 18 May 2026 02:37:49 +0000 ROA not after: Mon 17 May 2027 02:42:49 +0000 asID: 0 IP address blocks: 58.82.0.0/17 maxlen: 24 58.83.0.0/17 maxlen: 24 101.134.0.0/15 maxlen: 24 118.30.0.0/16 maxlen: 24 118.195.0.0/17 maxlen: 24 123.61.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 17:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:86:be:ca:c5:35:3d:f6:65:b9:98:ef:2c:be:de:25:39:f3:ad:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: May 18 02:37:49 2026 GMT Not After : May 17 02:42:49 2027 GMT Subject: CN=9B7E5BC4B29BBBBE4BFBB367516A014BE7DE33E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dc:f4:e9:1b:fe:47:45:17:15:61:58:cb:0d: 43:ba:e5:91:40:0f:6d:7d:8b:9a:4c:63:15:4c:db: ea:af:a2:0e:db:24:c5:65:95:ad:0e:09:ac:95:9b: a4:e3:f5:6d:88:29:c5:3c:d3:6f:fa:c3:16:76:d4: fe:d6:aa:01:bf:fb:9d:c5:81:a4:81:9a:87:a0:8c: 95:64:13:a3:06:13:b6:81:4f:dd:2f:9d:dc:38:01: 24:9c:0b:1b:4a:6a:4b:46:97:a7:4b:7d:83:06:45: 35:96:9c:fb:3b:77:53:71:be:fe:e4:dd:3b:7c:f8: 0f:1f:35:84:58:3c:fa:04:21:d7:2c:97:94:83:88: 36:53:50:9e:ab:e8:b8:c7:4a:d5:a6:27:a0:64:4c: 35:a5:ea:75:2f:4a:23:11:48:9e:56:ca:b5:ec:06: 73:8e:22:eb:9d:40:9d:87:7d:0f:05:c8:2f:49:b1: 61:1b:1d:7e:bb:f5:3b:b5:bd:dd:b9:55:22:dd:b8: 3f:60:c0:50:78:c5:f8:44:f4:39:1a:75:4f:40:02: 74:dc:6c:e4:ee:9e:92:62:17:81:38:e7:07:8e:84: 38:9d:43:72:7f:7d:35:78:14:75:01:7d:ca:f8:50: 58:bb:a7:a4:d9:f8:d2:3e:8f:5b:28:d4:e7:93:c8: 5a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7E:5B:C4:B2:9B:BB:BE:4B:FB:B3:67:51:6A:01:4B:E7:DE:33:E3 X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS0.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.82.0.0/17 58.83.0.0/17 101.134.0.0/15 118.30.0.0/16 118.195.0.0/17 123.61.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6c:e5:c3:d8:fe:76:1a:6f:c8:3e:42:ce:1d:b6:3e:6e:95:75: ce:3c:c2:2a:eb:ea:12:52:60:e0:a7:0c:0a:f1:2c:d3:3e:be: fa:d1:22:18:88:d3:94:70:86:bf:be:3b:3c:05:b8:42:96:20: d2:ee:d8:b9:ae:63:b9:7e:44:b2:ee:0b:9b:58:42:c2:96:69: 76:ed:90:28:ee:ae:8f:0f:c4:c3:40:85:85:1b:c5:7d:44:43: 65:c8:a2:5a:5e:22:55:c3:fd:ce:1d:38:fe:bf:f4:e6:92:f4: 62:e3:90:99:ff:a1:27:57:30:5e:f6:f5:42:1b:d6:04:e2:94: 5c:f8:f0:05:7d:7d:93:0b:a6:33:82:52:5d:ff:a4:81:b6:7e: 99:cc:34:a4:86:ee:67:e0:42:c1:15:5c:da:95:56:c8:3b:3d: 88:a4:c8:17:f2:9d:3b:16:f4:e9:94:cb:90:82:e5:e6:c7:b3: 29:8b:e1:f4:d5:36:5e:44:31:4e:b8:1a:e7:48:50:76:bc:41: 0d:58:32:ee:b3:2f:04:01:37:ba:55:b2:21:53:8e:43:55:0a: 1d:66:65:2f:df:bf:69:57:59:4c:6c:cf:46:b3:24:ba:06:c8: d7:a5:4d:9c:a8:3e:06:49:03:8b:ec:08:c4:13:47:9b:87:fa: fc:89:9a:d8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUZ4a+ysU1PfZluZjvLL7eJTnzrSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA1MTgwMjM3NDlaFw0yNzA1MTcwMjQyNDlaMDMxMTAvBgNV BAMTKDlCN0U1QkM0QjI5QkJCQkU0QkZCQjM2NzUxNkEwMTRCRTdERTMzRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX3PTpG/5HRRcVYVjLDUO65ZFA D219i5pMYxVM2+qvog7bJMVlla0OCayVm6Tj9W2IKcU802/6wxZ21P7WqgG/+53F gaSBmoegjJVkE6MGE7aBT90vndw4ASScCxtKaktGl6dLfYMGRTWWnPs7d1Nxvv7k 3Tt8+A8fNYRYPPoEIdcsl5SDiDZTUJ6r6LjHStWmJ6BkTDWl6nUvSiMRSJ5WyrXs BnOOIuudQJ2HfQ8FyC9JsWEbHX679Tu1vd25VSLduD9gwFB4xfhE9DkadU9AAnTc bOTunpJiF4E45weOhDidQ3J/fTV4FHUBfcr4UFi7p6TZ+NI+j1so1OeTyFqbAgMB AAGjggH6MIIB9jAdBgNVHQ4EFgQUm35bxLKbu75L+7NnUWoBS+feM+MwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw WQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1yc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMCcEAgABMCED BAc6UgADBAc6UwADAwFlhgMDAHYeAwQHdsMAAwMAez0wDQYJKoZIhvcNAQELBQAD ggEBAGzlw9j+dhpvyD5Czh22Pm6Vdc48wirr6hJSYOCnDArxLNM+vvrRIhiI05Rw hr++OzwFuEKWINLu2LmuY7l+RLLuC5tYQsKWaXbtkCjuro8PxMNAhYUbxX1EQ2XI olpeIlXD/c4dOP6/9OaS9GLjkJn/oSdXMF729UIb1gTilFz48AV9fZMLpjOCUl3/ pIG2fpnMNKSG7mfgQsEVXNqVVsg7PYikyBfynTsW9OmUy5CC5ebHsymL4fTVNl5E MU64GudIUHa8QQ1YMu6zLwQBN7pVsiFTjkNVCh1mZS/fv2lXWUxsz0azJLoGyNel TZyoPgZJA4vsCMQTR5uH+vyJmtg= -----END CERTIFICATE-----Generated at Sat May 23 03:03:24 2026 by rpki-client