$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS9308.roa File: AS9308.roa (raw, json) Hash identifier: yftVhdAdhOlgvCg9H9SqFVvRoFbUFos16+3UvIPNuZo= Subject key identifier: 13:1B:ED:D5:B9:D2:93:46:2B:8D:CF:C4:FE:62:4A:8F:BD:64:54:C0 Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 241F1BE4B747714495EB6D96C8E0D248DCD42ADA Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS9308.roa Signing time: Mon 08 Jun 2026 02:23:34 +0000 ROA not before: Mon 08 Jun 2026 02:18:34 +0000 ROA not after: Mon 07 Jun 2027 02:23:34 +0000 asID: 9308 IP address blocks: 42.158.0.0/16 maxlen: 32 58.83.128.0/17 maxlen: 32 59.151.0.0/17 maxlen: 32 59.191.0.0/17 maxlen: 32 103.247.168.0/22 maxlen: 32 120.132.128.0/17 maxlen: 32 120.133.0.0/17 maxlen: 32 120.133.128.0/18 maxlen: 32 120.133.192.0/19 maxlen: 32 120.133.224.0/20 maxlen: 32 120.133.240.0/20 maxlen: 32 120.134.0.0/15 maxlen: 32 124.250.0.0/16 maxlen: 32 124.251.0.0/16 maxlen: 32 182.174.0.0/16 maxlen: 32 182.175.0.0/17 maxlen: 32 182.175.128.0/18 maxlen: 32 182.175.192.0/19 maxlen: 32 182.175.224.0/20 maxlen: 32 182.175.240.0/23 maxlen: 32 182.175.242.0/23 maxlen: 32 183.84.0.0/15 maxlen: 32 203.196.0.0/21 maxlen: 32 210.77.128.0/19 maxlen: 32 211.99.160.0/19 maxlen: 32 211.99.192.0/19 maxlen: 32 211.151.0.0/16 maxlen: 32 211.152.0.0/19 maxlen: 32 211.152.64.0/18 maxlen: 32 2403:a200::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1f:1b:e4:b7:47:71:44:95:eb:6d:96:c8:e0:d2:48:dc:d4:2a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: Jun 8 02:18:34 2026 GMT Not After : Jun 7 02:23:34 2027 GMT Subject: CN=131BEDD5B9D293462B8DCFC4FE624A8FBD6454C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:26:77:f3:21:cf:74:d8:c7:c3:b8:9d:65:59: 17:0a:e3:fe:ff:1e:25:8e:18:c2:f5:74:80:ed:ce: bb:a6:85:6b:32:67:1b:a4:a1:43:d6:7d:42:41:69: c8:ca:4d:73:18:35:34:b3:a4:ef:8c:25:41:11:ee: ef:34:1b:c2:1c:ef:94:d3:e5:7f:9d:21:ee:2a:cd: 07:d4:38:45:3b:cd:c8:10:f1:4e:e9:c2:27:16:48: 6d:c5:19:26:05:10:80:2f:6a:3f:bb:85:b3:26:82: 84:66:4e:d4:67:ba:24:0f:b6:9b:7c:98:26:e7:f7: 45:3d:e2:69:99:51:2c:91:ce:c9:15:f3:6d:54:79: 83:f8:66:ce:09:eb:03:43:cf:3f:9c:78:48:0d:aa: ea:bd:a9:a9:fa:b1:40:14:66:7f:52:3c:b6:24:0e: dd:14:5d:ac:7f:2f:05:9d:a9:df:e5:07:8d:20:f1: 72:05:b6:55:45:e0:18:e5:5f:9f:98:c3:39:d9:3a: de:fc:6f:19:a2:c2:0c:74:9f:2d:f1:63:af:63:91: 2e:b8:73:4a:9e:9b:46:8e:f3:5d:9f:f6:13:62:9f: 5d:18:83:90:36:5e:d6:82:b4:18:21:d4:f6:e1:96: 6e:16:55:e5:b0:54:76:2b:9e:c4:b7:11:e8:af:0b: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1B:ED:D5:B9:D2:93:46:2B:8D:CF:C4:FE:62:4A:8F:BD:64:54:C0 X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS9308.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.158.0.0/16 58.83.128.0/17 59.151.0.0/17 59.191.0.0/17 103.247.168.0/22 120.132.128.0-120.135.255.255 124.250.0.0/15 182.174.0.0-182.175.243.255 183.84.0.0/15 203.196.0.0/21 210.77.128.0/19 211.99.160.0-211.99.223.255 211.151.0.0-211.152.31.255 211.152.64.0/18 IPv6: 2403:a200::/32 Signature Algorithm: sha256WithRSAEncryption bb:7b:39:db:d9:64:91:22:1a:14:e4:7c:73:5a:ff:f1:7f:cb: 8b:24:65:e5:c9:4e:d3:93:80:d0:31:60:b9:15:3e:15:65:1c: 40:d6:c5:7c:8e:7c:5b:2c:da:3c:36:83:8b:c2:2f:4f:2f:0c: cd:f6:38:f0:5f:20:c0:a7:07:03:22:58:fa:25:ba:4b:2e:ea: bb:d6:d1:30:d4:5b:77:e2:60:47:83:82:68:20:67:5b:43:52: 94:03:a8:cf:34:12:e9:97:69:55:c2:a3:d6:53:8c:b7:31:6a: 70:df:f5:ed:4f:9a:a6:f9:93:f9:80:f4:aa:c7:bd:9e:ee:2d: f7:32:6b:0c:38:4c:40:83:35:95:f9:c9:b8:cf:e9:95:c7:fc: ad:b8:70:85:05:25:5b:ce:c8:9d:84:38:c3:56:ed:38:9f:83: 68:c3:61:34:d0:8c:ba:e4:40:64:78:92:ec:c7:4e:bb:cb:ea: 8b:f1:f5:a4:8b:64:94:0f:42:07:58:39:e7:33:55:b3:b8:9d: de:08:fc:2c:76:9f:5b:05:56:aa:1f:9d:da:ae:09:4f:7f:af: 5e:e4:ab:75:f9:ed:e5:80:18:b6:8e:1f:7a:12:04:b5:c5:8f: a3:10:af:d2:d8:d6:3b:7d:7b:6d:ba:3d:e7:90:bc:fa:7e:d5: b4:61:49:49 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUJB8b5LdHcUSV622WyODSSNzUKtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA2MDgwMjE4MzRaFw0yNzA2MDcwMjIzMzRaMDMxMTAvBgNV BAMTKDEzMUJFREQ1QjlEMjkzNDYyQjhEQ0ZDNEZFNjI0QThGQkQ2NDU0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMJnfzIc902MfDuJ1lWRcK4/7/ HiWOGML1dIDtzrumhWsyZxukoUPWfUJBacjKTXMYNTSzpO+MJUER7u80G8Ic75TT 5X+dIe4qzQfUOEU7zcgQ8U7pwicWSG3FGSYFEIAvaj+7hbMmgoRmTtRnuiQPtpt8 mCbn90U94mmZUSyRzskV821UeYP4Zs4J6wNDzz+ceEgNquq9qan6sUAUZn9SPLYk Dt0UXax/LwWdqd/lB40g8XIFtlVF4BjlX5+YwznZOt78bxmiwgx0ny3xY69jkS64 c0qem0aO812f9hNin10Yg5A2XtaCtBgh1Pbhlm4WVeWwVHYrnsS3EeivC1KXAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUExvt1bnSk0Yrjc/E/mJKj71kVMAwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMS9BUzkzMDgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgZgGCCsGAQUFBwEHAQH/BIGIMIGFMHQE AgABMG4DAwAqngMEBzpTgAMEBzuXAAMEBzu/AAMEAmf3qDALAwQHeISAAwMDeIAD AwF8+jALAwMBtq4DBAK2r/ADAwG3VAMEA8vEAAMEBdJNgDAMAwQF02OgAwQF02PA MAsDAwDTlwMEBdOYAAMEBtOYQDANBAIAAjAHAwUAJAOiADANBgkqhkiG9w0BAQsF AAOCAQEAu3s529lkkSIaFOR8c1r/8X/LiyRl5clO05OA0DFguRU+FWUcQNbFfI58 WyzaPDaDi8IvTy8MzfY48F8gwKcHAyJY+iW6Sy7qu9bRMNRbd+JgR4OCaCBnW0NS lAOozzQS6ZdpVcKj1lOMtzFqcN/17U+apvmT+YD0qse9nu4t9zJrDDhMQIM1lfnJ uM/plcf8rbhwhQUlW87InYQ4w1btOJ+DaMNhNNCMuuRAZHiS7MdOu8vqi/H1pItk lA9CB1g55zNVs7id3gj8LHafWwVWqh+d2q4JT3+vXuSrdfnt5YAYto4fehIEtcWP oxCv0tjWO317bbo955C8+n7VtGFJSQ== -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:41 2026 by rpki-client