$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS58466.roa File: AS58466.roa (raw, json) Hash identifier: onBVv54zU+fifJMqJLlLT5PjMTHT1naY/xWE99SHHKs= Subject key identifier: CF:27:D4:22:46:77:66:BA:D0:14:1C:22:77:2C:6A:17:76:3C:92:BF Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Certificate serial: 0C564F7798AD6AFD170DF2B2A81A2756FFA65E0C Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS58466.roa Signing time: Wed 27 May 2026 07:20:00 +0000 ROA not before: Wed 27 May 2026 07:15:00 +0000 ROA not after: Wed 26 May 2027 07:20:00 +0000 asID: 58466 IP address blocks: 121.46.0.0/22 maxlen: 22 121.46.4.0/22 maxlen: 22 121.46.8.0/22 maxlen: 22 121.46.12.0/22 maxlen: 22 121.46.16.0/22 maxlen: 22 121.46.20.0/22 maxlen: 22 121.46.24.0/22 maxlen: 22 121.46.28.0/22 maxlen: 22 121.46.128.0/22 maxlen: 22 121.46.132.0/22 maxlen: 22 121.46.136.0/22 maxlen: 22 121.46.140.0/22 maxlen: 22 121.46.141.0/24 maxlen: 24 121.46.144.0/22 maxlen: 22 121.46.148.0/22 maxlen: 22 121.46.152.0/22 maxlen: 22 121.46.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:56:4f:77:98:ad:6a:fd:17:0d:f2:b2:a8:1a:27:56:ff:a6:5e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Validity Not Before: May 27 07:15:00 2026 GMT Not After : May 26 07:20:00 2027 GMT Subject: CN=CF27D422467766BAD0141C22772C6A17763C92BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:e9:2c:9e:ca:63:4c:a1:37:4f:c6:0b:b6: e5:43:9f:f3:f2:02:42:26:b1:5b:37:65:12:ce:e5: e4:28:8e:62:b2:95:36:f2:51:85:b5:07:ed:6d:d0: 8a:55:2d:a1:cf:9c:e9:f6:37:30:43:46:85:37:09: e5:91:9e:95:55:ac:3c:1b:74:c4:39:99:a7:88:a2: 11:f7:f1:7e:5e:8e:6e:86:53:83:9b:74:0b:64:6f: 10:f8:89:10:08:4a:d3:be:fc:55:8b:e3:d5:85:65: b8:44:df:81:35:19:25:ef:9b:57:ff:83:88:f2:3a: ae:1f:f8:4d:e7:36:75:8a:d6:db:92:db:a3:78:9c: c7:ab:bc:46:b0:8e:6e:e1:3f:b6:8b:0b:b0:dc:09: 67:6f:0c:ee:74:1b:92:7a:9a:9e:6d:f8:ca:48:1d: 4f:08:d3:7c:96:b5:25:13:b7:48:01:89:80:c9:37: 81:43:05:ca:b2:9c:46:89:d1:9e:ad:a8:95:c2:e4: d9:2a:96:e3:e5:21:ba:6a:e0:b0:56:e1:38:df:82: 73:fe:c0:46:48:dd:cf:43:51:b3:69:01:1b:bc:73: 0b:3a:97:e4:fb:61:0f:59:c9:2f:46:c4:a2:a0:f8: 5c:31:ac:56:dc:30:88:a2:4a:dc:02:63:a6:72:c7: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:27:D4:22:46:77:66:BA:D0:14:1C:22:77:2C:6A:17:76:3C:92:BF X509v3 Authority Key Identifier: keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS58466.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.0.0/19 121.46.128.0/19 Signature Algorithm: sha256WithRSAEncryption 42:a9:0f:5f:73:00:ef:79:f2:6e:30:22:ca:9f:3b:21:2c:55: 05:5f:9f:4f:1f:bd:3e:63:bc:53:ee:21:31:6a:83:b3:e6:c5: 0b:e9:15:0d:aa:20:93:7a:4a:6c:67:1d:77:8a:78:af:7f:00: 36:0c:34:27:d1:40:63:57:48:a1:36:08:3d:0a:28:91:2b:4c: c7:67:78:98:10:e5:d4:f7:96:7b:74:db:ba:36:3f:62:a0:8d: 16:b3:dd:76:b5:3b:bc:20:da:bd:11:63:79:74:50:75:18:95: 0d:8c:3c:12:a8:61:74:4e:3e:be:46:76:41:e2:47:bf:e4:09: 00:de:d4:5d:a1:2d:6d:f6:41:ec:84:53:fe:60:56:b1:83:93: be:f0:72:41:89:2a:aa:b3:57:d3:e0:fc:3a:22:d7:ec:57:4b: 6c:b9:19:d7:07:e1:c4:75:2c:56:4b:79:1a:6b:29:3d:2a:d6: a5:12:52:38:e8:76:d7:8a:86:3c:8a:4c:b2:62:44:16:8b:75: cf:89:34:7f:86:62:08:57:ed:ce:81:e7:83:c6:3d:6e:69:e8: dc:3e:8f:8f:b2:db:03:67:6d:f2:61:cc:d7:68:cf:9c:f9:49: 68:ac:43:74:1b:f4:1d:ed:fd:b0:65:36:4d:06:be:2e:5e:82: bf:bf:e3:cf -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUDFZPd5itav0XDfKyqBonVv+mXgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD MUE4NjlFNjAeFw0yNjA1MjcwNzE1MDBaFw0yNzA1MjYwNzIwMDBaMDMxMTAvBgNV BAMTKENGMjdENDIyNDY3NzY2QkFEMDE0MUMyMjc3MkM2QTE3NzYzQzkyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnweksnspjTKE3T8YLtuVDn/Py AkImsVs3ZRLO5eQojmKylTbyUYW1B+1t0IpVLaHPnOn2NzBDRoU3CeWRnpVVrDwb dMQ5maeIohH38X5ejm6GU4ObdAtkbxD4iRAIStO+/FWL49WFZbhE34E1GSXvm1f/ g4jyOq4f+E3nNnWK1tuS26N4nMervEawjm7hP7aLC7DcCWdvDO50G5J6mp5t+MpI HU8I03yWtSUTt0gBiYDJN4FDBcqynEaJ0Z6tqJXC5NkqluPlIbpq4LBW4TjfgnP+ wEZI3c9DUbNpARu8cws6l+T7YQ9ZyS9GxKKg+FwxrFbcMIiiStwCY6Zyx5j1AgMB AAGjggHpMIIB5TAdBgNVHQ4EFgQUzyfUIkZ3ZrrQFBwidyxqF3Y8kr8wHwYDVR0j BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0 MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNzUzMzA3NzczNTAxNDYvMC9BUzU4NDY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQFeS4AAwQFeS6AMA0GCSqGSIb3DQEBCwUAA4IBAQBCqQ9fcwDvefJuMCLK nzshLFUFX59PH70+Y7xT7iExaoOz5sUL6RUNqiCTekpsZx13inivfwA2DDQn0UBj V0ihNgg9CiiRK0zHZ3iYEOXU95Z7dNu6Nj9ioI0Ws912tTu8INq9EWN5dFB1GJUN jDwSqGF0Tj6+RnZB4ke/5AkA3tRdoS1t9kHshFP+YFaxg5O+8HJBiSqqs1fT4Pw6 ItfsV0tsuRnXB+HEdSxWS3kaayk9KtalElI46HbXioY8ikyyYkQWi3XPiTR/hmII V+3OgeeDxj1uaejcPo+PstsDZ23yYczXaM+c+UlorEN0G/Qd7f2wZTZNBr4uXoK/ v+PP -----END CERTIFICATE-----Generated at Sat May 30 00:41:29 2026 by rpki-client