$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS59089.roa File: AS59089.roa (raw, json) Hash identifier: ZTGG8hi/6ZD5YswkILRzPPrQMQwDyrtkUiOkaThWQjk= Subject key identifier: BC:FC:98:33:46:4E:D8:CF:C3:C2:2F:49:59:C6:D9:A7:50:8A:C8:A9 Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 0D51C657A76F2656F8A4506F67380D6B0A687764 Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS59089.roa Signing time: Thu 30 Jul 2026 01:43:39 +0000 ROA not before: Thu 30 Jul 2026 01:38:39 +0000 ROA not after: Thu 29 Jul 2027 01:43:39 +0000 asID: 59089 IP address blocks: 114.119.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 15:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:51:c6:57:a7:6f:26:56:f8:a4:50:6f:67:38:0d:6b:0a:68:77:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: Jul 30 01:38:39 2026 GMT Not After : Jul 29 01:43:39 2027 GMT Subject: CN=BCFC9833464ED8CFC3C22F4959C6D9A7508AC8A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:cc:67:45:c1:65:53:82:26:d4:a1:10:23: b2:3d:f4:55:60:61:90:a5:ff:23:b9:53:6e:ce:59: db:b0:0c:47:13:30:ac:6c:07:e8:06:8e:3d:80:3c: 1f:e3:70:57:49:01:20:dd:d6:8e:2b:0a:6f:93:43: 72:46:fe:89:8d:f0:e3:28:f7:20:d8:b1:c6:55:b4: bd:e1:93:3e:8c:fb:bd:1f:2a:1e:a8:26:b1:2b:c5: 8a:44:c2:41:8b:c0:ae:b3:36:71:97:b8:3b:2b:c2: 42:7d:22:c0:de:26:2e:18:b6:6a:8b:8a:11:b2:93: 25:c1:57:a8:09:e4:57:a6:45:ac:f4:1f:c5:a0:c1: 1f:f1:d6:eb:f6:b3:97:23:f2:a5:af:17:cd:3b:31: e7:dd:fe:27:f2:0d:a2:a4:cc:07:b0:b2:35:60:09: 85:bc:25:ac:fa:74:ac:b8:02:64:ee:3b:f2:4b:48: 3b:2e:a4:db:4a:3c:c7:9e:f7:24:33:12:b6:2b:e4: 16:a1:08:23:07:8a:a9:b9:42:c9:38:27:f8:12:96: a3:42:c3:e1:ca:5c:15:74:ab:5b:79:1d:04:ab:47: fd:17:83:50:92:14:e7:47:72:3f:43:f9:c0:57:23: 4f:d8:95:b1:f9:57:6d:ea:e2:94:85:95:49:e7:e3: 2c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FC:98:33:46:4E:D8:CF:C3:C2:2F:49:59:C6:D9:A7:50:8A:C8:A9 X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS59089.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.119.204.0/22 Signature Algorithm: sha256WithRSAEncryption 94:b6:a9:2a:88:fe:48:3f:24:9d:6c:68:6d:e7:42:86:c4:e2: 65:22:e8:88:56:77:70:4f:ad:72:62:a1:54:7a:2a:e1:94:b0: cd:35:48:b4:8d:fc:4f:47:48:46:72:d6:89:92:a8:ff:25:22: c6:49:14:70:83:de:ad:6e:34:04:e0:d6:de:d7:16:c8:80:94: 9e:8a:ba:dd:ba:6a:bd:81:e4:3f:22:ae:49:ed:2c:4d:ad:ea: ef:66:08:4e:14:c7:04:3a:20:46:7d:61:d1:29:7e:1d:8e:c8: d5:d7:66:fa:13:56:f4:05:b1:27:c9:3f:4f:c8:6a:8a:7f:2a: 10:f1:7e:91:79:e1:72:d0:2b:bb:66:51:3b:25:1d:3c:dd:a0: 0d:af:0d:82:f1:0b:f4:59:e3:df:07:32:d6:47:5f:82:07:6c: 77:a3:63:74:02:c9:45:12:59:eb:3f:0b:fa:bd:90:1f:70:1d: fe:0c:c8:92:71:8b:f8:2d:b0:46:a8:03:d3:32:73:93:fc:84: 75:96:9d:cb:ed:be:76:54:e4:38:25:8c:72:67:aa:68:59:5b: e4:ed:1f:34:cb:67:71:45:f5:5b:c9:14:8b:e2:cd:60:37:b1: 69:ad:3b:ab:7c:b1:c9:c4:47:24:4c:b5:dd:1b:48:ce:70:2e: 95:ce:85:84 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUDVHGV6dvJlb4pFBvZzgNawpod2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA3MzAwMTM4MzlaFw0yNzA3MjkwMTQzMzlaMDMxMTAvBgNV BAMTKEJDRkM5ODMzNDY0RUQ4Q0ZDM0MyMkY0OTU5QzZEOUE3NTA4QUM4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FcxnRcFlU4Im1KEQI7I99FVg YZCl/yO5U27OWduwDEcTMKxsB+gGjj2APB/jcFdJASDd1o4rCm+TQ3JG/omN8OMo 9yDYscZVtL3hkz6M+70fKh6oJrErxYpEwkGLwK6zNnGXuDsrwkJ9IsDeJi4YtmqL ihGykyXBV6gJ5FemRaz0H8WgwR/x1uv2s5cj8qWvF807Mefd/ifyDaKkzAewsjVg CYW8Jaz6dKy4AmTuO/JLSDsupNtKPMee9yQzErYr5BahCCMHiqm5Qsk4J/gSlqNC w+HKXBV0q1t5HQSrR/0Xg1CSFOdHcj9D+cBXI0/YlbH5V23q4pSFlUnn4yxnAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUvPyYM0ZO2M/Dwi9JWcbZp1CKyKkwHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC9BUzU5MDg5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCcnfMMA0GCSqGSIb3DQEBCwUAA4IBAQCUtqkqiP5IPySdbGht50KGxOJl IuiIVndwT61yYqFUeirhlLDNNUi0jfxPR0hGctaJkqj/JSLGSRRwg96tbjQE4Nbe 1xbIgJSeirrdumq9geQ/Iq5J7SxNrervZghOFMcEOiBGfWHRKX4djsjV12b6E1b0 BbEnyT9PyGqKfyoQ8X6ReeFy0Cu7ZlE7JR083aANrw2C8Qv0WePfBzLWR1+CB2x3 o2N0AslFElnrPwv6vZAfcB3+DMiScYv4LbBGqAPTMnOT/IR1lp3L7b52VOQ4JYxy Z6poWVvk7R80y2dxRfVbyRSL4s1gN7FprTurfLHJxEckTLXdG0jOcC6VzoWE -----END CERTIFICATE-----Generated at Sat Sep 5 08:46:22 2026 by rpki-client