$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS63648.roa File: AS63648.roa (raw, json) Hash identifier: /u/urR9q2mNEOHxl1FFbkM4Ca3odHWCMxoBjQ1MNo20= Subject key identifier: DD:43:4E:31:19:01:23:B6:C7:01:BA:5E:B2:77:B9:7C:BE:BC:27:DB Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 46C7F8D3EE9B86625246F7F359155E7434B96877 Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS63648.roa Signing time: Wed 20 May 2026 07:13:17 +0000 ROA not before: Wed 20 May 2026 07:08:17 +0000 ROA not after: Wed 19 May 2027 07:13:17 +0000 asID: 63648 IP address blocks: 117.51.2.0/24 maxlen: 24 117.51.3.0/24 maxlen: 24 117.51.4.0/24 maxlen: 24 117.51.5.0/24 maxlen: 24 117.51.6.0/24 maxlen: 24 117.51.8.0/24 maxlen: 24 117.51.9.0/24 maxlen: 24 117.51.10.0/24 maxlen: 24 117.51.11.0/24 maxlen: 24 117.51.12.0/24 maxlen: 24 117.51.13.0/24 maxlen: 24 117.51.14.0/24 maxlen: 24 117.51.15.0/24 maxlen: 24 117.51.16.0/24 maxlen: 24 117.51.17.0/24 maxlen: 24 117.51.18.0/24 maxlen: 24 117.51.19.0/24 maxlen: 24 117.51.20.0/24 maxlen: 24 117.51.21.0/24 maxlen: 24 117.51.22.0/24 maxlen: 24 117.51.23.0/24 maxlen: 24 117.51.24.0/24 maxlen: 24 117.51.25.0/24 maxlen: 24 117.51.26.0/24 maxlen: 24 117.51.27.0/24 maxlen: 24 117.51.28.0/24 maxlen: 24 117.51.29.0/24 maxlen: 24 117.51.30.0/24 maxlen: 24 117.51.31.0/24 maxlen: 24 117.51.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 14:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c7:f8:d3:ee:9b:86:62:52:46:f7:f3:59:15:5e:74:34:b9:68:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: May 20 07:08:17 2026 GMT Not After : May 19 07:13:17 2027 GMT Subject: CN=DD434E31190123B6C701BA5EB277B97CBEBC27DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:75:67:5f:7f:a2:72:d2:3f:b4:ef:21:1d: c7:62:29:68:2a:7b:a1:f9:1d:ae:5a:f4:94:6c:c2: 07:e3:85:b4:22:69:1b:b7:92:3a:d4:66:fc:b5:6a: 3a:fc:60:af:2f:7a:76:f4:93:7c:2e:50:69:ff:4a: 10:48:de:67:17:8c:ea:c4:6a:92:49:82:69:da:23: 97:4d:ba:02:25:dd:66:42:ba:30:cd:8a:c9:22:f1: 78:9c:7c:be:48:d3:3c:9b:d1:38:1c:a2:1c:08:9f: 07:42:e3:40:0a:3a:f2:a9:93:7c:c4:8a:06:6c:f2: 60:ee:32:63:15:a6:37:47:ed:8b:4e:df:be:f5:42: 2f:ae:43:78:16:9c:30:de:17:9e:d0:11:d9:42:6d: 4e:63:91:97:68:cb:2b:e0:1d:df:fd:7b:b1:0b:bc: 69:e7:fb:7e:a4:40:a6:e6:54:b0:c9:02:0a:83:b9: 9c:85:bd:56:30:c5:c4:8c:a7:81:a8:b9:e8:e4:8d: 3e:84:54:fb:57:b1:05:cf:59:49:b4:61:4b:b3:96: 08:10:f6:a6:4b:87:79:df:8b:bc:56:8f:55:46:cd: d6:a9:77:d8:fa:8c:ec:2e:aa:bd:84:2d:69:5d:13: ea:05:26:8c:9e:90:f2:9e:c7:64:5c:b8:93:c3:eb: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:43:4E:31:19:01:23:B6:C7:01:BA:5E:B2:77:B9:7C:BE:BC:27:DB X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS63648.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.51.2.0-117.51.6.255 117.51.8.0-117.51.31.255 117.51.130.0/24 Signature Algorithm: sha256WithRSAEncryption bf:6d:ef:df:32:e8:c2:e8:26:01:33:f8:46:97:b1:30:8c:58: 12:5b:a5:16:fb:7d:23:98:54:b1:ba:85:26:29:b3:18:85:92: 2a:7c:a9:41:49:9c:e0:f0:05:4e:bf:72:0f:35:23:43:f2:fd: 95:42:6e:bf:56:cc:2c:66:af:fa:2b:7d:03:72:b3:08:1c:d5: f6:ba:2d:61:aa:47:22:04:cc:ac:14:57:00:d1:5f:d9:28:2b: 8d:41:5f:c8:71:b9:43:2e:5e:50:32:ad:7c:3e:59:45:52:7a: ca:c7:ca:67:60:fe:3d:4c:01:4e:da:81:2a:f0:cc:51:73:1c: f0:ec:49:05:5e:a9:04:7c:af:fb:b9:04:26:6f:24:92:ae:25: fa:bd:a4:06:cf:cc:3c:ae:24:0a:6f:30:6c:c9:04:d3:02:e1: 54:96:01:c6:3e:22:29:d0:dc:61:e6:0b:b5:eb:1a:f5:98:d5: 37:49:9e:c6:45:db:af:a9:d4:57:03:69:5d:66:d2:ce:45:5f: 58:d2:ac:12:55:81:0d:4c:5a:ef:95:5e:24:79:e3:8c:ba:98: 09:40:fa:fe:15:fa:03:10:2a:c6:94:20:06:38:fd:56:83:88: 1f:2d:5e:83:fe:d1:c9:b1:6d:1e:7e:65:9e:95:75:54:d5:68: 4e:69:a0:75 -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIURsf40+6bhmJSRvfzWRVedDS5aHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA1MjAwNzA4MTdaFw0yNzA1MTkwNzEzMTdaMDMxMTAvBgNV BAMTKERENDM0RTMxMTkwMTIzQjZDNzAxQkE1RUIyNzdCOTdDQkVCQzI3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC873VnX3+ictI/tO8hHcdiKWgq e6H5Ha5a9JRswgfjhbQiaRu3kjrUZvy1ajr8YK8venb0k3wuUGn/ShBI3mcXjOrE apJJgmnaI5dNugIl3WZCujDNiski8XicfL5I0zyb0TgcohwInwdC40AKOvKpk3zE igZs8mDuMmMVpjdH7YtO3771Qi+uQ3gWnDDeF57QEdlCbU5jkZdoyyvgHd/9e7EL vGnn+36kQKbmVLDJAgqDuZyFvVYwxcSMp4GouejkjT6EVPtXsQXPWUm0YUuzlggQ 9qZLh3nfi7xWj1VGzdapd9j6jOwuqr2ELWldE+oFJoyekPKex2RcuJPD67PhAgMB AAGjggH/MIIB+zAdBgNVHQ4EFgQU3UNOMRkBI7bHAbpesne5fL68J9swHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MDI2MzYzNjcyMDAyNTkvMC9BUzYzNjQ4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIA ATAiMAwDBAF1MwIDBAB1MwYwDAMEA3UzCAMEBXUzAAMEAHUzgjANBgkqhkiG9w0B AQsFAAOCAQEAv23v3zLowugmATP4RpexMIxYElulFvt9I5hUsbqFJimzGIWSKnyp QUmc4PAFTr9yDzUjQ/L9lUJuv1bMLGav+it9A3KzCBzV9rotYapHIgTMrBRXANFf 2SgrjUFfyHG5Qy5eUDKtfD5ZRVJ6ysfKZ2D+PUwBTtqBKvDMUXMc8OxJBV6pBHyv +7kEJm8kkq4l+r2kBs/MPK4kCm8wbMkE0wLhVJYBxj4iKdDcYeYLtesa9ZjVN0me xkXbr6nUVwNpXWbSzkVfWNKsElWBDUxa75VeJHnjjLqYCUD6/hX6AxAqxpQgBjj9 VoOIHy1eg/7RybFtHn5lnpV1VNVoTmmgdQ== -----END CERTIFICATE-----Generated at Sat May 23 05:07:17 2026 by rpki-client