$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS0.roa File: AS0.roa (raw, json) Hash identifier: Nw5NQ6ewh24BFR5ycVXUn2J9JL+TMYJsnAclxh0kHEE= Subject key identifier: C4:F1:9D:D6:46:F2:B7:E7:FC:D1:2A:C2:96:45:62:1F:73:C3:2E:23 Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 6CB04F1BC243E38850B033AAAD42954F7786EB69 Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS0.roa Signing time: Tue 30 Jun 2026 14:52:46 +0000 ROA not before: Tue 30 Jun 2026 14:47:46 +0000 ROA not after: Tue 29 Jun 2027 14:52:46 +0000 asID: 0 IP address blocks: 103.202.60.0/22 maxlen: 22 103.202.61.0/24 maxlen: 24 103.202.68.0/22 maxlen: 22 103.202.70.0/23 maxlen: 23 103.202.70.0/24 maxlen: 24 103.202.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 07:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b0:4f:1b:c2:43:e3:88:50:b0:33:aa:ad:42:95:4f:77:86:eb:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: Jun 30 14:47:46 2026 GMT Not After : Jun 29 14:52:46 2027 GMT Subject: CN=C4F19DD646F2B7E7FCD12AC29645621F73C32E23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e6:43:e4:13:55:6f:81:d3:bd:3d:a6:e7:ff: 05:3c:6e:64:f9:94:5f:38:4b:3e:1f:00:c8:35:57: d8:0f:6c:aa:5d:06:75:c2:1d:2b:06:41:44:37:0d: b5:bf:77:84:4e:f5:0d:e7:da:0e:bb:a3:55:1a:b1: 11:4d:03:49:22:8a:75:cb:3c:64:bc:3d:a0:56:98: d2:46:f6:3e:bf:a4:75:6a:61:e6:54:6c:05:35:cc: c2:69:41:10:b4:64:1d:e2:c1:2a:b8:9e:d9:83:4e: 55:20:15:96:1b:dd:7b:b7:86:00:6c:c6:f0:58:6f: 0a:88:4f:bc:3f:f0:1a:dd:57:02:73:ac:58:5b:3f: dd:a1:aa:08:06:a6:85:32:3e:51:3e:c4:84:7c:56: be:d0:9f:ec:8d:35:9e:30:93:bd:f1:e2:ea:91:29: 74:1d:ac:fe:b0:8f:88:50:15:d6:50:6c:87:26:4c: ef:ef:28:7f:c8:6b:76:72:fb:b2:04:ac:b1:f6:02: 3b:73:e2:93:36:bf:e9:4a:25:77:73:d4:f3:a2:b8: 5a:2b:ed:91:a3:0f:4e:5a:55:3e:b2:e2:45:f6:15: 04:b4:c6:b2:67:fc:db:de:62:45:55:41:00:df:ad: 91:ac:62:90:b4:31:6b:a7:c6:b1:94:c4:65:8a:23: 55:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F1:9D:D6:46:F2:B7:E7:FC:D1:2A:C2:96:45:62:1F:73:C3:2E:23 X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS0.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.202.60.0/22 103.202.68.0/22 Signature Algorithm: sha256WithRSAEncryption bb:96:d5:43:aa:23:c8:c9:86:c3:83:b7:91:d9:fc:e3:5c:7b: 80:de:43:da:5b:04:a0:c4:2a:bb:c5:cd:57:90:08:17:d6:3d: fc:f5:ec:e8:af:30:40:34:78:55:a7:51:bf:ed:66:da:f4:5d: c8:49:00:d6:c7:bc:19:6d:99:98:f3:9e:ba:a6:5c:7d:67:b4: 2b:ce:cf:5d:59:67:03:f2:c3:a3:37:3b:af:a1:16:c6:db:b5: 68:13:b9:8d:d5:03:4f:34:74:8f:5d:48:12:15:cb:69:5c:d1: c8:da:8c:74:b3:34:23:57:bb:b1:88:45:96:42:d9:55:1b:2c: 1a:7f:91:97:94:f1:bd:55:f4:c5:f2:14:3a:78:87:0a:bf:5e: 81:4d:48:8d:5d:36:20:cd:cb:84:70:ca:9e:63:d3:be:11:dd: 66:3b:d1:ac:5a:49:6f:28:df:a2:1b:45:20:d6:3a:23:c9:99: 52:20:71:d4:55:b1:65:d0:07:38:80:f5:c7:56:ac:3c:45:d8: c7:77:2d:33:f1:fa:a8:ec:71:5b:6f:a7:74:ed:96:1e:96:1f: db:ce:1f:37:73:c6:0c:47:44:89:fe:c4:99:7e:5c:88:2b:a6: 47:53:f2:2e:a7:54:4c:a7:0d:4e:e0:83:0d:2f:06:a4:8f:3f: 45:e5:90:6b -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUbLBPG8JD44hQsDOqrUKVT3eG62kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjA2MzAxNDQ3NDZaFw0yNzA2MjkxNDUyNDZaMDMxMTAvBgNV BAMTKEM0RjE5REQ2NDZGMkI3RTdGQ0QxMkFDMjk2NDU2MjFGNzNDMzJFMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ5kPkE1VvgdO9Pabn/wU8bmT5 lF84Sz4fAMg1V9gPbKpdBnXCHSsGQUQ3DbW/d4RO9Q3n2g67o1UasRFNA0kiinXL PGS8PaBWmNJG9j6/pHVqYeZUbAU1zMJpQRC0ZB3iwSq4ntmDTlUgFZYb3Xu3hgBs xvBYbwqIT7w/8BrdVwJzrFhbP92hqggGpoUyPlE+xIR8Vr7Qn+yNNZ4wk73x4uqR KXQdrP6wj4hQFdZQbIcmTO/vKH/Ia3Zy+7IErLH2Ajtz4pM2v+lKJXdz1POiuFor 7ZGjD05aVT6y4kX2FQS0xrJn/NveYkVVQQDfrZGsYpC0MWunxrGUxGWKI1V/AgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUxPGd1kbyt+f80SrClkViH3PDLiMwHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw WQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1yc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC9BUzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAJnyjwDBAJnykQwDQYJKoZIhvcNAQELBQADggEBALuW1UOqI8jJhsODt5HZ/ONc e4DeQ9pbBKDEKrvFzVeQCBfWPfz17OivMEA0eFWnUb/tZtr0XchJANbHvBltmZjz nrqmXH1ntCvOz11ZZwPyw6M3O6+hFsbbtWgTuY3VA080dI9dSBIVy2lc0cjajHSz NCNXu7GIRZZC2VUbLBp/kZeU8b1V9MXyFDp4hwq/XoFNSI1dNiDNy4Rwyp5j074R 3WY70axaSW8o36IbRSDWOiPJmVIgcdRVsWXQBziA9cdWrDxF2Md3LTPx+qjscVtv p3Ttlh6WH9vOHzdzxgxHRIn+xJl+XIgrpkdT8i6nVEynDU7ggw0vBqSPP0XlkGs= -----END CERTIFICATE-----Generated at Tue Jul 7 09:43:19 2026 by rpki-client