$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS63619.roa File: AS63619.roa (raw, json) Hash identifier: QOlK6KO1k6Nwt+xpM26BlAcJBueP88oFFRGZhMwc3os= Subject key identifier: 06:BE:86:E7:02:0C:4A:20:3C:88:68:1C:E1:FD:7B:73:DD:55:ED:92 Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 16C485D73D21AD77E756FD83BB7B7238178C1F7E Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS63619.roa Signing time: Mon 29 Jun 2026 15:15:13 +0000 ROA not before: Mon 29 Jun 2026 15:10:13 +0000 ROA not after: Mon 28 Jun 2027 15:15:13 +0000 asID: 63619 IP address blocks: 103.200.136.0/22 maxlen: 22 103.200.140.0/22 maxlen: 22 103.200.144.0/22 maxlen: 22 103.200.148.0/22 maxlen: 22 103.202.0.0/22 maxlen: 22 103.202.4.0/22 maxlen: 22 103.202.8.0/22 maxlen: 22 103.202.12.0/22 maxlen: 22 103.202.16.0/22 maxlen: 22 103.202.20.0/22 maxlen: 22 103.202.24.0/22 maxlen: 22 103.202.28.0/22 maxlen: 22 103.202.32.0/22 maxlen: 22 103.202.36.0/22 maxlen: 22 103.202.40.0/22 maxlen: 22 103.202.44.0/22 maxlen: 22 103.202.92.0/22 maxlen: 22 103.202.96.0/22 maxlen: 22 103.202.100.0/22 maxlen: 22 103.202.104.0/22 maxlen: 22 103.202.108.0/22 maxlen: 22 103.202.112.0/22 maxlen: 22 103.202.120.0/22 maxlen: 22 103.202.124.0/22 maxlen: 22 103.202.128.0/22 maxlen: 22 103.202.132.0/22 maxlen: 22 103.202.136.0/22 maxlen: 22 103.202.140.0/22 maxlen: 22 103.202.144.0/22 maxlen: 22 202.90.96.0/22 maxlen: 22 202.90.100.0/22 maxlen: 22 202.90.104.0/22 maxlen: 22 202.90.108.0/22 maxlen: 22 203.76.208.0/22 maxlen: 22 203.76.212.0/22 maxlen: 22 203.76.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c4:85:d7:3d:21:ad:77:e7:56:fd:83:bb:7b:72:38:17:8c:1f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: Jun 29 15:10:13 2026 GMT Not After : Jun 28 15:15:13 2027 GMT Subject: CN=06BE86E7020C4A203C88681CE1FD7B73DD55ED92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:bc:61:f8:10:a2:77:f7:89:4b:47:73:08: e9:d3:98:85:35:7b:31:2c:60:a9:c1:f1:96:8d:aa: 10:a5:3b:c4:12:2f:8d:75:14:5e:a6:b3:8d:e8:76: bd:42:6c:63:52:33:84:79:a4:71:d3:bf:fa:5d:fa: 73:c0:c7:c9:2d:4b:33:60:3d:58:ba:93:3b:27:d3: 54:ef:2b:6d:4f:cd:e6:a5:42:fd:7e:ae:bf:e6:94: d3:62:c5:cb:ff:b8:da:91:d3:ab:54:da:b4:ea:c2: 40:db:2f:0b:59:bc:5e:6f:55:d9:ee:a0:e6:21:90: d0:2b:a4:e7:6d:48:88:e7:42:a5:73:5c:bb:23:42: 6c:b7:8c:5a:82:e8:02:d2:d0:b3:61:24:60:dd:dc: 4f:9e:cf:99:02:74:0d:38:79:a4:ff:5c:95:87:d6: be:5b:dc:a7:28:80:80:57:1f:a4:36:74:92:49:de: e9:8a:e2:79:a0:36:58:f6:50:81:b5:33:8c:f6:1e: 01:d4:44:2b:44:48:df:8c:2b:21:24:15:45:05:93: ec:85:6f:5a:b7:e4:6e:3d:fa:bd:cb:ff:be:b6:f2: 31:77:c3:dd:8b:cb:35:42:a4:4b:7d:fd:21:f6:2b: d8:1b:ee:e0:cb:88:a1:6e:33:62:95:91:1c:27:e7: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BE:86:E7:02:0C:4A:20:3C:88:68:1C:E1:FD:7B:73:DD:55:ED:92 X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS63619.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.200.136.0-103.200.151.255 103.202.0.0-103.202.47.255 103.202.92.0-103.202.115.255 103.202.120.0-103.202.147.255 202.90.96.0/20 203.76.208.0-203.76.219.255 Signature Algorithm: sha256WithRSAEncryption 39:ec:f4:75:4a:2b:9b:0f:86:6b:97:32:7e:bb:fd:45:82:6c: 0e:d1:93:46:35:bf:ea:e7:eb:ae:65:28:de:3c:a6:88:90:72: 5a:79:8b:ab:96:35:3d:ae:2e:aa:cf:a1:7d:7a:4f:ba:28:67: c4:8e:6a:71:1b:ad:35:77:46:48:2b:c5:07:6a:df:aa:af:02: 2f:40:86:da:9f:ed:b2:1f:a0:77:97:c4:1a:11:0e:31:38:66: 63:7a:a0:d2:17:0a:2e:ee:e7:0a:bb:ac:b8:72:7e:5c:b6:6e: cd:80:b5:c4:ac:66:84:05:b1:b1:8a:92:d6:fb:7c:2b:58:8a: a9:65:e5:07:0b:9f:ac:41:06:77:42:44:8b:f0:70:d0:83:0a: ca:2b:73:3c:43:b1:d5:16:42:b8:15:85:d6:21:e1:80:e8:3a: 98:a7:31:be:d0:c7:78:09:6e:76:1e:08:21:0f:1a:d9:1c:8d: 10:9f:17:1c:0e:d0:7e:0d:61:85:3f:bf:f5:c7:c9:0e:a8:27: c5:9c:be:82:2e:ea:da:42:50:d3:e6:33:81:03:ec:4e:24:db: cc:f7:4e:1b:55:f2:1b:a5:85:92:39:30:a1:01:f8:20:20:73: 48:71:dc:32:30:0a:f2:c6:6f:c4:95:b5:76:b5:5f:64:ae:63: 0a:c3:6a:ce -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUFsSF1z0hrXfnVv2Du3tyOBeMH34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjA2MjkxNTEwMTNaFw0yNzA2MjgxNTE1MTNaMDMxMTAvBgNV BAMTKDA2QkU4NkU3MDIwQzRBMjAzQzg4NjgxQ0UxRkQ3QjczREQ1NUVEOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2HLxh+BCid/eJS0dzCOnTmIU1 ezEsYKnB8ZaNqhClO8QSL411FF6ms43odr1CbGNSM4R5pHHTv/pd+nPAx8ktSzNg PVi6kzsn01TvK21PzealQv1+rr/mlNNixcv/uNqR06tU2rTqwkDbLwtZvF5vVdnu oOYhkNArpOdtSIjnQqVzXLsjQmy3jFqC6ALS0LNhJGDd3E+ez5kCdA04eaT/XJWH 1r5b3KcogIBXH6Q2dJJJ3umK4nmgNlj2UIG1M4z2HgHURCtESN+MKyEkFUUFk+yF b1q35G49+r3L/7628jF3w92LyzVCpEt9/SH2K9gb7uDLiKFuM2KVkRwn592jAgMB AAGjggIoMIICJDAdBgNVHQ4EFgQUBr6G5wIMSiA8iGgc4f17c91V7ZIwHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC9BUzYzNjE5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBRBAIA ATBLMAwDBANnyIgDBANnyJAwCwMDAWfKAwQEZ8ogMAwDBAJnylwDBAJnynAwDAME A2fKeAMEAmfKkAMEBMpaYDAMAwQEy0zQAwQCy0zYMA0GCSqGSIb3DQEBCwUAA4IB AQA57PR1SiubD4ZrlzJ+u/1FgmwO0ZNGNb/q5+uuZSjePKaIkHJaeYurljU9ri6q z6F9ek+6KGfEjmpxG601d0ZIK8UHat+qrwIvQIban+2yH6B3l8QaEQ4xOGZjeqDS Fwou7ucKu6y4cn5ctm7NgLXErGaEBbGxipLW+3wrWIqpZeUHC5+sQQZ3QkSL8HDQ gwrKK3M8Q7HVFkK4FYXWIeGA6DqYpzG+0Md4CW52HgghDxrZHI0QnxccDtB+DWGF P7/1x8kOqCfFnL6CLuraQlDT5jOBA+xOJNvM904bVfIbpYWSOTChAfggIHNIcdwy MAryxm/ElbV2tV9krmMKw2rO -----END CERTIFICATE-----Generated at Tue Jul 14 21:53:55 2026 by rpki-client