$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS1299.roa File: AS1299.roa (raw, json) Hash identifier: Iyx4r+Mxqa+vWtBLIkrLbJ3LeLtyPCHZlx9OcR4BLdY= Subject key identifier: EB:9C:45:B9:34:05:6D:2F:D5:51:67:C8:E8:E5:B2:4A:6C:3B:F6:FD Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Certificate serial: 42A1ADC13F7F6E9A251448F003EB344262BE0503 Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS1299.roa Signing time: Mon 08 Jun 2026 06:54:11 +0000 ROA not before: Mon 08 Jun 2026 06:49:11 +0000 ROA not after: Mon 07 Jun 2027 06:54:11 +0000 asID: 1299 IP address blocks: 122.8.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a1:ad:c1:3f:7f:6e:9a:25:14:48:f0:03:eb:34:42:62:be:05:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Validity Not Before: Jun 8 06:49:11 2026 GMT Not After : Jun 7 06:54:11 2027 GMT Subject: CN=EB9C45B934056D2FD55167C8E8E5B24A6C3BF6FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:a8:ae:c4:10:71:4e:6e:72:d8:51:e3:93: c1:66:5f:23:4e:25:e8:73:69:9a:1b:ee:97:c1:ec: 5e:98:f8:dd:b2:38:f4:fd:58:f2:37:a6:04:d8:46: e3:57:74:0b:3e:05:92:83:19:e8:6b:ab:ea:36:a2: ba:49:88:d7:58:f1:89:e5:ae:a6:31:88:42:ad:7f: bb:65:0a:5d:88:e8:55:48:3a:ad:9f:17:60:89:3d: 28:67:31:7d:27:01:31:be:c8:91:f9:5a:a8:1f:fd: a4:14:41:8a:e0:d1:7b:df:c8:78:9e:69:f8:47:cb: 14:b3:32:6f:fd:ab:62:cc:8b:0f:67:58:70:5c:7b: 77:10:34:dd:97:29:22:7c:61:48:bc:25:cd:d7:bc: 87:09:11:b1:c0:58:6f:e9:f2:c5:9a:38:ae:0d:a7: c2:77:13:b5:dc:01:3e:fe:f4:16:3c:09:04:7b:10: 63:ab:7a:c3:b2:ed:cc:4f:e3:af:c9:f0:b2:cd:3e: 85:03:60:31:97:6d:91:55:40:cd:69:99:20:7e:f2: bb:95:67:73:e2:23:e8:b3:01:ea:3d:8a:c5:9c:0a: 24:32:40:ad:ec:18:8b:fa:1d:80:9e:57:48:2c:b2: 16:fc:8d:bc:85:7d:4b:82:65:96:b1:d6:88:d3:12: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9C:45:B9:34:05:6D:2F:D5:51:67:C8:E8:E5:B2:4A:6C:3B:F6:FD X509v3 Authority Key Identifier: keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS1299.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.8.48.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:3a:0f:fb:f4:e7:e5:e3:fc:8e:12:04:4a:00:35:db:6f:3f: 62:cf:19:9b:d9:b0:73:2c:f5:9d:e4:5f:a4:0e:80:17:f4:84: 2e:84:58:ce:43:29:bf:98:2a:9d:ac:d3:cf:1d:96:62:9f:99: 0c:6c:05:ee:10:71:5c:ef:33:fb:cb:52:c6:eb:a5:17:35:73: 53:88:5d:a2:98:48:41:8c:57:54:68:c8:3b:c2:ca:ac:9d:50: a7:0b:e9:d0:e4:a5:5b:e4:6f:7d:e9:4c:e9:ee:fb:38:e3:88: df:65:89:96:82:b3:a8:c7:47:c8:26:7e:c5:81:b8:3a:5a:0f: d4:a8:cf:70:34:73:3e:db:19:7b:d5:ed:5e:da:21:36:56:8a: b1:6b:ce:47:a7:77:19:b6:da:f1:75:d2:6d:af:81:a3:7f:75: 3f:69:fb:28:11:c5:b9:46:f1:95:d2:f9:36:72:ca:0b:63:64: ac:a9:f7:bc:e0:f5:9c:81:96:3d:a1:ac:f1:93:5b:41:b6:a0: cc:d5:5f:4b:20:2a:b2:f5:ce:e1:ac:d7:16:aa:06:8b:3b:b9: b2:96:83:cb:5b:b0:8f:83:18:6a:2f:46:66:f9:d4:f2:ff:32: 92:bd:e2:35:a1:6c:ea:4b:e8:2e:eb:30:92:21:7c:aa:c3:c4: fb:3b:cd:45 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUQqGtwT9/bpolFEjwA+s0QmK+BQMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTM3MEYwMDAwMTEwLwYDVQQFEygwMTgyRDRDRDBD NkQyMURDMkMyOTZFRDI2MDZBNzBENzk2RDVCQkI5MB4XDTI2MDYwODA2NDkxMVoX DTI3MDYwNzA2NTQxMVowMzExMC8GA1UEAxMoRUI5QzQ1QjkzNDA1NkQyRkQ1NTE2 N0M4RThFNUIyNEE2QzNCRjZGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKjfqK7EEHFObnLYUeOTwWZfI04l6HNpmhvul8HsXpj43bI49P1Y8jemBNhG 41d0Cz4FkoMZ6Gur6jaiukmI11jxieWupjGIQq1/u2UKXYjoVUg6rZ8XYIk9KGcx fScBMb7IkflaqB/9pBRBiuDRe9/IeJ5p+EfLFLMyb/2rYsyLD2dYcFx7dxA03Zcp InxhSLwlzde8hwkRscBYb+nyxZo4rg2nwncTtdwBPv70FjwJBHsQY6t6w7LtzE/j r8nwss0+hQNgMZdtkVVAzWmZIH7yu5Vnc+Ij6LMB6j2KxZwKJDJArewYi/odgJ5X SCyyFvyNvIV9S4JllrHWiNMSX7MCAwEAAaOCAeIwggHeMB0GA1UdDgQWBBTrnEW5 NAVtL9VRZ8jo5bJKbDv2/TAfBgNVHSMEGDAWgBQBgtTNDG0h3CwpbtJganDXltW7 uTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEzNjU0ODA2MzY0NDIyMTYzLzAvMDE4MkQ0 Q0QwQzZEMjFEQzJDMjk2RUQyNjA2QTcwRDc5NkQ1QkJCOS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvQVlMVXpReHRJ ZHdzS1c3U1lHcHcxNWJWdTdrLmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUH MAuGQHJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMzY1NDgwNjM2 NDQyMjE2My8wL0FTMTI5OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnoIMDANBgkqhkiG9w0BAQsFAAOC AQEAmjoP+/Tn5eP8jhIESgA1228/Ys8Zm9mwcyz1neRfpA6AF/SELoRYzkMpv5gq nazTzx2WYp+ZDGwF7hBxXO8z+8tSxuulFzVzU4hdophIQYxXVGjIO8LKrJ1Qpwvp 0OSlW+RvfelM6e77OOOI32WJloKzqMdHyCZ+xYG4OloP1KjPcDRzPtsZe9XtXtoh NlaKsWvOR6d3Gbba8XXSba+Bo391P2n7KBHFuUbxldL5NnLKC2NkrKn3vOD1nIGW PaGs8ZNbQbagzNVfSyAqsvXO4azXFqoGizu5spaDy1uwj4MYai9GZvnU8v8ykr3i NaFs6kvoLuswkiF8qsPE+zvNRQ== -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:38 2026 by rpki-client