$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS151311.roa File: AS151311.roa (raw, json) Hash identifier: gsXEVrjIH+z/Akam0iDNU4MJjzPOcGHC/pf5cmLm8qQ= Subject key identifier: E3:2D:95:F2:48:DD:52:68:4F:40:83:1F:64:B0:01:0A:46:0E:0F:18 Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Certificate serial: 559105CE8927710392CAFEE7A06CBF9D2CCA039F Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS151311.roa Signing time: Tue 09 Jun 2026 08:46:30 +0000 ROA not before: Tue 09 Jun 2026 08:41:30 +0000 ROA not after: Tue 08 Jun 2027 08:46:30 +0000 asID: 151311 IP address blocks: 123.58.32.0/24 maxlen: 24 123.58.33.0/24 maxlen: 24 123.58.34.0/24 maxlen: 24 123.58.36.0/24 maxlen: 24 123.58.44.0/24 maxlen: 24 123.58.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:91:05:ce:89:27:71:03:92:ca:fe:e7:a0:6c:bf:9d:2c:ca:03:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Validity Not Before: Jun 9 08:41:30 2026 GMT Not After : Jun 8 08:46:30 2027 GMT Subject: CN=E32D95F248DD52684F40831F64B0010A460E0F18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:23:09:b7:9f:74:5f:4c:d8:e4:1b:4b:68:17: 63:f8:27:4b:9c:36:02:ba:1b:fe:75:14:bf:7f:5b: cd:28:5c:05:3f:19:c7:a5:46:98:f8:d0:6c:80:c1: 48:25:25:9f:d2:af:b7:59:ae:86:0e:14:de:58:c6: e5:a0:76:2c:87:37:8f:1c:38:88:3c:fa:27:69:8b: 1a:2b:da:dd:c7:99:ba:ec:ab:6c:13:ec:d1:1c:a2: 62:85:f6:90:79:44:3c:c7:a0:45:6a:3c:2a:a8:20: 2f:d8:ce:e1:bc:14:01:df:ca:8b:31:13:64:0d:87: 82:a7:ea:e7:36:69:a0:6e:2e:be:01:f6:b6:54:cb: 17:ca:8a:67:5e:68:8e:33:3f:8c:d4:65:22:63:75: bc:d3:b4:dc:1a:36:1a:91:32:f2:01:7f:7c:f2:ac: 58:59:bc:85:ef:72:26:21:42:4e:bd:70:39:eb:68: 14:80:6d:69:ae:64:8f:32:8f:ed:8b:4a:72:15:66: b6:c9:4b:a4:32:32:4d:b4:f3:52:a5:91:c3:49:c5: bf:73:58:2c:8a:2c:6b:7d:b7:3c:60:74:87:0f:61: c7:6b:39:2c:e4:48:e3:56:1a:1a:9c:70:36:3c:09: e0:ec:39:c7:fb:ac:48:c9:cf:4a:a6:60:72:28:e8: 69:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2D:95:F2:48:DD:52:68:4F:40:83:1F:64:B0:01:0A:46:0E:0F:18 X509v3 Authority Key Identifier: keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS151311.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.58.32.0-123.58.34.255 123.58.36.0/24 123.58.44.0/24 123.58.64.0/24 Signature Algorithm: sha256WithRSAEncryption a8:ab:ac:87:8e:b9:7a:40:c2:09:75:97:ef:ab:ee:be:bf:96: 38:5e:b1:17:39:72:09:d2:78:b7:80:96:93:0c:05:5a:3a:64: 7c:25:3e:7e:1f:22:83:2c:f2:d4:44:db:69:45:e0:a4:23:1b: ba:ec:55:55:f7:ab:8a:48:ec:63:31:2d:53:54:00:62:e2:0b: d9:99:05:33:19:a2:bb:0e:f6:c4:b1:55:ba:c8:9c:e5:04:94: 1b:5c:8d:47:60:82:e0:8a:fe:20:04:89:c7:3e:3d:8e:79:2a: 6c:f8:2b:b2:2f:c1:94:42:96:46:1b:e9:b8:7e:fc:27:19:2d: 18:7d:54:5b:65:f6:cb:b0:21:de:c8:ec:4a:e3:2e:18:83:c3: 16:34:c1:56:c2:26:64:d6:58:9c:15:9c:6e:7d:80:b4:7a:08: 7b:4c:4d:71:fc:79:fc:aa:ee:ea:17:6a:74:9f:30:89:1b:52: bc:27:15:df:35:0b:b2:13:ad:4b:50:94:79:6e:a1:a4:cc:a9: 47:74:7b:b7:b7:5c:43:6e:14:a1:03:52:d5:e8:a9:df:d3:3c: e9:26:25:8f:6b:64:c2:35:a0:b7:a6:71:77:3f:da:53:43:43: c7:22:57:73:68:dc:c1:9b:49:6c:a4:d0:32:a7:ec:f9:dc:18: fd:24:a5:0f -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUVZEFzokncQOSyv7noGy/nSzKA58wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTM3MEYwMDAwMTEwLwYDVQQFEygwMTgyRDRDRDBD NkQyMURDMkMyOTZFRDI2MDZBNzBENzk2RDVCQkI5MB4XDTI2MDYwOTA4NDEzMFoX DTI3MDYwODA4NDYzMFowMzExMC8GA1UEAxMoRTMyRDk1RjI0OERENTI2ODRGNDA4 MzFGNjRCMDAxMEE0NjBFMEYxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsjCbefdF9M2OQbS2gXY/gnS5w2Arob/nUUv39bzShcBT8Zx6VGmPjQbIDB SCUln9Kvt1muhg4U3ljG5aB2LIc3jxw4iDz6J2mLGiva3ceZuuyrbBPs0RyiYoX2 kHlEPMegRWo8KqggL9jO4bwUAd/KizETZA2Hgqfq5zZpoG4uvgH2tlTLF8qKZ15o jjM/jNRlImN1vNO03Bo2GpEy8gF/fPKsWFm8he9yJiFCTr1wOetoFIBtaa5kjzKP 7YtKchVmtslLpDIyTbTzUqWRw0nFv3NYLIosa323PGB0hw9hx2s5LORI41YaGpxw NjwJ4Ow5x/usSMnPSqZgcijoaYMCAwEAAaOCAf4wggH6MB0GA1UdDgQWBBTjLZXy SN1SaE9Agx9ksAEKRg4PGDAfBgNVHSMEGDAWgBQBgtTNDG0h3CwpbtJganDXltW7 uTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEzNjU0ODA2MzY0NDIyMTYzLzAvMDE4MkQ0 Q0QwQzZEMjFEQzJDMjk2RUQyNjA2QTcwRDc5NkQ1QkJCOS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvQVlMVXpReHRJ ZHdzS1c3U1lHcHcxNWJWdTdrLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMzY1NDgwNjM2 NDQyMjE2My8wL0FTMTUxMzExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAV7OiADBAB7OiIDBAB7OiQD BAB7OiwDBAB7OkAwDQYJKoZIhvcNAQELBQADggEBAKirrIeOuXpAwgl1l++r7r6/ ljhesRc5cgnSeLeAlpMMBVo6ZHwlPn4fIoMs8tRE22lF4KQjG7rsVVX3q4pI7GMx LVNUAGLiC9mZBTMZorsO9sSxVbrInOUElBtcjUdgguCK/iAEicc+PY55Kmz4K7Iv wZRClkYb6bh+/CcZLRh9VFtl9suwId7I7ErjLhiDwxY0wVbCJmTWWJwVnG59gLR6 CHtMTXH8efyq7uoXanSfMIkbUrwnFd81C7ITrUtQlHluoaTMqUd0e7e3XENuFKED UtXoqd/TPOkmJY9rZMI1oLemcXc/2lNDQ8ciV3No3MGbSWyk0DKn7PncGP0kpQ8= -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:39 2026 by rpki-client