$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS399461.roa File: AS399461.roa (raw, json) Hash identifier: 3axRxHe99vfD/uTl/lOjxC4DK3qzBnsT5x/PWGith38= Subject key identifier: 2F:0B:9A:B0:66:5B:DD:44:C3:F2:4D:0C:54:D1:1B:96:B2:35:5B:FF Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Certificate serial: 78B6CE523A0208827CBF540E48049C402A0419FE Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS399461.roa Signing time: Mon 08 Jun 2026 06:54:11 +0000 ROA not before: Mon 08 Jun 2026 06:49:11 +0000 ROA not after: Mon 07 Jun 2027 06:54:11 +0000 asID: 399461 IP address blocks: 122.8.0.0/24 maxlen: 24 122.8.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b6:ce:52:3a:02:08:82:7c:bf:54:0e:48:04:9c:40:2a:04:19:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Validity Not Before: Jun 8 06:49:11 2026 GMT Not After : Jun 7 06:54:11 2027 GMT Subject: CN=2F0B9AB0665BDD44C3F24D0C54D11B96B2355BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:cf:a6:04:b3:05:f6:a1:a5:11:5b:fa:db: e1:93:e0:58:a1:2d:5e:ff:ab:32:56:fe:62:c4:b3: fb:da:f7:4d:10:96:40:0b:c8:6a:18:72:55:10:1c: 2c:91:4c:b1:7e:fd:00:13:71:37:5a:05:c9:8d:10: 84:c9:87:6f:f7:53:7d:3b:89:eb:eb:79:74:9b:6b: 18:68:f9:65:36:de:e5:49:89:13:31:90:da:79:8d: e7:57:56:dd:7d:eb:51:05:7f:93:4e:2e:aa:24:fc: c3:74:54:38:fd:aa:03:a0:d6:db:ed:98:b2:76:28: 90:39:87:b0:07:75:0f:1e:8a:9b:f0:ad:32:79:f1: a1:fe:62:e6:74:66:a5:16:e4:75:12:30:53:21:fa: eb:9b:ff:be:52:d9:f2:00:58:13:2a:82:f8:cd:00: 68:44:6b:84:a6:81:17:90:aa:ad:07:fc:69:67:1c: 76:91:ae:f8:8d:3d:7c:9f:9e:bb:82:2f:7a:a0:cf: cd:49:cc:ae:3b:dc:00:1d:ae:82:31:e1:f4:82:98: 63:7e:5b:cd:cc:d5:f2:c1:46:0b:ae:43:00:89:59: 24:53:38:ee:f4:4b:66:7e:be:d2:b5:ff:33:0c:30: 3a:4e:93:75:f2:fd:3c:9d:a2:74:86:db:86:7e:f5: 9c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0B:9A:B0:66:5B:DD:44:C3:F2:4D:0C:54:D1:1B:96:B2:35:5B:FF X509v3 Authority Key Identifier: keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS399461.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.8.0.0/24 122.8.22.0/24 Signature Algorithm: sha256WithRSAEncryption 48:b9:26:be:36:21:0c:9d:c4:2a:72:e6:d1:a7:62:35:79:9b: f1:43:be:68:be:2f:bc:3e:66:47:f7:79:a4:f2:08:b4:e4:4b: 7d:a0:89:96:94:89:27:bb:41:78:8a:e7:dd:28:af:7a:af:4d: d4:76:e8:01:57:13:60:e7:94:17:9c:12:a5:6b:58:b6:ae:04: 60:40:14:72:96:99:a5:37:78:43:40:c9:b3:30:4a:a8:67:4a: 5a:19:b8:53:75:19:1f:33:32:4d:3c:c8:37:a3:b4:45:a4:ec: 54:ab:1d:0c:2d:d8:7f:3f:bc:ef:41:28:4b:f1:6d:76:13:ec: 88:e9:ac:6c:50:8c:0a:b6:ec:c9:81:12:58:e9:78:cf:92:ba: 9f:b4:83:c7:39:80:bb:32:47:b0:b5:76:bd:ab:52:9d:12:8d: 1e:c3:d3:ca:98:58:21:10:a7:4b:2b:67:19:8a:e0:51:ee:e9: a1:57:da:05:c9:8c:c2:60:8c:26:6a:57:0a:d4:fb:e9:b3:2d: 58:cb:42:d7:1f:60:23:74:a3:01:99:0e:4c:b7:fd:3a:fa:8e: d8:30:aa:40:9e:d2:83:d1:85:19:c0:3f:29:f6:dd:ee:98:55: d8:7f:b7:c4:97:6d:d2:5c:a9:26:00:87:18:11:b7:3e:fb:e4: ef:0a:d5:9e -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUeLbOUjoCCIJ8v1QOSAScQCoEGf4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTM3MEYwMDAwMTEwLwYDVQQFEygwMTgyRDRDRDBD NkQyMURDMkMyOTZFRDI2MDZBNzBENzk2RDVCQkI5MB4XDTI2MDYwODA2NDkxMVoX DTI3MDYwNzA2NTQxMVowMzExMC8GA1UEAxMoMkYwQjlBQjA2NjVCREQ0NEMzRjI0 RDBDNTREMTFCOTZCMjM1NUJGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuaz6YEswX2oaURW/rb4ZPgWKEtXv+rMlb+YsSz+9r3TRCWQAvIahhyVRAc LJFMsX79ABNxN1oFyY0QhMmHb/dTfTuJ6+t5dJtrGGj5ZTbe5UmJEzGQ2nmN51dW 3X3rUQV/k04uqiT8w3RUOP2qA6DW2+2YsnYokDmHsAd1Dx6Km/CtMnnxof5i5nRm pRbkdRIwUyH665v/vlLZ8gBYEyqC+M0AaERrhKaBF5CqrQf8aWccdpGu+I09fJ+e u4IveqDPzUnMrjvcAB2ugjHh9IKYY35bzczV8sFGC65DAIlZJFM47vRLZn6+0rX/ MwwwOk6TdfL9PJ2idIbbhn71nP8CAwEAAaOCAeowggHmMB0GA1UdDgQWBBQvC5qw ZlvdRMPyTQxU0RuWsjVb/zAfBgNVHSMEGDAWgBQBgtTNDG0h3CwpbtJganDXltW7 uTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEzNjU0ODA2MzY0NDIyMTYzLzAvMDE4MkQ0 Q0QwQzZEMjFEQzJDMjk2RUQyNjA2QTcwRDc5NkQ1QkJCOS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvQVlMVXpReHRJ ZHdzS1c3U1lHcHcxNWJWdTdrLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMzY1NDgwNjM2 NDQyMjE2My8wL0FTMzk5NDYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAeggAAwQAeggWMA0GCSqGSIb3 DQEBCwUAA4IBAQBIuSa+NiEMncQqcubRp2I1eZvxQ75ovi+8PmZH93mk8gi05Et9 oImWlIknu0F4iufdKK96r03UdugBVxNg55QXnBKla1i2rgRgQBRylpmlN3hDQMmz MEqoZ0paGbhTdRkfMzJNPMg3o7RFpOxUqx0MLdh/P7zvQShL8W12E+yI6axsUIwK tuzJgRJY6XjPkrqftIPHOYC7MkewtXa9q1KdEo0ew9PKmFghEKdLK2cZiuBR7umh V9oFyYzCYIwmalcK1Pvpsy1Yy0LXH2AjdKMBmQ5Mt/06+o7YMKpAntKD0YUZwD8p 9t3umFXYf7fEl23SXKkmAIcYEbc+++TvCtWe -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:39 2026 by rpki-client