$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS5511.roa File: AS5511.roa (raw, json) Hash identifier: ZjXO3qtZwh5VNhVf9DW9lIPota1PdBabfTzMLlHjiu0= Subject key identifier: DA:4A:BF:ED:56:4B:FC:36:BF:B4:C5:7D:67:23:99:62:C8:3F:1E:4E Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Certificate serial: 32547A6D8D1F1DE78FA3AAAB2B8A662CF240D253 Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS5511.roa Signing time: Mon 08 Jun 2026 06:54:11 +0000 ROA not before: Mon 08 Jun 2026 06:49:11 +0000 ROA not after: Mon 07 Jun 2027 06:54:11 +0000 asID: 5511 IP address blocks: 122.8.64.0/22 maxlen: 24 122.8.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:54:7a:6d:8d:1f:1d:e7:8f:a3:aa:ab:2b:8a:66:2c:f2:40:d2:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Validity Not Before: Jun 8 06:49:11 2026 GMT Not After : Jun 7 06:54:11 2027 GMT Subject: CN=DA4ABFED564BFC36BFB4C57D67239962C83F1E4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0f:26:9e:07:ee:ce:15:46:ac:bf:87:e1:29: e7:62:07:64:a0:21:3b:39:5c:a9:bf:3c:52:1e:2a: d9:91:15:bb:18:ed:73:e5:a5:68:f1:ca:16:6b:ca: ef:ae:11:bd:3d:88:60:1c:16:b4:25:f7:2b:57:7a: b7:85:d4:dd:76:33:eb:a7:11:79:af:4e:99:c3:49: b8:07:b8:9d:5f:81:ab:72:74:dd:05:55:30:97:cd: 8d:41:64:69:9f:59:39:3e:71:55:87:28:48:9b:c6: 9b:73:56:25:73:c4:3e:57:00:e1:17:4f:09:cb:bc: 25:2d:8e:78:02:9f:0f:80:76:60:91:96:bd:f1:7d: a0:f9:f8:f8:e7:99:37:fe:a7:c4:25:af:1d:53:a8: 7d:b4:fd:00:fa:ea:5a:ef:fd:06:19:40:8b:e2:ad: ad:14:46:f4:27:eb:0b:a1:de:b4:50:a8:0d:88:a9: 53:d5:46:64:40:f8:cc:63:44:69:a8:94:85:b7:ce: 38:da:66:f1:c6:5b:89:24:f4:e5:b1:05:77:ec:ae: 91:bd:9b:0c:1f:c1:dd:b5:54:76:36:8a:dc:bc:50: 2a:36:2a:4c:73:62:63:1d:47:ce:f9:f4:f1:8b:16: 58:e6:33:84:47:04:cc:fc:22:a2:39:16:4a:d7:cd: 95:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4A:BF:ED:56:4B:FC:36:BF:B4:C5:7D:67:23:99:62:C8:3F:1E:4E X509v3 Authority Key Identifier: keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS5511.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.8.64.0/22 122.8.72.0/22 Signature Algorithm: sha256WithRSAEncryption c2:dd:a6:3a:10:a5:a2:16:d8:a3:5b:a5:45:b3:9f:03:b3:60: 98:b9:08:a5:38:b3:4a:be:83:7f:dd:9d:95:c0:84:44:96:32: b7:08:15:4e:ab:93:71:25:e3:36:2b:66:9a:f4:c3:a7:4e:28: e5:64:56:77:5e:25:97:5a:65:71:26:e8:c1:f6:e9:b9:e6:ab: 3c:82:b6:77:d1:0e:ed:51:b7:74:7d:89:da:79:66:23:7d:9e: f6:24:b4:69:c7:41:d3:3f:fe:87:a9:dd:c6:cd:ff:db:e9:a7: ab:f3:1f:39:c7:d2:37:15:22:4b:60:0c:45:17:1d:a0:79:78: 08:9f:e1:5f:dd:fe:48:a2:ba:3d:9f:7f:52:ef:b3:d1:01:dc: 03:f5:06:43:5d:80:77:2d:3d:b5:b0:a1:5d:30:34:2a:23:34: 37:17:92:ee:e9:a1:8d:23:28:d0:26:18:87:da:ec:75:8e:68: e2:95:1f:bf:68:c9:7d:e2:e9:aa:9a:46:f0:53:8f:6a:36:22: 93:ed:c8:d9:60:20:ad:f0:3b:c2:e4:92:b0:74:75:00:75:dd: 6a:ee:89:72:a0:a8:75:e8:4c:1d:d0:4b:61:dd:82:8b:aa:46: 91:55:c7:67:98:e9:d5:eb:67:64:e4:bf:be:42:4e:2f:ea:50: da:a4:51:5f -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUMlR6bY0fHeePo6qrK4pmLPJA0lMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTM3MEYwMDAwMTEwLwYDVQQFEygwMTgyRDRDRDBD NkQyMURDMkMyOTZFRDI2MDZBNzBENzk2RDVCQkI5MB4XDTI2MDYwODA2NDkxMVoX DTI3MDYwNzA2NTQxMVowMzExMC8GA1UEAxMoREE0QUJGRUQ1NjRCRkMzNkJGQjRD NTdENjcyMzk5NjJDODNGMUU0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoPJp4H7s4VRqy/h+Ep52IHZKAhOzlcqb88Uh4q2ZEVuxjtc+WlaPHKFmvK 764RvT2IYBwWtCX3K1d6t4XU3XYz66cRea9OmcNJuAe4nV+Bq3J03QVVMJfNjUFk aZ9ZOT5xVYcoSJvGm3NWJXPEPlcA4RdPCcu8JS2OeAKfD4B2YJGWvfF9oPn4+OeZ N/6nxCWvHVOofbT9APrqWu/9BhlAi+KtrRRG9CfrC6HetFCoDYipU9VGZED4zGNE aaiUhbfOONpm8cZbiST05bEFd+yukb2bDB/B3bVUdjaK3LxQKjYqTHNiYx1Hzvn0 8YsWWOYzhEcEzPwiojkWStfNlTkCAwEAAaOCAegwggHkMB0GA1UdDgQWBBTaSr/t Vkv8Nr+0xX1nI5liyD8eTjAfBgNVHSMEGDAWgBQBgtTNDG0h3CwpbtJganDXltW7 uTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEzNjU0ODA2MzY0NDIyMTYzLzAvMDE4MkQ0 Q0QwQzZEMjFEQzJDMjk2RUQyNjA2QTcwRDc5NkQ1QkJCOS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvQVlMVXpReHRJ ZHdzS1c3U1lHcHcxNWJWdTdrLmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUH MAuGQHJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMzY1NDgwNjM2 NDQyMjE2My8wL0FTNTUxMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAnoIQAMEAnoISDANBgkqhkiG9w0B AQsFAAOCAQEAwt2mOhClohbYo1ulRbOfA7NgmLkIpTizSr6Df92dlcCERJYytwgV TquTcSXjNitmmvTDp04o5WRWd14ll1plcSbowfbpuearPIK2d9EO7VG3dH2J2nlm I32e9iS0acdB0z/+h6ndxs3/2+mnq/MfOcfSNxUiS2AMRRcdoHl4CJ/hX93+SKK6 PZ9/Uu+z0QHcA/UGQ12Ady09tbChXTA0KiM0NxeS7umhjSMo0CYYh9rsdY5o4pUf v2jJfeLpqppG8FOPajYik+3I2WAgrfA7wuSSsHR1AHXdau6JcqCodehMHdBLYd2C i6pGkVXHZ5jp1etnZOS/vkJOL+pQ2qRRXw== -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:40 2026 by rpki-client