$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS59651.roa File: AS59651.roa (raw, json) Hash identifier: G38qmuyf9q9oO24Qvvu87QoBvLFTe2pF9+d0+AGq0LQ= Subject key identifier: 81:98:1E:DE:19:DE:62:D5:E5:69:6F:36:7F:A1:EC:49:54:63:22:37 Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Certificate serial: 3FA5568FF0786C347B13D27B6B4025DD114DD50A Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS59651.roa Signing time: Mon 08 Jun 2026 06:54:11 +0000 ROA not before: Mon 08 Jun 2026 06:49:11 +0000 ROA not after: Mon 07 Jun 2027 06:54:11 +0000 asID: 59651 IP address blocks: 122.8.44.0/22 maxlen: 24 122.8.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a5:56:8f:f0:78:6c:34:7b:13:d2:7b:6b:40:25:dd:11:4d:d5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Validity Not Before: Jun 8 06:49:11 2026 GMT Not After : Jun 7 06:54:11 2027 GMT Subject: CN=81981EDE19DE62D5E5696F367FA1EC4954632237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5d:0e:78:ee:93:15:15:f9:17:94:a5:e4:60: ac:f1:7b:61:33:b3:7a:91:81:35:52:68:d2:a4:12: a6:a6:5c:f3:b3:b2:a1:61:12:73:e5:32:97:c2:f8: eb:8f:fa:24:4b:3d:65:be:ab:b3:70:3f:bc:87:cb: a1:41:6c:a7:5d:fd:10:45:02:f1:89:4c:40:f0:40: 33:95:39:8c:ab:dc:b2:fd:1d:77:a2:83:c0:77:b3: 40:95:3d:80:fb:01:d5:25:69:24:85:f5:5f:ae:57: f1:dd:45:14:21:05:c6:76:e7:1f:ee:e9:91:4f:15: ce:c8:a2:a2:d9:de:2a:98:ff:1e:15:6c:95:b8:01: c6:f1:91:1b:eb:0c:af:0d:0b:5f:38:82:98:e7:4d: 3b:cf:af:29:eb:c0:b8:a2:74:d9:d7:32:ef:3d:d1: 64:f3:73:97:26:81:04:92:f5:f4:44:67:07:fc:1a: 70:00:1a:41:eb:1a:61:ea:1c:ea:77:ac:e3:97:73: a3:b9:33:94:db:a3:b9:92:7f:5e:90:0f:49:ce:0c: 89:65:99:31:54:d4:9a:61:ba:3a:6a:21:6f:ee:50: 50:b9:88:8e:28:a8:67:26:2a:33:2e:fe:9c:51:bd: b3:21:48:1c:a2:a5:ce:dc:e0:8d:5b:af:1d:df:41: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:98:1E:DE:19:DE:62:D5:E5:69:6F:36:7F:A1:EC:49:54:63:22:37 X509v3 Authority Key Identifier: keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS59651.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.8.44.0/22 122.8.92.0/22 Signature Algorithm: sha256WithRSAEncryption b7:48:3f:47:44:03:75:3f:7a:82:25:01:7a:e2:ce:2e:70:97: da:ad:22:5e:d7:c1:18:d3:46:b9:dc:0f:7d:45:37:ff:d3:f0: fe:57:61:a1:f4:81:c9:93:ad:1c:3a:68:ce:9c:43:82:3c:e3: d7:97:89:26:5b:07:8c:a3:02:5d:e8:55:ec:32:d2:9f:e3:4c: b0:ed:a5:93:ae:39:11:64:06:00:78:d2:84:97:db:0f:83:22: 1a:a7:47:7a:c1:ac:39:3e:d9:83:b2:57:37:26:21:22:67:37: 0f:9f:27:f0:02:d5:d0:3c:36:22:ee:c2:78:1f:dc:1e:c1:21: 2b:ea:94:65:50:43:2f:c8:7b:11:61:ac:24:99:9a:2c:da:92: c2:94:77:cb:01:3c:84:c9:80:be:1e:bc:5c:67:0e:cb:c9:b8: d7:68:27:10:d8:56:48:01:05:c7:43:82:87:6c:86:6c:5c:b4: e7:6f:89:e1:0e:a3:d5:be:a1:f7:77:ad:54:27:a8:69:0e:78: 3a:a9:25:25:72:dc:dc:c5:97:a5:0c:a1:2a:f4:d5:36:18:27: 42:5b:14:d8:c6:38:a6:bf:d1:47:4c:9c:e3:84:cd:b7:af:65: 0b:84:13:c7:22:8a:09:7f:03:b9:f0:e4:b1:ae:46:c8:d8:91: ce:bf:3b:6f -----BEGIN CERTIFICATE----- MIIE9jCCA96gAwIBAgIUP6VWj/B4bDR7E9J7a0Al3RFN1QowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTM3MEYwMDAwMTEwLwYDVQQFEygwMTgyRDRDRDBD NkQyMURDMkMyOTZFRDI2MDZBNzBENzk2RDVCQkI5MB4XDTI2MDYwODA2NDkxMVoX DTI3MDYwNzA2NTQxMVowMzExMC8GA1UEAxMoODE5ODFFREUxOURFNjJENUU1Njk2 RjM2N0ZBMUVDNDk1NDYzMjIzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIhdDnjukxUV+ReUpeRgrPF7YTOzepGBNVJo0qQSpqZc87OyoWESc+Uyl8L4 64/6JEs9Zb6rs3A/vIfLoUFsp139EEUC8YlMQPBAM5U5jKvcsv0dd6KDwHezQJU9 gPsB1SVpJIX1X65X8d1FFCEFxnbnH+7pkU8VzsiiotneKpj/HhVslbgBxvGRG+sM rw0LXziCmOdNO8+vKevAuKJ02dcy7z3RZPNzlyaBBJL19ERnB/wacAAaQesaYeoc 6nes45dzo7kzlNujuZJ/XpAPSc4MiWWZMVTUmmG6Omohb+5QULmIjiioZyYqMy7+ nFG9syFIHKKlztzgjVuvHd9BgZ8CAwEAAaOCAekwggHlMB0GA1UdDgQWBBSBmB7e Gd5i1eVpbzZ/oexJVGMiNzAfBgNVHSMEGDAWgBQBgtTNDG0h3CwpbtJganDXltW7 uTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEzNjU0ODA2MzY0NDIyMTYzLzAvMDE4MkQ0 Q0QwQzZEMjFEQzJDMjk2RUQyNjA2QTcwRDc5NkQ1QkJCOS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvQVlMVXpReHRJ ZHdzS1c3U1lHcHcxNWJWdTdrLmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMzY1NDgwNjM2 NDQyMjE2My8wL0FTNTk2NTEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw JQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAJ6CCwDBAJ6CFwwDQYJKoZIhvcN AQELBQADggEBALdIP0dEA3U/eoIlAXrizi5wl9qtIl7XwRjTRrncD31FN//T8P5X YaH0gcmTrRw6aM6cQ4I849eXiSZbB4yjAl3oVewy0p/jTLDtpZOuORFkBgB40oSX 2w+DIhqnR3rBrDk+2YOyVzcmISJnNw+fJ/AC1dA8NiLuwngf3B7BISvqlGVQQy/I exFhrCSZmizaksKUd8sBPITJgL4evFxnDsvJuNdoJxDYVkgBBcdDgodshmxctOdv ieEOo9W+ofd3rVQnqGkOeDqpJSVy3NzFl6UMoSr01TYYJ0JbFNjGOKa/0UdMnOOE zbevZQuEE8ciigl/A7nw5LGuRsjYkc6/O28= -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:39 2026 by rpki-client