$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/AS146788.roa File: AS146788.roa (raw, json) Hash identifier: 8B6qiNcSC/x73VIpAQpd883oeZsoWKDo+SgTi+7lr6Q= Subject key identifier: B0:1B:80:E8:5D:8B:11:29:D7:16:E1:92:17:4C:B8:66:42:FC:EB:AE Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 0A689005A87B2B0D7186DEC5D0B9AD4FF7BF4276 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/AS146788.roa Signing time: Wed 03 Jun 2026 01:15:26 +0000 ROA not before: Wed 03 Jun 2026 01:10:26 +0000 ROA not after: Wed 02 Jun 2027 01:15:26 +0000 asID: 146788 IP address blocks: 219.237.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:68:90:05:a8:7b:2b:0d:71:86:de:c5:d0:b9:ad:4f:f7:bf:42:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Jun 3 01:10:26 2026 GMT Not After : Jun 2 01:15:26 2027 GMT Subject: CN=B01B80E85D8B1129D716E192174CB86642FCEBAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:64:94:cb:ea:70:f9:b5:06:c3:0c:74:fe:46: c0:c6:f4:9a:5c:3e:b1:e1:6c:a9:9b:2d:55:15:5f: 5b:91:a0:ac:80:ca:d1:10:12:dc:9f:d5:b8:a6:28: 26:9a:b3:5f:29:5d:cb:72:e4:7e:23:8e:c6:ff:c4: 4e:59:7b:a9:19:fd:65:9a:22:cf:aa:57:45:1e:a6: 69:09:2b:ed:20:e7:38:f8:24:25:c4:dd:38:1d:df: 14:6d:2d:31:3f:43:55:c3:d3:3e:0c:00:90:b4:83: ff:75:43:79:6e:2d:9b:00:6a:4f:4e:42:9d:aa:70: da:cb:0d:d0:7e:60:82:cb:9e:b5:83:b2:51:ed:94: cf:f2:d7:9b:6a:c4:9b:d6:1d:5e:e0:c5:df:1c:4d: 37:c9:62:a4:d7:49:18:03:7b:2d:0a:e3:be:c8:19: 9a:6a:08:5d:8a:32:e2:3a:5e:ff:43:31:bb:22:37: 07:68:d5:fe:48:df:15:e3:65:53:90:e2:5b:ca:f0: 8d:b5:83:c8:9f:fb:16:d4:90:25:f2:98:10:b9:0f: 11:33:e8:fc:f9:77:2a:09:31:24:42:56:1c:08:b2: b7:fe:ca:c1:9e:7f:43:23:be:e5:c6:76:82:52:61: 07:04:a3:50:7c:74:65:76:cc:08:33:50:cf:6f:07: 30:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1B:80:E8:5D:8B:11:29:D7:16:E1:92:17:4C:B8:66:42:FC:EB:AE X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/AS146788.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.237.49.0/24 Signature Algorithm: sha256WithRSAEncryption a5:b4:4a:17:5b:22:0d:8c:ca:67:d0:cc:b1:bd:82:a1:91:ab: 1e:cf:0c:82:d4:b6:3c:47:9d:86:8d:06:6c:89:c8:eb:51:81: f7:14:a1:b9:9b:51:fd:a3:86:99:99:65:52:5f:22:a6:38:9c: 1a:e5:11:42:10:c6:6c:0a:b2:ed:9d:fe:d6:ff:0e:2f:5b:f3: f7:5f:28:1f:e8:f1:ab:70:95:c1:9f:f7:9f:34:b4:ce:80:2d: 4b:f3:2d:fa:a6:e1:96:9b:cb:51:87:7e:b1:e1:cc:72:b2:21: f5:f2:d7:85:5d:05:bd:84:f1:15:11:1d:97:18:69:4d:b7:14: df:c8:9e:49:c5:85:55:7c:83:25:53:d4:d8:f6:54:ca:9b:b7: 93:11:a0:c4:f6:6c:a7:25:2f:78:b9:76:f1:03:47:6d:a6:32: 80:78:75:be:3a:07:8a:f3:d0:f2:7f:3e:a9:f9:61:b6:6e:d4: 33:ec:62:11:05:fa:8d:02:7c:9f:30:c9:2b:e1:45:05:f6:91: 99:f2:42:f1:2a:fd:01:00:6d:d1:af:df:33:62:35:d2:d0:6d: 0e:c5:08:48:cc:19:ca:6a:de:17:7e:37:52:38:ac:9c:ff:24: 9b:8f:6a:ce:0e:50:3f:16:b1:95:c0:a2:d1:cc:06:8c:3a:a5: 45:98:3f:d1 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUCmiQBah7Kw1xht7F0LmtT/e/QnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA2MDMwMTEwMjZaFw0yNzA2MDIwMTE1MjZaMDMxMTAvBgNV BAMTKEIwMUI4MEU4NUQ4QjExMjlENzE2RTE5MjE3NENCODY2NDJGQ0VCQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2ZJTL6nD5tQbDDHT+RsDG9Jpc PrHhbKmbLVUVX1uRoKyAytEQEtyf1bimKCaas18pXcty5H4jjsb/xE5Ze6kZ/WWa Is+qV0UepmkJK+0g5zj4JCXE3Tgd3xRtLTE/Q1XD0z4MAJC0g/91Q3luLZsAak9O Qp2qcNrLDdB+YILLnrWDslHtlM/y15tqxJvWHV7gxd8cTTfJYqTXSRgDey0K477I GZpqCF2KMuI6Xv9DMbsiNwdo1f5I3xXjZVOQ4lvK8I21g8if+xbUkCXymBC5DxEz 6Pz5dyoJMSRCVhwIsrf+ysGef0MjvuXGdoJSYQcEo1B8dGV2zAgzUM9vBzAzAgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQUsBuA6F2LESnXFuGSF0y4ZkL8664wHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC9BUzE0Njc4OC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANvtMTANBgkqhkiG9w0BAQsFAAOCAQEApbRKF1siDYzKZ9DMsb2CoZGr Hs8MgtS2PEedho0GbInI61GB9xShuZtR/aOGmZllUl8ipjicGuURQhDGbAqy7Z3+ 1v8OL1vz918oH+jxq3CVwZ/3nzS0zoAtS/Mt+qbhlpvLUYd+seHMcrIh9fLXhV0F vYTxFREdlxhpTbcU38ieScWFVXyDJVPU2PZUypu3kxGgxPZspyUveLl28QNHbaYy gHh1vjoHivPQ8n8+qflhtm7UM+xiEQX6jQJ8nzDJK+FFBfaRmfJC8Sr9AQBt0a/f M2I10tBtDsUISMwZymreF343UjisnP8km49qzg5QPxaxlcCi0cwGjDqlRZg/0Q== -----END CERTIFICATE-----Generated at Sun Jun 14 08:32:11 2026 by rpki-client