$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS59077.roa File: AS59077.roa (raw, json) Hash identifier: Q7nEwKbZKdVfMPg4eqPb4dhk0zI34xvIoyJ2oXjOr1E= Subject key identifier: E6:3F:52:E8:E1:C3:CC:19:F3:8E:EB:4D:A5:38:C4:0F:79:0E:57:79 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 4FD6D646B994462583D093345FD330E0EC26DC33 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS59077.roa Signing time: Wed 10 Jun 2026 07:55:04 +0000 ROA not before: Wed 10 Jun 2026 07:50:04 +0000 ROA not after: Wed 09 Jun 2027 07:55:04 +0000 asID: 59077 IP address blocks: 106.75.128.0/20 maxlen: 20 106.75.144.0/20 maxlen: 20 106.75.160.0/20 maxlen: 20 106.75.176.0/20 maxlen: 20 113.31.160.0/20 maxlen: 20 113.31.192.0/20 maxlen: 20 113.31.208.0/20 maxlen: 20 113.31.224.0/20 maxlen: 20 113.31.240.0/20 maxlen: 20 2401:3480::/36 maxlen: 36 2401:3480:2000::/36 maxlen: 36 2401:3480:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d6:d6:46:b9:94:46:25:83:d0:93:34:5f:d3:30:e0:ec:26:dc:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Jun 10 07:50:04 2026 GMT Not After : Jun 9 07:55:04 2027 GMT Subject: CN=E63F52E8E1C3CC19F38EEB4DA538C40F790E5779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:9d:eb:b3:db:0f:50:44:f9:eb:32:33:1c: 7f:99:36:02:b5:cb:65:7a:ca:40:a2:b3:a3:4a:6e: 78:61:b5:99:67:78:cf:f3:ef:23:94:bb:99:f4:61: 44:c0:05:3e:c6:aa:e0:82:60:eb:d9:d0:8a:f1:31: 1a:b9:12:81:81:2c:0f:f5:3e:1e:6d:e0:a8:cc:ee: 62:3b:77:32:15:1e:3b:6d:7e:cf:69:b3:ec:07:05: 71:90:a2:2d:18:df:90:88:0b:d0:f2:5f:a1:16:78: d0:8e:c2:cc:41:a7:a7:2c:ae:42:99:89:ac:a5:1d: 92:b4:cb:3d:ee:e2:05:e3:1a:6d:11:6a:ec:5f:78: cd:57:2b:a5:52:1a:88:2e:5c:a3:12:cb:c7:f3:60: 07:47:6e:5d:1b:63:27:3b:04:cc:0a:59:20:d2:0e: 54:82:d6:fd:b4:4e:c1:db:ab:fb:bb:c8:33:1f:9b: 54:48:92:d5:0f:0e:95:f8:57:65:15:7f:7c:da:fb: 86:48:9b:6b:91:a9:e5:37:7a:50:f2:03:b7:a3:46: 91:39:d6:cb:3a:3f:ad:16:94:70:b0:d1:50:f7:fa: 87:96:e9:be:ac:f8:ca:33:99:7f:33:74:41:a5:e1: ce:e9:46:7e:e3:d2:df:01:cc:df:31:38:94:aa:d2: 2a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:52:E8:E1:C3:CC:19:F3:8E:EB:4D:A5:38:C4:0F:79:0E:57:79 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS59077.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.75.128.0/18 113.31.160.0/20 113.31.192.0/18 IPv6: 2401:3480::/36 2401:3480:2000::/35 Signature Algorithm: sha256WithRSAEncryption 72:ec:0f:d6:d4:6d:eb:d2:69:82:1e:a2:13:8b:4e:37:b8:b2: ed:43:92:fc:f4:23:c9:e7:b0:21:95:34:94:5d:10:7a:03:e3: 19:c7:e2:65:97:3c:7c:0d:41:ea:63:dc:23:e6:0b:f8:54:46: 84:27:15:ea:aa:8d:3d:8d:5f:61:2e:e8:77:3c:5f:7c:89:22: e4:93:0d:60:b0:6c:c6:69:31:e3:cb:51:1f:b3:88:f9:37:17: fa:dd:74:51:4f:2a:e9:a3:e7:46:ff:e8:b9:5a:f2:c8:af:17: c0:c4:8a:77:4f:51:80:77:a6:19:62:1f:fd:92:90:58:2b:9a: 81:75:9e:fc:5b:b3:5b:33:c1:43:88:22:b3:70:2c:c9:4f:dd: 50:db:4e:03:84:06:96:59:97:0b:28:37:c5:ca:3a:a7:45:d6: 38:3b:f2:76:87:33:10:7c:77:66:cb:46:12:ed:66:a7:75:1d: e6:ef:43:79:f4:73:2e:65:fe:5b:70:78:b6:8e:57:7c:3f:c4: ce:e6:af:0a:2e:f6:4a:94:dc:bf:f0:79:31:fb:03:3d:39:ae: 6f:09:ee:36:67:2f:23:01:cc:30:8e:bd:5e:2b:a3:e0:62:e3: 58:99:df:55:b4:66:2e:4e:f2:33:dc:99:89:31:44:ba:54:f8: f0:df:38:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgIUT9bWRrmURiWD0JM0X9Mw4Owm3DMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA2MTAwNzUwMDRaFw0yNzA2MDkwNzU1MDRaMDMxMTAvBgNV BAMTKEU2M0Y1MkU4RTFDM0NDMTlGMzhFRUI0REE1MzhDNDBGNzkwRTU3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIp3rs9sPUET56zIzHH+ZNgK1 y2V6ykCis6NKbnhhtZlneM/z7yOUu5n0YUTABT7GquCCYOvZ0IrxMRq5EoGBLA/1 Ph5t4KjM7mI7dzIVHjttfs9ps+wHBXGQoi0Y35CIC9DyX6EWeNCOwsxBp6csrkKZ iaylHZK0yz3u4gXjGm0RauxfeM1XK6VSGoguXKMSy8fzYAdHbl0bYyc7BMwKWSDS DlSC1v20TsHbq/u7yDMfm1RIktUPDpX4V2UVf3za+4ZIm2uRqeU3elDyA7ejRpE5 1ss6P60WlHCw0VD3+oeW6b6s+MozmX8zdEGl4c7pRn7j0t8BzN8xOJSq0iohAgMB AAGjggIHMIICAzAdBgNVHQ4EFgQU5j9S6OHDzBnzjutNpTjED3kOV3kwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC9BUzU5MDc3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIA ATASAwQGakuAAwQEcR+gAwQGcR/AMBYEAgACMBADBgQkATSAAAMGBSQBNIAgMA0G CSqGSIb3DQEBCwUAA4IBAQBy7A/W1G3r0mmCHqITi043uLLtQ5L89CPJ57AhlTSU XRB6A+MZx+Jllzx8DUHqY9wj5gv4VEaEJxXqqo09jV9hLuh3PF98iSLkkw1gsGzG aTHjy1Efs4j5Nxf63XRRTyrpo+dG/+i5WvLIrxfAxIp3T1GAd6YZYh/9kpBYK5qB dZ78W7NbM8FDiCKzcCzJT91Q204DhAaWWZcLKDfFyjqnRdY4O/J2hzMQfHdmy0YS 7WandR3m70N59HMuZf5bcHi2jld8P8TO5q8KLvZKlNy/8Hkx+wM9Oa5vCe42Zy8j Acwwjr1eK6PgYuNYmd9VtGYuTvIz3JmJMUS6VPjw3zgG -----END CERTIFICATE-----Generated at Sun Jun 14 06:30:56 2026 by rpki-client