$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/0/AS63199.roa File: AS63199.roa (raw, json) Hash identifier: +6f3Db0v7UdfFgnilhc4THU/oUjV9kzQQnabdsDTgxM= Subject key identifier: E6:A7:C3:7D:65:A4:E5:C4:9E:93:F7:1E:DF:2C:89:A6:7F:1D:38:3E Certificate issuer: /CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Certificate serial: 796A27052B2095B25A0BE243015CBC2AED6562C3 Authority key identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/AS63199.roa Signing time: Wed 10 Jun 2026 18:08:29 +0000 ROA not before: Wed 10 Jun 2026 18:03:29 +0000 ROA not after: Wed 09 Jun 2027 18:08:29 +0000 asID: 63199 IP address blocks: 101.251.252.0/22 maxlen: 22 106.2.158.0/24 maxlen: 24 106.2.159.0/24 maxlen: 24 106.3.139.0/24 maxlen: 24 2400:5280::/38 maxlen: 38 2400:5280:4::/48 maxlen: 48 2400:5280:400::/38 maxlen: 38 2400:5280:404::/48 maxlen: 48 2400:5280:800::/38 maxlen: 38 2400:5280:804::/48 maxlen: 48 2400:5280:805::/48 maxlen: 48 2400:5280:806::/48 maxlen: 48 2400:5280:807::/48 maxlen: 48 2400:5280:808::/48 maxlen: 48 2400:5280:c00::/38 maxlen: 38 2400:5280:c05::/48 maxlen: 48 2400:5280:c06::/48 maxlen: 48 2400:5280:1000::/38 maxlen: 38 2400:5280:1800::/38 maxlen: 38 2400:5280:2000::/38 maxlen: 38 2400:5280:2400::/38 maxlen: 38 2400:5280:2800::/38 maxlen: 38 2400:5280:2c00::/38 maxlen: 38 2400:5280:3000::/38 maxlen: 38 2400:5280:3800::/38 maxlen: 38 2400:5280:3c00::/38 maxlen: 38 2400:5280:4000::/38 maxlen: 38 2400:5280:4400::/38 maxlen: 38 2400:5280:4800::/38 maxlen: 38 2400:5280:fc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 23:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:6a:27:05:2b:20:95:b2:5a:0b:e2:43:01:5c:bc:2a:ed:65:62:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Validity Not Before: Jun 10 18:03:29 2026 GMT Not After : Jun 9 18:08:29 2027 GMT Subject: CN=E6A7C37D65A4E5C49E93F71EDF2C89A67F1D383E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b4:7e:cb:f6:eb:0d:a8:8a:81:43:c0:40:b9: 22:c1:6a:8b:e8:66:0c:9e:f9:c7:07:9e:2a:3e:13: 67:01:8a:0a:61:44:67:6c:d0:c3:d6:a4:37:24:86: 35:3e:ba:30:43:bd:3d:a1:28:8b:6b:87:f3:c2:73: 2b:60:8a:a6:56:d3:c0:a2:7a:a7:f0:79:b3:08:aa: 9b:f7:c9:5c:77:04:34:3d:00:43:03:29:9d:18:4c: db:65:2e:70:be:d2:aa:e1:f4:e5:f0:84:f0:b0:54: 41:57:e5:39:d3:f5:56:95:9a:4f:83:79:62:98:7e: 3c:f5:9e:0c:6a:cd:1d:3f:bb:ef:92:ff:1d:a1:3c: 27:8f:41:46:05:84:c0:60:72:af:13:ca:ae:7a:a1: 4f:95:84:f8:d0:83:86:c3:64:c6:63:8f:3f:96:f7: 4f:53:1f:26:f9:4b:94:df:40:b4:1a:b9:ec:45:a5: 67:c5:81:19:1a:13:85:a7:51:35:cc:8f:d7:ae:56: d1:4f:3f:cf:21:1a:46:3c:e6:ad:27:92:69:32:8a: cb:87:7f:5a:a9:a1:78:00:56:f6:16:6b:e1:d7:b1: 9f:74:ed:5c:0a:fa:5e:77:1a:1c:1c:82:83:da:3f: 2e:2a:09:82:88:76:68:e2:34:7d:49:79:ed:9c:9a: 11:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A7:C3:7D:65:A4:E5:C4:9E:93:F7:1E:DF:2C:89:A6:7F:1D:38:3E X509v3 Authority Key Identifier: keyid:9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/AS63199.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.251.252.0/22 106.2.158.0/23 106.3.139.0/24 IPv6: 2400:5280::-2400:5280:13ff:ffff:ffff:ffff:ffff:ffff 2400:5280:1800::/38 2400:5280:2000::-2400:5280:33ff:ffff:ffff:ffff:ffff:ffff 2400:5280:3800::-2400:5280:4bff:ffff:ffff:ffff:ffff:ffff 2400:5280:fc00::/38 Signature Algorithm: sha256WithRSAEncryption 59:50:94:29:87:35:d6:0b:84:60:3a:d0:f5:99:cb:14:6c:ea: 0a:c3:2c:0a:a9:a6:08:da:0f:53:4a:fc:87:16:bd:48:b4:1d: 58:d2:d2:29:10:9e:f4:68:b9:03:1a:84:b4:a3:ba:99:56:69: 0b:6c:8b:02:f8:93:70:8a:d8:0a:40:e4:1c:2e:e0:d9:2b:c6: f7:93:57:fc:c4:3c:ae:98:15:8f:2f:78:91:a2:00:18:3f:f3: 9b:05:45:9a:de:41:be:b0:1f:1c:db:87:20:b8:30:ff:92:69: 83:32:c7:96:32:2d:6d:3b:18:4e:59:69:a7:fc:fe:28:c8:de: 18:2a:c6:ce:f0:ff:a0:7b:00:4a:63:d3:13:c2:c7:0c:a8:2b: 0c:9c:21:04:ba:bd:08:54:cf:9e:a7:a6:11:e4:15:da:cf:b0: e9:2b:dd:48:2f:05:04:14:d1:37:4e:10:49:28:d2:af:e6:77: b9:e6:e4:6e:0c:7f:b9:90:94:11:42:08:f2:80:fe:10:6d:84: e8:d1:09:46:c7:a5:8c:3a:79:8e:9a:2f:54:9d:f8:89:cb:7f: 17:5e:1e:9a:7e:18:41:6d:6a:f2:cc:f6:19:45:9a:20:05:d6: 3b:87:6d:96:4b:96:7a:2e:2f:cb:a9:70:f1:88:24:3b:e5:21: 87:12:67:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeWonBSsglbJaC+JDAVy8Ku1lYsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFG RDJDMDExNTAeFw0yNjA2MTAxODAzMjlaFw0yNzA2MDkxODA4MjlaMDMxMTAvBgNV BAMTKEU2QTdDMzdENjVBNEU1QzQ5RTkzRjcxRURGMkM4OUE2N0YxRDM4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtH7L9usNqIqBQ8BAuSLBaovo Zgye+ccHnio+E2cBigphRGds0MPWpDckhjU+ujBDvT2hKItrh/PCcytgiqZW08Ci eqfwebMIqpv3yVx3BDQ9AEMDKZ0YTNtlLnC+0qrh9OXwhPCwVEFX5TnT9VaVmk+D eWKYfjz1ngxqzR0/u++S/x2hPCePQUYFhMBgcq8Tyq56oU+VhPjQg4bDZMZjjz+W 909THyb5S5TfQLQauexFpWfFgRkaE4WnUTXMj9euVtFPP88hGkY85q0nkmkyisuH f1qpoXgAVvYWa+HXsZ907VwK+l53GhwcgoPaPy4qCYKIdmjiNH1Jee2cmhEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5qfDfWWk5cSek/ce3yyJpn8dOD4wHwYDVR0j BBgwFoAUngewLvJ04zmzxLIlmFXlKv0sARUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8wLzlFMDdCMDJFRjI3NEUzMzlCM0M0QjIyNTk4NTVF NTJBRkQyQzAxMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFGRDJDMDExNS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgxNTY5MzAvMC9BUzYzMTk5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzAYBAIA ATASAwQCZfv8AwQBagKeAwQAagOLMEsEAgACMEUwDwMFByQAUoADBgIkAFKAEAMG AiQAUoAYMBADBgUkAFKAIAMGAiQAUoAwMBADBgMkAFKAOAMGAiQAUoBIAwYCJABS gPwwDQYJKoZIhvcNAQELBQADggEBAFlQlCmHNdYLhGA60PWZyxRs6grDLAqppgja D1NK/IcWvUi0HVjS0ikQnvRouQMahLSjuplWaQtsiwL4k3CK2ApA5Bwu4NkrxveT V/zEPK6YFY8veJGiABg/85sFRZreQb6wHxzbhyC4MP+SaYMyx5YyLW07GE5Zaaf8 /ijI3hgqxs7w/6B7AEpj0xPCxwyoKwycIQS6vQhUz56nphHkFdrPsOkr3UgvBQQU 0TdOEEko0q/md7nm5G4Mf7mQlBFCCPKA/hBthOjRCUbHpYw6eY6aL1Sd+InLfxde Hpp+GEFtavLM9hlFmiAF1juHbZZLlnouL8upcPGIJDvlIYcSZxE= -----END CERTIFICATE-----Generated at Sat Jun 13 10:37:11 2026 by rpki-client