$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS63540.roa File: AS63540.roa (raw, json) Hash identifier: A0fnLqo2aGScojf6EkdOg+7NgfJcql2OLZayOMQN4s0= Subject key identifier: 73:9F:F5:95:EE:2A:84:86:15:B0:AA:F1:2B:B8:BD:8C:23:46:B6:81 Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 14EA2446CCEF2D72F2122B6E9B6CC798A8962CA7 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS63540.roa Signing time: Thu 04 Jun 2026 02:22:27 +0000 ROA not before: Thu 04 Jun 2026 02:17:27 +0000 ROA not after: Thu 03 Jun 2027 02:22:27 +0000 asID: 63540 IP address blocks: 240a:41b8:8800::/40 maxlen: 40 240a:41b8:a000::/40 maxlen: 40 240a:41b8:d400::/40 maxlen: 40 240a:41b8:e400::/40 maxlen: 40 240a:4224:9000::/44 maxlen: 44 240a:4224:a000::/44 maxlen: 44 240a:4224:c000::/44 maxlen: 44 240a:4224:d000::/44 maxlen: 44 240a:4224:e000::/44 maxlen: 44 240a:4225:1000::/44 maxlen: 44 240a:4225:3000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ea:24:46:cc:ef:2d:72:f2:12:2b:6e:9b:6c:c7:98:a8:96:2c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jun 4 02:17:27 2026 GMT Not After : Jun 3 02:22:27 2027 GMT Subject: CN=739FF595EE2A848615B0AAF12BB8BD8C2346B681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:e5:65:49:cc:a3:64:fd:3c:2a:0a:9f:19: 9e:31:ec:f2:9f:e3:83:d8:db:d9:97:76:d8:89:0b: 97:bd:5b:d6:4a:f3:c7:2b:79:f5:6b:38:1c:8d:85: db:b7:73:db:4a:e3:87:af:a1:ce:87:1a:b9:37:97: d4:91:f2:d8:8b:2e:ab:af:42:6f:dd:21:ae:29:fc: 7d:ce:c9:c0:72:e8:0e:7a:53:10:cc:47:4a:22:fd: 60:ac:0f:e6:2b:a9:d6:96:97:14:59:e5:d1:7a:ce: ee:ac:ec:80:5a:b0:d7:9f:6d:63:c6:5a:cd:1a:43: 55:c8:97:ce:86:b0:05:af:bd:35:57:da:a9:63:fe: 05:5b:d3:28:96:c8:4e:76:39:07:a2:ab:e9:65:a7: 90:77:29:e8:f8:47:71:56:c4:0d:ed:2b:59:ff:db: 76:19:21:89:f1:a8:c0:dc:0e:63:e8:c1:57:c5:fe: 25:82:f9:7a:63:b3:5e:f9:bf:ee:59:d6:cb:89:7d: ea:08:73:62:cf:71:05:b6:ee:f0:28:48:ab:ee:8e: 56:e0:77:07:9d:c6:f8:00:9f:ca:0e:47:72:92:47: c7:09:88:8a:b2:0e:7a:e0:ed:2f:f0:05:51:37:36: 74:30:2b:82:05:d8:12:4b:e2:46:cb:10:07:77:f2: 57:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9F:F5:95:EE:2A:84:86:15:B0:AA:F1:2B:B8:BD:8C:23:46:B6:81 X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS63540.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:41b8:8800::/40 240a:41b8:a000::/40 240a:41b8:d400::/40 240a:41b8:e400::/40 240a:4224:9000::/44 240a:4224:a000::/44 240a:4224:c000::/44 240a:4224:d000::/44 240a:4224:e000::/44 240a:4225:1000::/44 240a:4225:3000::/44 Signature Algorithm: sha256WithRSAEncryption b6:7f:f7:73:c4:bd:c4:3a:26:98:e1:ae:b9:dd:63:c5:19:ad: c0:35:18:f2:28:9d:01:f0:51:b2:3c:a2:00:d8:3a:55:7b:03: 0c:4f:c6:7b:32:06:9f:af:37:6c:72:1e:21:11:a9:3f:af:63: e6:51:f5:50:1c:1f:3c:a2:94:b7:5c:94:80:2c:10:a2:0d:d9: fc:d0:0a:49:95:9c:d8:fa:58:a2:ff:25:9c:52:90:bd:61:13: 57:29:dd:82:1b:e0:8e:63:f6:dd:74:ab:7c:71:19:b4:6a:ed: 6c:ce:ef:6c:4b:a6:85:bf:ab:8b:9c:b8:fa:cc:a7:44:11:a7: 81:19:f3:a5:4d:e1:4c:f8:21:ab:01:cb:93:33:b7:14:8f:d8: 54:a1:d0:b3:07:67:7d:0c:fe:54:ef:f3:0e:fd:5b:17:6b:7b: 37:a4:c8:8b:6f:c4:02:3c:91:2f:74:73:e4:64:74:4b:c7:5b: b9:eb:05:54:01:26:cc:c5:22:bd:08:9f:4d:20:4a:1c:f6:d9: 38:59:61:9f:81:6b:3b:86:49:89:76:b8:cf:b8:f5:e8:74:e9: a2:01:14:95:46:20:cc:d2:05:63:1d:6b:16:1e:6f:cf:78:f2: 94:1d:24:eb:f6:75:ad:7b:a2:17:6e:d8:cc:a4:07:2a:71:7e: 8a:6c:3b:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOokRszvLXLyEitum2zHmKiWLKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjA2MDQwMjE3MjdaFw0yNzA2MDMwMjIyMjdaMDMxMTAvBgNV BAMTKDczOUZGNTk1RUUyQTg0ODYxNUIwQUFGMTJCQjhCRDhDMjM0NkI2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jOVlScyjZP08KgqfGZ4x7PKf 44PY29mXdtiJC5e9W9ZK88crefVrOByNhdu3c9tK44evoc6HGrk3l9SR8tiLLquv Qm/dIa4p/H3OycBy6A56UxDMR0oi/WCsD+YrqdaWlxRZ5dF6zu6s7IBasNefbWPG Ws0aQ1XIl86GsAWvvTVX2qlj/gVb0yiWyE52OQeiq+llp5B3Kej4R3FWxA3tK1n/ 23YZIYnxqMDcDmPowVfF/iWC+Xpjs175v+5Z1suJfeoIc2LPcQW27vAoSKvujlbg dwedxvgAn8oOR3KSR8cJiIqyDnrg7S/wBVE3NnQwK4IF2BJL4kbLEAd38lcNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc5/1le4qhIYVsKrxK7i9jCNGtoEwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzYzNTQwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBlBAIA AjBfAwYAJApBuIgDBgAkCkG4oAMGACQKQbjUAwYAJApBuOQDBwQkCkIkkAADBwQk CkIkoAADBwQkCkIkwAADBwQkCkIk0AADBwQkCkIk4AADBwQkCkIlEAADBwQkCkIl MAAwDQYJKoZIhvcNAQELBQADggEBALZ/93PEvcQ6JpjhrrndY8UZrcA1GPIonQHw UbI8ogDYOlV7AwxPxnsyBp+vN2xyHiERqT+vY+ZR9VAcHzyilLdclIAsEKIN2fzQ CkmVnNj6WKL/JZxSkL1hE1cp3YIb4I5j9t10q3xxGbRq7WzO72xLpoW/q4ucuPrM p0QRp4EZ86VN4Uz4IasBy5MztxSP2FSh0LMHZ30M/lTv8w79WxdrezekyItvxAI8 kS90c+RkdEvHW7nrBVQBJszFIr0In00gShz22ThZYZ+BazuGSYl2uM+49eh06aIB FJVGIMzSBWMdaxYeb8948pQdJOv2da17ohdu2MykBypxfopsO74= -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:15 2026 by rpki-client