$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS63621.roa File: AS63621.roa (raw, json) Hash identifier: kM/frUaMP1Tr3VyGU05ugFm4RA+5/q4Tfg29dOKr5Qk= Subject key identifier: 83:9B:13:FC:17:FA:B5:44:C0:2F:BA:00:DF:83:50:66:AC:4C:81:99 Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 57504ED886C525696220A14A4866090A75BE8311 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS63621.roa Signing time: Thu 04 Jun 2026 02:19:44 +0000 ROA not before: Thu 04 Jun 2026 02:14:44 +0000 ROA not after: Thu 03 Jun 2027 02:19:44 +0000 asID: 63621 IP address blocks: 240a:4010:8000::/33 maxlen: 33 240a:4084:2000::/35 maxlen: 35 240a:408c:2000::/35 maxlen: 35 240a:4094:2000::/35 maxlen: 35 240a:409c:2000::/35 maxlen: 35 240a:40a4:2000::/35 maxlen: 35 240a:40ac:2000::/35 maxlen: 35 240a:4172::/31 maxlen: 31 240a:41f2::/31 maxlen: 31 240a:4242::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:50:4e:d8:86:c5:25:69:62:20:a1:4a:48:66:09:0a:75:be:83:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Jun 4 02:14:44 2026 GMT Not After : Jun 3 02:19:44 2027 GMT Subject: CN=839B13FC17FAB544C02FBA00DF835066AC4C8199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8f:c3:07:30:f6:17:8f:8c:d1:d0:af:0d:af: 34:17:3f:fe:ce:42:8b:31:1f:29:b4:6e:8b:24:89: 7d:f2:c0:11:2c:e7:99:49:fb:06:0c:a1:c4:fc:3a: 42:52:6b:be:9b:a1:e1:fb:6c:49:12:d6:c7:f3:e4: 3e:c9:da:2a:85:45:00:f0:31:f9:68:4a:00:d1:d2: 52:e2:19:e5:a1:e0:20:13:54:c9:8b:92:ce:96:f0: 3e:0e:da:9f:5e:40:a2:23:ff:4d:1a:bf:0d:1f:05: ac:73:c7:56:6c:4f:2c:2e:4c:aa:70:bb:c1:c8:2d: ab:c7:3b:6a:dc:52:e1:95:70:f8:91:6e:2f:4b:f0: 50:c3:ad:fc:1c:46:c9:a9:eb:ec:ef:da:51:05:88: 97:0c:91:3d:a4:19:79:23:c4:07:52:c3:92:c9:0a: 02:56:3d:78:9b:c5:45:e5:5e:9c:8c:b4:a1:57:49: a3:0e:68:13:97:4c:ee:00:fd:66:cb:7e:b8:6c:42: 39:4c:43:6a:dd:63:bd:1a:25:e2:d7:83:09:9e:ad: f7:1c:a3:b1:e2:2e:e0:40:d0:db:d2:02:2e:80:85: 6b:ed:33:be:e6:0a:b1:67:1a:de:1a:e3:f0:ee:ce: 4c:cf:7e:c4:bb:bd:9e:d1:bb:79:81:1d:a9:d4:ed: a6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9B:13:FC:17:FA:B5:44:C0:2F:BA:00:DF:83:50:66:AC:4C:81:99 X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS63621.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:4010:8000::/33 240a:4084:2000::/35 240a:408c:2000::/35 240a:4094:2000::/35 240a:409c:2000::/35 240a:40a4:2000::/35 240a:40ac:2000::/35 240a:4172::/31 240a:41f2::/31 240a:4242::/31 Signature Algorithm: sha256WithRSAEncryption b5:05:ea:be:a5:30:5b:b8:fd:57:f7:97:74:8c:71:6d:74:77: ae:06:10:70:3d:3b:00:b4:48:a9:9b:dd:02:9a:95:47:78:19: 93:5e:39:34:64:a9:4c:ae:4f:27:29:4f:53:d2:ae:3e:e4:f1: b4:ac:98:44:58:fa:80:78:66:d6:20:9d:00:b6:87:b8:1d:c4: ad:c8:c0:54:d5:20:45:7e:08:76:6b:52:59:bd:40:d4:d3:97: 35:d5:f8:d7:e4:54:e9:6a:51:2b:b9:ba:5f:99:b2:e8:28:f9: 0a:9b:8f:10:82:f8:c5:56:7c:94:aa:96:d2:fe:46:3e:9e:04: 68:ee:05:cb:67:29:8e:74:2b:66:e9:5e:b0:c5:3a:0c:cb:73: d6:9b:27:8d:3e:f9:e8:df:72:35:92:a5:77:3f:8a:f2:63:4c: 7a:e2:3c:8f:1d:f7:32:a6:0f:8a:c6:7b:da:76:80:71:18:eb: 98:f3:0f:4d:81:71:ac:2b:26:20:cf:5c:c5:92:cc:88:8a:8d: 65:d4:45:e4:92:b1:7d:09:be:14:8b:d8:ce:6e:e8:a2:e2:18: e8:9c:9d:0a:81:b2:d1:5d:f3:fb:d2:d3:9d:8e:95:e8:08:d9: f1:f1:c9:dd:67:5b:74:91:ad:df:7a:f6:95:50:f8:f3:29:44: 4f:45:5b:3f -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIUV1BO2IbFJWliIKFKSGYJCnW+gxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjA2MDQwMjE0NDRaFw0yNzA2MDMwMjE5NDRaMDMxMTAvBgNV BAMTKDgzOUIxM0ZDMTdGQUI1NDRDMDJGQkEwMERGODM1MDY2QUM0QzgxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvj8MHMPYXj4zR0K8NrzQXP/7O QosxHym0boskiX3ywBEs55lJ+wYMocT8OkJSa76boeH7bEkS1sfz5D7J2iqFRQDw MfloSgDR0lLiGeWh4CATVMmLks6W8D4O2p9eQKIj/00avw0fBaxzx1ZsTywuTKpw u8HILavHO2rcUuGVcPiRbi9L8FDDrfwcRsmp6+zv2lEFiJcMkT2kGXkjxAdSw5LJ CgJWPXibxUXlXpyMtKFXSaMOaBOXTO4A/WbLfrhsQjlMQ2rdY70aJeLXgwmerfcc o7HiLuBA0NvSAi6AhWvtM77mCrFnGt4a4/DuzkzPfsS7vZ7Ru3mBHanU7aYBAgMB AAGjggIqMIICJjAdBgNVHQ4EFgQUg5sT/Bf6tUTAL7oA34NQZqxMgZkwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzYzNjIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBTBAIA AjBNAwYHJApAEIADBgUkCkCEIAMGBSQKQIwgAwYFJApAlCADBgUkCkCcIAMGBSQK QKQgAwYFJApArCADBQEkCkFyAwUBJApB8gMFASQKQkIwDQYJKoZIhvcNAQELBQAD ggEBALUF6r6lMFu4/Vf3l3SMcW10d64GEHA9OwC0SKmb3QKalUd4GZNeOTRkqUyu TycpT1PSrj7k8bSsmERY+oB4ZtYgnQC2h7gdxK3IwFTVIEV+CHZrUlm9QNTTlzXV +NfkVOlqUSu5ul+Zsugo+QqbjxCC+MVWfJSqltL+Rj6eBGjuBctnKY50K2bpXrDF OgzLc9abJ40++ejfcjWSpXc/ivJjTHriPI8d9zKmD4rGe9p2gHEY65jzD02Bcawr JiDPXMWSzIiKjWXUReSSsX0JvhSL2M5u6KLiGOicnQqBstFd8/vS052OlegI2fHx yd1nW3SRrd969pVQ+PMpRE9FWz8= -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:16 2026 by rpki-client