$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: +Wv/2HA8AVUSNnadO5hz5VeeFjAexzBSpavN7fMFXGc= Subject key identifier: 42:55:50:4A:22:5A:D5:98:B1:43:2A:78:1E:B9:CC:E6:C9:0A:7F:4D Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 4B2E7BF05A40E3BE13FA9A2024BDCF2357C09D31 Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS14618.roa Signing time: Thu 16 Apr 2026 06:17:22 +0000 ROA not before: Thu 16 Apr 2026 06:12:22 +0000 ROA not after: Thu 15 Apr 2027 06:17:22 +0000 asID: 14618 IP address blocks: 1.118.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 23:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2e:7b:f0:5a:40:e3:be:13:fa:9a:20:24:bd:cf:23:57:c0:9d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Apr 16 06:12:22 2026 GMT Not After : Apr 15 06:17:22 2027 GMT Subject: CN=4255504A225AD598B1432A781EB9CCE6C90A7F4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:5a:00:ad:90:b5:16:e7:92:b5:57:7b:02: 0d:1c:e3:ca:f6:34:3a:17:dc:d0:c0:dd:42:2d:d5: 8b:70:8d:c2:ac:a9:30:f6:31:05:66:e5:81:88:81: ac:5a:63:f9:c7:c3:aa:79:88:7c:2e:32:18:e2:71: cb:a7:49:a3:df:c3:19:83:13:5a:08:12:75:a9:cd: e6:31:d1:be:fe:3b:e3:5f:f2:16:6f:db:aa:ac:91: 3e:e8:bd:77:84:d4:83:a2:b0:94:e5:ca:29:a4:6a: 99:d1:f4:55:48:f9:6e:d1:8b:03:53:00:1b:57:3c: 49:7a:6d:cd:71:a9:f8:4e:63:e4:e3:93:b3:a4:01: 59:36:53:3a:4e:b5:d3:d5:68:e1:dd:85:35:54:44: 3d:1e:55:28:3e:73:6e:3d:eb:02:21:ff:1c:03:9b: 51:26:9c:c4:aa:84:94:b0:82:ed:fa:a6:45:c9:e4: ef:df:64:48:2b:a5:5f:b7:17:80:16:c2:e3:d4:5d: 7b:42:41:96:9d:77:38:5a:f1:cd:7d:47:a9:c8:98: c0:8f:57:35:f5:38:d6:51:52:90:d6:ff:bf:c8:f9: a1:b9:78:ce:7d:d1:dc:93:10:b6:6e:62:be:b0:a1: f5:5c:fa:7a:76:02:87:bf:84:06:1d:61:eb:18:09: ad:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:55:50:4A:22:5A:D5:98:B1:43:2A:78:1E:B9:CC:E6:C9:0A:7F:4D X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.118.3.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:a4:48:dd:0e:f8:db:23:d8:cb:c4:9f:d4:3f:0b:2d:a6:0a: 7a:3d:33:59:bf:2c:12:cf:96:43:b0:6a:3a:33:88:f2:3c:01: 54:66:a1:01:48:98:b8:f4:ca:7f:c8:b7:9a:75:24:d5:ea:72: d5:e3:53:5f:e4:08:c1:ce:22:49:23:56:42:ed:68:3c:1b:f9: 82:96:d4:6b:14:c8:9f:ff:55:de:59:5a:e3:f2:3e:41:90:ab: da:8b:fa:26:a4:92:a4:0b:b8:88:ac:6e:fa:c0:d8:b8:9f:71: dc:37:d6:bc:28:b6:89:30:da:82:5b:3f:52:4e:b6:8b:4b:f9: 2c:b9:ac:c1:81:9d:e6:cd:73:8e:8c:62:d9:7a:ca:f4:a8:cf: 0e:03:50:cb:f5:cf:4a:0f:10:1c:48:bc:f7:43:27:aa:6c:d8: e8:f0:33:a4:57:46:73:ad:b4:d9:47:c4:63:0a:fc:75:bd:4f: 8f:54:c9:1e:6d:29:66:9c:65:c9:ac:62:4b:f0:97:31:ec:92: 1d:fa:da:14:31:c6:4e:50:3f:81:1a:4f:8d:92:3e:55:20:e4: 89:b8:b8:e6:a2:5a:7f:78:56:22:0b:fd:4d:f6:20:cd:ad:10: 55:96:31:27:bf:25:b6:35:ca:1d:d0:66:49:18:f8:ef:3e:ff: c0:46:8c:0d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUSy578FpA474T+pogJL3PI1fAnTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA0MTYwNjEyMjJaFw0yNzA0MTUwNjE3MjJaMDMxMTAvBgNV BAMTKDQyNTU1MDRBMjI1QUQ1OThCMTQzMkE3ODFFQjlDQ0U2QzkwQTdGNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYVoArZC1FueStVd7Ag0c48r2 NDoX3NDA3UIt1YtwjcKsqTD2MQVm5YGIgaxaY/nHw6p5iHwuMhjiccunSaPfwxmD E1oIEnWpzeYx0b7+O+Nf8hZv26qskT7ovXeE1IOisJTlyimkapnR9FVI+W7RiwNT ABtXPEl6bc1xqfhOY+Tjk7OkAVk2UzpOtdPVaOHdhTVURD0eVSg+c2496wIh/xwD m1EmnMSqhJSwgu36pkXJ5O/fZEgrpV+3F4AWwuPUXXtCQZaddzha8c19R6nImMCP VzX1ONZRUpDW/7/I+aG5eM590dyTELZuYr6wofVc+np2Aoe/hAYdYesYCa27AgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUQlVQSiJa1ZixQyp4HrnM5skKf00wHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMC9BUzE0NjE4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAAXYDMA0GCSqGSIb3DQEBCwUAA4IBAQAtpEjdDvjbI9jLxJ/UPwstpgp6 PTNZvywSz5ZDsGo6M4jyPAFUZqEBSJi49Mp/yLeadSTV6nLV41Nf5AjBziJJI1ZC 7Wg8G/mCltRrFMif/1XeWVrj8j5BkKvai/ompJKkC7iIrG76wNi4n3HcN9a8KLaJ MNqCWz9STraLS/ksuazBgZ3mzXOOjGLZesr0qM8OA1DL9c9KDxAcSLz3QyeqbNjo 8DOkV0ZzrbTZR8RjCvx1vU+PVMkebSlmnGXJrGJL8Jcx7JId+toUMcZOUD+BGk+N kj5VIOSJuLjmolp/eFYiC/1N9iDNrRBVljEnvyW2Ncod0GZJGPjvPv/ARowN -----END CERTIFICATE-----Generated at Fri Apr 17 05:57:45 2026 by rpki-client