$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS0.roa File: AS0.roa (raw, json) Hash identifier: e0gqj60rC8zZd65PbqRJ9zIdbZhvWW+0EhAQS7T5JXQ= Subject key identifier: 84:54:31:88:CB:2E:29:C6:2A:76:83:C6:1C:3E:9D:B1:A0:10:70:91 Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 1438FCB4EF84E741A6EAAE4495CA733CEF027365 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS0.roa Signing time: Fri 12 Jun 2026 09:14:29 +0000 ROA not before: Fri 12 Jun 2026 09:09:29 +0000 ROA not after: Fri 11 Jun 2027 09:14:29 +0000 asID: 0 IP address blocks: 49.4.132.0/22 maxlen: 22 49.4.136.0/21 maxlen: 21 49.4.144.0/20 maxlen: 20 49.4.160.0/19 maxlen: 19 49.5.0.0/16 maxlen: 16 58.99.128.0/17 maxlen: 17 106.3.32.0/19 maxlen: 19 106.3.84.0/22 maxlen: 22 106.3.160.0/20 maxlen: 20 114.113.0.0/17 maxlen: 17 121.201.0.0/17 maxlen: 17 210.2.16.0/21 maxlen: 21 211.100.96.0/19 maxlen: 19 211.102.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 23:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:38:fc:b4:ef:84:e7:41:a6:ea:ae:44:95:ca:73:3c:ef:02:73:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: Jun 12 09:09:29 2026 GMT Not After : Jun 11 09:14:29 2027 GMT Subject: CN=84543188CB2E29C62A7683C61C3E9DB1A0107091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:01:b9:8b:db:43:29:22:8c:04:ea:43:60: 7a:06:b1:d3:12:cd:69:0d:21:b0:e2:5a:d9:58:c4: e5:33:b7:c1:b3:38:10:33:9d:32:64:8c:dc:13:7c: 58:5b:4a:01:a0:d3:d7:f4:90:3f:1a:35:50:51:2e: 6b:fe:b6:5c:6b:0c:39:c8:0b:42:15:73:dc:47:6d: 9e:61:67:0e:e6:85:88:b4:d1:34:ca:d7:59:27:f3: 60:42:cf:9e:9d:38:d6:61:75:fb:73:47:35:99:16: 95:9a:37:70:e9:a4:e8:8e:f4:90:2b:61:14:a8:df: 50:3d:bc:19:fa:18:8a:64:44:47:d8:11:32:a9:fa: 70:26:2d:72:15:67:95:c1:2f:df:5e:1f:03:b6:eb: 1d:58:02:e4:bf:07:fa:54:a0:f4:d4:74:96:d6:a5: d4:a5:45:a0:f9:f9:fe:12:43:8a:52:a3:05:c7:3a: 9f:2f:04:0f:7b:c9:2c:08:6f:3f:9b:e1:c7:bc:99: e8:f0:f8:cb:95:44:5e:15:df:9b:7c:01:7b:91:c5: a3:ce:5a:7a:48:90:3e:fc:c0:b9:f4:4c:dd:00:2a: fc:04:13:c8:f7:20:de:9d:02:f0:17:7a:98:c0:81: e2:61:aa:fe:6e:9a:87:5d:64:fb:7e:70:a3:66:8f: 81:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:54:31:88:CB:2E:29:C6:2A:76:83:C6:1C:3E:9D:B1:A0:10:70:91 X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS0.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.4.132.0-49.4.191.255 49.5.0.0/16 58.99.128.0/17 106.3.32.0/19 106.3.84.0/22 106.3.160.0/20 114.113.0.0/17 121.201.0.0/17 210.2.16.0/21 211.100.96.0/19 211.102.192.0/20 Signature Algorithm: sha256WithRSAEncryption 8d:db:5c:1f:51:c9:ab:a4:28:67:12:cd:1f:a2:a7:e5:2b:5d: 98:69:a1:df:3e:71:f6:d5:f4:5a:4a:00:0f:f0:f8:f5:fe:82: 39:e3:18:50:f4:7f:35:87:70:1e:32:f3:16:fe:0d:6d:b4:51: 0b:d8:e1:e4:16:5d:a5:05:44:bb:a2:52:e3:81:5f:94:a2:72: 7c:ba:b2:75:62:d9:88:85:b5:2c:03:86:a0:47:41:c3:fd:c7: d3:38:60:8b:5f:0c:69:6d:2d:ee:8a:c0:b7:63:d0:6a:d0:19: 0a:81:72:3c:e2:62:d1:be:35:63:ae:3f:3d:c5:88:8f:08:ab: 54:84:b6:a0:37:1e:99:0b:8a:f9:df:c1:33:5f:08:f5:09:10: 9f:8f:c8:e5:ce:38:7e:d7:12:1e:a2:ff:58:f9:e9:5d:78:5b: c0:7d:9a:e7:63:ae:d3:aa:b6:22:a9:db:23:cc:67:0b:05:72: c4:57:f0:d1:76:46:a0:33:dc:3d:fa:c7:16:46:e4:f2:80:77: 3d:10:bd:22:a5:b5:d2:c1:39:24:b5:e2:dd:8d:7f:b0:65:9e: b3:6b:5c:49:d3:f4:8d:8c:00:a3:be:e0:44:f4:c9:2c:6e:e7: 28:5b:6c:49:c9:5d:22:94:b2:c9:19:17:b3:e5:95:47:0b:58: 3c:b7:58:92 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUFDj8tO+E50Gm6q5ElcpzPO8Cc2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA2MTIwOTA5MjlaFw0yNzA2MTEwOTE0MjlaMDMxMTAvBgNV BAMTKDg0NTQzMTg4Q0IyRTI5QzYyQTc2ODNDNjFDM0U5REIxQTAxMDcwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqrwG5i9tDKSKMBOpDYHoGsdMS zWkNIbDiWtlYxOUzt8GzOBAznTJkjNwTfFhbSgGg09f0kD8aNVBRLmv+tlxrDDnI C0IVc9xHbZ5hZw7mhYi00TTK11kn82BCz56dONZhdftzRzWZFpWaN3DppOiO9JAr YRSo31A9vBn6GIpkREfYETKp+nAmLXIVZ5XBL99eHwO26x1YAuS/B/pUoPTUdJbW pdSlRaD5+f4SQ4pSowXHOp8vBA97ySwIbz+b4ce8mejw+MuVRF4V35t8AXuRxaPO WnpIkD78wLn0TN0AKvwEE8j3IN6dAvAXepjAgeJhqv5umoddZPt+cKNmj4EdAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUhFQxiMsuKcYqdoPGHD6dsaAQcJEwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw WQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1yc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4OTA5ODUyMjY4NjI1OTUvMC9BUzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkw DAMEAjEEhAMEBjEEgAMDADEFAwQHOmOAAwQFagMgAwQCagNUAwQEagOgAwQHcnEA AwQHeckAAwQD0gIQAwQF02RgAwQE02bAMA0GCSqGSIb3DQEBCwUAA4IBAQCN21wf UcmrpChnEs0foqflK12YaaHfPnH21fRaSgAP8Pj1/oI54xhQ9H81h3AeMvMW/g1t tFEL2OHkFl2lBUS7olLjgV+UonJ8urJ1YtmIhbUsA4agR0HD/cfTOGCLXwxpbS3u isC3Y9Bq0BkKgXI84mLRvjVjrj89xYiPCKtUhLagNx6ZC4r538EzXwj1CRCfj8jl zjh+1xIeov9Y+eldeFvAfZrnY67TqrYiqdsjzGcLBXLEV/DRdkagM9w9+scWRuTy gHc9EL0ipbXSwTkkteLdjX+wZZ6za1xJ0/SNjACjvuBE9MksbucoW2xJyV0ilLLJ GRez5ZVHC1g8t1iS -----END CERTIFICATE-----Generated at Sat Jun 13 10:49:19 2026 by rpki-client