$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS64079.roa File: AS64079.roa (raw, json) Hash identifier: OQeZyE4h7xMC/LAwkKbN4EQoVHzW2nqSqjOanNz4CnU= Subject key identifier: EB:3A:57:AD:1B:AE:BA:6E:D3:0B:F1:0D:C3:1E:D8:20:1E:5C:37:16 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 4EC79BF89726DE9172FC7DB7ABC7CEA4BFAAD444 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS64079.roa Signing time: Fri 12 Jun 2026 16:09:08 +0000 ROA not before: Fri 12 Jun 2026 16:04:08 +0000 ROA not after: Fri 11 Jun 2027 16:09:08 +0000 asID: 64079 IP address blocks: 203.56.50.0/24 maxlen: 24 203.86.118.0/24 maxlen: 24 203.86.119.0/24 maxlen: 24 203.86.121.0/24 maxlen: 24 203.86.122.0/24 maxlen: 24 203.86.123.0/24 maxlen: 24 203.86.124.0/24 maxlen: 24 203.86.125.0/24 maxlen: 24 220.247.138.0/24 maxlen: 24 220.247.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c7:9b:f8:97:26:de:91:72:fc:7d:b7:ab:c7:ce:a4:bf:aa:d4:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 12 16:04:08 2026 GMT Not After : Jun 11 16:09:08 2027 GMT Subject: CN=EB3A57AD1BAEBA6ED30BF10DC31ED8201E5C3716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:0e:b9:4a:6b:91:c0:f6:6d:54:ac:98:95: 4d:2d:78:dd:63:a5:da:fa:c9:09:9a:8b:d1:12:ef: 79:37:a4:53:9f:bf:98:a7:c7:43:24:c4:a1:c7:8f: df:e0:a4:7b:56:cc:36:76:c2:07:d4:ff:4b:8a:bf: 24:b5:15:52:18:13:ee:ad:4d:21:87:06:22:ba:58: 93:c3:1a:4b:84:16:b6:b3:9c:4f:1f:23:22:53:18: 09:c5:fd:70:b6:75:16:bc:51:69:40:01:0c:50:37: a0:11:20:75:8c:da:e4:7a:d5:99:f9:dc:c0:f8:95: a9:cf:15:52:10:f7:31:84:8d:b3:80:0d:a9:5c:35: a1:cb:d3:9a:13:01:60:6e:66:a4:ed:d1:f2:d7:e5: 57:25:26:e1:05:fc:0e:1b:12:c4:9b:9b:52:f3:34: e8:f6:50:f8:ad:25:5b:6c:64:ee:95:ed:e7:83:2f: 20:f7:55:5f:2d:b8:b1:c1:28:f0:18:84:c8:28:f1: cb:6d:ac:30:2d:7f:0d:22:a0:70:c8:04:d4:cc:97: 4b:37:61:7b:8c:72:22:79:d7:58:da:59:75:6f:29: d9:f7:90:53:3a:51:c9:b3:c5:ec:c4:7f:a5:20:11: 7f:02:bf:b2:ab:fe:56:1b:cb:05:80:5d:19:d9:7f: 5a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3A:57:AD:1B:AE:BA:6E:D3:0B:F1:0D:C3:1E:D8:20:1E:5C:37:16 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS64079.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.56.50.0/24 203.86.118.0/23 203.86.121.0-203.86.125.255 220.247.138.0/23 Signature Algorithm: sha256WithRSAEncryption 91:29:14:67:ff:ab:11:a8:fe:c5:6e:23:38:2a:ff:c0:6e:bb: a6:d8:bd:a7:f0:24:b7:ed:5a:26:78:aa:6a:01:27:bb:ec:fa: 49:a1:81:15:a0:3f:0b:96:15:d8:f6:6b:ba:75:2a:86:cb:6e: 99:03:f8:2c:2f:2d:41:2d:de:83:0b:95:90:e5:4c:18:59:da: 63:a1:90:40:b8:0d:11:78:68:eb:2b:80:13:42:0e:99:4d:3b: b4:bb:80:06:9e:ee:3b:70:5d:ac:86:57:5c:8e:a3:1c:67:11: c3:fc:2d:c3:d7:89:f3:6c:10:20:6b:1e:df:74:c3:37:18:10: 70:ef:6a:64:89:c7:e8:80:90:64:3e:9a:2f:e8:ee:83:d3:e6: 01:f9:07:1d:e8:c0:66:13:c6:75:eb:6a:da:89:99:9c:02:d0: 75:e5:46:52:03:7f:20:c8:cb:83:f6:9c:72:e1:41:1c:6a:24: d7:8e:40:fa:7d:93:a7:88:56:4a:de:a2:bf:0e:46:36:bf:a1: 4b:be:ed:86:b4:f0:65:59:e1:72:5a:4e:9b:10:78:3b:ee:05: 1b:29:d4:db:7a:8d:d6:80:5a:2f:31:a4:1c:ce:7f:0c:63:bd: a9:c3:a4:1a:3a:3d:a6:3b:ce:30:6a:a2:e7:ab:aa:aa:33:93: 68:53:4f:12 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTseb+Jcm3pFy/H23q8fOpL+q1EQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxMjE2MDQwOFoX DTI3MDYxMTE2MDkwOFowMzExMC8GA1UEAxMoRUIzQTU3QUQxQkFFQkE2RUQzMEJG MTBEQzMxRUQ4MjAxRTVDMzcxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+kDrlKa5HA9m1UrJiVTS143WOl2vrJCZqL0RLveTekU5+/mKfHQyTEoceP 3+Cke1bMNnbCB9T/S4q/JLUVUhgT7q1NIYcGIrpYk8MaS4QWtrOcTx8jIlMYCcX9 cLZ1FrxRaUABDFA3oBEgdYza5HrVmfncwPiVqc8VUhD3MYSNs4ANqVw1ocvTmhMB YG5mpO3R8tflVyUm4QX8DhsSxJubUvM06PZQ+K0lW2xk7pXt54MvIPdVXy24scEo 8BiEyCjxy22sMC1/DSKgcMgE1MyXSzdhe4xyInnXWNpZdW8p2feQUzpRybPF7MR/ pSARfwK/sqv+VhvLBYBdGdl/WpUCAwEAAaOCAf0wggH5MB0GA1UdDgQWBBTrOlet G666btML8Q3DHtggHlw3FjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTNjQwNzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw OQYIKwYBBQUHAQcBAf8EKjAoMCYEAgABMCADBADLODIDBAHLVnYwDAMEAMtWeQME ActWfAMEAdz3ijANBgkqhkiG9w0BAQsFAAOCAQEAkSkUZ/+rEaj+xW4jOCr/wG67 pti9p/Akt+1aJniqagEnu+z6SaGBFaA/C5YV2PZrunUqhstumQP4LC8tQS3egwuV kOVMGFnaY6GQQLgNEXho6yuAE0IOmU07tLuABp7uO3BdrIZXXI6jHGcRw/wtw9eJ 82wQIGse33TDNxgQcO9qZInH6ICQZD6aL+jug9PmAfkHHejAZhPGdetq2omZnALQ deVGUgN/IMjLg/accuFBHGok145A+n2Tp4hWSt6ivw5GNr+hS77thrTwZVnhclpO mxB4O+4FGynU23qN1oBaLzGkHM5/DGO9qcOkGjo9pjvOMGqi56uqqjOTaFNPEg== -----END CERTIFICATE-----Generated at Wed Jun 17 09:11:47 2026 by rpki-client