$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS63648.roa File: AS63648.roa (raw, json) Hash identifier: 4HYSvuQVQQBqIHTS6osBvaTfMDnfx/q3IKZHUPbSGzo= Subject key identifier: 12:55:1A:65:C0:F3:3E:F0:92:BA:11:F5:7A:C0:02:1F:1C:C5:52:90 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 5233C009CA1A7B248F100EB2783466455FD42E1D Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS63648.roa Signing time: Tue 26 May 2026 07:38:04 +0000 ROA not before: Tue 26 May 2026 07:33:04 +0000 ROA not after: Tue 25 May 2027 07:38:04 +0000 asID: 63648 IP address blocks: 117.51.0.0/17 maxlen: 17 117.51.0.0/24 maxlen: 24 117.51.1.0/24 maxlen: 24 117.51.2.0/24 maxlen: 24 117.51.3.0/24 maxlen: 24 117.51.4.0/24 maxlen: 24 117.51.5.0/24 maxlen: 24 117.51.6.0/24 maxlen: 24 117.51.7.0/24 maxlen: 24 117.51.8.0/24 maxlen: 24 117.51.9.0/24 maxlen: 24 117.51.10.0/24 maxlen: 24 117.51.11.0/24 maxlen: 24 117.51.12.0/24 maxlen: 24 117.51.13.0/24 maxlen: 24 117.51.14.0/24 maxlen: 24 117.51.15.0/24 maxlen: 24 117.51.16.0/24 maxlen: 24 117.51.17.0/24 maxlen: 24 117.51.18.0/24 maxlen: 24 117.51.19.0/24 maxlen: 24 117.51.20.0/24 maxlen: 24 117.51.21.0/24 maxlen: 24 117.51.22.0/24 maxlen: 24 117.51.23.0/24 maxlen: 24 117.51.24.0/24 maxlen: 24 117.51.25.0/24 maxlen: 24 117.51.26.0/24 maxlen: 24 117.51.27.0/24 maxlen: 24 117.51.28.0/24 maxlen: 24 117.51.29.0/24 maxlen: 24 117.51.30.0/24 maxlen: 24 117.51.31.0/24 maxlen: 24 117.51.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:33:c0:09:ca:1a:7b:24:8f:10:0e:b2:78:34:66:45:5f:d4:2e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: May 26 07:33:04 2026 GMT Not After : May 25 07:38:04 2027 GMT Subject: CN=12551A65C0F33EF092BA11F57AC0021F1CC55290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:81:b2:87:b9:dc:af:5d:b4:31:f6:df:9d: 38:aa:e8:2d:c1:cd:95:2c:37:ad:d1:49:33:d7:c5: 19:1e:dc:74:09:dd:20:29:24:b7:00:2a:c0:37:75: 00:14:6c:5f:77:32:46:45:aa:5d:f5:53:bd:3f:9a: 99:8e:45:1d:05:8d:a0:fd:fa:90:f8:cc:65:54:91: c3:a5:b7:cc:c4:71:67:b1:55:08:33:51:9c:40:2e: b7:2b:29:84:8d:3f:75:82:14:e6:a4:d0:09:f3:1e: 41:4d:3c:77:85:09:d1:f9:9e:06:44:15:0c:5e:c7: 79:58:3f:fc:9d:b0:93:fd:4b:91:e4:7a:b5:22:9c: 9d:d1:92:37:66:88:30:10:b1:28:f9:59:12:af:08: da:dd:9c:5a:ac:02:34:46:0e:4a:d7:db:1f:1c:cc: a1:3e:23:1d:cd:45:3a:d9:8f:fd:bb:f5:72:f9:e9: af:df:73:88:73:5c:14:19:f8:30:22:ae:1b:44:05: 20:1f:9b:62:eb:49:14:1c:a9:8e:90:2a:c1:ab:6b: b4:b0:d6:02:e4:0a:e0:f8:e7:88:6d:a1:d5:29:fa: a5:f1:bc:fa:50:f3:81:6b:97:31:ca:9f:f8:0e:2c: aa:5e:20:c2:a6:00:78:c0:30:7d:da:29:75:ab:86: a5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:55:1A:65:C0:F3:3E:F0:92:BA:11:F5:7A:C0:02:1F:1C:C5:52:90 X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS63648.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.51.0.0/17 117.51.130.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:28:8d:03:6b:a4:cb:ee:37:3b:ab:e0:07:85:ab:fd:d8:3f: b7:47:d4:85:89:66:38:4d:51:e3:75:92:19:c8:18:ce:8d:53: 30:9f:b2:6f:9c:44:59:b3:0c:29:68:c4:05:43:23:e6:59:7c: ea:bc:18:30:53:22:2b:2a:c2:97:cb:40:e1:c9:d6:19:43:14: db:14:d1:96:f8:1c:49:84:ca:bf:c6:0d:49:5c:7a:e6:eb:01: 08:f6:e0:a9:a4:b4:7a:60:7a:d4:b7:ca:ae:e1:b0:da:c4:fd: e4:d7:3c:d7:03:3e:4a:ce:b9:69:d3:bd:ae:96:35:1a:dc:3c: ef:93:69:e5:77:7a:a3:e9:f2:99:62:b8:7e:6e:b8:6d:6d:39: 61:e5:67:93:3b:b9:d3:03:e5:04:c5:e1:6c:54:8e:76:c6:08: 4d:4a:1b:23:82:27:68:35:8e:cb:83:0e:90:de:f5:9b:ef:d2: 51:5b:04:fd:ff:17:5d:b5:33:c1:7e:5d:2c:db:59:56:c1:3f: ef:f5:e4:a9:6f:58:f5:22:bb:9f:e5:65:c2:97:9c:7d:85:a2: ae:40:dd:34:f9:ec:b4:52:39:73:da:a6:68:ce:77:3c:50:64: 27:11:9e:f3:43:6a:64:60:ab:f1:f4:fe:54:08:dd:a4:8a:4c: 88:80:ca:a7 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUUjPACcoaeySPEA6yeDRmRV/ULh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA1MjYwNzMzMDRaFw0yNzA1MjUwNzM4MDRaMDMxMTAvBgNV BAMTKDEyNTUxQTY1QzBGMzNFRjA5MkJBMTFGNTdBQzAwMjFGMUNDNTUyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChBIGyh7ncr120MfbfnTiq6C3B zZUsN63RSTPXxRke3HQJ3SApJLcAKsA3dQAUbF93MkZFql31U70/mpmORR0FjaD9 +pD4zGVUkcOlt8zEcWexVQgzUZxALrcrKYSNP3WCFOak0AnzHkFNPHeFCdH5ngZE FQxex3lYP/ydsJP9S5HkerUinJ3RkjdmiDAQsSj5WRKvCNrdnFqsAjRGDkrX2x8c zKE+Ix3NRTrZj/279XL56a/fc4hzXBQZ+DAirhtEBSAfm2LrSRQcqY6QKsGra7Sw 1gLkCuD454htodUp+qXxvPpQ84FrlzHKn/gOLKpeIMKmAHjAMH3aKXWrhqVbAgMB AAGjggHpMIIB5TAdBgNVHQ4EFgQUElUaZcDzPvCSuhH1esACHxzFUpAwHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MDI2MzYzNjcyMDAyNTkvMC9BUzYzNjQ4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQHdTMAAwQAdTOCMA0GCSqGSIb3DQEBCwUAA4IBAQBOKI0Da6TL7jc7q+AH hav92D+3R9SFiWY4TVHjdZIZyBjOjVMwn7JvnERZswwpaMQFQyPmWXzqvBgwUyIr KsKXy0DhydYZQxTbFNGW+BxJhMq/xg1JXHrm6wEI9uCppLR6YHrUt8qu4bDaxP3k 1zzXAz5Kzrlp072uljUa3Dzvk2nld3qj6fKZYrh+brhtbTlh5WeTO7nTA+UExeFs VI52xghNShsjgidoNY7Lgw6Q3vWb79JRWwT9/xddtTPBfl0s21lWwT/v9eSpb1j1 Iruf5WXCl5x9haKuQN00+ey0Ujlz2qZoznc8UGQnEZ7zQ2pkYKvx9P5UCN2kikyI gMqn -----END CERTIFICATE-----Generated at Sun Jun 14 06:31:03 2026 by rpki-client