$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111469242210844693/0/AS0.roa File: AS0.roa (raw, json) Hash identifier: hr/y8Vrz7JwAP+c/RvJl3p5fDAyUbA1PYMKSxrjs7FE= Subject key identifier: 97:66:D6:07:A5:03:82:B3:B0:B0:E7:4E:77:16:51:6D:60:A9:77:74 Certificate issuer: /CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D Certificate serial: 0774706443829388EFD957D3E8A0ADD2049AF0D0 Authority key identifier: F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/AS0.roa Signing time: Fri 05 Jun 2026 06:40:42 +0000 ROA not before: Fri 05 Jun 2026 06:35:42 +0000 ROA not after: Fri 04 Jun 2027 06:40:42 +0000 asID: 0 IP address blocks: 103.96.216.0/22 maxlen: 22 119.44.6.0/24 maxlen: 24 119.44.13.0/24 maxlen: 24 119.44.14.0/24 maxlen: 24 119.44.15.0/24 maxlen: 24 119.44.22.0/24 maxlen: 24 119.44.30.0/23 maxlen: 23 119.44.32.0/21 maxlen: 21 119.44.40.0/22 maxlen: 22 119.44.44.0/24 maxlen: 24 119.44.47.0/24 maxlen: 24 119.44.48.0/24 maxlen: 24 119.44.53.0/24 maxlen: 24 119.44.54.0/24 maxlen: 24 119.44.55.0/24 maxlen: 24 119.44.193.0/24 maxlen: 24 119.44.194.0/23 maxlen: 23 119.44.196.0/22 maxlen: 22 119.44.201.0/24 maxlen: 24 119.44.202.0/23 maxlen: 23 119.44.204.0/24 maxlen: 24 119.44.206.0/24 maxlen: 24 119.44.207.0/24 maxlen: 24 119.44.215.0/24 maxlen: 24 119.44.216.0/24 maxlen: 24 119.44.240.0/22 maxlen: 22 119.44.244.0/22 maxlen: 22 119.44.248.0/23 maxlen: 23 119.44.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 19:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:74:70:64:43:82:93:88:ef:d9:57:d3:e8:a0:ad:d2:04:9a:f0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D Validity Not Before: Jun 5 06:35:42 2026 GMT Not After : Jun 4 06:40:42 2027 GMT Subject: CN=9766D607A50382B3B0B0E74E7716516D60A97774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:f5:62:dc:ea:bf:25:3c:8a:55:7a:43:5f: 68:67:0e:f9:4d:76:ae:01:1f:35:1f:9f:e1:7e:f1: b9:18:91:c1:08:d2:15:c5:61:5d:00:90:3c:16:3e: 44:aa:7c:fe:ef:4c:d3:f3:06:5f:04:fe:14:9a:4b: 65:42:5b:a3:fd:9a:4a:34:ce:fc:dc:31:d0:a6:aa: f0:38:80:f6:76:d4:2e:2e:85:af:86:5a:46:97:3f: 9f:32:0c:af:cf:ea:2f:00:f2:33:16:d1:2c:3b:82: 6c:cd:66:54:65:a4:ec:af:b8:68:fb:6f:cd:b9:6e: 9f:3b:dc:22:62:77:b8:e9:da:45:18:b4:ac:4d:59: 9e:aa:d0:fa:20:cd:2d:1d:f6:ec:56:76:50:8f:91: 46:e3:e6:20:04:3a:39:b6:6a:4a:e7:07:64:33:1b: ea:28:12:c0:39:f6:c6:2a:2f:c6:d1:1b:da:b3:b8: 51:f0:af:3d:d3:d2:2b:d0:f5:5d:dc:38:8c:22:d4: 80:0a:7b:14:20:84:db:5f:c4:da:cc:80:15:75:d7: 4f:05:ef:4a:6f:a4:a6:2d:9a:c5:2b:49:d7:26:bf: 4a:9e:b8:f0:30:39:13:3e:3f:d0:1a:8c:92:33:dd: b9:f4:7a:53:1a:05:0a:4f:76:b2:36:17:21:63:4c: e5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:66:D6:07:A5:03:82:B3:B0:B0:E7:4E:77:16:51:6D:60:A9:77:74 X509v3 Authority Key Identifier: keyid:F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/AS0.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.216.0/22 119.44.6.0/24 119.44.13.0-119.44.15.255 119.44.22.0/24 119.44.30.0-119.44.44.255 119.44.47.0-119.44.48.255 119.44.53.0-119.44.55.255 119.44.193.0-119.44.199.255 119.44.201.0-119.44.204.255 119.44.206.0/23 119.44.215.0-119.44.216.255 119.44.240.0-119.44.250.255 Signature Algorithm: sha256WithRSAEncryption 29:4a:8a:83:8a:0d:ff:e2:72:0c:48:79:50:25:4b:8e:93:d1: 06:00:9f:de:07:f2:75:dd:10:cb:03:b6:e2:63:d3:51:72:a0: 1b:ff:63:f3:ef:38:f9:8e:bb:bf:3f:7a:44:db:01:db:3e:40: 27:e9:2d:01:e0:62:36:87:7c:e0:e1:2d:fd:92:3d:f9:c7:d0: 66:fa:65:a9:71:93:11:ae:b1:7c:cf:ad:1a:07:82:21:35:ce: cf:bf:44:b7:d1:8d:7b:c0:ca:b5:8a:b5:66:8d:80:e0:58:ae: 74:5e:bf:1f:bf:d7:0b:b2:f7:97:91:be:62:85:84:f3:91:d7: cc:d0:eb:5c:69:11:eb:f4:53:fb:68:48:f1:e5:f6:c3:f7:2f: b4:31:90:97:74:91:40:43:d0:89:83:0e:65:66:be:82:8b:97: 40:c0:37:a3:71:14:88:0a:0a:ec:9a:9d:3c:ce:73:c6:bb:e7: 43:82:89:70:e5:17:7f:53:6d:df:a7:68:a6:1c:a0:55:5f:31: 75:a3:0d:24:67:5f:c8:88:69:62:9a:e4:89:50:89:5a:17:c3: 61:bb:90:a1:3d:e0:c0:82:3b:4a:f5:c4:42:52:c6:60:66:e5: d5:3e:b5:41:df:54:0e:99:da:0e:15:79:1e:6c:ce:56:7f:7f: 31:a7:72:ae -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUB3RwZEOCk4jv2VfT6KCt0gSa8NAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3MUJEQ0ZEMDBGMTdCMEQyQ0I3QTA0RTM5RjdGQzND MzNBMEI4RDAeFw0yNjA2MDUwNjM1NDJaFw0yNzA2MDQwNjQwNDJaMDMxMTAvBgNV BAMTKDk3NjZENjA3QTUwMzgyQjNCMEIwRTc0RTc3MTY1MTZENjBBOTc3NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4/Vi3Oq/JTyKVXpDX2hnDvlN dq4BHzUfn+F+8bkYkcEI0hXFYV0AkDwWPkSqfP7vTNPzBl8E/hSaS2VCW6P9mko0 zvzcMdCmqvA4gPZ21C4uha+GWkaXP58yDK/P6i8A8jMW0Sw7gmzNZlRlpOyvuGj7 b825bp873CJid7jp2kUYtKxNWZ6q0PogzS0d9uxWdlCPkUbj5iAEOjm2akrnB2Qz G+ooEsA59sYqL8bRG9qzuFHwrz3T0ivQ9V3cOIwi1IAKexQghNtfxNrMgBV1108F 70pvpKYtmsUrSdcmv0qeuPAwORM+P9AajJIz3bn0elMaBQpPdrI2FyFjTOXVAgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUl2bWB6UDgrOwsOdOdxZRbWCpd3QwHwYDVR0j BBgwFoAU8HG9z9APF7DSy3oE459/w8M6C40wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTQ2OTI0MjIxMDg0NDY5My8wL0YwNzFCRENGRDAwRjE3QjBEMkNCN0EwNEUzOUY3 RkMzQzMzQTBCOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjA3MUJEQ0ZEMDBGMTdCMEQyQ0I3QTA0RTM5RjdGQzNDMzNBMEI4RC5jZXIw WQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1yc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE0NjkyNDIyMTA4NDQ2OTMvMC9BUzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwgaUGCCsGAQUFBwEHAQH/BIGVMIGSMIGPBAIA ATCBiAMEAmdg2AMEAHcsBjAMAwQAdywNAwQEdywAAwQAdywWMAwDBAF3LB4DBAB3 LCwwDAMEAHcsLwMEAHcsMDAMAwQAdyw1AwQDdywwMAwDBAB3LMEDBAN3LMAwDAME AHcsyQMEAHcszAMEAXcszjAMAwQAdyzXAwQAdyzYMAwDBAR3LPADBAB3LPowDQYJ KoZIhvcNAQELBQADggEBAClKioOKDf/icgxIeVAlS46T0QYAn94H8nXdEMsDtuJj 01FyoBv/Y/PvOPmOu78/ekTbAds+QCfpLQHgYjaHfODhLf2SPfnH0Gb6ZalxkxGu sXzPrRoHgiE1zs+/RLfRjXvAyrWKtWaNgOBYrnRevx+/1wuy95eRvmKFhPOR18zQ 61xpEev0U/toSPHl9sP3L7QxkJd0kUBD0ImDDmVmvoKLl0DAN6NxFIgKCuyanTzO c8a750OCiXDlF39Tbd+naKYcoFVfMXWjDSRnX8iIaWKa5IlQiVoXw2G7kKE94MCC O0r1xEJSxmBm5dU+tUHfVA6Z2g4VeR5szlZ/fzGncq4= -----END CERTIFICATE-----Generated at Sat Jun 13 10:49:17 2026 by rpki-client