$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: xaMX7QJkACLbbpnvU5sRpLEqtY/XnJUASGKelmZfNGI= Subject key identifier: D6:C6:19:33:83:1B:E4:BA:04:32:44:0D:C0:E6:5C:9A:42:27:BF:8F Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Certificate serial: 6D5A30A82C73BB187FE4229A6A4470DB5C3767C7 Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS21859.roa Signing time: Fri 30 Oct 2026 08:10:07 +0000 ROA not before: Fri 30 Oct 2026 08:05:07 +0000 ROA not after: Fri 29 Oct 2027 08:10:07 +0000 asID: 21859 IP address blocks: 118.26.56.0/26 maxlen: 26 118.26.56.64/26 maxlen: 26 118.26.56.128/25 maxlen: 25 118.26.57.0/24 maxlen: 24 118.26.58.0/29 maxlen: 29 118.26.58.8/29 maxlen: 29 118.26.58.128/25 maxlen: 25 118.26.59.0/24 maxlen: 24 118.26.60.0/24 maxlen: 24 118.26.61.0/24 maxlen: 24 118.26.62.0/24 maxlen: 24 118.26.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 04:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5a:30:a8:2c:73:bb:18:7f:e4:22:9a:6a:44:70:db:5c:37:67:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Validity Not Before: Oct 30 08:05:07 2026 GMT Not After : Oct 29 08:10:07 2027 GMT Subject: CN=D6C61933831BE4BA0432440DC0E65C9A4227BF8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:4a:a1:e8:e2:20:05:bf:47:bb:84:dd:93: 54:5d:f1:20:26:9f:aa:b9:25:3c:d0:c6:75:b7:41: 29:dd:1f:11:71:81:bb:c9:c6:3a:26:7c:68:67:bf: 5d:c7:ce:ad:ed:ad:ed:f8:16:7b:ec:df:2a:61:a9: cc:08:57:66:a0:43:59:88:ea:39:1f:60:64:34:ba: 5e:b6:c5:83:82:7d:73:90:33:e9:cf:53:4a:b4:06: e8:df:2b:54:72:cb:31:57:51:dd:35:b9:b7:80:f2: b7:0b:22:fd:96:42:14:25:29:5c:d7:c9:11:d8:47: 84:29:bd:a6:39:e6:89:17:f6:87:c7:63:b7:a7:c2: f9:88:21:8b:e6:d7:b5:f7:24:b2:25:0a:4f:35:fd: d9:84:7a:cb:83:fb:8e:92:00:29:cb:cc:77:ce:3f: f0:29:c8:fe:0a:67:f5:3b:99:85:53:33:c0:c3:26: 16:96:d7:8c:3f:4d:df:33:ef:4f:98:1a:fc:af:fb: 60:d8:18:d1:a2:14:4f:89:71:51:b2:33:17:d1:6f: 61:c8:ac:35:4e:54:fb:10:c8:55:d6:0e:ed:80:d7: 43:14:8d:8b:6b:11:40:16:1b:b4:3a:67:d3:dc:b6: 28:92:5d:b7:ab:07:17:78:22:a8:32:13:72:be:5e: 6a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C6:19:33:83:1B:E4:BA:04:32:44:0D:C0:E6:5C:9A:42:27:BF:8F X509v3 Authority Key Identifier: keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.26.56.0-118.26.58.15 118.26.58.128-118.26.63.255 Signature Algorithm: sha256WithRSAEncryption 8a:2b:4f:91:d9:ee:07:87:f8:ad:87:ae:bd:9f:09:8f:ac:d0: c4:85:96:48:8f:4a:0a:b0:5e:37:29:24:dd:7f:fd:19:c8:cd: b3:79:f3:6e:00:d3:76:34:6e:40:ac:39:7b:4a:1a:51:0b:c4: de:8b:2e:aa:c2:51:38:04:cc:a8:e5:9d:55:50:72:bd:27:61: a2:50:cd:5a:af:e5:10:36:07:45:12:0b:1b:76:cf:2c:8a:5a: b5:ff:4a:3e:37:0e:2c:b4:e4:b6:a6:96:32:c5:ed:b4:0d:c0: 52:da:29:65:8c:d4:95:10:c6:18:01:0e:e5:ab:f9:38:b6:09: 48:5a:08:59:ee:37:c4:a9:f0:2e:ba:55:1f:4b:0d:05:a1:4d: cc:a6:17:39:25:0d:0d:31:6b:e8:07:06:b8:ae:51:4a:4b:d8: 94:ba:bf:fa:03:e3:8f:b3:a4:69:ce:ce:98:21:ee:5c:36:da: f3:5e:5f:c3:dd:53:ec:60:af:22:86:45:7f:8d:3b:6c:97:45: 57:70:bc:67:02:ed:dc:a3:6b:15:2f:79:84:79:6f:60:e1:d9: d6:90:27:d7:ca:cd:bc:c5:8a:4e:ba:3f:ec:85:f1:6b:45:ea: 9c:25:e6:4f:56:9f:6a:df:99:97:76:f7:b1:7f:31:6c:54:7f: 65:77:e3:db -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUbVowqCxzuxh/5CKaakRw21w3Z8cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTM3MEYwMDAwMTEwLwYDVQQFEygwMTgyRDRDRDBD NkQyMURDMkMyOTZFRDI2MDZBNzBENzk2RDVCQkI5MB4XDTI2MTAzMDA4MDUwN1oX DTI3MTAyOTA4MTAwN1owMzExMC8GA1UEAxMoRDZDNjE5MzM4MzFCRTRCQTA0MzI0 NDBEQzBFNjVDOUE0MjI3QkY4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFrSqHo4iAFv0e7hN2TVF3xICafqrklPNDGdbdBKd0fEXGBu8nGOiZ8aGe/ XcfOre2t7fgWe+zfKmGpzAhXZqBDWYjqOR9gZDS6XrbFg4J9c5Az6c9TSrQG6N8r VHLLMVdR3TW5t4Dytwsi/ZZCFCUpXNfJEdhHhCm9pjnmiRf2h8djt6fC+Yghi+bX tfcksiUKTzX92YR6y4P7jpIAKcvMd84/8CnI/gpn9TuZhVMzwMMmFpbXjD9N3zPv T5ga/K/7YNgY0aIUT4lxUbIzF9FvYcisNU5U+xDIVdYO7YDXQxSNi2sRQBYbtDpn 09y2KJJdt6sHF3giqDITcr5eassCAwEAAaOCAfswggH3MB0GA1UdDgQWBBTWxhkz gxvkugQyRA3A5lyaQie/jzAfBgNVHSMEGDAWgBQBgtTNDG0h3CwpbtJganDXltW7 uTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEzNjU0ODA2MzY0NDIyMTYzLzAvMDE4MkQ0 Q0QwQzZEMjFEQzJDMjk2RUQyNjA2QTcwRDc5NkQ1QkJCOS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvQVlMVXpReHRJ ZHdzS1c3U1lHcHcxNWJWdTdrLmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMzY1NDgwNjM2 NDQyMjE2My8wL0FTMjE4NTkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw NwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4wDQMEA3YaOAMFBHYaOgAwDQMFB3Ya OoADBAZ2GgAwDQYJKoZIhvcNAQELBQADggEBAIorT5HZ7geH+K2Hrr2fCY+s0MSF lkiPSgqwXjcpJN1//RnIzbN5824A03Y0bkCsOXtKGlELxN6LLqrCUTgEzKjlnVVQ cr0nYaJQzVqv5RA2B0USCxt2zyyKWrX/Sj43Diy05LamljLF7bQNwFLaKWWM1JUQ xhgBDuWr+Ti2CUhaCFnuN8Sp8C66VR9LDQWhTcymFzklDQ0xa+gHBriuUUpL2JS6 v/oD44+zpGnOzpgh7lw22vNeX8PdU+xgryKGRX+NO2yXRVdwvGcC7dyjaxUveYR5 b2Dh2daQJ9fKzbzFik66P+yF8WtF6pwl5k9Wn2rfmZd297F/MWxUf2V349s= -----END CERTIFICATE-----Generated at Thu Nov 5 17:15:25 2026 by rpki-client