$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS131314.roa File: AS131314.roa (raw, json) Hash identifier: OS3b7F3m4BivAGmRMdEtwLH+lk1M2y70vcAslgPB1DE= Subject key identifier: 9D:AA:03:95:A8:1F:AE:A4:81:25:9E:73:D4:40:97:00:5B:7B:CE:FD Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 553F13458B080A126E31FEBA4D941EB9D8F0CFB3 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS131314.roa Signing time: Wed 01 Jul 2026 08:55:19 +0000 ROA not before: Wed 01 Jul 2026 08:50:19 +0000 ROA not after: Wed 30 Jun 2027 08:55:19 +0000 asID: 131314 IP address blocks: 103.200.220.0/22 maxlen: 24 103.200.224.0/24 maxlen: 24 103.200.228.0/24 maxlen: 24 103.200.232.0/24 maxlen: 24 103.201.192.0/24 maxlen: 24 103.201.193.0/24 maxlen: 24 103.201.196.0/24 maxlen: 24 103.201.200.0/24 maxlen: 24 111.118.200.0/24 maxlen: 24 113.21.232.0/22 maxlen: 24 113.21.236.0/22 maxlen: 24 114.31.64.0/22 maxlen: 24 119.161.120.0/22 maxlen: 24 119.161.124.0/24 maxlen: 24 120.136.16.0/22 maxlen: 24 120.136.20.0/22 maxlen: 24 202.47.104.0/21 maxlen: 24 202.47.110.0/24 maxlen: 24 202.57.192.0/24 maxlen: 24 202.57.193.0/24 maxlen: 24 202.57.196.0/22 maxlen: 24 202.57.200.0/23 maxlen: 24 202.57.201.0/24 maxlen: 24 202.57.202.0/24 maxlen: 24 202.57.204.0/23 maxlen: 24 202.65.96.0/22 maxlen: 24 202.65.96.0/24 maxlen: 24 2403:9b00:2000::/48 maxlen: 48 2403:9b00:2400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3f:13:45:8b:08:0a:12:6e:31:fe:ba:4d:94:1e:b9:d8:f0:cf:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Jul 1 08:50:19 2026 GMT Not After : Jun 30 08:55:19 2027 GMT Subject: CN=9DAA0395A81FAEA481259E73D44097005B7BCEFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:20:f7:7f:4b:1f:4a:b3:a2:41:2c:67:76: 52:0b:83:be:24:f9:39:bc:33:86:57:dd:b8:bf:8e: 19:db:2f:8b:49:54:d4:1e:29:f9:ff:40:91:c6:13: 31:9b:a4:9f:67:54:a9:d1:8b:4a:81:7b:6e:3a:83: f7:09:f6:28:54:a0:bc:83:0c:80:b8:f3:8a:5e:0b: 44:c6:2d:2d:d1:e6:34:0f:38:9d:64:05:93:c0:11: 01:a7:65:84:98:f7:13:ea:dd:a6:15:4d:f8:f0:7e: 94:99:f1:26:68:0d:74:a7:e1:01:a2:6f:db:1f:2f: c8:73:9a:7b:9e:b5:1d:ec:c5:4f:43:95:a1:e4:a8: 02:3a:01:ea:3c:c8:50:d6:2a:d1:d3:ef:ba:4c:00: c2:32:78:b6:8a:6c:58:ee:0e:e1:5e:f0:c9:a7:57: 9b:19:7b:71:9e:ce:d5:65:6a:88:45:f1:02:e8:15: f7:17:c6:77:82:49:6d:bc:c5:f3:5b:c9:5c:ca:60: 25:15:52:81:e5:2a:c0:ea:13:67:44:55:8a:1e:b5: 3c:fb:56:46:de:16:34:ec:4b:4a:bc:68:fb:05:f3: bf:aa:55:f0:b9:a2:fc:d4:ec:aa:94:4b:56:60:94: 85:74:20:95:85:db:40:22:47:bd:f1:ac:0a:53:18: 40:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AA:03:95:A8:1F:AE:A4:81:25:9E:73:D4:40:97:00:5B:7B:CE:FD X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS131314.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.200.220.0-103.200.224.255 103.200.228.0/24 103.200.232.0/24 103.201.192.0/23 103.201.196.0/24 103.201.200.0/24 111.118.200.0/24 113.21.232.0/21 114.31.64.0/22 119.161.120.0-119.161.124.255 120.136.16.0/21 202.47.104.0/21 202.57.192.0/23 202.57.196.0-202.57.202.255 202.57.204.0/23 202.65.96.0/22 IPv6: 2403:9b00:2000::/48 2403:9b00:2400::/48 Signature Algorithm: sha256WithRSAEncryption 8e:9d:1b:de:68:2c:b5:43:79:62:b7:b1:7d:07:e1:ac:e9:f1: 3e:91:e5:be:1b:33:f4:25:72:73:13:0e:4e:70:43:43:a9:b1: 28:13:7e:49:ec:cc:ae:ae:6d:6a:3a:9e:91:57:0c:c2:ea:64: 7d:01:25:05:6d:90:c2:b9:f9:aa:98:af:c5:89:85:93:33:cc: 67:a3:29:24:5d:f6:a8:24:a7:f1:b8:4b:b7:07:c4:c3:c8:ce: 49:ad:25:46:0d:d5:dc:77:12:19:64:e8:97:76:cb:ee:cb:8b: 46:3f:56:ce:40:b0:2f:18:57:67:6b:c4:fd:44:c8:67:ed:26: 6c:1d:93:96:6f:83:4d:7d:c5:d7:75:0f:98:a1:8b:a5:1c:2c: d6:24:56:f1:f2:d8:06:72:f9:65:3b:2d:fc:48:00:e1:0f:7a: 8d:ab:48:e6:5f:f4:76:ab:8f:2d:4a:2b:1b:9a:ef:5d:63:c6: f0:0f:d6:41:8e:c5:4f:ae:7c:7c:ef:ab:ed:3b:f5:cb:58:18: fc:84:20:bf:95:e8:32:e6:f8:bf:c7:6b:bc:c0:60:b4:c2:10: b7:6a:3c:32:f0:b3:32:ba:c3:27:a7:14:90:2f:11:34:12:5c: d6:b1:e8:54:db:cf:22:c7:ac:ca:ce:26:f4:e7:5f:e6:4d:f1: 00:07:99:52 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUVT8TRYsIChJuMf66TZQeudjwz7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjA3MDEwODUwMTlaFw0yNzA2MzAwODU1MTlaMDMxMTAvBgNV BAMTKDlEQUEwMzk1QTgxRkFFQTQ4MTI1OUU3M0Q0NDA5NzAwNUI3QkNFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aSD3f0sfSrOiQSxndlILg74k +Tm8M4ZX3bi/jhnbL4tJVNQeKfn/QJHGEzGbpJ9nVKnRi0qBe246g/cJ9ihUoLyD DIC484peC0TGLS3R5jQPOJ1kBZPAEQGnZYSY9xPq3aYVTfjwfpSZ8SZoDXSn4QGi b9sfL8hzmnuetR3sxU9DlaHkqAI6Aeo8yFDWKtHT77pMAMIyeLaKbFjuDuFe8Mmn V5sZe3GeztVlaohF8QLoFfcXxneCSW28xfNbyVzKYCUVUoHlKsDqE2dEVYoetTz7 VkbeFjTsS0q8aPsF87+qVfC5ovzU7KqUS1ZglIV0IJWF20AiR73xrApTGEB7AgMB AAGjggJzMIICbzAdBgNVHQ4EFgQUnaoDlagfrqSBJZ5z1ECXAFt7zv0wHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC9BUzEzMTMxNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBrQYIKwYBBQUHAQcBAf8EgZ0wgZow fgQCAAEweDAMAwQCZ8jcAwQAZ8jgAwQAZ8jkAwQAZ8joAwQBZ8nAAwQAZ8nEAwQA Z8nIAwQAb3bIAwQDcRXoAwQCch9AMAwDBAN3oXgDBAB3oXwDBAN4iBADBAPKL2gD BAHKOcAwDAMEAso5xAMEAMo5ygMEAco5zAMEAspBYDAYBAIAAjASAwcAJAObACAA AwcAJAObACQAMA0GCSqGSIb3DQEBCwUAA4IBAQCOnRveaCy1Q3lit7F9B+Gs6fE+ keW+GzP0JXJzEw5OcENDqbEoE35J7Myurm1qOp6RVwzC6mR9ASUFbZDCufmqmK/F iYWTM8xnoykkXfaoJKfxuEu3B8TDyM5JrSVGDdXcdxIZZOiXdsvuy4tGP1bOQLAv GFdna8T9RMhn7SZsHZOWb4NNfcXXdQ+YoYulHCzWJFbx8tgGcvllOy38SADhD3qN q0jmX/R2q48tSisbmu9dY8bwD9ZBjsVPrnx876vtO/XLWBj8hCC/legy5vi/x2u8 wGC0whC3ajwy8LMyusMnpxSQLxE0ElzWsehU288ix6zKzib051/mTfEAB5lS -----END CERTIFICATE-----Generated at Fri Jul 24 15:04:01 2026 by rpki-client