$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS45110.roa File: AS45110.roa (raw, json) Hash identifier: JikWiiOaADzHvogyytecjTEoEj/sVnjTTokZe9NyXFk= Subject key identifier: 49:CA:34:D6:17:77:54:FC:CF:57:39:32:31:5A:A1:50:C2:E9:7C:30 Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 0FDEE19DD3762E481A3E205FA82F09E51FC586CE Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS45110.roa Signing time: Wed 13 May 2026 09:27:08 +0000 ROA not before: Wed 13 May 2026 09:22:08 +0000 ROA not after: Wed 12 May 2027 09:27:08 +0000 asID: 45110 IP address blocks: 43.254.228.0/22 maxlen: 24 43.254.228.0/24 maxlen: 24 43.254.229.0/24 maxlen: 24 43.254.230.0/24 maxlen: 24 43.254.232.0/22 maxlen: 24 43.254.232.0/24 maxlen: 24 43.254.234.0/24 maxlen: 24 43.254.235.0/24 maxlen: 24 43.254.236.0/22 maxlen: 24 43.254.236.0/24 maxlen: 24 43.254.239.0/24 maxlen: 24 43.254.240.0/22 maxlen: 24 43.254.248.0/22 maxlen: 24 43.254.248.0/24 maxlen: 24 43.254.249.0/24 maxlen: 24 43.255.0.0/22 maxlen: 24 103.23.160.0/22 maxlen: 24 103.23.161.0/24 maxlen: 24 103.200.220.0/22 maxlen: 24 103.229.216.0/22 maxlen: 24 103.229.220.0/22 maxlen: 24 103.229.236.0/22 maxlen: 24 111.118.200.0/22 maxlen: 24 111.118.200.0/24 maxlen: 24 111.118.204.0/22 maxlen: 24 116.66.123.0/24 maxlen: 24 119.18.224.0/24 maxlen: 24 119.18.226.0/24 maxlen: 24 119.18.234.0/24 maxlen: 24 119.18.237.0/24 maxlen: 24 203.114.244.0/22 maxlen: 24 2403:9b00:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:de:e1:9d:d3:76:2e:48:1a:3e:20:5f:a8:2f:09:e5:1f:c5:86:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: May 13 09:22:08 2026 GMT Not After : May 12 09:27:08 2027 GMT Subject: CN=49CA34D6177754FCCF573932315AA150C2E97C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ac:c5:ad:f7:b5:fd:49:2a:da:14:bf:fc:c6: fa:26:cd:bc:8f:fd:93:97:8b:cf:52:63:59:63:2e: 5a:f2:be:af:b5:42:8c:82:0b:09:57:2b:8a:55:67: 6e:4c:f5:1d:9e:03:cb:73:cb:c3:ee:a5:df:b3:93: 99:6c:8b:cc:ff:8c:0f:75:fc:e2:24:ad:0b:04:19: e5:10:95:5c:b9:51:08:37:14:59:a8:28:5e:11:99: 9c:4e:30:80:c8:c5:f5:8b:e5:6e:9f:48:1d:36:c1: aa:b7:b1:a4:5d:b2:71:ec:e7:56:9f:80:2e:be:15: 08:09:b8:66:00:f0:18:37:cf:b7:c2:d6:d4:60:9d: b4:a8:2e:ae:36:31:ea:93:72:ee:74:ee:ea:d1:18: 9a:39:ef:b3:97:2c:04:ad:39:96:bf:03:2d:a6:29: 13:db:64:f9:3e:cd:e5:7c:b1:ae:29:0d:a6:ad:e2: 15:05:4b:b2:cb:a9:cd:53:13:17:ad:db:c4:5e:dc: bc:62:6c:82:ec:b1:00:6f:33:f9:87:10:5e:1d:53: 2e:26:4e:9e:b3:ff:e0:c2:0e:84:12:72:d8:9c:cb: c4:6a:18:d4:c5:33:e5:05:ad:36:6f:c0:fa:45:50: 70:b9:90:d7:da:05:9d:51:cc:f6:91:06:78:58:00: 8c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CA:34:D6:17:77:54:FC:CF:57:39:32:31:5A:A1:50:C2:E9:7C:30 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/AS45110.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.228.0-43.254.243.255 43.254.248.0/22 43.255.0.0/22 103.23.160.0/22 103.200.220.0/22 103.229.216.0/21 103.229.236.0/22 111.118.200.0/21 116.66.123.0/24 119.18.224.0/24 119.18.226.0/24 119.18.234.0/24 119.18.237.0/24 203.114.244.0/22 IPv6: 2403:9b00:6000::/48 Signature Algorithm: sha256WithRSAEncryption 04:03:aa:80:1d:0a:e5:f4:62:fd:ab:8f:6a:8c:cf:6c:11:4a: 5c:7e:55:80:0d:86:c3:9b:8b:2c:0e:e6:b9:dc:6b:b3:32:d0: e5:6d:97:7b:86:fe:40:9e:f2:53:f6:1d:9a:b9:c5:59:c4:df: 80:5b:c4:d3:a8:85:c1:1c:f4:e0:8d:b3:de:a6:1d:6a:39:45: d1:d5:1e:4b:5d:94:b8:bb:61:93:9d:c1:02:0a:52:50:fc:7a: b5:0f:d3:e3:56:3a:4e:c6:9f:83:c8:92:e7:03:b7:a6:0d:60: f3:91:7d:58:43:0e:b2:d2:87:ee:cd:c5:db:7b:8d:e0:4d:95: 5b:5d:06:dd:70:f5:13:53:7f:f9:91:b9:c3:47:23:f2:fb:bc: 78:90:2d:dd:b8:9d:f5:dc:d4:b3:f9:1b:4c:ad:02:ed:89:cc: e4:8a:b2:b9:48:15:91:57:94:3e:8d:9d:dc:d8:62:ca:8f:a5: 3d:fe:8b:22:fb:ac:4a:57:da:58:78:b7:5f:e2:b1:ef:57:c3: 52:66:c0:fc:52:41:12:3f:99:52:81:8c:35:f7:d9:e9:98:8b: 73:1b:85:33:3d:7b:20:b6:ea:6e:eb:ef:35:4d:ec:67:80:03: 8c:f9:85:24:ad:40:db:9e:e0:2c:2f:b9:f0:5e:e8:78:e9:5a: a0:56:7c:3f -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUD97hndN2LkgaPiBfqC8J5R/Fhs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjA1MTMwOTIyMDhaFw0yNzA1MTIwOTI3MDhaMDMxMTAvBgNV BAMTKDQ5Q0EzNEQ2MTc3NzU0RkNDRjU3MzkzMjMxNUFBMTUwQzJFOTdDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTrMWt97X9SSraFL/8xvomzbyP /ZOXi89SY1ljLlryvq+1QoyCCwlXK4pVZ25M9R2eA8tzy8Pupd+zk5lsi8z/jA91 /OIkrQsEGeUQlVy5UQg3FFmoKF4RmZxOMIDIxfWL5W6fSB02waq3saRdsnHs51af gC6+FQgJuGYA8Bg3z7fC1tRgnbSoLq42MeqTcu507urRGJo577OXLAStOZa/Ay2m KRPbZPk+zeV8sa4pDaat4hUFS7LLqc1TExet28Re3LxibILssQBvM/mHEF4dUy4m Tp6z/+DCDoQScticy8RqGNTFM+UFrTZvwPpFUHC5kNfaBZ1RzPaRBnhYAIzhAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUSco01hd3VPzPVzkyMVqhUMLpfDAwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC9BUzQ1MTEwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGGBggrBgEFBQcBBwEB/wR3MHUwYgQC AAEwXDAMAwQCK/7kAwQCK/7wAwQCK/74AwQCK/8AAwQCZxegAwQCZ8jcAwQDZ+XY AwQCZ+XsAwQDb3bIAwQAdEJ7AwQAdxLgAwQAdxLiAwQAdxLqAwQAdxLtAwQCy3L0 MA8EAgACMAkDBwAkA5sAYAAwDQYJKoZIhvcNAQELBQADggEBAAQDqoAdCuX0Yv2r j2qMz2wRSlx+VYANhsObiywO5rnca7My0OVtl3uG/kCe8lP2HZq5xVnE34BbxNOo hcEc9OCNs96mHWo5RdHVHktdlLi7YZOdwQIKUlD8erUP0+NWOk7Gn4PIkucDt6YN YPORfVhDDrLSh+7Nxdt7jeBNlVtdBt1w9RNTf/mRucNHI/L7vHiQLd24nfXc1LP5 G0ytAu2JzOSKsrlIFZFXlD6NndzYYsqPpT3+iyL7rEpX2lh4t1/ise9Xw1JmwPxS QRI/mVKBjDX32emYi3MbhTM9eyC26m7r7zVN7GeAA4z5hSStQNue4CwvufBe6Hjp WqBWfD8= -----END CERTIFICATE-----Generated at Wed May 13 14:14:01 2026 by rpki-client