$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS4515.roa File: AS4515.roa (raw, json) Hash identifier: OTIETi3MG/xKB3HyilCE0M6KVDY7+mj0yGCzFMfXUnY= Subject key identifier: 03:0D:CB:56:32:EE:1D:36:52:09:5C:E7:79:BD:08:4E:19:11:3E:6F Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E Certificate serial: 5A47D66489B8618FE196749C0BABD60D554FA637 Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS4515.roa Signing time: Wed 25 Mar 2026 12:17:37 +0000 ROA not before: Wed 25 Mar 2026 12:12:37 +0000 ROA not after: Wed 24 Mar 2027 12:17:37 +0000 asID: 4515 IP address blocks: 103.5.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:47:d6:64:89:b8:61:8f:e1:96:74:9c:0b:ab:d6:0d:55:4f:a6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E Validity Not Before: Mar 25 12:12:37 2026 GMT Not After : Mar 24 12:17:37 2027 GMT Subject: CN=030DCB5632EE1D3652095CE779BD084E19113E6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:18:f4:8b:b7:59:77:2c:07:16:df:23:46:2a: c7:6f:b4:23:01:38:8e:26:fe:89:58:e7:32:54:4e: 46:e0:25:47:46:f5:21:b8:09:2d:c4:80:5d:ea:8d: 50:d4:fa:b4:77:1f:5a:86:57:6a:a9:77:ac:fc:b6: 35:76:66:d4:34:e6:b0:11:05:46:50:5d:ea:3b:a9: f8:9e:e9:c1:a2:93:e0:cb:6f:3f:26:fe:bd:f8:51: 47:41:c2:0d:27:89:18:59:3a:82:39:11:40:ec:f0: 35:46:cc:97:8a:10:cb:2d:38:38:d7:b7:ec:d5:26: af:84:2a:cc:c5:ee:63:65:6c:06:48:9f:31:3d:e7: 1f:65:f8:cf:c8:63:8e:99:43:b5:cc:2c:2b:f9:cb: 05:5d:f7:95:9f:d4:7a:64:92:ba:ee:57:e8:3c:49: 8c:42:8f:87:60:bd:09:29:3c:59:d0:f2:2c:29:7e: 84:76:51:75:29:03:26:e7:46:dd:84:2a:31:c7:09: 3c:1e:85:4c:74:3b:f6:8d:5b:dc:db:ff:81:e9:f1: 2f:3c:a5:09:a8:98:b8:67:81:27:28:13:96:17:d3: e0:6c:e5:09:73:c1:60:e9:bf:8f:a3:28:c9:ec:97: 84:a2:52:d3:d9:d3:6b:f1:71:a1:05:8f:dc:90:fa: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0D:CB:56:32:EE:1D:36:52:09:5C:E7:79:BD:08:4E:19:11:3E:6F X509v3 Authority Key Identifier: keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS4515.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.5.195.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:ff:dc:24:b3:ba:72:5c:87:d9:7e:cc:97:71:16:d1:c7:97: ea:14:86:e8:42:6b:22:1d:9d:bc:cb:84:24:0f:b1:18:b0:2f: 6e:6c:55:14:57:c4:dd:15:82:e6:71:a2:88:e6:b5:3b:2b:bf: b9:de:67:21:9f:b7:b0:02:b1:54:cb:a3:36:6f:9d:8c:cb:8c: 22:15:30:57:b0:c7:cf:39:45:ca:77:a8:ad:06:d4:46:b9:b1: b0:d6:ef:c6:cb:a2:27:c9:a2:93:87:28:ee:8e:7a:d5:b6:7f: 68:36:f4:17:33:f8:20:d5:41:af:c7:71:27:53:e0:6c:f3:2e: a1:b5:80:e0:3c:ba:f6:f3:02:fd:e5:f9:5a:c7:f3:b3:89:b3: ec:83:d4:62:af:13:35:a5:78:c5:43:30:79:80:37:36:3f:d4: 24:ec:85:cd:46:74:41:96:8f:e3:0f:61:7e:fd:ba:ef:91:43: 83:61:69:d2:9d:76:d1:60:08:71:de:78:31:be:f3:61:de:44: c3:02:2e:44:37:a0:80:44:6a:8e:c1:28:cb:55:6e:d5:b0:09: 58:18:7c:d0:c6:2f:de:09:64:4a:d8:62:b4:c0:aa:c1:71:78: cb:ab:23:85:bc:f1:6f:d6:13:fd:e7:d6:a6:fb:62:27:0e:89: bf:a6:15:24 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUWkfWZIm4YY/hlnScC6vWDVVPpjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NC NTUzRDc1RTAeFw0yNjAzMjUxMjEyMzdaFw0yNzAzMjQxMjE3MzdaMDMxMTAvBgNV BAMTKDAzMERDQjU2MzJFRTFEMzY1MjA5NUNFNzc5QkQwODRFMTkxMTNFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGPSLt1l3LAcW3yNGKsdvtCMB OI4m/olY5zJUTkbgJUdG9SG4CS3EgF3qjVDU+rR3H1qGV2qpd6z8tjV2ZtQ05rAR BUZQXeo7qfie6cGik+DLbz8m/r34UUdBwg0niRhZOoI5EUDs8DVGzJeKEMstODjX t+zVJq+EKszF7mNlbAZInzE95x9l+M/IY46ZQ7XMLCv5ywVd95Wf1HpkkrruV+g8 SYxCj4dgvQkpPFnQ8iwpfoR2UXUpAybnRt2EKjHHCTwehUx0O/aNW9zb/4Hp8S88 pQmomLhngScoE5YX0+Bs5QlzwWDpv4+jKMnsl4SiUtPZ02vxcaEFj9yQ+rtRAgMB AAGjggHiMIIB3jAdBgNVHQ4EFgQUAw3LVjLuHTZSCVzneb0IThkRPm8wHwYDVR0j BBgwFoAUH/8mPGQWO8WFFLU5wQN1zLVT114wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDMyNzA0My8wLzFGRkYyNjNDNjQxNjNCQzU4NTE0QjUzOUMxMDM3 NUNDQjU1M0Q3NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzMjcwNDMvMC9BUzQ1MTUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnBcMwDQYJKoZIhvcNAQELBQADggEBAIr/3CSzunJch9l+zJdxFtHHl+oU huhCayIdnbzLhCQPsRiwL25sVRRXxN0VguZxoojmtTsrv7neZyGft7ACsVTLozZv nYzLjCIVMFewx885Rcp3qK0G1Ea5sbDW78bLoifJopOHKO6OetW2f2g29Bcz+CDV Qa/HcSdT4GzzLqG1gOA8uvbzAv3l+VrH87OJs+yD1GKvEzWleMVDMHmANzY/1CTs hc1GdEGWj+MPYX79uu+RQ4NhadKddtFgCHHeeDG+82HeRMMCLkQ3oIBEao7BKMtV btWwCVgYfNDGL94JZErYYrTAqsFxeMurI4W88W/WE/3n1qb7YicOib+mFSQ= -----END CERTIFICATE-----Generated at Thu Mar 26 17:32:56 2026 by rpki-client