$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS59083.roa File: AS59083.roa (raw, json) Hash identifier: ushzmwAFhwiThXurSwtrTCCFmgn+xSBruO4ZTRuItX0= Subject key identifier: 7A:67:5A:83:01:6E:83:D4:A5:85:FA:A1:E5:DE:BD:FD:2B:B9:FB:10 Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E Certificate serial: 120BD7586960C39D423E28AAA4A8C874A597B860 Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS59083.roa Signing time: Mon 07 Sep 2026 02:00:22 +0000 ROA not before: Mon 07 Sep 2026 01:55:22 +0000 ROA not after: Mon 06 Sep 2027 02:00:22 +0000 asID: 59083 IP address blocks: 43.254.152.0/22 maxlen: 24 43.254.152.0/24 maxlen: 24 43.254.153.0/24 maxlen: 24 43.254.154.0/23 maxlen: 24 43.254.154.0/24 maxlen: 24 43.254.155.0/24 maxlen: 24 45.252.48.0/22 maxlen: 24 59.153.168.0/23 maxlen: 24 59.153.168.0/24 maxlen: 24 59.153.172.0/24 maxlen: 24 103.10.0.0/22 maxlen: 24 103.10.0.0/23 maxlen: 23 103.10.0.0/24 maxlen: 24 103.10.1.0/24 maxlen: 24 103.10.2.0/23 maxlen: 23 103.10.2.0/24 maxlen: 24 103.10.3.0/24 maxlen: 24 103.24.116.0/22 maxlen: 24 103.24.117.0/24 maxlen: 24 103.198.216.0/22 maxlen: 24 103.198.220.0/22 maxlen: 24 103.198.224.0/22 maxlen: 24 103.198.228.0/22 maxlen: 24 103.198.232.0/22 maxlen: 24 103.198.236.0/22 maxlen: 24 103.198.240.0/22 maxlen: 24 103.198.244.0/22 maxlen: 24 202.89.96.0/22 maxlen: 22 2403:1b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 13:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:0b:d7:58:69:60:c3:9d:42:3e:28:aa:a4:a8:c8:74:a5:97:b8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E Validity Not Before: Sep 7 01:55:22 2026 GMT Not After : Sep 6 02:00:22 2027 GMT Subject: CN=7A675A83016E83D4A585FAA1E5DEBDFD2BB9FB10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:da:4f:32:75:84:cb:3e:be:fd:a5:a0:24: 9c:da:87:d1:c0:1f:ea:27:7f:5f:bc:73:aa:76:a8: ee:6f:c9:a1:41:3e:e6:0a:4d:09:43:65:bf:16:51: e6:61:8c:f9:00:40:0b:0f:3b:27:40:db:08:ad:ff: 80:f7:9b:90:89:41:44:6c:79:36:6e:36:79:e1:43: 21:b2:07:89:2e:4e:07:76:ef:e8:04:81:f4:b7:9b: a4:27:9a:10:ae:d9:bd:e4:fd:ea:e6:8c:6e:f7:8c: 20:ef:72:87:ec:1f:4b:c9:3f:f7:59:2d:04:9e:d9: fd:6f:56:d3:f9:c5:24:2a:72:fe:fd:04:24:b6:65: 2e:3d:be:ad:f9:d2:24:61:22:3a:6b:ae:c5:9b:3e: 00:96:10:da:a4:0d:ba:8c:71:37:56:25:2f:24:68: 6c:7f:59:d0:75:34:7b:15:ff:3f:f4:3b:04:15:93: b3:f7:79:fe:a7:8c:e0:13:7d:49:5d:35:a0:d1:a6: 95:46:b8:18:8d:03:ef:f9:b4:4f:fe:62:29:7d:ea: 1b:b6:21:b0:03:b7:1e:65:7c:15:c3:ba:12:2a:c2: 75:03:e8:d8:8d:a1:78:ba:9e:b3:9a:a5:aa:b9:58: fe:dd:7d:80:86:cd:71:84:1d:7d:66:ae:47:87:0d: 4b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:67:5A:83:01:6E:83:D4:A5:85:FA:A1:E5:DE:BD:FD:2B:B9:FB:10 X509v3 Authority Key Identifier: keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS59083.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.152.0/22 45.252.48.0/22 59.153.168.0/23 59.153.172.0/24 103.10.0.0/22 103.24.116.0/22 103.198.216.0-103.198.247.255 202.89.96.0/22 IPv6: 2403:1b80::/48 Signature Algorithm: sha256WithRSAEncryption 6c:94:27:4f:79:53:fe:9a:92:27:3a:17:86:f3:4a:60:0e:cb: 9f:51:d4:db:f5:cc:e0:36:23:11:99:79:2d:e7:5e:46:b4:cd: 12:d8:db:dd:6f:c8:5d:ba:d8:85:a2:92:58:52:e8:6f:2a:ec: af:b1:85:ad:0d:ba:1a:d7:99:f9:f6:5c:fe:95:b0:08:7a:2d: 8b:51:29:1b:c6:ac:1c:af:41:eb:b5:b7:e1:2b:e5:3a:b4:08: 12:15:4f:b9:fc:40:e4:30:71:89:d4:e8:5a:7e:e1:64:8e:95: a9:65:30:bf:76:b7:30:0c:43:a2:e9:1b:7d:f4:30:3a:cc:65: 27:0b:52:87:7c:b1:60:e3:0b:48:a6:91:f0:44:8a:d3:14:ac: 69:87:16:18:93:84:7a:be:4b:ea:20:34:c3:c2:68:e3:75:59: e4:a0:bb:1d:1b:40:57:3f:31:10:1c:85:a3:82:76:28:e1:42: 24:37:c9:ec:b9:20:67:b6:21:8d:c6:92:53:d4:c7:ad:c5:de: fa:f0:6f:2d:97:d7:4c:9c:a3:e9:bd:69:b1:7f:00:81:07:98: 67:fb:83:88:bd:4d:55:a8:b7:cf:f6:e0:b6:91:bc:f7:bd:56: 61:81:b7:95:db:a8:1a:78:88:2c:9d:d7:6c:47:e0:4c:b4:5c: d9:61:3f:2a -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUEgvXWGlgw51CPiiqpKjIdKWXuGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NC NTUzRDc1RTAeFw0yNjA5MDcwMTU1MjJaFw0yNzA5MDYwMjAwMjJaMDMxMTAvBgNV BAMTKDdBNjc1QTgzMDE2RTgzRDRBNTg1RkFBMUU1REVCREZEMkJCOUZCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg/9pPMnWEyz6+/aWgJJzah9HA H+onf1+8c6p2qO5vyaFBPuYKTQlDZb8WUeZhjPkAQAsPOydA2wit/4D3m5CJQURs eTZuNnnhQyGyB4kuTgd27+gEgfS3m6QnmhCu2b3k/ermjG73jCDvcofsH0vJP/dZ LQSe2f1vVtP5xSQqcv79BCS2ZS49vq350iRhIjprrsWbPgCWENqkDbqMcTdWJS8k aGx/WdB1NHsV/z/0OwQVk7P3ef6njOATfUldNaDRppVGuBiNA+/5tE/+Yil96hu2 IbADtx5lfBXDuhIqwnUD6NiNoXi6nrOapaq5WP7dfYCGzXGEHX1mrkeHDUujAgMB AAGjggImMIICIjAdBgNVHQ4EFgQUemdagwFug9Slhfqh5d69/Su5+xAwHwYDVR0j BBgwFoAUH/8mPGQWO8WFFLU5wQN1zLVT114wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDMyNzA0My8wLzFGRkYyNjNDNjQxNjNCQzU4NTE0QjUzOUMxMDM3 NUNDQjU1M0Q3NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzMjcwNDMvMC9BUzU5MDgzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTA+BAIA ATA4AwQCK/6YAwQCLfwwAwQBO5moAwQAO5msAwQCZwoAAwQCZxh0MAwDBANnxtgD BANnxvADBALKWWAwDwQCAAIwCQMHACQDG4AAADANBgkqhkiG9w0BAQsFAAOCAQEA bJQnT3lT/pqSJzoXhvNKYA7Ln1HU2/XM4DYjEZl5LedeRrTNEtjb3W/IXbrYhaKS WFLobyrsr7GFrQ26GteZ+fZc/pWwCHoti1EpG8asHK9B67W34SvlOrQIEhVPufxA 5DBxidToWn7hZI6VqWUwv3a3MAxDoukbffQwOsxlJwtSh3yxYOMLSKaR8ESK0xSs aYcWGJOEer5L6iA0w8Jo43VZ5KC7HRtAVz8xEByFo4J2KOFCJDfJ7LkgZ7YhjcaS U9THrcXe+vBvLZfXTJyj6b1psX8AgQeYZ/uDiL1NVai3z/bgtpG8971WYYG3lduo GniILJ3XbEfgTLRc2WE/Kg== -----END CERTIFICATE-----Generated at Tue Oct 6 18:28:36 2026 by rpki-client