$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/AS58466.roa File: AS58466.roa (raw, json) Hash identifier: bYW7mUCNbybJX6ytLBj2Z20WgV3cCFyjuS+ypkrHPFk= Subject key identifier: 57:BD:62:3F:FB:B4:36:01:42:B5:5B:93:C6:74:41:75:EE:E2:A2:AB Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 2FEAB182FF3048A6F52E0CE2E12358816C90234D Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/AS58466.roa Signing time: Mon 11 May 2026 09:19:09 +0000 ROA not before: Mon 11 May 2026 09:14:09 +0000 ROA not after: Mon 10 May 2027 09:19:09 +0000 asID: 58466 IP address blocks: 139.198.10.0/24 maxlen: 24 139.198.89.0/24 maxlen: 24 139.198.100.0/22 maxlen: 22 139.198.104.0/22 maxlen: 22 139.198.108.0/22 maxlen: 22 139.198.108.0/24 maxlen: 24 139.198.109.0/24 maxlen: 24 139.198.112.0/21 maxlen: 21 139.198.112.0/24 maxlen: 24 139.198.113.0/24 maxlen: 24 139.198.114.0/24 maxlen: 24 139.198.115.0/24 maxlen: 24 139.198.116.0/24 maxlen: 24 139.198.117.0/24 maxlen: 24 139.198.118.0/24 maxlen: 24 139.198.119.0/24 maxlen: 24 139.198.120.0/21 maxlen: 21 139.198.120.0/24 maxlen: 24 139.198.121.0/24 maxlen: 24 139.198.122.0/24 maxlen: 24 139.198.123.0/24 maxlen: 24 139.198.124.0/24 maxlen: 24 139.198.125.0/24 maxlen: 24 139.198.126.0/24 maxlen: 24 139.198.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ea:b1:82:ff:30:48:a6:f5:2e:0c:e2:e1:23:58:81:6c:90:23:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: May 11 09:14:09 2026 GMT Not After : May 10 09:19:09 2027 GMT Subject: CN=57BD623FFBB4360142B55B93C6744175EEE2A2AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:2b:40:c1:5a:9a:78:76:48:7e:21:7f:ad: 17:7e:04:dd:96:9d:43:b8:e0:3c:7c:ae:82:d1:fc: 84:b9:a5:c7:b3:bc:68:2a:a6:dd:f3:7f:5a:c7:93: 84:64:26:be:b2:f3:34:10:c9:56:9d:94:a7:13:c5: 6b:75:ee:39:92:15:b8:c6:f0:e1:ce:7b:e6:09:50: a2:ae:70:cf:46:13:48:ae:15:68:5b:b7:39:5f:68: b8:f3:1c:29:6c:49:f2:d0:8f:20:a3:ec:35:c3:be: 8b:14:b6:0c:3e:d8:98:ea:94:77:22:b5:91:1b:2d: 40:96:ea:0e:51:51:f8:41:41:6b:6c:c0:33:3c:0f: 8a:60:f5:f7:fe:1f:3d:5f:e2:11:97:49:a1:12:c6: 46:0a:99:bb:84:9f:29:86:c1:4a:52:75:60:57:c4: 41:43:50:a3:31:8e:3a:f4:6d:49:41:75:72:90:6d: 90:5b:37:6d:df:51:6f:7a:dd:c0:8c:2d:3c:19:36: f4:09:32:00:c0:0c:60:69:74:5d:e1:b5:5a:67:7f: 16:e9:16:4b:b3:41:69:31:5f:4a:84:a5:d2:21:05: be:c4:63:09:dd:46:d2:f5:99:0d:ca:78:92:24:5c: 35:58:16:3a:7f:21:f6:06:e2:d3:ee:94:b5:8d:a3: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BD:62:3F:FB:B4:36:01:42:B5:5B:93:C6:74:41:75:EE:E2:A2:AB X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/AS58466.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.10.0/24 139.198.89.0/24 139.198.100.0-139.198.127.255 Signature Algorithm: sha256WithRSAEncryption 5f:e4:4f:fb:cb:2b:39:9a:79:43:c9:44:a1:e4:9e:88:98:cc: db:71:cb:a3:b1:4c:40:af:c9:c1:68:bd:d1:42:ea:b7:72:9c: 93:5a:0a:0f:83:5a:1f:0b:da:74:a1:84:7a:d8:17:c5:55:db: 2e:0d:d7:a5:ff:b7:f9:7c:0c:bb:ac:61:be:cf:05:6d:23:4d: 6c:7d:aa:9b:38:d8:8a:06:79:ae:2e:97:d2:02:9b:28:1f:a7: 23:05:65:18:87:f0:0d:69:de:58:08:bf:e1:eb:56:e8:87:cc: 18:61:d4:39:2e:7f:2f:46:38:a1:64:4f:5d:c8:c4:1a:81:a3: bb:14:ee:36:28:98:6f:5c:e3:ed:40:92:b5:63:9f:df:4f:59: 77:ec:d2:22:29:8c:34:76:d0:90:6e:a9:45:8b:5d:30:9d:b8: 02:b0:85:bb:68:85:55:9d:aa:7c:a8:73:a8:ad:d7:34:ab:7c: 1e:0e:93:87:7a:a6:e5:2f:78:cc:4f:cd:a6:71:f2:30:00:67: 4d:28:94:83:0b:58:d7:67:8c:6a:dc:9c:78:21:48:d2:a9:5d: 2e:9f:ad:59:32:aa:77:44:12:3d:a1:d4:b9:5c:4a:7a:d6:d1: 29:f7:94:44:8a:2a:b7:5c:23:b8:1e:ad:44:2e:dc:ea:74:87: 4b:41:a7:03 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUL+qxgv8wSKb1Lgzi4SNYgWyQI00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA1MTEwOTE0MDlaFw0yNzA1MTAwOTE5MDlaMDMxMTAvBgNV BAMTKDU3QkQ2MjNGRkJCNDM2MDE0MkI1NUI5M0M2NzQ0MTc1RUVFMkEyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlCtAwVqaeHZIfiF/rRd+BN2W nUO44Dx8roLR/IS5pcezvGgqpt3zf1rHk4RkJr6y8zQQyVadlKcTxWt17jmSFbjG 8OHOe+YJUKKucM9GE0iuFWhbtzlfaLjzHClsSfLQjyCj7DXDvosUtgw+2JjqlHci tZEbLUCW6g5RUfhBQWtswDM8D4pg9ff+Hz1f4hGXSaESxkYKmbuEnymGwUpSdWBX xEFDUKMxjjr0bUlBdXKQbZBbN23fUW963cCMLTwZNvQJMgDADGBpdF3htVpnfxbp FkuzQWkxX0qEpdIhBb7EYwndRtL1mQ3KeJIkXDVYFjp/IfYG4tPulLWNowLHAgMB AAGjggH3MIIB8zAdBgNVHQ4EFgQUV71iP/u0NgFCtVuTxnRBde7ioqswHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS9BUzU4NDY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIA ATAaAwQAi8YKAwQAi8ZZMAwDBAKLxmQDBAeLxgAwDQYJKoZIhvcNAQELBQADggEB AF/kT/vLKzmaeUPJRKHknoiYzNtxy6OxTECvycFovdFC6rdynJNaCg+DWh8L2nSh hHrYF8VV2y4N16X/t/l8DLusYb7PBW0jTWx9qps42IoGea4ul9ICmygfpyMFZRiH 8A1p3lgIv+HrVuiHzBhh1Dkufy9GOKFkT13IxBqBo7sU7jYomG9c4+1AkrVjn99P WXfs0iIpjDR20JBuqUWLXTCduAKwhbtohVWdqnyoc6it1zSrfB4Ok4d6puUveMxP zaZx8jAAZ00olIMLWNdnjGrcnHghSNKpXS6frVkyqndEEj2h1LlcSnrW0Sn3lESK KrdcI7gerUQu3Op0h0tBpwM= -----END CERTIFICATE-----Generated at Wed May 13 06:04:50 2026 by rpki-client