$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS59077.roa File: AS59077.roa (raw, json) Hash identifier: qKsY8VzCJUKMIixPEhz1UNngrkurGjIVkuy4wiYYkSw= Subject key identifier: 0D:4B:C0:55:18:7B:53:12:BD:4F:0E:F6:15:38:AB:2B:75:FB:E8:2C Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 6FE9F3A7420BE90B58BEDD072A76B3E8226D7113 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS59077.roa Signing time: Tue 12 May 2026 09:40:17 +0000 ROA not before: Tue 12 May 2026 09:35:17 +0000 ROA not after: Tue 11 May 2027 09:40:17 +0000 asID: 59077 IP address blocks: 106.75.128.0/20 maxlen: 20 106.75.144.0/20 maxlen: 20 106.75.160.0/20 maxlen: 20 106.75.176.0/20 maxlen: 20 113.31.160.0/20 maxlen: 20 2401:3480::/36 maxlen: 36 2401:3480:2000::/36 maxlen: 36 2401:3480:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e9:f3:a7:42:0b:e9:0b:58:be:dd:07:2a:76:b3:e8:22:6d:71:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: May 12 09:35:17 2026 GMT Not After : May 11 09:40:17 2027 GMT Subject: CN=0D4BC055187B5312BD4F0EF61538AB2B75FBE82C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:00:6f:4b:a7:b3:53:9d:bf:e8:67:f4:aa: 09:17:82:1c:1b:cf:d6:c2:9b:7a:6a:28:9d:e7:ba: c1:1b:f8:0f:b8:4c:73:e6:24:97:4b:5d:a0:3f:ec: 5d:f0:f9:7d:d4:4b:5b:48:68:4f:70:37:1a:f8:9c: cd:97:86:cf:b9:4f:ac:6f:eb:ee:9c:1b:81:cd:c3: 0f:68:77:2f:bc:c8:38:1b:61:e1:b9:07:0c:6d:07: 98:25:2e:88:4b:3b:06:46:cb:f8:eb:cf:5f:53:cd: 0c:89:c2:7f:af:9e:c4:0c:b9:87:74:2b:60:96:95: 86:33:77:7e:8f:c8:7e:0d:a0:90:be:e6:33:ec:a3: fd:a7:9c:7b:1e:47:40:b4:2a:eb:64:96:e5:06:e3: ec:ce:f8:aa:4b:2c:2f:e0:c7:06:80:00:b8:7a:8f: 3f:19:80:4d:0e:de:b0:45:ff:e3:f0:86:01:34:ca: 2e:45:bb:07:b8:ef:95:7f:ac:43:2a:ff:6d:37:bc: 7f:e7:02:58:f9:f5:12:6e:f9:fe:0c:9b:87:7e:bd: a1:36:af:f4:18:95:31:69:8a:c9:61:b9:07:d5:70: 01:72:3b:75:e3:81:1b:6b:c8:0a:6a:3e:58:a3:e9: a9:f5:71:22:80:db:48:2a:a1:c6:bb:e1:84:04:3b: f9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4B:C0:55:18:7B:53:12:BD:4F:0E:F6:15:38:AB:2B:75:FB:E8:2C X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/AS59077.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.75.128.0/18 113.31.160.0/20 IPv6: 2401:3480::/36 2401:3480:2000::/35 Signature Algorithm: sha256WithRSAEncryption 21:b6:17:2c:69:c7:79:8a:cd:e0:4b:f7:e5:b9:d8:9e:cc:f3: e6:00:89:a9:04:d4:2f:e2:70:20:3c:12:7e:0b:ae:62:ec:54: cc:84:5f:34:ca:4d:bc:9f:63:a3:02:97:41:70:98:0d:6a:f6: 6d:9c:cb:e2:86:f1:b4:04:18:33:60:d0:95:a3:17:3e:3b:d7: 59:03:dc:d3:6a:fb:93:ca:3a:31:30:1b:99:ab:23:11:95:9c: 15:04:46:00:af:31:cd:88:23:5c:45:4e:33:1a:5a:f9:3b:ba: 14:fc:3b:20:16:f7:8b:ac:df:2d:d6:9f:dd:2f:c1:3a:5f:7d: 62:c7:d9:ee:02:3c:f5:59:7e:3f:c6:27:8f:09:c3:1e:96:bd: 2b:67:3e:96:f1:0a:3c:13:4f:52:57:d6:57:81:9c:7e:9e:0b: db:32:9f:93:cc:5f:51:e9:cd:36:03:ab:96:af:1e:ad:1d:2a: 5d:22:db:6d:54:33:36:60:fe:07:11:85:19:13:08:83:24:0e: 66:3a:65:38:9e:62:07:41:df:16:2c:ea:c5:b8:97:e7:2c:ba: 04:44:d3:a2:12:b5:f0:17:8d:28:6d:bb:64:26:e4:5f:65:d5: 20:dc:b9:11:7e:5e:74:f8:fd:a4:4e:8f:22:dd:03:ab:b3:3b: c0:be:3e:ed -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUb+nzp0IL6QtYvt0HKnaz6CJtcRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjA1MTIwOTM1MTdaFw0yNzA1MTEwOTQwMTdaMDMxMTAvBgNV BAMTKDBENEJDMDU1MTg3QjUzMTJCRDRGMEVGNjE1MzhBQjJCNzVGQkU4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1ABvS6ezU52/6Gf0qgkXghwb z9bCm3pqKJ3nusEb+A+4THPmJJdLXaA/7F3w+X3US1tIaE9wNxr4nM2Xhs+5T6xv 6+6cG4HNww9ody+8yDgbYeG5BwxtB5glLohLOwZGy/jrz19TzQyJwn+vnsQMuYd0 K2CWlYYzd36PyH4NoJC+5jPso/2nnHseR0C0KutkluUG4+zO+KpLLC/gxwaAALh6 jz8ZgE0O3rBF/+PwhgE0yi5Fuwe475V/rEMq/203vH/nAlj59RJu+f4Mm4d+vaE2 r/QYlTFpislhuQfVcAFyO3XjgRtryApqPlij6an1cSKA20gqoca74YQEO/k1AgMB AAGjggIBMIIB/TAdBgNVHQ4EFgQUDUvAVRh7UxK9Tw72FTirK3X76CwwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC9BUzU5MDc3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIA ATAMAwQGakuAAwQEcR+gMBYEAgACMBADBgQkATSAAAMGBSQBNIAgMA0GCSqGSIb3 DQEBCwUAA4IBAQAhthcsacd5is3gS/fludiezPPmAImpBNQv4nAgPBJ+C65i7FTM hF80yk28n2OjApdBcJgNavZtnMvihvG0BBgzYNCVoxc+O9dZA9zTavuTyjoxMBuZ qyMRlZwVBEYArzHNiCNcRU4zGlr5O7oU/DsgFveLrN8t1p/dL8E6X31ix9nuAjz1 WX4/xiePCcMelr0rZz6W8Qo8E09SV9ZXgZx+ngvbMp+TzF9R6c02A6uWrx6tHSpd ItttVDM2YP4HEYUZEwiDJA5mOmU4nmIHQd8WLOrFuJfnLLoERNOiErXwF40obbtk JuRfZdUg3LkRfl50+P2kTo8i3QOrszvAvj7t -----END CERTIFICATE-----Generated at Wed May 13 14:09:32 2026 by rpki-client