$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS63567.roa File: AS63567.roa (raw, json) Hash identifier: 3uz+p/aF6FyCjNl25DbP3+KxCjFc79nCAtWo76qvoGk= Subject key identifier: 94:61:B7:75:FA:15:AD:97:4D:79:08:59:16:AA:86:35:B0:85:9C:6D Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 574D48501B9FAD4E1DB08733A9D717CC7969A11B Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS63567.roa Signing time: Tue 14 Jul 2026 07:19:55 +0000 ROA not before: Tue 14 Jul 2026 07:14:55 +0000 ROA not after: Tue 13 Jul 2027 07:19:55 +0000 asID: 63567 IP address blocks: 43.248.184.0/21 maxlen: 24 103.40.12.0/22 maxlen: 22 103.45.160.0/22 maxlen: 24 103.205.252.0/22 maxlen: 24 103.239.244.0/22 maxlen: 24 111.223.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 15:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4d:48:50:1b:9f:ad:4e:1d:b0:87:33:a9:d7:17:cc:79:69:a1:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jul 14 07:14:55 2026 GMT Not After : Jul 13 07:19:55 2027 GMT Subject: CN=9461B775FA15AD974D79085916AA8635B0859C6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:f3:93:42:64:76:a8:f8:86:98:f6:39:3c: 12:23:5b:1b:58:64:92:ab:dc:e5:d1:88:58:fc:0a: e5:af:0d:f0:e0:c4:ac:fe:85:aa:5f:d1:70:d0:8e: 51:cb:1c:8a:78:ab:f9:8f:1c:6c:a0:fe:9d:55:11: f4:03:8d:07:b5:cf:28:02:cb:c2:81:f6:3c:16:ac: cb:dc:a3:e7:27:d2:8a:f8:20:08:f1:5e:a3:59:93: d9:76:20:70:ad:ce:5e:a1:fa:65:22:51:fd:4e:90: a9:73:33:11:c9:ba:47:f8:c9:df:50:2c:ef:63:e3: a4:66:84:1e:7a:57:df:4f:d3:96:f2:9d:23:12:2e: 0f:95:58:66:09:91:eb:f9:b8:b7:24:b7:92:e2:0f: ef:c4:c6:69:29:1f:24:29:03:b6:1b:2a:ff:20:4b: af:10:f6:ac:f3:15:94:64:1e:d0:d5:64:7a:4e:6f: f6:2f:dc:06:29:b0:6e:04:42:80:51:03:46:41:61: 59:7a:b8:84:2b:99:51:ee:9d:2b:f6:97:3b:6e:22: f5:f0:36:0d:d5:f1:7f:9a:2a:08:6a:7b:c9:0a:2b: 85:f4:56:b1:3a:9b:06:1d:5a:0c:5f:07:27:98:bd: b3:a8:97:96:06:7a:f5:04:1b:24:c7:f3:2a:7b:fc: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:61:B7:75:FA:15:AD:97:4D:79:08:59:16:AA:86:35:B0:85:9C:6D X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS63567.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 103.40.12.0/22 103.45.160.0/22 103.205.252.0/22 103.239.244.0/22 111.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:fc:d3:e6:5b:80:d0:62:04:d2:ac:bc:c9:76:9e:8c:cb:09: a3:48:94:29:fe:bb:3e:f7:a3:9d:73:f4:f0:1e:a8:21:1e:1b: 7d:a5:f1:b2:07:62:96:c4:43:9d:55:13:1a:92:bc:87:47:fe: bb:02:8c:31:c5:42:78:9e:ac:e5:bd:51:e5:b9:27:93:82:2b: 90:8a:fc:60:37:46:69:a7:a9:52:78:fc:1f:b7:0b:9f:be:e5: dd:63:5d:ef:b5:4b:0a:ab:14:9a:a5:a2:47:fb:e7:2d:34:6d: fb:8c:1b:a7:77:0d:5d:a3:eb:c2:88:c0:a4:f2:20:49:06:03: 17:71:d4:8d:ed:30:9b:91:41:a4:fd:fb:07:86:52:0d:b1:7b: 45:d0:78:c0:be:a9:c8:47:4d:82:e9:0f:c5:00:8b:01:87:78: 07:87:ee:18:5c:a3:5d:fe:41:cf:1c:6c:a0:29:40:b4:0c:e8: d9:00:29:91:96:1f:3f:fe:4b:eb:85:2e:1a:30:0a:20:50:ce: 8f:bc:b8:b2:33:ca:77:d6:73:a3:29:52:d2:d2:bf:d6:02:ca: 44:c2:5b:fc:3c:b7:33:c6:b9:bf:4c:b3:5c:b7:c8:85:57:69: 3d:2b:0a:2f:7c:d4:e9:43:a1:8c:d4:4e:22:26:d1:31:44:99: 60:b5:8a:e6 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUV01IUBufrU4dsIczqdcXzHlpoRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA3MTQwNzE0NTVaFw0yNzA3MTMwNzE5NTVaMDMxMTAvBgNV BAMTKDk0NjFCNzc1RkExNUFEOTc0RDc5MDg1OTE2QUE4NjM1QjA4NTlDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP9vOTQmR2qPiGmPY5PBIjWxtY ZJKr3OXRiFj8CuWvDfDgxKz+hapf0XDQjlHLHIp4q/mPHGyg/p1VEfQDjQe1zygC y8KB9jwWrMvco+cn0or4IAjxXqNZk9l2IHCtzl6h+mUiUf1OkKlzMxHJukf4yd9Q LO9j46RmhB56V99P05bynSMSLg+VWGYJkev5uLckt5LiD+/ExmkpHyQpA7YbKv8g S68Q9qzzFZRkHtDVZHpOb/Yv3AYpsG4EQoBRA0ZBYVl6uIQrmVHunSv2lztuIvXw Ng3V8X+aKghqe8kKK4X0VrE6mwYdWgxfByeYvbOol5YGevUEGyTH8yp7/J3bAgMB AAGjggIBMIIB/TAdBgNVHQ4EFgQUlGG3dfoVrZdNeQhZFqqGNbCFnG0wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzYzNTY3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIA ATAkAwQDK/i4AwQCZygMAwQCZy2gAwQCZ838AwQCZ+/0AwQCb98MMA0GCSqGSIb3 DQEBCwUAA4IBAQBN/NPmW4DQYgTSrLzJdp6MywmjSJQp/rs+96Odc/TwHqghHht9 pfGyB2KWxEOdVRMakryHR/67AowxxUJ4nqzlvVHluSeTgiuQivxgN0Zpp6lSePwf twufvuXdY13vtUsKqxSapaJH++ctNG37jBundw1do+vCiMCk8iBJBgMXcdSN7TCb kUGk/fsHhlINsXtF0HjAvqnIR02C6Q/FAIsBh3gHh+4YXKNd/kHPHGygKUC0DOjZ ACmRlh8//kvrhS4aMAogUM6PvLiyM8p31nOjKVLS0r/WAspEwlv8PLczxrm/TLNc t8iFV2k9KwovfNTpQ6GM1E4iJtExRJlgtYrm -----END CERTIFICATE-----Generated at Fri Jul 24 22:05:46 2026 by rpki-client