$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS58539.roa File: AS58539.roa (raw, json) Hash identifier: 5b56r+15342aRmOBeN/+dRPYsRzKMNQt0YSbhErfaMk= Subject key identifier: 47:A5:82:15:93:80:9A:D1:5C:9C:6E:2F:D4:00:CF:84:8B:00:E9:87 Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 278D3B7A6B289E85E94A6D2E2C0BB2B8C6B3993D Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS58539.roa Signing time: Wed 01 Jul 2026 13:08:38 +0000 ROA not before: Wed 01 Jul 2026 13:03:38 +0000 ROA not after: Wed 30 Jun 2027 13:08:38 +0000 asID: 58539 IP address blocks: 180.184.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8d:3b:7a:6b:28:9e:85:e9:4a:6d:2e:2c:0b:b2:b8:c6:b3:99:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Jul 1 13:03:38 2026 GMT Not After : Jun 30 13:08:38 2027 GMT Subject: CN=47A5821593809AD15C9C6E2FD400CF848B00E987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a4:5a:f1:08:a4:ec:0b:55:63:d9:32:da:4c: ff:3b:63:ad:30:d5:2c:1a:b3:f1:c5:2e:18:86:75: 6d:bd:9b:ea:d1:8a:ea:8f:bf:84:c8:f1:d9:47:28: c1:51:b9:43:e5:8c:26:4e:e6:ca:75:11:65:7b:08: 2d:2f:9f:cd:bd:c3:72:49:ba:15:eb:ad:88:92:01: 53:f5:c9:88:4f:da:fd:bb:87:32:fb:32:94:ff:fd: 1c:35:d5:45:07:b7:41:10:69:73:4c:9e:ab:f6:61: d0:88:12:78:72:58:6d:6b:e6:03:c6:6a:9c:1a:04: 31:c1:c1:15:ab:d3:f9:1f:3e:c0:33:6e:ce:c0:64: f9:a5:c5:dc:c1:1e:da:b0:82:9a:91:bd:de:f5:75: 54:ae:bf:c8:dd:14:10:ac:96:4f:2f:b7:d4:ee:3d: 00:1b:fe:23:8f:d8:fa:da:fe:f7:8a:db:b6:0f:79: a0:f5:cd:57:e7:f8:f5:4f:d6:c6:27:d9:2e:6c:68: 95:0c:d4:b5:f8:27:47:f1:d0:03:e6:74:27:5b:07: 04:00:87:7d:7e:f1:ef:a7:ae:43:b2:22:e7:2c:07: 28:fa:a1:7f:1d:a6:79:14:e3:36:42:70:34:67:5a: f8:1c:9a:62:00:94:2a:10:91:2a:09:25:de:0d:1a: cc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A5:82:15:93:80:9A:D1:5C:9C:6E:2F:D4:00:CF:84:8B:00:E9:87 X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS58539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.184.8.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:a6:12:82:04:ff:d3:2a:51:61:3a:1b:f1:0a:c0:be:e9:09: b4:bb:a5:2c:62:db:c6:72:b9:00:97:b5:1d:50:bb:11:0e:7e: a3:b0:cb:d3:98:ee:4b:ac:96:59:13:77:42:dc:b9:cf:8f:0f: d0:f3:b5:c6:01:cb:99:24:04:db:75:36:60:e0:61:c4:3d:55: 14:82:f4:98:b2:24:5c:77:2d:36:07:ce:d5:b6:ab:d0:f4:26: 86:75:41:e5:e6:b9:ef:2d:92:d1:6f:d0:a5:2b:ca:01:2f:0f: 8e:a7:06:59:bc:4a:71:8c:20:41:3b:ad:11:eb:82:b6:99:8d: 23:ef:e7:8f:e2:c3:85:9d:b3:9d:51:ea:64:3f:e8:ab:4b:ef: 45:c0:8b:52:07:5b:36:2d:fb:93:67:52:71:d4:e1:e3:75:22: 4f:a7:cf:43:7c:2f:01:ea:db:41:e2:51:a9:6d:2c:a7:ca:22: eb:da:e1:1c:a5:a0:30:86:44:dd:81:a9:6f:25:38:d7:bc:4e: 23:68:0e:b5:18:4a:cd:83:3d:ac:43:aa:e0:f4:96:3f:73:d2: 46:7f:7e:e6:1c:53:d4:16:1a:d8:07:30:73:60:5c:2f:af:23: ce:39:66:bd:2b:c0:21:f4:68:0c:c6:6a:ec:7c:1c:27:c9:9c: 89:71:b1:65 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUJ407emsonoXpSm0uLAuyuMazmT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjA3MDExMzAzMzhaFw0yNzA2MzAxMzA4MzhaMDMxMTAvBgNV BAMTKDQ3QTU4MjE1OTM4MDlBRDE1QzlDNkUyRkQ0MDBDRjg0OEIwMEU5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpFrxCKTsC1Vj2TLaTP87Y60w 1Swas/HFLhiGdW29m+rRiuqPv4TI8dlHKMFRuUPljCZO5sp1EWV7CC0vn829w3JJ uhXrrYiSAVP1yYhP2v27hzL7MpT//Rw11UUHt0EQaXNMnqv2YdCIEnhyWG1r5gPG apwaBDHBwRWr0/kfPsAzbs7AZPmlxdzBHtqwgpqRvd71dVSuv8jdFBCslk8vt9Tu PQAb/iOP2Pra/veK27YPeaD1zVfn+PVP1sYn2S5saJUM1LX4J0fx0APmdCdbBwQA h31+8e+nrkOyIucsByj6oX8dpnkU4zZCcDRnWvgcmmIAlCoQkSoJJd4NGsw9AgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUR6WCFZOAmtFcnG4v1ADPhIsA6YcwHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2OTE2NTAvMC9BUzU4NTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBtLgIMA0GCSqGSIb3DQEBCwUAA4IBAQCKphKCBP/TKlFhOhvxCsC+6Qm0 u6UsYtvGcrkAl7UdULsRDn6jsMvTmO5LrJZZE3dC3LnPjw/Q87XGAcuZJATbdTZg 4GHEPVUUgvSYsiRcdy02B87VtqvQ9CaGdUHl5rnvLZLRb9ClK8oBLw+OpwZZvEpx jCBBO60R64K2mY0j7+eP4sOFnbOdUepkP+irS+9FwItSB1s2LfuTZ1Jx1OHjdSJP p89DfC8B6ttB4lGpbSynyiLr2uEcpaAwhkTdgalvJTjXvE4jaA61GErNgz2sQ6rg 9JY/c9JGf37mHFPUFhrYBzBzYFwvryPOOWa9K8Ah9GgMxmrsfBwnyZyJcbFl -----END CERTIFICATE-----Generated at Fri Jul 24 17:48:08 2026 by rpki-client