$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS215305.roa File: AS215305.roa (raw, json) Hash identifier: 9cwXXccqo720AgeDYUAQDVNm0s7TmyXl88wvpjYJEEM= Subject key identifier: 65:D0:38:3C:72:3C:2C:3A:83:2C:98:EE:25:2C:2B:7C:49:DB:F9:66 Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976 Certificate serial: 34D93A31B2695512B08C5A0436F0548B90122B72 Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS215305.roa Signing time: Sun 01 Nov 2026 22:38:21 +0000 ROA not before: Sun 01 Nov 2026 22:33:21 +0000 ROA not after: Sun 31 Oct 2027 22:38:21 +0000 asID: 215305 IP address blocks: 103.112.68.0/23 maxlen: 24 103.112.70.0/23 maxlen: 24 103.118.208.0/22 maxlen: 24 103.118.208.0/23 maxlen: 24 103.118.210.0/23 maxlen: 24 103.118.210.0/24 maxlen: 24 103.118.211.0/24 maxlen: 24 103.119.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d9:3a:31:b2:69:55:12:b0:8c:5a:04:36:f0:54:8b:90:12:2b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976 Validity Not Before: Nov 1 22:33:21 2026 GMT Not After : Oct 31 22:38:21 2027 GMT Subject: CN=65D0383C723C2C3A832C98EE252C2B7C49DBF966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bb:3e:39:ed:c6:08:04:f2:14:6f:20:09:21: 70:ff:99:52:ae:c6:50:65:41:df:3f:6c:a5:79:f2: 5a:2d:74:c2:ae:86:86:1f:88:b8:81:35:7e:2e:d1: 2b:5a:85:9f:ba:41:78:42:8a:0d:4a:18:18:a8:1f: aa:36:ce:75:04:07:f1:f8:90:ad:ab:b0:1a:53:c0: 03:c3:17:29:e2:7a:0a:14:f3:4b:ef:95:05:4e:df: 2d:00:4a:c5:71:d1:1a:74:75:7f:58:0f:72:ad:71: ed:73:f6:d2:9f:0e:e5:86:8b:f6:ba:bb:86:02:cc: 5c:46:84:21:c9:48:5c:72:53:28:da:57:ad:f8:d7: fb:81:23:03:9d:2a:d5:cd:58:e8:e7:4c:09:34:e9: b9:34:cc:85:5a:f9:88:c0:3a:f0:9c:f6:86:38:ff: 64:ac:60:fd:cd:e2:55:d3:bd:56:9b:47:09:c0:67: 53:51:e6:3c:da:fd:d4:af:b9:92:09:19:cd:f0:d2: 8c:73:9b:11:3d:42:96:96:2e:dd:a9:e1:d2:bb:31: c7:5a:75:3d:01:b3:c3:a5:6a:ca:2a:93:33:3c:09: b9:e9:9e:98:c4:33:5e:8f:32:3a:bd:fa:29:93:8b: 62:7d:17:52:ec:94:81:0b:ab:b2:c9:65:8d:21:80: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D0:38:3C:72:3C:2C:3A:83:2C:98:EE:25:2C:2B:7C:49:DB:F9:66 X509v3 Authority Key Identifier: keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS215305.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.68.0/22 103.118.208.0/22 103.119.18.0/23 Signature Algorithm: sha256WithRSAEncryption 81:3f:31:83:cf:41:48:40:b1:d8:8f:a7:48:68:bc:bc:25:54: fa:3a:08:e6:7e:d1:cf:62:1b:b1:38:c3:29:98:9d:b4:aa:a9: c1:c7:bf:cd:c2:a0:03:cb:d7:7b:a9:4f:0b:40:45:c6:f8:6b: 5f:21:ac:56:42:cd:2f:c9:45:dd:bc:f7:c7:35:45:90:c9:39: 1a:76:fd:86:02:91:c1:8d:2e:b1:14:5b:ec:02:d9:0a:17:40: c4:36:bb:6d:ff:51:f5:b0:0f:5b:b0:dc:de:c4:19:48:d8:70: 99:a5:93:05:f6:1d:72:db:d5:03:18:57:3f:d6:7a:07:45:e2: 65:82:bb:39:ec:6d:ba:dc:cd:7a:a1:81:53:ff:f9:3b:cb:41: aa:44:14:2d:4d:fb:ed:1e:5e:70:0b:b5:5b:fb:6f:90:14:1d: 65:55:af:f7:57:6b:bd:7f:c2:d7:98:85:ce:20:e9:53:b7:9b: 70:55:0d:a4:b4:45:a0:b9:7a:88:a8:87:5c:e6:8c:f3:fc:45: 9e:d1:3e:99:e5:40:41:ca:31:bc:46:3b:6a:66:66:65:d4:f2: c3:0a:fe:e9:b5:8d:16:22:1d:48:63:f8:c6:ed:6c:81:b6:e3: cc:61:2e:f7:17:a5:c2:2e:16:0d:ed:be:c3:9f:80:37:99:58: 08:dd:ba:3f -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUNNk6MbJpVRKwjFoENvBUi5ASK3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw MUY5RDk3NjAeFw0yNjExMDEyMjMzMjFaFw0yNzEwMzEyMjM4MjFaMDMxMTAvBgNV BAMTKDY1RDAzODNDNzIzQzJDM0E4MzJDOThFRTI1MkMyQjdDNDlEQkY5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuz457cYIBPIUbyAJIXD/mVKu xlBlQd8/bKV58lotdMKuhoYfiLiBNX4u0StahZ+6QXhCig1KGBioH6o2znUEB/H4 kK2rsBpTwAPDFyniegoU80vvlQVO3y0ASsVx0Rp0dX9YD3Ktce1z9tKfDuWGi/a6 u4YCzFxGhCHJSFxyUyjaV6341/uBIwOdKtXNWOjnTAk06bk0zIVa+YjAOvCc9oY4 /2SsYP3N4lXTvVabRwnAZ1NR5jza/dSvuZIJGc3w0oxzmxE9QpaWLt2p4dK7Mcda dT0Bs8OlasoqkzM8CbnpnpjEM16PMjq9+imTi2J9F1LslIELq7LJZY0hgOH1AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUZdA4PHI8LDqDLJjuJSwrfEnb+WYwHwYDVR0j BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0 NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMC9BUzIxNTMwNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQC AAEwEgMEAmdwRAMEAmd20AMEAWd3EjANBgkqhkiG9w0BAQsFAAOCAQEAgT8xg89B SECx2I+nSGi8vCVU+joI5n7Rz2IbsTjDKZidtKqpwce/zcKgA8vXe6lPC0BFxvhr XyGsVkLNL8lF3bz3xzVFkMk5Gnb9hgKRwY0usRRb7ALZChdAxDa7bf9R9bAPW7Dc 3sQZSNhwmaWTBfYdctvVAxhXP9Z6B0XiZYK7OextutzNeqGBU//5O8tBqkQULU37 7R5ecAu1W/tvkBQdZVWv91drvX/C15iFziDpU7ebcFUNpLRFoLl6iKiHXOaM8/xF ntE+meVAQcoxvEY7amZmZdTywwr+6bWNFiIdSGP4xu1sgbbjzGEu9xelwi4WDe2+ w5+AN5lYCN26Pw== -----END CERTIFICATE-----Generated at Sun Nov 15 00:26:15 2026 by rpki-client