$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS58466.roa File: AS58466.roa (raw, json) Hash identifier: QmXTs+6ArY3egF+Oe3hkU3ktzfsHy7YvXqrZ83YNeaw= Subject key identifier: CF:CE:6E:F9:AE:C9:01:67:CD:A3:D7:21:5C:4A:89:50:1A:5C:EB:52 Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Certificate serial: 46FEE46CBA27B3B123DDCCB12F1CF1E51AA20D9A Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS58466.roa Signing time: Mon 11 May 2026 04:34:34 +0000 ROA not before: Mon 11 May 2026 04:29:34 +0000 ROA not after: Mon 10 May 2027 04:34:34 +0000 asID: 58466 IP address blocks: 110.43.32.0/21 maxlen: 21 110.43.40.0/21 maxlen: 21 110.43.48.0/21 maxlen: 21 110.43.56.0/21 maxlen: 21 110.43.240.0/21 maxlen: 21 110.43.248.0/21 maxlen: 21 2401:1d40:3000::/48 maxlen: 48 2401:1d40:3100::/48 maxlen: 48 2401:1d40:3101::/48 maxlen: 48 2401:1d40:3e00::/48 maxlen: 48 2401:1d40:3f00::/48 maxlen: 48 2401:1d40:3f02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:fe:e4:6c:ba:27:b3:b1:23:dd:cc:b1:2f:1c:f1:e5:1a:a2:0d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Validity Not Before: May 11 04:29:34 2026 GMT Not After : May 10 04:34:34 2027 GMT Subject: CN=CFCE6EF9AEC90167CDA3D7215C4A89501A5CEB52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:65:72:30:1a:a2:d7:1b:08:71:1b:8f:c8:c6: f3:b3:b3:88:b9:40:f4:a7:e9:45:89:8f:de:08:40: 45:28:dc:93:6b:f1:b9:20:f4:76:dd:14:70:58:16: 79:ee:87:cb:ad:a0:4b:5a:bf:8f:e1:2d:77:1b:f2: 0c:23:ee:8d:cb:82:c2:9d:8a:16:5c:3f:95:59:76: 5c:59:55:27:70:67:73:c2:60:ca:c8:92:15:09:df: 1b:8b:8e:f4:75:93:4e:24:66:9a:e1:54:9d:8a:76: e9:43:94:1a:3a:17:3d:7c:91:be:90:eb:97:53:1c: 75:73:51:46:bf:75:02:df:37:ac:67:ce:d3:54:42: eb:d5:5b:99:01:68:0b:4e:b4:88:83:da:fe:ee:54: 02:c7:dd:fc:27:cc:d6:77:68:36:4b:0d:b6:dc:87: c9:7f:b0:8e:6a:1e:6d:af:ed:3d:c9:16:4c:e7:45: d2:31:75:19:de:54:67:91:79:d2:7b:63:b3:f2:ae: a8:26:4e:4b:f1:57:9b:5b:c6:32:49:d6:ca:cb:ff: 97:d8:bb:61:68:69:61:67:3e:86:b3:7f:73:93:de: ec:ab:c3:d2:5d:b6:a4:a1:83:d0:eb:02:af:a5:6f: 4f:af:67:8b:36:e9:5f:48:8c:65:2d:9f:a2:e2:ca: e1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CE:6E:F9:AE:C9:01:67:CD:A3:D7:21:5C:4A:89:50:1A:5C:EB:52 X509v3 Authority Key Identifier: keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS58466.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.43.32.0/19 110.43.240.0/20 IPv6: 2401:1d40:3000::/48 2401:1d40:3100::/47 2401:1d40:3e00::/48 2401:1d40:3f00::/48 2401:1d40:3f02::/48 Signature Algorithm: sha256WithRSAEncryption 35:1b:a4:6a:87:eb:7d:a7:3f:c8:7a:ed:0b:ce:3e:4b:0a:e8: 66:c1:e8:7a:3a:7f:dd:be:89:ac:15:16:00:f2:66:f9:a7:ea: b2:b8:df:3f:58:b1:55:6b:f2:8d:35:c6:d9:61:6d:9b:0c:74: 43:1a:cb:04:06:e6:ea:72:af:8d:89:53:b4:a9:82:e6:9c:c7: f8:3c:d8:b6:42:8d:1a:2a:bd:05:d5:97:1f:ce:a5:c4:c2:cd: 98:1e:dd:32:52:11:ea:02:96:07:5a:00:dd:33:d4:32:33:c2: 86:56:02:2b:cd:2b:b0:25:e0:5d:e8:c7:f4:dc:69:ab:71:67: 64:cb:48:9d:1c:ae:d3:25:7b:4d:5a:b0:10:33:28:ab:ea:99: 05:97:19:fc:0c:50:d3:1c:3a:6b:37:9d:29:50:3c:ce:3f:12: 08:c0:7c:4f:66:06:23:8e:58:e4:46:3b:90:4d:38:51:94:67: 24:16:b1:5b:08:9f:27:02:27:26:3a:95:6a:ee:8e:51:6d:d2: 3e:70:1f:59:6c:74:49:e9:f8:a6:56:9d:71:4d:ca:bb:fa:1a: e1:93:78:c0:b3:cc:01:b2:a3:21:fb:8c:55:3b:64:5f:a9:ff: 3b:86:e2:f8:7e:ca:53:f7:e3:06:51:9b:11:26:de:4a:68:65: b5:69:8e:88 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIURv7kbLons7Ej3cyxLxzx5RqiDZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIz QkMwRDg4NjAeFw0yNjA1MTEwNDI5MzRaFw0yNzA1MTAwNDM0MzRaMDMxMTAvBgNV BAMTKENGQ0U2RUY5QUVDOTAxNjdDREEzRDcyMTVDNEE4OTUwMUE1Q0VCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZXIwGqLXGwhxG4/IxvOzs4i5 QPSn6UWJj94IQEUo3JNr8bkg9HbdFHBYFnnuh8utoEtav4/hLXcb8gwj7o3LgsKd ihZcP5VZdlxZVSdwZ3PCYMrIkhUJ3xuLjvR1k04kZprhVJ2KdulDlBo6Fz18kb6Q 65dTHHVzUUa/dQLfN6xnztNUQuvVW5kBaAtOtIiD2v7uVALH3fwnzNZ3aDZLDbbc h8l/sI5qHm2v7T3JFkznRdIxdRneVGeRedJ7Y7PyrqgmTkvxV5tbxjJJ1srL/5fY u2FoaWFnPoazf3OT3uyrw9JdtqShg9DrAq+lb0+vZ4s26V9IjGUtn6LiyuH3AgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUz85u+a7JAWfNo9chXEqJUBpc61IwHwYDVR0j BBgwFoAUqe9r3oSosRXIByGygMlHCzvA2IYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NDMyNDIyOTMxNjYxNy8wL0E5RUY2QkRFODRBOEIxMTVDODA3MjFCMjgwQzk0 NzBCM0JDMEQ4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIzQkMwRDg4Ni5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDQzMjQyMjkzMTY2MTcvMC9BUzU4NDY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTASBAIA ATAMAwQFbisgAwQEbivwMDMEAgACMC0DBwAkAR1AMAADBwEkAR1AMQADBwAkAR1A PgADBwAkAR1APwADBwAkAR1APwIwDQYJKoZIhvcNAQELBQADggEBADUbpGqH632n P8h67QvOPksK6GbB6Ho6f92+iawVFgDyZvmn6rK43z9YsVVr8o01xtlhbZsMdEMa ywQG5upyr42JU7Spguacx/g82LZCjRoqvQXVlx/OpcTCzZge3TJSEeoClgdaAN0z 1DIzwoZWAivNK7Al4F3ox/TcaatxZ2TLSJ0crtMle01asBAzKKvqmQWXGfwMUNMc Oms3nSlQPM4/EgjAfE9mBiOOWORGO5BNOFGUZyQWsVsInycCJyY6lWrujlFt0j5w H1lsdEnp+KZWnXFNyrv6GuGTeMCzzAGyoyH7jFU7ZF+p/zuG4vh+ylP34wZRmxEm 3kpoZbVpjog= -----END CERTIFICATE-----Generated at Wed May 13 06:04:52 2026 by rpki-client