$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS58542.roa File: AS58542.roa (raw, json) Hash identifier: J5Jcw57t0As4+MZtG/5d726BK8UvIeigJhCBJ9Le3tw= Subject key identifier: 27:6B:73:59:65:7B:81:57:B7:4F:97:2B:0D:64:36:D8:8C:B2:C3:BC Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Certificate serial: 12F8DCB45656061364BF77E04DA5365F11C660F8 Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS58542.roa Signing time: Fri 08 May 2026 09:19:11 +0000 ROA not before: Fri 08 May 2026 09:14:11 +0000 ROA not after: Fri 07 May 2027 09:19:11 +0000 asID: 58542 IP address blocks: 110.43.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f8:dc:b4:56:56:06:13:64:bf:77:e0:4d:a5:36:5f:11:c6:60:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Validity Not Before: May 8 09:14:11 2026 GMT Not After : May 7 09:19:11 2027 GMT Subject: CN=276B7359657B8157B74F972B0D6436D88CB2C3BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d0:bb:e3:98:87:6b:a9:f0:ee:7e:16:4d:07: be:ff:4a:7f:c2:87:41:eb:12:89:8c:08:e1:d4:fb: 73:6e:e6:2c:6c:a9:0d:0f:1a:58:e6:a1:c8:ef:76: b1:eb:67:0a:e6:24:fb:2e:a9:b8:3a:fd:a1:c8:c3: d9:61:3d:b8:57:28:63:9e:7b:17:68:ba:51:9a:14: f6:dc:07:b6:e0:e0:1d:64:0a:40:e5:e3:e9:60:2c: 26:d7:6d:57:67:07:a4:77:ee:7a:c3:91:a7:33:ac: e6:0a:ff:4e:c8:7c:e5:de:43:52:bd:6f:04:4d:09: a3:da:8f:c6:d3:ad:37:ad:29:1a:bb:d5:f2:10:54: bf:5c:6d:bc:45:23:f9:75:29:2a:15:a3:f7:65:47: 7b:82:20:c4:0e:12:78:3e:2d:b6:12:16:fc:30:59: fb:2d:ec:4e:5c:4a:a5:3a:66:bb:c7:6a:82:08:7a: c0:a1:46:13:78:9f:f4:e1:01:92:a6:dd:b1:ad:7f: 39:5e:41:0f:de:9f:b8:0a:4c:2e:7a:45:46:3e:87: 03:34:64:cb:9d:f1:a7:0d:bc:77:bf:57:95:58:1f: cf:c2:d2:40:d0:98:58:aa:30:9c:a7:8a:3a:af:18: f4:66:9b:af:aa:d9:08:90:18:a9:a9:ad:33:44:39: 02:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6B:73:59:65:7B:81:57:B7:4F:97:2B:0D:64:36:D8:8C:B2:C3:BC X509v3 Authority Key Identifier: keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/AS58542.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.43.120.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:65:8b:b7:da:1e:a9:6b:3a:62:1c:d3:96:92:ba:a6:4b:29: 00:8c:fe:8f:3f:f2:ff:97:b0:67:d0:fc:c9:3f:4f:dd:e4:82: 26:e6:a0:2c:0e:f5:f8:bb:15:e4:f7:57:7e:ec:76:1e:2e:1b: 97:ce:ac:65:bf:64:9d:09:fd:8d:c3:92:7b:34:bb:76:31:ec: 7f:5c:30:61:9b:f6:d0:9d:c1:44:63:65:05:c0:74:fa:0c:4f: e9:7f:18:c2:4f:2e:90:11:45:86:58:8e:63:c5:71:9f:bf:ff: db:99:04:11:73:4c:e5:09:93:85:cd:a4:28:da:e3:e5:4c:c5: 52:a2:02:50:f5:0c:6a:06:cb:e6:3a:7b:ef:4a:ab:f8:e6:19: 48:b6:76:a8:33:9a:1a:51:79:1d:05:2f:61:26:9d:1b:37:1f: b6:e9:38:2a:22:24:b4:63:ce:29:94:bc:2c:37:4a:ca:04:47: 8a:e9:a7:04:b0:8c:76:6a:18:ae:cf:49:29:53:8e:e5:65:06: 7e:f2:b2:78:63:45:1d:3f:37:4e:a8:1f:90:33:bf:7e:2f:89: 08:08:91:d9:19:7a:26:8f:7a:13:f0:cb:47:da:30:70:ce:ff: 0d:29:ea:8a:dc:73:18:7d:39:58:23:fe:01:1d:6b:d5:7c:8d: 3b:5a:5c:18 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEvjctFZWBhNkv3fgTaU2XxHGYPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIz QkMwRDg4NjAeFw0yNjA1MDgwOTE0MTFaFw0yNzA1MDcwOTE5MTFaMDMxMTAvBgNV BAMTKDI3NkI3MzU5NjU3QjgxNTdCNzRGOTcyQjBENjQzNkQ4OENCMkMzQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0LvjmIdrqfDufhZNB77/Sn/C h0HrEomMCOHU+3Nu5ixsqQ0PGljmocjvdrHrZwrmJPsuqbg6/aHIw9lhPbhXKGOe exdoulGaFPbcB7bg4B1kCkDl4+lgLCbXbVdnB6R37nrDkaczrOYK/07IfOXeQ1K9 bwRNCaPaj8bTrTetKRq71fIQVL9cbbxFI/l1KSoVo/dlR3uCIMQOEng+LbYSFvww Wfst7E5cSqU6ZrvHaoIIesChRhN4n/ThAZKm3bGtfzleQQ/en7gKTC56RUY+hwM0 ZMud8acNvHe/V5VYH8/C0kDQmFiqMJynijqvGPRmm6+q2QiQGKmprTNEOQIDAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUJ2tzWWV7gVe3T5crDWQ22Iyyw7wwHwYDVR0j BBgwFoAUqe9r3oSosRXIByGygMlHCzvA2IYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NDMyNDIyOTMxNjYxNy8wL0E5RUY2QkRFODRBOEIxMTVDODA3MjFCMjgwQzk0 NzBCM0JDMEQ4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIzQkMwRDg4Ni5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDQzMjQyMjkzMTY2MTcvMC9BUzU4NTQyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCbit4MA0GCSqGSIb3DQEBCwUAA4IBAQAfZYu32h6pazpiHNOWkrqmSykA jP6PP/L/l7Bn0PzJP0/d5IIm5qAsDvX4uxXk91d+7HYeLhuXzqxlv2SdCf2Nw5J7 NLt2Mex/XDBhm/bQncFEY2UFwHT6DE/pfxjCTy6QEUWGWI5jxXGfv//bmQQRc0zl CZOFzaQo2uPlTMVSogJQ9QxqBsvmOnvvSqv45hlItnaoM5oaUXkdBS9hJp0bNx+2 6TgqIiS0Y84plLwsN0rKBEeK6acEsIx2ahiuz0kpU47lZQZ+8rJ4Y0UdPzdOqB+Q M79+L4kICJHZGXomj3oT8MtH2jBwzv8NKeqK3HMYfTlYI/4BHWvVfI07WlwY -----END CERTIFICATE-----Generated at Wed May 13 03:49:07 2026 by rpki-client