$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS59025.roa File: AS59025.roa (raw, json) Hash identifier: oXf1UUbZGwAFilKrJxMzTxj1rJkc7AyWgEHt2B25Sl0= Subject key identifier: 29:ED:F0:3D:28:60:11:59:75:D8:A0:77:84:18:7D:E8:3B:4D:D6:BF Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 261931571DDF7631E2BBC7BEF0476852C1373DF7 Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS59025.roa Signing time: Mon 29 Jun 2026 15:02:35 +0000 ROA not before: Mon 29 Jun 2026 14:57:35 +0000 ROA not after: Mon 28 Jun 2027 15:02:35 +0000 asID: 59025 IP address blocks: 43.241.208.0/21 maxlen: 21 43.241.216.0/21 maxlen: 21 43.241.224.0/21 maxlen: 21 43.241.232.0/21 maxlen: 21 101.236.0.0/21 maxlen: 21 101.236.8.0/21 maxlen: 21 101.236.16.0/21 maxlen: 21 101.236.24.0/21 maxlen: 21 101.236.32.0/21 maxlen: 21 101.236.40.0/21 maxlen: 21 101.236.48.0/21 maxlen: 21 101.236.56.0/21 maxlen: 21 101.236.64.0/21 maxlen: 21 101.236.72.0/21 maxlen: 21 101.236.80.0/21 maxlen: 21 101.236.88.0/21 maxlen: 21 101.236.96.0/21 maxlen: 21 101.236.104.0/21 maxlen: 21 101.236.112.0/21 maxlen: 21 101.236.120.0/21 maxlen: 21 101.236.128.0/21 maxlen: 21 101.236.136.0/21 maxlen: 21 101.236.144.0/21 maxlen: 21 101.236.152.0/21 maxlen: 21 101.236.160.0/21 maxlen: 21 101.236.168.0/21 maxlen: 21 101.236.176.0/21 maxlen: 21 101.236.184.0/21 maxlen: 21 101.236.192.0/21 maxlen: 21 101.236.200.0/21 maxlen: 21 101.236.208.0/21 maxlen: 21 101.236.216.0/21 maxlen: 21 101.236.224.0/21 maxlen: 21 101.236.232.0/21 maxlen: 21 101.236.240.0/21 maxlen: 21 101.236.248.0/21 maxlen: 21 103.37.136.0/21 maxlen: 21 103.37.144.0/21 maxlen: 21 103.37.152.0/21 maxlen: 21 103.37.160.0/21 maxlen: 21 2405:1480:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:19:31:57:1d:df:76:31:e2:bb:c7:be:f0:47:68:52:c1:37:3d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Jun 29 14:57:35 2026 GMT Not After : Jun 28 15:02:35 2027 GMT Subject: CN=29EDF03D2860115975D8A07784187DE83B4DD6BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cc:66:85:c9:66:bf:d0:45:ba:b4:62:ee:ff: 83:12:39:81:fa:1b:be:07:a0:3c:ce:f4:05:b6:9f: fd:95:37:eb:00:8b:f5:c1:aa:df:ca:d3:5b:14:de: e8:5a:7f:e9:07:14:64:a3:7f:e1:32:be:2a:64:22: 29:33:53:1b:f8:83:e1:0f:36:bf:15:c8:48:47:ea: bf:d2:f2:0d:47:84:9c:fc:28:36:c6:fe:9d:ec:36: e5:9c:f6:61:f5:58:30:36:53:73:59:54:f6:d2:23: 29:4b:c3:16:aa:d1:5b:32:b8:f5:78:7e:1b:c5:ac: ab:08:b5:10:17:19:fb:05:81:49:b9:61:12:7c:f1: 0c:b1:8a:10:b3:be:fd:f7:4e:55:8d:c3:23:e5:df: cb:81:92:27:6b:b8:a2:b1:54:b3:ba:21:c8:4e:79: c6:dc:42:89:5f:4e:61:5e:0f:82:93:cc:cf:ce:68: 8c:13:eb:e8:a6:af:2b:c4:f4:e9:5b:c1:1a:2f:f0: 1e:b0:45:59:c0:16:c5:4b:a4:40:a5:60:af:e6:7e: c7:2e:71:c3:70:e4:76:0d:03:3c:5f:a3:d6:b3:61: 7f:c9:b0:4a:53:e1:ac:2f:f5:d3:9d:8b:5f:81:ef: 9d:76:c4:b4:12:5b:aa:50:d8:b8:1f:c3:f2:41:bf: 54:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:ED:F0:3D:28:60:11:59:75:D8:A0:77:84:18:7D:E8:3B:4D:D6:BF X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS59025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.208.0-43.241.239.255 101.236.0.0/16 103.37.136.0-103.37.167.255 IPv6: 2405:1480:2000::/48 Signature Algorithm: sha256WithRSAEncryption 56:a1:1b:e2:a2:9a:38:b0:b3:33:40:e2:71:04:a0:94:7b:81: 87:35:cc:b1:de:80:e1:22:a8:93:0c:c6:b5:3e:a9:54:b3:1f: 90:37:8c:d5:c8:36:c7:e0:2f:a0:8d:80:7f:85:c4:ba:77:37: 53:aa:af:84:f4:14:b2:22:b3:4c:a5:ec:aa:28:53:71:96:ae: 56:c6:08:0c:5b:c3:dc:20:d1:46:90:08:d6:54:ee:e7:b7:dc: fc:47:fd:22:03:c5:f3:e6:6e:33:d8:d8:e1:55:8a:1a:4f:37: 21:99:f6:7d:b6:46:87:8a:3b:15:9f:64:a0:4e:24:eb:7c:6c: a8:5c:74:60:36:bb:50:9f:1f:1a:ce:49:47:87:7b:23:12:7d: 82:42:7a:b2:49:a6:8a:ea:3b:0a:80:54:c4:a2:97:6f:a9:78: 2d:c3:1e:13:56:58:82:3d:38:ee:89:65:c3:b7:1d:c8:e7:4d: 55:9a:38:a1:d7:46:c9:78:c7:4e:f8:43:20:db:0f:c5:5d:2e: 37:b3:c7:7f:81:e5:4c:dc:fc:45:22:53:c3:2f:8f:21:a0:31: c7:cd:e0:1c:a8:07:e0:52:42:16:ce:87:64:0e:f3:2c:0d:64: f6:73:ba:16:e6:39:b0:24:df:09:e4:0d:cb:b8:8b:21:12:8c: 62:c6:19:3d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUJhkxVx3fdjHiu8e+8EdoUsE3PfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA2MjkxNDU3MzVaFw0yNzA2MjgxNTAyMzVaMDMxMTAvBgNV BAMTKDI5RURGMDNEMjg2MDExNTk3NUQ4QTA3Nzg0MTg3REU4M0I0REQ2QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjzGaFyWa/0EW6tGLu/4MSOYH6 G74HoDzO9AW2n/2VN+sAi/XBqt/K01sU3uhaf+kHFGSjf+EyvipkIikzUxv4g+EP Nr8VyEhH6r/S8g1HhJz8KDbG/p3sNuWc9mH1WDA2U3NZVPbSIylLwxaq0VsyuPV4 fhvFrKsItRAXGfsFgUm5YRJ88QyxihCzvv33TlWNwyPl38uBkidruKKxVLO6IchO ecbcQolfTmFeD4KTzM/OaIwT6+imryvE9OlbwRov8B6wRVnAFsVLpEClYK/mfscu ccNw5HYNAzxfo9azYX/JsEpT4awv9dOdi1+B7512xLQSW6pQ2Lgfw/JBv1RhAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUKe3wPShgEVl12KB3hBh96DtN1r8wHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTc0NzI2NTMxNDIxOTYyNTEvMC9BUzU5MDI1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAnBAIA ATAhMAwDBAQr8dADBAQr8eADAwBl7DAMAwQDZyWIAwQDZyWgMA8EAgACMAkDBwAk BRSAIAAwDQYJKoZIhvcNAQELBQADggEBAFahG+KimjiwszNA4nEEoJR7gYc1zLHe gOEiqJMMxrU+qVSzH5A3jNXINsfgL6CNgH+FxLp3N1Oqr4T0FLIis0yl7KooU3GW rlbGCAxbw9wg0UaQCNZU7ue33PxH/SIDxfPmbjPY2OFVihpPNyGZ9n22RoeKOxWf ZKBOJOt8bKhcdGA2u1CfHxrOSUeHeyMSfYJCerJJporqOwqAVMSil2+peC3DHhNW WII9OO6JZcO3HcjnTVWaOKHXRsl4x074QyDbD8VdLjezx3+B5Uzc/EUiU8MvjyGg McfN4ByoB+BSQhbOh2QO8ywNZPZzuhbmObAk3wnkDcu4iyESjGLGGT0= -----END CERTIFICATE-----Generated at Fri Jul 24 05:30:24 2026 by rpki-client