$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS7468.roa File: AS7468.roa (raw, json) Hash identifier: nvXpZNQkaFVm6T+OQxdbg4nCJvEDEryr5X9TTzaMrDw= Subject key identifier: 9F:74:A0:1A:1F:D8:89:FE:B5:D1:47:EA:5B:FA:E9:E1:C8:13:75:D1 Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Certificate serial: 2FCED62D5ED71EA15520FB66C774152332187D0A Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS7468.roa Signing time: Fri 17 Apr 2026 01:56:33 +0000 ROA not before: Fri 17 Apr 2026 01:51:33 +0000 ROA not after: Fri 16 Apr 2027 01:56:33 +0000 asID: 7468 IP address blocks: 222.126.138.0/24 maxlen: 24 222.126.156.0/23 maxlen: 23 222.126.166.0/23 maxlen: 23 222.126.174.0/23 maxlen: 23 222.126.174.0/24 maxlen: 24 222.126.178.0/23 maxlen: 23 222.126.180.0/23 maxlen: 23 222.126.182.0/23 maxlen: 23 222.126.182.0/24 maxlen: 24 222.126.183.0/24 maxlen: 24 222.126.184.0/23 maxlen: 23 222.126.214.0/23 maxlen: 23 222.126.240.0/23 maxlen: 23 222.126.241.0/24 maxlen: 24 222.126.242.0/23 maxlen: 23 222.126.244.0/23 maxlen: 23 222.126.244.0/24 maxlen: 24 2401:2a00::/32 maxlen: 48 2401:2a00:1001::/48 maxlen: 48 2401:2a00:1002::/48 maxlen: 48 2401:2a00:1003::/48 maxlen: 48 2401:2a00:2001::/48 maxlen: 48 2401:2a00:2002::/48 maxlen: 48 2401:2a00:2003::/48 maxlen: 48 2401:2a00:3000::/48 maxlen: 48 2401:2a00:3001::/48 maxlen: 48 2401:2a00:3002::/48 maxlen: 48 2401:2a00:3003::/48 maxlen: 48 2401:2a00:f000::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 02:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ce:d6:2d:5e:d7:1e:a1:55:20:fb:66:c7:74:15:23:32:18:7d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Validity Not Before: Apr 17 01:51:33 2026 GMT Not After : Apr 16 01:56:33 2027 GMT Subject: CN=9F74A01A1FD889FEB5D147EA5BFAE9E1C81375D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:92:81:6e:75:d0:d1:32:e3:0b:58:12:ee: f6:75:a2:a8:35:2f:30:05:23:d6:34:fd:d8:bd:95: 22:83:64:5d:c6:d1:58:eb:ad:30:91:3b:ca:e5:f0: 22:df:2d:fa:c2:7d:dc:56:db:31:12:6d:4f:ea:24: 06:59:8a:e8:24:24:10:cf:5d:50:8f:46:1c:f5:33: ea:8a:82:73:71:46:e3:8c:a8:ce:1d:33:e9:b3:a1: 1b:5d:c6:9b:c9:28:b6:69:c7:c0:6a:b5:76:77:60: de:67:d5:c7:f9:a3:53:8e:5a:ed:ba:e8:d2:41:6a: a0:9a:e3:a1:42:b6:c7:a2:5b:2a:91:0b:b5:d6:b9: 51:72:02:39:51:7f:55:68:d2:4e:75:c8:14:72:42: ff:32:91:b6:f6:d4:df:f7:ed:e7:62:2e:5d:f2:e0: f8:09:48:54:e4:e5:7c:ab:08:7c:15:9b:85:c1:f7: 2a:5d:d8:1b:31:28:35:88:3a:da:ba:d2:f6:86:5e: 14:ea:91:f6:4d:a6:b8:96:97:10:17:b9:12:d3:7a: 45:78:14:9b:c7:1a:53:72:42:cc:12:5c:e4:00:bc: 76:ca:eb:88:25:c3:f3:66:46:ce:22:81:bd:1c:78: c4:f0:31:0c:da:ff:52:e5:5c:9e:cb:68:6a:22:7d: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:74:A0:1A:1F:D8:89:FE:B5:D1:47:EA:5B:FA:E9:E1:C8:13:75:D1 X509v3 Authority Key Identifier: keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS7468.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 222.126.138.0/24 222.126.156.0/23 222.126.166.0/23 222.126.174.0/23 222.126.178.0-222.126.185.255 222.126.214.0/23 222.126.240.0-222.126.245.255 IPv6: 2401:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 02:db:3e:d3:e9:3a:25:ba:92:3a:6e:28:af:05:b4:48:0c:83: b2:6c:b5:ba:47:a9:c6:be:f1:d6:2b:0e:80:e5:9e:45:d4:4b: 9e:f2:44:83:69:39:7b:52:67:e7:1f:d7:5b:cb:8f:95:84:74: 81:3e:83:4e:93:78:e4:8a:31:0c:71:8e:f1:3f:02:3c:28:f4: 98:3c:2a:0a:af:7a:fa:7a:9a:ba:15:30:39:31:d8:60:2d:de: 22:65:ae:9e:e4:55:93:49:57:22:e1:e9:74:49:34:65:c3:0a: 5f:2d:d0:21:6c:72:74:0c:c0:81:39:25:df:bd:bd:5e:14:be: 2f:d4:eb:4c:5c:6e:3e:e1:f4:99:e9:f8:bd:3d:eb:8e:43:9e: 62:54:31:0c:23:85:09:04:ae:8f:d3:09:66:ab:c1:4f:cb:4e: 98:d9:b2:6c:2d:8b:91:48:fc:86:df:c6:e8:76:53:06:2a:53: 29:79:b6:c9:da:23:72:6e:af:ff:d2:62:3d:b7:e1:19:0e:a4: 9b:18:c5:a0:25:a5:20:69:cc:c8:01:40:6c:f8:7a:39:59:ae: 24:2e:44:06:02:cb:60:d8:64:95:96:a2:88:15:3b:58:6f:79: b6:db:d4:a3:0f:de:f7:83:48:eb:6b:00:c4:a9:10:4f:76:50: af:cd:1f:62 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUL87WLV7XHqFVIPtmx3QVIzIYfQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0 RTBFNEM1RTAeFw0yNjA0MTcwMTUxMzNaFw0yNzA0MTYwMTU2MzNaMDMxMTAvBgNV BAMTKDlGNzRBMDFBMUZEODg5RkVCNUQxNDdFQTVCRkFFOUUxQzgxMzc1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwzpKBbnXQ0TLjC1gS7vZ1oqg1 LzAFI9Y0/di9lSKDZF3G0VjrrTCRO8rl8CLfLfrCfdxW2zESbU/qJAZZiugkJBDP XVCPRhz1M+qKgnNxRuOMqM4dM+mzoRtdxpvJKLZpx8BqtXZ3YN5n1cf5o1OOWu26 6NJBaqCa46FCtseiWyqRC7XWuVFyAjlRf1Vo0k51yBRyQv8ykbb21N/37ediLl3y 4PgJSFTk5XyrCHwVm4XB9ypd2BsxKDWIOtq60vaGXhTqkfZNpriWlxAXuRLTekV4 FJvHGlNyQswSXOQAvHbK64glw/NmRs4igb0ceMTwMQza/1LlXJ7LaGoifaBTAgMB AAGjggIlMIICITAdBgNVHQ4EFgQUn3SgGh/Yif610UfqW/rp4cgTddEwHwYDVR0j BBgwFoAUpRQI6XAQvbRBRigbini8+k4OTF4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8wL0E1MTQwOEU5NzAxMEJEQjQ0MTQ2MjgxQjhBNzhC Q0ZBNEUwRTRDNUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0RTBFNEM1RS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMC9BUzc0Njgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwYgYIKwYBBQUHAQcBAf8EUzBRMEAEAgAB MDoDBADefooDBAHefpwDBAHefqYDBAHefq4wDAMEAd5+sgMEAd5+uAMEAd5+1jAM AwQE3n7wAwQB3n70MA0EAgACMAcDBQAkASoAMA0GCSqGSIb3DQEBCwUAA4IBAQAC 2z7T6TolupI6biivBbRIDIOybLW6R6nGvvHWKw6A5Z5F1Eue8kSDaTl7UmfnH9db y4+VhHSBPoNOk3jkijEMcY7xPwI8KPSYPCoKr3r6epq6FTA5MdhgLd4iZa6e5FWT SVci4el0STRlwwpfLdAhbHJ0DMCBOSXfvb1eFL4v1OtMXG4+4fSZ6fi9PeuOQ55i VDEMI4UJBK6P0wlmq8FPy06Y2bJsLYuRSPyG38bodlMGKlMpebbJ2iNybq//0mI9 t+EZDqSbGMWgJaUgaczIAUBs+Ho5Wa4kLkQGAstg2GSVlqKIFTtYb3m229SjD973 g0jrawDEqRBPdlCvzR9i -----END CERTIFICATE-----Generated at Fri Apr 17 08:12:31 2026 by rpki-client