$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS9929.roa File: AS9929.roa (raw, json) Hash identifier: ue6kwGp/3TwHl25DS4+DughTQyLpyqCnwXQt8FaG17Y= Subject key identifier: 67:10:1F:4A:C0:3A:3B:9E:F3:28:6D:F1:5B:48:75:6C:22:6F:AA:CC Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644 Certificate serial: 2417E296FAC1031B66DB80430F9C98D89B408BBD Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS9929.roa Signing time: Wed 10 Jun 2026 06:47:40 +0000 ROA not before: Wed 10 Jun 2026 06:42:40 +0000 ROA not after: Wed 09 Jun 2027 06:47:40 +0000 asID: 9929 IP address blocks: 139.227.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 18:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:17:e2:96:fa:c1:03:1b:66:db:80:43:0f:9c:98:d8:9b:40:8b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644 Validity Not Before: Jun 10 06:42:40 2026 GMT Not After : Jun 9 06:47:40 2027 GMT Subject: CN=67101F4AC03A3B9EF3286DF15B48756C226FAACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:05:d0:b3:15:18:a5:83:94:85:0a:fe:1e: a9:92:b7:fb:b2:c2:87:b9:2d:52:be:53:82:26:be: 06:c8:9d:d2:37:aa:7a:14:27:20:1b:86:6e:43:e8: a0:19:af:cc:41:b0:4e:78:32:96:cb:61:3d:f7:c6: 39:2a:e3:00:4f:44:d7:c8:b3:e3:34:76:8a:9d:84: 18:78:0c:9a:67:b3:5b:6e:98:e7:7d:6c:8b:8d:b4: 2b:37:96:9b:9e:1e:fd:03:2f:cb:40:0a:0c:ef:57: 6b:d0:ed:69:f9:63:b3:24:15:50:d4:fe:b7:15:d9: ca:7e:32:13:4d:57:70:6d:70:e2:df:dc:80:e3:31: 00:2c:2f:63:c7:79:fc:1c:a9:d1:7b:75:0b:e0:cf: 13:f3:a7:9f:89:2e:74:c0:fb:86:a6:c0:1f:b8:22: 0d:fc:63:05:a9:2f:84:3e:4a:df:84:f9:a5:0c:92: f8:f9:9d:96:09:e3:66:96:66:da:2c:2b:9d:18:d9: a7:c6:86:e7:c1:0b:49:b5:77:0c:48:a3:fc:99:86: 9d:56:7e:c1:bf:9c:21:8d:ee:29:ef:ad:93:c2:15: 40:95:48:cf:80:05:36:2b:45:ed:8d:62:ad:ac:01: f1:43:69:f9:d1:80:4e:79:83:e0:be:a3:da:94:51: 76:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:10:1F:4A:C0:3A:3B:9E:F3:28:6D:F1:5B:48:75:6C:22:6F:AA:CC X509v3 Authority Key Identifier: keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS9929.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.227.166.0/24 Signature Algorithm: sha256WithRSAEncryption 01:34:9c:6d:19:46:7d:2c:ba:8a:76:b3:17:71:82:5d:d4:97: 9b:f1:d3:b4:f8:12:a3:2d:e4:ba:8d:08:d9:dd:1b:bd:af:1f: 2c:e1:78:dd:e4:ea:84:f6:e6:01:5f:37:2c:7e:dc:d2:77:bc: 41:09:35:42:c5:c0:aa:cf:b2:88:f2:56:d3:b7:99:38:ce:e7: 94:3a:41:37:ce:14:22:08:87:bb:00:8e:3c:dc:5a:c7:ba:2e: 6b:b6:35:b6:c7:4e:4d:f7:1f:3d:23:c8:63:57:a1:a5:4d:ce: 0d:44:50:9c:83:bc:be:d9:c7:10:52:8e:38:15:36:66:73:d0: 6a:ce:0d:89:ea:c9:c1:b4:91:2a:ea:d9:40:bd:e9:bb:03:bd: 6a:db:fe:cb:13:28:0d:f5:4a:c8:18:52:26:52:48:a8:23:ea: 4d:20:a2:94:15:6b:6e:29:49:91:cc:32:a2:a5:88:a2:07:d8: 97:46:7b:08:25:4c:71:d1:7a:e1:98:a6:8c:d2:58:62:cf:b3: e9:72:2e:1d:4e:0a:6e:84:04:28:96:a1:dd:5c:dc:81:f0:17: 9c:3f:41:5b:1e:32:e0:2e:59:8c:bd:e8:c2:f5:7f:15:ce:fd: 64:65:a1:4a:69:88:ab:4a:6f:44:6c:43:3a:e6:3a:2a:fb:3c: 1e:69:ff:f7 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUJBfilvrBAxtm24BDD5yY2JtAi70wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyhFQUNCN0I1MEYz MzhERjI3OTRFQkEzRjYxOEM3MjMzQjIyODNFNjQ0MB4XDTI2MDYxMDA2NDI0MFoX DTI3MDYwOTA2NDc0MFowMzExMC8GA1UEAxMoNjcxMDFGNEFDMDNBM0I5RUYzMjg2 REYxNUI0ODc1NkMyMjZGQUFDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPCBdCzFRilg5SFCv4eqZK3+7LCh7ktUr5Tgia+Bsid0jeqehQnIBuGbkPo oBmvzEGwTngylsthPffGOSrjAE9E18iz4zR2ip2EGHgMmmezW26Y531si420KzeW m54e/QMvy0AKDO9Xa9DtafljsyQVUNT+txXZyn4yE01XcG1w4t/cgOMxACwvY8d5 /Byp0Xt1C+DPE/Onn4kudMD7hqbAH7giDfxjBakvhD5K34T5pQyS+PmdlgnjZpZm 2iwrnRjZp8aG58ELSbV3DEij/JmGnVZ+wb+cIY3uKe+tk8IVQJVIz4AFNitF7Y1i rawB8UNp+dGATnmD4L6j2pRRdpcCAwEAAaOCAeIwggHeMB0GA1UdDgQWBBRnEB9K wDo7nvMobfFbSHVsIm+qzDAfBgNVHSMEGDAWgBTqy3tQ8zjfJ5Tro/YYxyM7IoPm RDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzAvRUFDQjdC NTBGMzM4REYyNzk0RUJBM0Y2MThDNzIzM0IyMjgzRTY0NC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvNnN0N1VQTTQz eWVVNjZQMkdNY2pPeUtENWtRLmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUH MAuGQHJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5 NTM0MjU5My8wL0FTOTkyOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIvjpjANBgkqhkiG9w0BAQsFAAOC AQEAATScbRlGfSy6inazF3GCXdSXm/HTtPgSoy3kuo0I2d0bva8fLOF43eTqhPbm AV83LH7c0ne8QQk1QsXAqs+yiPJW07eZOM7nlDpBN84UIgiHuwCOPNxax7oua7Y1 tsdOTfcfPSPIY1ehpU3ODURQnIO8vtnHEFKOOBU2ZnPQas4NierJwbSRKurZQL3p uwO9atv+yxMoDfVKyBhSJlJIqCPqTSCilBVrbilJkcwyoqWIogfYl0Z7CCVMcdF6 4ZimjNJYYs+z6XIuHU4KboQEKJah3VzcgfAXnD9BWx4y4C5ZjL3owvV/Fc79ZGWh SmmIq0pvRGxDOuY6Kvs8Hmn/9w== -----END CERTIFICATE-----Generated at Sat Jun 13 20:05:55 2026 by rpki-client