
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS10206.roa
File: AS10206.roa (raw, json)
Hash identifier: MwQKlViCcT7jO1Ny0MR34yNXUdcM+8YzcJ82W3X7RTI=
Subject key identifier: 30:1F:74:28:CE:70:72:0A:47:73:CA:4B:7B:32:E4:62:93:1F:BE:4E
Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial: 124E5B92A813CE860886684D634FA124CE03B7
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS10206.roa
Signing time: Wed 03 Jun 2026 08:15:43 +0000
ROA not before: Wed 03 Jun 2026 08:10:43 +0000
ROA not after: Wed 02 Jun 2027 08:15:43 +0000
asID: 10206
IP address blocks: 116.129.224.0/24 maxlen: 24
116.129.226.0/24 maxlen: 24
116.129.242.0/24 maxlen: 24
116.129.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 23:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4e:5b:92:a8:13:ce:86:08:86:68:4d:63:4f:a1:24:ce:03:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Validity
Not Before: Jun 3 08:10:43 2026 GMT
Not After : Jun 2 08:15:43 2027 GMT
Subject: CN=301F7428CE70720A4773CA4B7B32E462931FBE4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c4:aa:08:83:ec:16:ae:98:d4:b7:7c:7d:88:
40:84:1c:a1:0a:8a:84:89:e1:25:e5:2a:c6:60:d7:
54:c0:2f:61:30:65:1d:8c:78:30:d1:2b:39:8d:16:
b0:4e:3d:39:33:70:1c:18:bb:bc:13:91:70:40:a6:
47:11:e0:24:c1:ff:4a:1a:bc:a7:d7:4d:f6:11:a4:
34:83:26:5e:df:fa:e5:0f:cc:1f:35:55:1e:1c:67:
67:c6:eb:2b:e7:7b:c7:24:bc:28:d9:04:df:99:0d:
b4:ee:7b:60:61:a7:ca:f3:c6:b6:78:0a:39:32:5e:
eb:06:5c:80:eb:a5:f8:7b:09:57:81:40:39:7f:87:
72:9d:43:40:dd:23:ce:04:b7:5b:64:1c:ca:b3:4e:
f1:a2:e6:31:b1:34:18:6f:7f:94:59:cb:32:52:12:
ea:9c:1b:cf:30:75:78:31:1d:2b:6e:b9:42:32:f8:
8c:c8:a9:49:34:23:fd:02:49:1b:21:dd:0e:e8:11:
65:e8:6e:db:0e:ea:02:fd:cc:07:73:6e:3d:dc:29:
36:ce:ee:7b:ba:6c:7d:35:a5:ab:bc:2a:0a:e0:e6:
4f:c4:76:f1:2f:89:81:d6:7b:20:9f:d7:2a:f4:42:
4b:01:29:62:13:fe:39:19:95:3e:12:d4:92:38:02:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1F:74:28:CE:70:72:0A:47:73:CA:4B:7B:32:E4:62:93:1F:BE:4E
X509v3 Authority Key Identifier:
keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS10206.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.129.224.0/24
116.129.226.0/24
116.129.242.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:28:b1:b7:97:c1:c4:d3:36:d5:51:aa:aa:62:af:9b:0a:0a:
a0:28:80:b2:9a:a4:21:70:d0:40:66:c7:a4:49:93:56:22:60:
5f:f6:46:ec:8a:95:78:e4:82:ee:85:f1:99:3b:2c:8c:83:2c:
82:e8:d8:bd:bf:6d:44:3c:59:78:d0:52:83:75:ee:eb:f5:ad:
eb:ec:00:2a:c1:36:1b:d7:1b:ce:ef:10:fe:49:a0:86:00:ec:
79:c0:1f:1e:d7:e9:8b:03:00:83:c4:8d:88:49:f5:69:c5:01:
25:fb:81:e5:28:a3:b5:57:f9:07:b4:c3:d3:e7:fe:96:0e:16:
48:6b:c8:bc:14:34:d9:cf:51:a9:8d:cb:09:89:45:14:b9:7c:
86:01:0c:8f:53:b1:81:10:0e:3d:ae:54:35:9c:d0:1c:89:14:
3a:94:84:d3:05:e7:e4:07:c6:15:28:d0:30:3a:07:6a:4f:a5:
9b:fc:18:e3:b3:e4:d9:61:cf:c9:e5:81:7c:27:ce:ed:4d:32:
8d:f1:e0:93:d2:8d:0c:60:2f:db:2d:85:7a:5c:fc:23:1e:f9:
10:0c:ed:bb:47:ec:f5:17:af:3c:40:5c:86:09:3a:f5:8e:5d:
33:58:a0:91:cf:24:02:89:8c:fb:c2:ff:66:d4:80:88:7f:13:
93:df:52:d5
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgITEk5bkqgTzoYIhmhNY0+hJM4DtzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg3OEExNjk1Qzc2OEQwOUI2Q0E3RTE5NzgzMDhFNTRCRTg0
RkVCQUFFMB4XDTI2MDYwMzA4MTA0M1oXDTI3MDYwMjA4MTU0M1owMzExMC8GA1UE
AxMoMzAxRjc0MjhDRTcwNzIwQTQ3NzNDQTRCN0IzMkU0NjI5MzFGQkU0RTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANjEqgiD7BaumNS3fH2IQIQcoQqK
hInhJeUqxmDXVMAvYTBlHYx4MNErOY0WsE49OTNwHBi7vBORcECmRxHgJMH/Shq8
p9dN9hGkNIMmXt/65Q/MHzVVHhxnZ8brK+d7xyS8KNkE35kNtO57YGGnyvPGtngK
OTJe6wZcgOul+HsJV4FAOX+Hcp1DQN0jzgS3W2QcyrNO8aLmMbE0GG9/lFnLMlIS
6pwbzzB1eDEdK265QjL4jMipSTQj/QJJGyHdDugRZehu2w7qAv3MB3NuPdwpNs7u
e7psfTWlq7wqCuDmT8R28S+JgdZ7IJ/XKvRCSwEpYhP+ORmVPhLUkjgCG28CAwEA
AaOCAe8wggHrMB0GA1UdDgQWBBQwH3QoznByCkdzykt7MuRikx++TjAfBgNVHSME
GDAWgBR4oWlcdo0Jtsp+GXgwjlS+hP66rjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f
BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTAw
OTU1MDA3NDk2MjI0NzcwLzAvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0
QkU4NEZFQkFBRS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu
YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv
MS83OEExNjk1Qzc2OEQwOUI2Q0E3RTE5NzgzMDhFNTRCRTg0RkVCQUFFLmNlcjBd
BggrBgEFBQcBCwRRME8wTQYIKwYBBQUHMAuGQXJzeW5jOi8vcnBraS1ycHMuY25u
aWMuY24vcmVwby9BMTEwMDk1NTAwNzQ5NjIyNDc3MC8wL0FTMTAyMDYucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgAB
MBIDBAB0geADBAB0geIDBAF0gfIwDQYJKoZIhvcNAQELBQADggEBAMkosbeXwcTT
NtVRqqpir5sKCqAogLKapCFw0EBmx6RJk1YiYF/2RuyKlXjkgu6F8Zk7LIyDLILo
2L2/bUQ8WXjQUoN17uv1revsACrBNhvXG87vEP5JoIYA7HnAHx7X6YsDAIPEjYhJ
9WnFASX7geUoo7VX+Qe0w9Pn/pYOFkhryLwUNNnPUamNywmJRRS5fIYBDI9TsYEQ
Dj2uVDWc0ByJFDqUhNMF5+QHxhUo0DA6B2pPpZv8GOOz5Nlhz8nlgXwnzu1NMo3x
4JPSjQxgL9sthXpc/CMe+RAM7btH7PUXrzxAXIYJOvWOXTNYoJHPJAKJjPvC/2bU
gIh/E5PfUtU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:42:18 2026 by rpki-client