$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140707.roa File: AS140707.roa (raw, json) Hash identifier: QGY68alUvxudDfvgKo0dIVPwgS9RrQLPSx5VEu/UuYI= Subject key identifier: 0C:C4:1F:BD:D4:27:38:B4:09:7E:AA:18:C8:AE:AE:65:A0:D1:AF:3A Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 7061F312BD4FECD03E61B0F1EAC44A0152E86ED3 Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140707.roa Signing time: Thu 04 Jun 2026 00:55:12 +0000 ROA not before: Thu 04 Jun 2026 00:50:12 +0000 ROA not after: Thu 03 Jun 2027 00:55:12 +0000 asID: 140707 IP address blocks: 116.172.64.0/22 maxlen: 22 116.172.68.0/22 maxlen: 22 116.172.72.0/22 maxlen: 22 116.172.72.0/24 maxlen: 24 116.172.73.0/24 maxlen: 24 116.172.74.0/24 maxlen: 24 116.172.75.0/24 maxlen: 24 116.172.76.0/22 maxlen: 22 116.172.80.0/22 maxlen: 22 116.172.84.0/22 maxlen: 22 116.172.84.0/24 maxlen: 24 116.172.86.0/24 maxlen: 24 116.172.87.0/24 maxlen: 24 116.172.88.0/22 maxlen: 22 116.172.88.0/24 maxlen: 24 116.172.89.0/24 maxlen: 24 116.172.90.0/24 maxlen: 24 116.172.91.0/24 maxlen: 24 116.172.92.0/22 maxlen: 22 116.172.92.0/24 maxlen: 24 116.172.93.0/24 maxlen: 24 116.172.94.0/24 maxlen: 24 116.172.96.0/22 maxlen: 22 116.172.96.0/24 maxlen: 24 116.172.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:61:f3:12:bd:4f:ec:d0:3e:61:b0:f1:ea:c4:4a:01:52:e8:6e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Jun 4 00:50:12 2026 GMT Not After : Jun 3 00:55:12 2027 GMT Subject: CN=0CC41FBDD42738B4097EAA18C8AEAE65A0D1AF3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:68:54:07:b8:aa:98:c0:c3:30:b2:cc:e3: 8d:2b:85:51:7d:2c:58:75:f9:63:ee:24:15:86:5e: b5:4c:91:1a:e5:a4:f5:6b:22:0b:2c:54:8a:6d:21: 35:d4:86:64:65:79:96:fe:62:46:53:c8:92:1e:b9: 3f:ee:94:6d:66:4a:33:cb:cc:db:ff:b0:31:9d:44: 09:c3:3d:41:6b:9e:98:cd:51:f7:2f:63:55:e6:e3: 51:55:e3:b4:73:da:a3:0a:04:f3:38:9d:a9:f3:7e: 36:74:78:8e:5e:1c:ef:9b:be:95:bd:60:2f:2b:69: 44:b1:56:76:cc:b8:c8:ff:46:6c:e2:bb:d2:92:d4: 41:5c:b6:1b:da:c6:a0:77:e9:7b:e1:4b:4a:a6:34: e9:1e:99:c3:48:96:a5:7c:01:2e:c7:dd:6a:79:cc: 06:fb:ff:c1:a5:36:dd:d5:ba:c2:f0:d0:26:fc:96: 32:89:ec:6b:2f:88:51:93:a9:1b:f7:4d:7c:1f:05: 6e:30:49:8f:4f:cb:56:eb:98:5a:b0:1f:26:07:4d: d9:a2:89:bd:c7:a6:2b:47:3d:7b:2a:cb:c9:86:ca: 20:56:52:e1:f1:4c:a6:13:a3:70:95:cc:c4:5b:dc: bc:03:d7:eb:0a:c7:93:a6:ee:d2:34:52:47:81:41: cc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C4:1F:BD:D4:27:38:B4:09:7E:AA:18:C8:AE:AE:65:A0:D1:AF:3A X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140707.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.172.64.0-116.172.103.255 Signature Algorithm: sha256WithRSAEncryption c6:b1:94:73:fd:c4:eb:7a:4a:0e:06:6c:ba:a5:81:d8:e2:91: 17:c0:10:31:5c:02:56:ea:c4:91:72:05:f8:07:7a:b4:78:d5: 1f:12:17:40:7e:45:84:0c:c4:84:24:4b:9b:10:d7:5c:24:bf: 7e:2f:89:b4:85:01:51:39:7e:ca:6c:9e:ac:a0:3e:d1:93:32: 49:6f:b4:08:a9:92:fd:92:9b:cb:42:c3:df:46:7c:ee:67:7f: e7:eb:23:7e:e3:a4:7f:52:f0:12:fd:45:0c:a5:07:84:40:f7: 2e:70:80:f9:f8:87:e7:60:53:10:22:20:56:3a:0c:66:e1:b2: 14:e1:77:cb:f3:7f:06:ef:b0:dd:c8:4f:4b:57:3f:9c:fa:be: 00:4d:d8:01:ac:42:e8:8e:15:8e:2d:74:e7:fb:a3:3a:c8:34: 09:47:e8:12:1b:77:a9:06:3d:79:98:21:0d:90:62:88:36:5f: 1a:3b:f8:c8:74:48:f1:e0:d5:80:5b:ba:59:84:db:ba:5f:3b: 29:86:3f:12:10:39:76:af:b3:34:77:65:15:fc:1d:dc:f7:69: ef:05:8c:60:36:71:b3:c0:e5:f7:8b:b7:b4:0b:18:44:a8:30: fa:26:b7:b6:01:3d:64:63:67:82:a2:84:16:dc:ff:55:19:dd: 62:47:0e:fe -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUcGHzEr1P7NA+YbDx6sRKAVLobtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA2MDQwMDUwMTJaFw0yNzA2MDMwMDU1MTJaMDMxMTAvBgNV BAMTKDBDQzQxRkJERDQyNzM4QjQwOTdFQUExOEM4QUVBRTY1QTBEMUFGM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4mhUB7iqmMDDMLLM440rhVF9 LFh1+WPuJBWGXrVMkRrlpPVrIgssVIptITXUhmRleZb+YkZTyJIeuT/ulG1mSjPL zNv/sDGdRAnDPUFrnpjNUfcvY1Xm41FV47Rz2qMKBPM4nanzfjZ0eI5eHO+bvpW9 YC8raUSxVnbMuMj/Rmziu9KS1EFcthvaxqB36XvhS0qmNOkemcNIlqV8AS7H3Wp5 zAb7/8GlNt3VusLw0Cb8ljKJ7GsviFGTqRv3TXwfBW4wSY9Py1brmFqwHyYHTdmi ib3HpitHPXsqy8mGyiBWUuHxTKYTo3CVzMRb3LwD1+sKx5Om7tI0UkeBQcyfAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUDMQfvdQnOLQJfqoYyK6uZaDRrzowHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzE0MDcwNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQC AAEwDjAMAwQGdKxAAwQDdKxgMA0GCSqGSIb3DQEBCwUAA4IBAQDGsZRz/cTrekoO Bmy6pYHY4pEXwBAxXAJW6sSRcgX4B3q0eNUfEhdAfkWEDMSEJEubENdcJL9+L4m0 hQFROX7KbJ6soD7RkzJJb7QIqZL9kpvLQsPfRnzuZ3/n6yN+46R/UvAS/UUMpQeE QPcucID5+IfnYFMQIiBWOgxm4bIU4XfL838G77DdyE9LVz+c+r4ATdgBrELojhWO LXTn+6M6yDQJR+gSG3epBj15mCENkGKINl8aO/jIdEjx4NWAW7pZhNu6Xzsphj8S EDl2r7M0d2UV/B3c92nvBYxgNnGzwOX3i7e0CxhEqDD6Jre2AT1kY2eCooQW3P9V Gd1iRw7+ -----END CERTIFICATE-----Generated at Wed Jun 17 09:01:11 2026 by rpki-client