$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140726.roa File: AS140726.roa (raw, json) Hash identifier: fBsrI90xa4tCD6y9mHKQWz6rZEcRrSIEagDlnHcC0cw= Subject key identifier: A0:92:66:11:6F:0D:C9:BD:42:DC:B0:EB:97:4E:8F:1F:34:B1:32:12 Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 43CC2E0079656095184BD29D880C0AADF38325C3 Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140726.roa Signing time: Tue 01 Sep 2026 09:04:37 +0000 ROA not before: Tue 01 Sep 2026 08:59:37 +0000 ROA not after: Tue 31 Aug 2027 09:04:37 +0000 asID: 140726 IP address blocks: 116.149.192.0/21 maxlen: 21 116.149.200.0/21 maxlen: 21 116.149.238.0/24 maxlen: 24 116.149.239.0/24 maxlen: 24 211.91.80.0/21 maxlen: 21 211.91.88.0/21 maxlen: 21 211.91.88.0/25 maxlen: 25 211.91.88.128/25 maxlen: 25 211.91.89.0/25 maxlen: 25 211.91.89.128/25 maxlen: 25 211.91.96.0/21 maxlen: 21 211.91.104.0/21 maxlen: 21 220.195.192.0/19 maxlen: 19 220.195.200.0/22 maxlen: 22 220.195.204.0/22 maxlen: 22 220.205.64.0/20 maxlen: 20 220.205.80.0/20 maxlen: 20 220.205.120.0/23 maxlen: 23 220.205.122.0/23 maxlen: 23 220.205.224.0/21 maxlen: 21 220.205.225.0/24 maxlen: 24 220.205.232.0/21 maxlen: 21 220.205.233.0/24 maxlen: 24 220.205.240.0/23 maxlen: 23 220.205.242.0/23 maxlen: 23 220.205.244.0/24 maxlen: 24 220.205.245.0/24 maxlen: 24 220.205.248.0/22 maxlen: 22 220.205.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 07:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cc:2e:00:79:65:60:95:18:4b:d2:9d:88:0c:0a:ad:f3:83:25:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Sep 1 08:59:37 2026 GMT Not After : Aug 31 09:04:37 2027 GMT Subject: CN=A09266116F0DC9BD42DCB0EB974E8F1F34B13212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3e:f5:fa:cb:d7:cf:84:50:ba:99:8f:0e:68: 34:8f:40:76:27:87:47:be:dd:4a:d3:1b:1b:e2:9f: 4b:fc:bb:5f:e5:3f:0a:94:c6:28:4c:60:76:3d:10: ec:2b:bb:0a:82:e0:12:ef:23:b3:b6:5c:d1:98:a5: 8b:b6:7b:30:c4:d5:f4:5b:84:b9:10:2d:e5:99:98: 4e:65:30:fc:af:2b:0f:77:26:bc:d3:57:8e:6e:71: 81:a5:f5:1a:c9:de:95:1c:64:e6:0a:62:5f:c5:0f: 1d:7f:ae:f4:70:c5:ff:b1:bc:7c:09:75:15:c0:d3: 92:70:9b:18:2a:fe:c6:a7:05:87:98:38:9c:81:47: c7:4c:c6:28:b7:77:88:b7:15:8c:84:45:a8:7b:e0: 17:18:3d:10:26:03:1b:8f:4c:0e:82:75:01:af:4e: a7:10:f7:19:c0:0a:8c:f6:67:e6:99:d7:ef:f1:c9: 8c:7d:64:3b:2c:a0:34:c0:82:7e:e0:b4:75:18:da: 45:e7:5e:d9:b9:a8:5d:68:fb:d8:6d:28:16:a3:1e: 4e:64:06:7f:b4:56:c8:53:03:6e:c0:c6:5d:ad:c9: 75:c0:3b:9a:86:4f:21:a5:62:ee:2d:80:11:46:94: 9e:4f:02:94:72:53:45:6b:8e:35:4a:50:37:a8:30: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:92:66:11:6F:0D:C9:BD:42:DC:B0:EB:97:4E:8F:1F:34:B1:32:12 X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140726.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.149.192.0/20 116.149.238.0/23 211.91.80.0-211.91.111.255 220.195.192.0/19 220.205.64.0/19 220.205.120.0/22 220.205.224.0-220.205.245.255 220.205.248.0/21 Signature Algorithm: sha256WithRSAEncryption 56:c4:e9:4c:ca:c7:52:68:f6:aa:21:02:59:1c:a2:7f:26:93: a3:42:cf:e8:f2:b3:e3:f0:60:71:8d:20:2f:6d:ef:72:eb:57: b9:36:73:55:ea:7f:43:a1:72:f6:d6:92:61:cb:94:f4:1d:42: 1b:61:ba:0c:4f:97:ff:a4:ab:7f:5f:a9:d3:66:8e:30:50:90: 36:f9:15:93:2b:60:c7:af:2b:60:05:cf:ba:fe:92:71:9d:c1: cb:ab:0a:5b:fe:b2:36:17:e0:de:15:a7:6b:9f:bf:f5:4a:7c: c8:0c:50:c3:12:68:4f:9b:73:0b:03:a6:29:d6:b2:55:83:b0: d3:d2:16:55:49:27:0c:76:96:2c:e9:92:3a:36:ca:53:21:e6: 3f:0c:aa:20:02:9f:45:2d:a9:14:06:29:93:1f:50:db:7d:d1: fe:d3:5e:ed:94:a6:84:7d:55:a0:b0:60:4e:c2:4b:c2:3a:d2: 16:ab:38:9e:50:56:a4:1a:bb:61:7a:79:76:5c:5e:3a:15:93: 4b:39:99:17:a2:62:5d:c5:c0:d5:91:83:b6:dc:42:86:6d:db: 92:c0:ce:73:db:a9:d7:c1:b5:d6:67:0e:ad:35:0d:81:2a:8f: ed:7b:8e:c0:0e:c8:e3:72:b7:38:fe:fe:3d:34:75:b6:e5:de: ef:a3:13:99 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUQ8wuAHllYJUYS9KdiAwKrfODJcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA5MDEwODU5MzdaFw0yNzA4MzEwOTA0MzdaMDMxMTAvBgNV BAMTKEEwOTI2NjExNkYwREM5QkQ0MkRDQjBFQjk3NEU4RjFGMzRCMTMyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPvX6y9fPhFC6mY8OaDSPQHYn h0e+3UrTGxvin0v8u1/lPwqUxihMYHY9EOwruwqC4BLvI7O2XNGYpYu2ezDE1fRb hLkQLeWZmE5lMPyvKw93JrzTV45ucYGl9RrJ3pUcZOYKYl/FDx1/rvRwxf+xvHwJ dRXA05Jwmxgq/sanBYeYOJyBR8dMxii3d4i3FYyERah74BcYPRAmAxuPTA6CdQGv TqcQ9xnACoz2Z+aZ1+/xyYx9ZDssoDTAgn7gtHUY2kXnXtm5qF1o+9htKBajHk5k Bn+0VshTA27Axl2tyXXAO5qGTyGlYu4tgBFGlJ5PApRyU0VrjjVKUDeoMIV1AgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUoJJmEW8Nyb1C3LDrl06PHzSxMhIwHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzE0MDcyNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBggrBgEFBQcBBwEB/wRKMEgwRgQC AAEwQAMEBHSVwAMEAXSV7jAMAwQE01tQAwQE01tgAwQF3MPAAwQF3M1AAwQC3M14 MAwDBAXczeADBAHczfQDBAPczfgwDQYJKoZIhvcNAQELBQADggEBAFbE6UzKx1Jo 9qohAlkcon8mk6NCz+jys+PwYHGNIC9t73LrV7k2c1Xqf0OhcvbWkmHLlPQdQhth ugxPl/+kq39fqdNmjjBQkDb5FZMrYMevK2AFz7r+knGdwcurClv+sjYX4N4Vp2uf v/VKfMgMUMMSaE+bcwsDpinWslWDsNPSFlVJJwx2lizpkjo2ylMh5j8MqiACn0Ut qRQGKZMfUNt90f7TXu2UpoR9VaCwYE7CS8I60harOJ5QVqQau2F6eXZcXjoVk0s5 mReiYl3FwNWRg7bcQoZt25LAznPbqdfBtdZnDq01DYEqj+17jsAOyONytzj+/j00 dbbl3u+jE5k= -----END CERTIFICATE-----Generated at Fri Sep 25 22:00:14 2026 by rpki-client