$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS9929.roa File: AS9929.roa (raw, json) Hash identifier: cLWOmIex9rYBfMOfLsGGmzGcSCreElvoDxmC5Sz8Vnw= Subject key identifier: F7:CC:37:0C:0A:97:23:DE:38:E0:43:4C:D9:AD:60:73:F9:CC:58:96 Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 222895B2CB5B61255E57A90D18066332769D5C5B Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS9929.roa Signing time: Tue 09 Jun 2026 08:23:18 +0000 ROA not before: Tue 09 Jun 2026 08:18:18 +0000 ROA not after: Tue 08 Jun 2027 08:23:18 +0000 asID: 9929 IP address blocks: 61.240.48.0/21 maxlen: 21 61.241.78.0/24 maxlen: 24 61.242.136.0/23 maxlen: 23 61.242.144.0/22 maxlen: 22 61.243.220.0/24 maxlen: 24 116.142.222.0/24 maxlen: 24 116.147.14.0/23 maxlen: 23 116.162.63.0/24 maxlen: 24 116.162.75.0/24 maxlen: 24 116.169.20.0/23 maxlen: 23 116.170.64.0/24 maxlen: 24 116.178.96.0/24 maxlen: 24 116.178.97.0/24 maxlen: 24 211.90.165.0/24 maxlen: 24 211.90.199.0/24 maxlen: 24 211.91.121.0/24 maxlen: 24 211.97.190.0/24 maxlen: 24 220.194.159.0/24 maxlen: 24 220.196.96.0/23 maxlen: 23 220.196.200.0/21 maxlen: 21 220.197.72.0/24 maxlen: 24 220.197.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:28:95:b2:cb:5b:61:25:5e:57:a9:0d:18:06:63:32:76:9d:5c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Jun 9 08:18:18 2026 GMT Not After : Jun 8 08:23:18 2027 GMT Subject: CN=F7CC370C0A9723DE38E0434CD9AD6073F9CC5896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:cf:57:af:e7:52:e4:1b:e5:fa:ca:6d:93: 59:bb:80:2b:28:30:4c:eb:c9:ab:91:5f:f5:24:3c: 4e:5d:25:71:d1:aa:d5:5d:2b:ce:36:fc:dd:57:46: bd:10:1f:aa:ef:25:fc:b7:dd:ec:7b:74:04:af:ee: 7a:c9:39:13:36:70:27:f0:05:a9:ee:df:a8:0d:7a: 38:4b:04:7f:0f:4c:5d:c6:e6:47:d6:14:24:23:5d: 68:e2:30:ad:3c:e9:be:f4:bc:53:72:da:ce:1c:02: 33:f7:e9:bf:bf:4d:c5:c4:df:ec:93:06:2a:5b:0d: 6b:18:f2:55:d8:2b:02:e6:74:5e:15:ee:1a:52:79: 05:54:4c:4f:db:9e:b1:db:c2:c4:5b:79:a7:db:37: aa:d3:c4:31:21:54:98:02:9e:0a:9c:d7:0c:d8:cb: f1:65:7e:6b:05:e0:f2:e7:ba:6f:19:23:1f:01:e2: 4f:e8:cc:d2:8b:9f:23:47:9e:68:dc:b8:88:34:5f: 1c:56:be:c5:1a:e0:cf:1d:9a:0f:cd:41:d5:17:51: db:29:79:9c:d4:7d:dc:23:bd:a9:f4:08:75:d8:9b: ab:4f:1d:5a:4c:dc:8a:25:d7:1f:23:6c:b3:f3:21: 3e:e5:25:69:ac:48:e2:ba:9c:00:3d:2a:13:5d:67: 58:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CC:37:0C:0A:97:23:DE:38:E0:43:4C:D9:AD:60:73:F9:CC:58:96 X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS9929.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.240.48.0/21 61.241.78.0/24 61.242.136.0/23 61.242.144.0/22 61.243.220.0/24 116.142.222.0/24 116.147.14.0/23 116.162.63.0/24 116.162.75.0/24 116.169.20.0/23 116.170.64.0/24 116.178.96.0/23 211.90.165.0/24 211.90.199.0/24 211.91.121.0/24 211.97.190.0/24 220.194.159.0/24 220.196.96.0/23 220.196.200.0/21 220.197.72.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:96:44:3b:4a:1f:ee:d3:26:6d:ef:e1:f8:0f:5d:5c:cc:45: 50:48:63:c4:c2:56:56:b0:2d:40:aa:ba:4f:3a:65:7f:bd:2f: ad:81:e9:ca:65:2c:57:f3:0f:ca:dd:35:e4:e7:c1:2e:d1:1a: 28:e1:c5:ed:fe:48:25:ce:47:a3:00:41:f1:af:f5:8f:71:3f: f7:3c:0a:f3:7c:6b:1f:e7:73:5a:bd:f1:4d:0a:e6:3f:6e:2a: f4:44:1c:87:84:5c:be:02:de:0c:b5:05:b5:55:be:2a:e0:27: 0a:2f:63:48:61:c0:e6:21:33:f9:62:90:c9:26:cd:73:40:43: 2d:fd:a6:70:2d:42:a7:b0:7f:0e:e2:73:31:62:6f:60:a9:6a: 39:82:a8:67:e6:5d:ad:ca:d4:7a:ec:24:0a:90:7a:09:3b:35: 5c:e4:3b:3a:90:a8:03:ba:be:0c:80:d6:af:76:11:e4:82:a2: 4b:00:6b:77:16:39:8a:06:cf:1f:1b:d7:ba:b0:d5:c0:cb:9b: 55:79:28:55:50:a9:88:d7:a6:b2:26:cd:4a:6f:a7:25:ae:2e: 1a:0d:39:c2:09:98:12:85:a3:71:cf:a7:13:4c:5c:30:7a:6b: d2:a4:af:9a:9e:0d:79:ec:39:4c:82:0d:70:59:1f:cf:9d:5d: ec:54:ea:84 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUIiiVsstbYSVeV6kNGAZjMnadXFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA2MDkwODE4MThaFw0yNzA2MDgwODIzMThaMDMxMTAvBgNV BAMTKEY3Q0MzNzBDMEE5NzIzREUzOEUwNDM0Q0Q5QUQ2MDczRjlDQzU4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO189Xr+dS5Bvl+sptk1m7gCso MEzryauRX/UkPE5dJXHRqtVdK842/N1XRr0QH6rvJfy33ex7dASv7nrJORM2cCfw Banu36gNejhLBH8PTF3G5kfWFCQjXWjiMK086b70vFNy2s4cAjP36b+/TcXE3+yT BipbDWsY8lXYKwLmdF4V7hpSeQVUTE/bnrHbwsRbeafbN6rTxDEhVJgCngqc1wzY y/FlfmsF4PLnum8ZIx8B4k/ozNKLnyNHnmjcuIg0XxxWvsUa4M8dmg/NQdUXUdsp eZzUfdwjvan0CHXYm6tPHVpM3Iol1x8jbLPzIT7lJWmsSOK6nAA9KhNdZ1jTAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQU98w3DAqXI9444ENM2a1gc/nMWJYwHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzk5Mjkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgZMGCCsGAQUFBwEHAQH/BIGDMIGAMH4E AgABMHgDBAM98DADBAA98U4DBAE98ogDBAI98pADBAA989wDBAB0jt4DBAF0kw4D BAB0oj8DBAB0oksDBAF0qRQDBAB0qkADBAF0smADBADTWqUDBADTWscDBADTW3kD BADTYb4DBADcwp8DBAHcxGADBAPcxMgDBAHcxUgwDQYJKoZIhvcNAQELBQADggEB AD6WRDtKH+7TJm3v4fgPXVzMRVBIY8TCVlawLUCquk86ZX+9L62B6cplLFfzD8rd NeTnwS7RGijhxe3+SCXOR6MAQfGv9Y9xP/c8CvN8ax/nc1q98U0K5j9uKvREHIeE XL4C3gy1BbVVvirgJwovY0hhwOYhM/likMkmzXNAQy39pnAtQqewfw7iczFib2Cp ajmCqGfmXa3K1HrsJAqQegk7NVzkOzqQqAO6vgyA1q92EeSCoksAa3cWOYoGzx8b 17qw1cDLm1V5KFVQqYjXprImzUpvpyWuLhoNOcIJmBKFo3HPpxNMXDB6a9Kkr5qe DXnsOUyCDXBZH8+dXexU6oQ= -----END CERTIFICATE-----Generated at Sun Jun 14 06:31:04 2026 by rpki-client