$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS7468.roa File: AS7468.roa (raw, json) Hash identifier: 75eFM6TDUijgBthtNWc7ZiQTaXN3U/MkdRryvwmRYbA= Subject key identifier: 0D:DF:62:58:B1:25:20:EE:E1:D2:04:8A:A2:83:03:5A:40:0B:09:42 Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Certificate serial: 7C6ABDAFE6B7DA65C7E46D9F6CF3EB3F5A4EC980 Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS7468.roa Signing time: Fri 17 Jul 2026 06:03:16 +0000 ROA not before: Fri 17 Jul 2026 05:58:16 +0000 ROA not after: Fri 16 Jul 2027 06:03:16 +0000 asID: 7468 IP address blocks: 222.126.128.0/17 maxlen: 24 222.126.138.0/24 maxlen: 24 222.126.156.0/23 maxlen: 23 222.126.166.0/23 maxlen: 23 222.126.174.0/23 maxlen: 23 222.126.174.0/24 maxlen: 24 222.126.178.0/23 maxlen: 23 222.126.180.0/23 maxlen: 23 222.126.182.0/23 maxlen: 23 222.126.182.0/24 maxlen: 24 222.126.183.0/24 maxlen: 24 222.126.184.0/23 maxlen: 23 222.126.188.0/23 maxlen: 24 222.126.214.0/23 maxlen: 23 222.126.240.0/23 maxlen: 23 222.126.241.0/24 maxlen: 24 222.126.242.0/23 maxlen: 23 222.126.244.0/23 maxlen: 23 222.126.244.0/24 maxlen: 24 2401:2a00::/32 maxlen: 48 2401:2a00:1001::/48 maxlen: 48 2401:2a00:1002::/48 maxlen: 48 2401:2a00:1003::/48 maxlen: 48 2401:2a00:2001::/48 maxlen: 48 2401:2a00:2002::/48 maxlen: 48 2401:2a00:2003::/48 maxlen: 48 2401:2a00:3000::/48 maxlen: 48 2401:2a00:3001::/48 maxlen: 48 2401:2a00:3002::/48 maxlen: 48 2401:2a00:3003::/48 maxlen: 48 2401:2a00:f000::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6a:bd:af:e6:b7:da:65:c7:e4:6d:9f:6c:f3:eb:3f:5a:4e:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Validity Not Before: Jul 17 05:58:16 2026 GMT Not After : Jul 16 06:03:16 2027 GMT Subject: CN=0DDF6258B12520EEE1D2048AA283035A400B0942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9e:f5:7c:7f:dd:84:af:93:9a:8d:0a:4a:5e: 10:a1:1f:04:91:1d:6e:3c:e5:55:12:b9:82:82:b2: 15:a8:04:8e:63:d9:2a:96:2c:a1:b9:d9:2d:77:54: 72:35:71:21:01:fc:f5:e2:bd:db:fc:ce:fd:90:a7: ba:ea:41:2d:18:c4:1c:fc:8a:c8:75:ac:8d:2c:e8: 01:f7:96:ee:b9:d7:fc:1e:b3:6f:db:1c:cd:79:b4: 0c:0c:90:b2:a1:1a:e4:fb:e0:b9:88:f1:7a:ba:4c: 4f:db:83:9e:94:63:77:1c:30:d6:de:17:db:90:55: 67:fb:24:e1:84:29:75:66:4e:d0:2a:98:12:cc:c8: 35:4b:5e:77:5c:f3:5c:8d:06:98:c1:6e:d8:f3:81: 3c:c0:8b:75:4f:43:af:07:ec:4d:3e:cd:3a:5d:af: 4c:e8:94:7c:b3:56:a6:c9:09:84:b3:ef:61:22:bf: 07:4b:12:3e:6d:17:0a:9a:72:f1:42:28:98:e8:d5: 68:3a:54:5f:cf:f2:dc:15:b5:65:9c:9f:9f:7e:6a: 72:ab:0c:64:9c:1b:e6:f4:49:14:d4:af:ee:43:03: c2:01:fc:e8:28:9c:dc:02:4d:c1:7d:6e:54:8d:56: af:b6:47:0f:60:2f:fd:8e:54:2d:ca:1b:08:9d:fe: 85:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DF:62:58:B1:25:20:EE:E1:D2:04:8A:A2:83:03:5A:40:0B:09:42 X509v3 Authority Key Identifier: keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS7468.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 222.126.128.0/17 IPv6: 2401:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 2b:e7:bb:6f:fd:1e:83:cc:f1:15:78:33:22:82:72:33:76:b8: 5d:0c:81:0c:3d:65:11:b9:92:74:3c:52:9a:3e:40:ce:43:54: 73:36:17:a4:e6:b9:da:2d:90:27:f1:06:aa:e7:7e:e4:1b:89: 61:af:ea:88:99:5f:01:48:85:45:0c:c9:08:55:3d:09:98:8e: c2:59:f9:4f:31:78:53:14:e9:a3:c6:9a:9c:c0:f6:33:6e:c3: 1d:e6:99:3b:a3:1a:3b:01:b2:c4:a5:94:07:ef:0b:09:aa:34: 79:c0:34:b9:67:90:12:d8:05:d7:5c:a8:b4:89:c0:c8:84:80: cb:b0:45:a9:60:62:72:95:1c:78:2f:db:91:5d:13:b2:3b:d0: a2:d8:6b:39:6f:de:40:87:2a:92:e3:a1:5b:65:11:d4:80:a0: c0:72:61:f7:69:b8:64:ea:14:57:ff:dc:e2:35:0a:88:6e:6d: 50:e1:cb:ed:ed:99:6a:da:c3:d7:b2:85:87:70:fa:cd:83:05: 8f:8e:35:db:52:a2:be:4d:fa:61:88:ea:11:bf:2d:9f:50:c2: 4b:6c:89:88:a7:de:14:c0:8f:73:ef:1d:4b:92:58:d5:31:c4: c0:19:62:9e:61:f6:11:c0:10:07:0b:b2:5c:64:ec:66:ef:57: 48:84:eb:7f -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIUfGq9r+a32mXH5G2fbPPrP1pOyYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0 RTBFNEM1RTAeFw0yNjA3MTcwNTU4MTZaFw0yNzA3MTYwNjAzMTZaMDMxMTAvBgNV BAMTKDBEREY2MjU4QjEyNTIwRUVFMUQyMDQ4QUEyODMwMzVBNDAwQjA5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnvV8f92Er5OajQpKXhChHwSR HW485VUSuYKCshWoBI5j2SqWLKG52S13VHI1cSEB/PXivdv8zv2Qp7rqQS0YxBz8 ish1rI0s6AH3lu651/wes2/bHM15tAwMkLKhGuT74LmI8Xq6TE/bg56UY3ccMNbe F9uQVWf7JOGEKXVmTtAqmBLMyDVLXndc81yNBpjBbtjzgTzAi3VPQ68H7E0+zTpd r0zolHyzVqbJCYSz72EivwdLEj5tFwqacvFCKJjo1Wg6VF/P8twVtWWcn59+anKr DGScG+b0SRTUr+5DA8IB/OgonNwCTcF9blSNVq+2Rw9gL/2OVC3KGwid/oWRAgMB AAGjggHxMIIB7TAdBgNVHQ4EFgQUDd9iWLElIO7h0gSKooMDWkALCUIwHwYDVR0j BBgwFoAUpRQI6XAQvbRBRigbini8+k4OTF4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8wL0E1MTQwOEU5NzAxMEJEQjQ0MTQ2MjgxQjhBNzhC Q0ZBNEUwRTRDNUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0RTBFNEM1RS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMC9BUzc0Njgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgAB MAYDBAfefoAwDQQCAAIwBwMFACQBKgAwDQYJKoZIhvcNAQELBQADggEBACvnu2/9 HoPM8RV4MyKCcjN2uF0MgQw9ZRG5knQ8Upo+QM5DVHM2F6TmudotkCfxBqrnfuQb iWGv6oiZXwFIhUUMyQhVPQmYjsJZ+U8xeFMU6aPGmpzA9jNuwx3mmTujGjsBssSl lAfvCwmqNHnANLlnkBLYBddcqLSJwMiEgMuwRalgYnKVHHgv25FdE7I70KLYazlv 3kCHKpLjoVtlEdSAoMByYfdpuGTqFFf/3OI1CohubVDhy+3tmWraw9eyhYdw+s2D BY+ONdtSor5N+mGI6hG/LZ9QwktsiYin3hTAj3PvHUuSWNUxxMAZYp5h9hHAEAcL slxk7GbvV0iE638= -----END CERTIFICATE-----Generated at Wed Jul 22 00:12:33 2026 by rpki-client