$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS7468.roa File: AS7468.roa (raw, json) Hash identifier: AnejswKQngEHe/GvZggcui3l/xXJmHoF0SM59U5rA24= Subject key identifier: 8B:97:99:1E:50:38:AC:51:76:55:71:E5:F3:A2:1E:7B:28:F6:54:27 Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Certificate serial: 36C891BE66B0AF5828F57EC9A40017312F42A2E8 Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS7468.roa Signing time: Tue 21 Apr 2026 05:45:29 +0000 ROA not before: Tue 21 Apr 2026 05:40:29 +0000 ROA not after: Tue 20 Apr 2027 05:45:29 +0000 asID: 7468 IP address blocks: 222.126.128.0/17 maxlen: 17 222.126.138.0/24 maxlen: 24 222.126.156.0/23 maxlen: 23 222.126.166.0/23 maxlen: 23 222.126.174.0/23 maxlen: 23 222.126.174.0/24 maxlen: 24 222.126.178.0/23 maxlen: 23 222.126.180.0/23 maxlen: 23 222.126.182.0/23 maxlen: 23 222.126.182.0/24 maxlen: 24 222.126.183.0/24 maxlen: 24 222.126.184.0/23 maxlen: 23 222.126.214.0/23 maxlen: 23 222.126.240.0/23 maxlen: 23 222.126.241.0/24 maxlen: 24 222.126.242.0/23 maxlen: 23 222.126.244.0/23 maxlen: 23 222.126.244.0/24 maxlen: 24 2401:2a00::/32 maxlen: 48 2401:2a00:1001::/48 maxlen: 48 2401:2a00:1002::/48 maxlen: 48 2401:2a00:1003::/48 maxlen: 48 2401:2a00:2001::/48 maxlen: 48 2401:2a00:2002::/48 maxlen: 48 2401:2a00:2003::/48 maxlen: 48 2401:2a00:3000::/48 maxlen: 48 2401:2a00:3001::/48 maxlen: 48 2401:2a00:3002::/48 maxlen: 48 2401:2a00:3003::/48 maxlen: 48 2401:2a00:f000::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 01:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c8:91:be:66:b0:af:58:28:f5:7e:c9:a4:00:17:31:2f:42:a2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Validity Not Before: Apr 21 05:40:29 2026 GMT Not After : Apr 20 05:45:29 2027 GMT Subject: CN=8B97991E5038AC51765571E5F3A21E7B28F65427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:0c:04:48:01:d4:fb:ef:4b:a3:ed:52:e8: ff:6c:a3:0f:28:89:1f:d3:1d:4b:d2:6a:7f:0d:5e: f4:f3:c0:4c:88:e8:bb:ee:1e:7d:49:5c:46:04:d2: 59:92:aa:c5:c4:58:bf:9c:15:83:45:72:e5:3e:3d: 74:4e:ec:fd:89:53:2f:fc:0c:a7:d8:0c:c8:ff:41: c9:45:01:22:5c:9d:1d:57:8a:1c:bb:a3:e4:63:36: cf:8a:a8:95:81:1c:8d:f4:7f:f3:5b:44:30:24:de: 98:aa:45:57:82:ef:95:b4:dc:8c:02:54:b4:bb:dd: de:ac:25:fe:53:81:a7:29:e2:60:0f:19:59:85:61: 67:00:a2:05:7a:02:78:f8:a6:a4:cc:f5:63:66:81: aa:e9:3e:c0:65:f3:e6:1d:4b:fc:35:55:de:9f:eb: 85:fa:d4:82:42:87:00:75:8f:15:75:43:12:61:28: 3e:77:c3:1b:fa:13:e3:d8:db:c8:11:87:61:ae:77: 5c:f5:c2:4e:a5:fa:d7:aa:53:82:c1:bc:86:9b:14: cd:86:8f:41:1a:4a:35:18:be:32:e9:14:a1:6f:4b: 8d:b6:85:a9:33:1c:ee:9e:4f:b4:10:c0:d8:7f:4f: ed:a0:72:ff:3d:3a:4a:41:dc:68:b0:bc:5b:40:f1: 6f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:97:99:1E:50:38:AC:51:76:55:71:E5:F3:A2:1E:7B:28:F6:54:27 X509v3 Authority Key Identifier: keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/AS7468.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 222.126.128.0/17 IPv6: 2401:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 19:5e:2e:b4:86:7c:4a:2c:d0:0e:e3:31:bc:91:a4:d6:63:bd: 78:be:44:b2:be:3c:ba:48:1c:49:ca:84:25:a9:a0:4c:7a:03: 67:cd:1d:2c:0c:88:94:11:63:a4:44:11:77:ed:8a:87:e0:d1: 9e:57:91:d8:64:5a:24:46:e7:8a:67:ca:0b:b4:c7:5e:7e:56: 2d:27:75:c3:dc:69:b7:fd:fc:39:ec:70:e6:18:72:ed:18:28: 63:24:b0:df:d6:5c:55:2e:ca:ae:ea:d6:0d:15:90:39:fe:be: b5:ce:1e:45:46:40:43:05:57:52:eb:d9:74:ad:65:a4:c8:86: e8:86:ea:1e:a2:b6:fd:df:80:55:ba:26:9d:30:fb:59:38:5d: f1:8d:3f:88:b1:0a:51:38:16:ff:7a:93:a8:fd:15:94:bf:82: 1b:c8:82:38:cf:33:41:a7:f1:3c:e2:a0:04:f2:6b:27:8f:35: a8:8c:e0:ba:c8:75:45:16:38:6a:a1:66:3b:7d:71:ac:5b:82: e7:bc:d5:94:02:09:b1:9e:72:7a:42:e6:a4:0c:b1:7f:e1:ab: 15:29:e9:a8:6c:e6:a5:57:bd:34:1a:45:b3:9a:99:e7:2b:1b: 84:0d:e4:e6:d0:7a:94:84:4d:c5:b6:e7:da:3c:8a:7b:63:68: d1:e0:5d:2b -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIUNsiRvmawr1go9X7JpAAXMS9CougwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0 RTBFNEM1RTAeFw0yNjA0MjEwNTQwMjlaFw0yNzA0MjAwNTQ1MjlaMDMxMTAvBgNV BAMTKDhCOTc5OTFFNTAzOEFDNTE3NjU1NzFFNUYzQTIxRTdCMjhGNjU0MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNgwESAHU++9Lo+1S6P9sow8o iR/THUvSan8NXvTzwEyI6LvuHn1JXEYE0lmSqsXEWL+cFYNFcuU+PXRO7P2JUy/8 DKfYDMj/QclFASJcnR1Xihy7o+RjNs+KqJWBHI30f/NbRDAk3piqRVeC75W03IwC VLS73d6sJf5Tgacp4mAPGVmFYWcAogV6Anj4pqTM9WNmgarpPsBl8+YdS/w1Vd6f 64X61IJChwB1jxV1QxJhKD53wxv6E+PY28gRh2Gud1z1wk6l+teqU4LBvIabFM2G j0EaSjUYvjLpFKFvS422hakzHO6eT7QQwNh/T+2gcv89OkpB3GiwvFtA8W9rAgMB AAGjggHxMIIB7TAdBgNVHQ4EFgQUi5eZHlA4rFF2VXHl86Ieeyj2VCcwHwYDVR0j BBgwFoAUpRQI6XAQvbRBRigbini8+k4OTF4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8wL0E1MTQwOEU5NzAxMEJEQjQ0MTQ2MjgxQjhBNzhC Q0ZBNEUwRTRDNUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0RTBFNEM1RS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMC9BUzc0Njgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgAB MAYDBAfefoAwDQQCAAIwBwMFACQBKgAwDQYJKoZIhvcNAQELBQADggEBABleLrSG fEos0A7jMbyRpNZjvXi+RLK+PLpIHEnKhCWpoEx6A2fNHSwMiJQRY6REEXftiofg 0Z5XkdhkWiRG54pnygu0x15+Vi0ndcPcabf9/DnscOYYcu0YKGMksN/WXFUuyq7q 1g0VkDn+vrXOHkVGQEMFV1Lr2XStZaTIhuiG6h6itv3fgFW6Jp0w+1k4XfGNP4ix ClE4Fv96k6j9FZS/ghvIgjjPM0Gn8TzioATyayePNaiM4LrIdUUWOGqhZjt9caxb gue81ZQCCbGecnpC5qQMsX/hqxUp6ahs5qVXvTQaRbOamecrG4QN5ObQepSETcW2 59o8intjaNHgXSs= -----END CERTIFICATE-----Generated at Wed Apr 22 09:06:29 2026 by rpki-client