$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS9929.roa File: AS9929.roa (raw, json) Hash identifier: sUofUW3+B/VqY2U0WDmNcuPHkNNUDRJDmcmydUk/iXc= Subject key identifier: 33:CD:91:66:C2:A9:D1:62:79:58:08:DB:33:33:1C:42:28:40:B1:D8 Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Certificate serial: 1EE98CA2B46CDA38DAA828671491C591F01DB88B Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS9929.roa Signing time: Thu 14 May 2026 02:48:01 +0000 ROA not before: Thu 14 May 2026 02:43:01 +0000 ROA not after: Thu 13 May 2027 02:48:01 +0000 asID: 9929 IP address blocks: 113.207.240.0/20 maxlen: 20 124.160.206.0/24 maxlen: 24 124.160.207.0/24 maxlen: 24 125.46.122.0/23 maxlen: 23 2408:866c:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 09:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e9:8c:a2:b4:6c:da:38:da:a8:28:67:14:91:c5:91:f0:1d:b8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Validity Not Before: May 14 02:43:01 2026 GMT Not After : May 13 02:48:01 2027 GMT Subject: CN=33CD9166C2A9D162795808DB33331C422840B1D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7d:76:87:b2:10:c7:80:6f:6a:5f:1b:d0:14: 15:2b:28:8d:b9:6e:85:fa:15:fa:d2:1d:7c:a1:2c: 48:42:35:8d:4e:e2:bc:92:cb:21:da:03:0a:15:5f: aa:a2:df:9d:97:9f:bc:71:50:b1:4d:0a:6c:ea:49: cb:53:98:70:41:50:8c:e2:02:3c:da:1b:eb:f3:db: 47:ed:8c:4e:71:f1:42:28:4a:1c:23:bd:50:44:10: 6c:eb:34:b8:df:e9:cd:aa:4e:b9:7b:0a:c4:cb:ab: 67:38:5a:db:b2:63:2a:01:1a:7b:d9:0c:eb:c2:31: 82:54:43:d2:e3:c0:09:5b:98:ea:61:c5:76:31:3e: 01:b9:d1:51:06:17:16:21:35:5e:9f:c0:19:3d:e4: 92:13:1c:36:34:77:dc:8f:b8:76:2d:75:0f:7b:7a: ad:6d:2e:01:8f:97:54:36:de:10:46:a2:cd:8e:24: 43:30:28:93:cd:1e:d0:c6:fa:bf:f6:72:ad:bc:3e: 33:11:ba:46:a0:b6:1c:17:d0:bf:c6:96:7b:3b:9d: 97:62:b8:7d:ea:b9:f2:0f:89:1d:01:26:08:e3:05: 2f:da:8e:db:68:ac:c6:95:e3:e6:0e:d3:af:10:2e: 7d:95:0a:08:c7:e2:d2:be:24:46:1a:e1:1b:6a:6a: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CD:91:66:C2:A9:D1:62:79:58:08:DB:33:33:1C:42:28:40:B1:D8 X509v3 Authority Key Identifier: keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS9929.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.207.240.0/20 124.160.206.0/23 125.46.122.0/23 IPv6: 2408:866c:ff00::/48 Signature Algorithm: sha256WithRSAEncryption 60:df:aa:bb:07:40:d3:ce:c3:da:83:2c:a3:35:79:3e:bf:c7: 47:a1:b4:3c:14:7c:23:3a:62:73:a4:09:13:57:00:d7:6d:85: 59:f9:5f:6d:85:69:b2:b5:23:97:29:c1:c8:24:f4:f7:d7:f6: 55:a7:0a:03:b3:8d:e9:9f:bd:39:da:1f:d0:15:e3:f2:98:c2: 7c:50:94:e9:4e:32:97:a9:84:1c:8f:78:db:eb:fd:e0:c5:7c: 66:d2:6a:35:6c:2a:c7:ab:78:02:6d:0e:04:33:12:4f:62:3e: e2:73:c7:5e:46:c5:bf:ff:93:81:9a:97:3c:91:b4:8f:11:53: 29:92:63:f1:52:c3:3e:8e:2f:d6:9b:1d:e4:a0:a4:08:57:11: 78:a7:eb:4a:57:c0:f4:24:7b:50:92:b4:a0:75:ed:a2:41:ab: 50:fb:d2:93:c8:f3:45:3b:52:c2:f6:2b:ff:34:50:80:cb:49: b2:70:ac:6d:e8:bc:af:a9:6d:6f:c7:3c:30:f2:96:86:87:33: 8d:f9:8f:33:7d:ec:21:f5:32:9c:9e:29:87:99:d7:cd:5b:d6: 4e:8b:89:92:95:2a:f1:1a:52:44:9a:de:92:5d:b2:dc:e9:82: cb:1c:47:5d:2b:c5:d0:11:11:c2:43:70:2c:4a:cf:b3:e4:64: 47:46:07:ca -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUHumMorRs2jjaqChnFJHFkfAduIswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDUxNDAyNDMwMVoX DTI3MDUxMzAyNDgwMVowMzExMC8GA1UEAxMoMzNDRDkxNjZDMkE5RDE2Mjc5NTgw OERCMzMzMzFDNDIyODQwQjFEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMh9doeyEMeAb2pfG9AUFSsojbluhfoV+tIdfKEsSEI1jU7ivJLLIdoDChVf qqLfnZefvHFQsU0KbOpJy1OYcEFQjOICPNob6/PbR+2MTnHxQihKHCO9UEQQbOs0 uN/pzapOuXsKxMurZzha27JjKgEae9kM68IxglRD0uPACVuY6mHFdjE+AbnRUQYX FiE1Xp/AGT3kkhMcNjR33I+4di11D3t6rW0uAY+XVDbeEEaizY4kQzAok80e0Mb6 v/Zyrbw+MxG6RqC2HBfQv8aWezudl2K4feq58g+JHQEmCOMFL9qO22isxpXj5g7T rxAufZUKCMfi0r4kRhrhG2pqSfkCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBQzzZFm wqnRYnlYCNszMxxCKECx2DAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUH MAuGQHJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5 NTM0MjU5My8xL0FTOTkyOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8 BggrBgEFBQcBBwEB/wQtMCswGAQCAAEwEgMEBHHP8AMEAXygzgMEAX0uejAPBAIA AjAJAwcAJAiGbP8AMA0GCSqGSIb3DQEBCwUAA4IBAQBg36q7B0DTzsPagyyjNXk+ v8dHobQ8FHwjOmJzpAkTVwDXbYVZ+V9thWmytSOXKcHIJPT31/ZVpwoDs43pn705 2h/QFePymMJ8UJTpTjKXqYQcj3jb6/3gxXxm0mo1bCrHq3gCbQ4EMxJPYj7ic8de RsW//5OBmpc8kbSPEVMpkmPxUsM+ji/Wmx3koKQIVxF4p+tKV8D0JHtQkrSgde2i QatQ+9KTyPNFO1LC9iv/NFCAy0mycKxt6LyvqW1vxzww8paGhzON+Y8zfewh9TKc nimHmdfNW9ZOi4mSlSrxGlJEmt6SXbLc6YLLHEddK8XQERHCQ3AsSs+z5GRHRgfK -----END CERTIFICATE-----Generated at Thu May 21 10:25:01 2026 by rpki-client