$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140726.roa File: AS140726.roa (raw, json) Hash identifier: MIgxiULTvVVadp+gZl4VW6D66lpaYjtRNrDTyZCRqsk= Subject key identifier: 8B:98:83:26:D4:60:A1:F6:FF:EC:9A:72:4E:E1:3C:D7:46:E3:83:83 Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 06576DE46BB653FB2B09EE22E7CBB88A31C2AF8F Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140726.roa Signing time: Tue 16 Jun 2026 09:25:50 +0000 ROA not before: Tue 16 Jun 2026 09:20:50 +0000 ROA not after: Tue 15 Jun 2027 09:25:50 +0000 asID: 140726 IP address blocks: 116.149.192.0/21 maxlen: 21 116.149.200.0/21 maxlen: 21 116.149.238.0/24 maxlen: 24 116.149.239.0/24 maxlen: 24 211.91.80.0/21 maxlen: 21 211.91.88.0/21 maxlen: 21 211.91.96.0/21 maxlen: 21 211.91.104.0/21 maxlen: 21 220.195.200.0/22 maxlen: 22 220.195.204.0/22 maxlen: 22 220.205.64.0/20 maxlen: 20 220.205.80.0/20 maxlen: 20 220.205.120.0/23 maxlen: 23 220.205.122.0/23 maxlen: 23 220.205.225.0/24 maxlen: 24 220.205.233.0/24 maxlen: 24 220.205.240.0/23 maxlen: 23 220.205.242.0/23 maxlen: 23 220.205.244.0/24 maxlen: 24 220.205.245.0/24 maxlen: 24 220.205.248.0/22 maxlen: 22 220.205.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:57:6d:e4:6b:b6:53:fb:2b:09:ee:22:e7:cb:b8:8a:31:c2:af:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Jun 16 09:20:50 2026 GMT Not After : Jun 15 09:25:50 2027 GMT Subject: CN=8B988326D460A1F6FFEC9A724EE13CD746E38383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:40:a4:1e:c0:59:40:3e:f7:6b:9d:42:55:4c: af:eb:91:44:20:8e:58:a7:d8:0d:f2:7d:99:8f:fa: f4:f6:47:4c:ba:28:6c:a0:36:f9:9c:e3:ac:3d:6c: e8:14:5a:e7:ec:66:00:0d:c1:18:a0:0b:4d:3f:31: 45:9d:64:db:62:6e:35:9f:d1:f5:53:4c:99:b9:21: 0d:41:a3:dd:f0:4a:bd:b1:0a:18:1c:5d:0f:4e:78: 57:0f:76:17:31:2a:4e:05:67:3f:2a:10:5f:ba:86: e6:98:d0:35:ee:0c:2e:b8:f6:f2:3c:56:83:bd:ac: 1f:9b:b3:9d:9c:37:4a:88:22:5e:15:1c:c2:7a:4d: 95:b4:26:8f:5e:0d:d3:00:c8:88:e9:9b:2b:a3:82: 15:66:20:50:c0:5d:c2:54:57:d2:e4:9b:58:08:78: be:ea:96:90:50:e9:9d:28:32:83:31:c3:9b:35:cd: c5:55:41:7d:07:1a:e3:dd:c1:52:ae:40:ed:6b:7f: 57:76:e5:c4:78:84:b5:b6:ce:8d:0a:d2:4e:93:29: f7:10:f3:7b:27:cd:99:7d:db:31:af:74:d7:76:ae: ee:f7:aa:72:a6:fa:45:e1:71:bb:d4:d1:05:f8:77: 0e:07:94:60:e1:73:62:99:51:11:b8:2c:a6:81:a8: 1f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:98:83:26:D4:60:A1:F6:FF:EC:9A:72:4E:E1:3C:D7:46:E3:83:83 X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140726.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.149.192.0/20 116.149.238.0/23 211.91.80.0-211.91.111.255 220.195.200.0/21 220.205.64.0/19 220.205.120.0/22 220.205.225.0/24 220.205.233.0/24 220.205.240.0-220.205.245.255 220.205.248.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:cc:6e:0c:93:24:00:c1:3e:a7:37:4b:3a:7a:7a:ac:d0:bb: fd:11:06:d8:11:ae:1c:37:aa:21:e2:f4:ca:25:eb:a2:29:52: 48:e0:a8:fb:52:76:51:68:ab:80:5b:94:af:e6:ce:5f:72:36: de:c9:55:88:51:34:9c:9a:f1:d5:cf:18:78:30:ff:4f:e8:39: 4b:52:41:9e:d2:6b:fa:6d:c0:0c:ee:23:cc:5b:77:be:8a:e7: 9b:41:1d:c5:43:cf:92:4c:19:de:30:b6:33:75:b9:8a:4a:ef: 0c:f9:09:f2:e0:08:5e:89:56:81:bf:3c:ac:66:cd:9e:47:26: 34:c7:da:fa:4b:89:4b:2e:48:e4:0a:46:b7:03:61:a7:04:9f: 5b:3e:d6:cc:43:3e:a2:97:b3:a5:43:7e:0b:ff:af:d7:1a:7a: 8e:b0:4f:ee:47:1b:01:52:40:12:66:24:7f:99:41:be:0b:f1: 78:fc:29:53:a9:a6:c6:e0:e1:fb:ec:5d:d2:df:b1:76:38:21: 8a:85:d3:98:d7:d8:4d:11:89:58:1e:1c:59:6b:0c:54:a2:cf: fd:11:d0:db:02:6b:4c:91:a5:8d:5f:d8:f8:e1:09:3e:d5:76: c3:7e:2d:d2:9d:86:d8:f9:cf:f0:6e:f0:cf:3d:8e:06:c7:55: c3:e9:f0:b7 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIUBldt5Gu2U/srCe4i58u4ijHCr48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA2MTYwOTIwNTBaFw0yNzA2MTUwOTI1NTBaMDMxMTAvBgNV BAMTKDhCOTg4MzI2RDQ2MEExRjZGRkVDOUE3MjRFRTEzQ0Q3NDZFMzgzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQKQewFlAPvdrnUJVTK/rkUQg jlin2A3yfZmP+vT2R0y6KGygNvmc46w9bOgUWufsZgANwRigC00/MUWdZNtibjWf 0fVTTJm5IQ1Bo93wSr2xChgcXQ9OeFcPdhcxKk4FZz8qEF+6huaY0DXuDC649vI8 VoO9rB+bs52cN0qIIl4VHMJ6TZW0Jo9eDdMAyIjpmyujghVmIFDAXcJUV9Lkm1gI eL7qlpBQ6Z0oMoMxw5s1zcVVQX0HGuPdwVKuQO1rf1d25cR4hLW2zo0K0k6TKfcQ 83snzZl92zGvdNd2ru73qnKm+kXhcbvU0QX4dw4HlGDhc2KZURG4LKaBqB8PAgMB AAGjggIqMIICJjAdBgNVHQ4EFgQUi5iDJtRgofb/7JpyTuE810bjg4MwHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzE0MDcyNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBggrBgEFBQcBBwEB/wRWMFQwUgQC AAEwTAMEBHSVwAMEAXSV7jAMAwQE01tQAwQE01tgAwQD3MPIAwQF3M1AAwQC3M14 AwQA3M3hAwQA3M3pMAwDBATczfADBAHczfQDBAPczfgwDQYJKoZIhvcNAQELBQAD ggEBAArMbgyTJADBPqc3Szp6eqzQu/0RBtgRrhw3qiHi9Mol66IpUkjgqPtSdlFo q4BblK/mzl9yNt7JVYhRNJya8dXPGHgw/0/oOUtSQZ7Sa/ptwAzuI8xbd76K55tB HcVDz5JMGd4wtjN1uYpK7wz5CfLgCF6JVoG/PKxmzZ5HJjTH2vpLiUsuSOQKRrcD YacEn1s+1sxDPqKXs6VDfgv/r9caeo6wT+5HGwFSQBJmJH+ZQb4L8Xj8KVOppsbg 4fvsXdLfsXY4IYqF05jX2E0RiVgeHFlrDFSiz/0R0NsCa0yRpY1f2PjhCT7VdsN+ LdKdhtj5z/Bu8M89jgbHVcPp8Lc= -----END CERTIFICATE-----Generated at Tue Jul 14 21:59:53 2026 by rpki-client