$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140726.roa File: AS140726.roa (raw, json) Hash identifier: pXIPxcFmfJcZ0+nxSg3glZexhzk4R0uCBFg8Sh58vfI= Subject key identifier: 68:32:63:4F:B6:D1:91:ED:7B:B8:F9:7E:B5:83:31:D4:B8:C0:19:36 Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 5053667FF338DA1EC68233EEF341045354791E73 Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140726.roa Signing time: Fri 29 May 2026 00:17:12 +0000 ROA not before: Fri 29 May 2026 00:12:12 +0000 ROA not after: Fri 28 May 2027 00:17:12 +0000 asID: 140726 IP address blocks: 116.149.192.0/21 maxlen: 21 116.149.200.0/21 maxlen: 21 220.205.64.0/20 maxlen: 20 220.205.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:53:66:7f:f3:38:da:1e:c6:82:33:ee:f3:41:04:53:54:79:1e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: May 29 00:12:12 2026 GMT Not After : May 28 00:17:12 2027 GMT Subject: CN=6832634FB6D191ED7BB8F97EB58331D4B8C01936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:3d:32:13:e9:1b:6b:aa:c4:30:74:fc:ee: df:51:2f:9e:5b:3a:d9:aa:46:64:aa:69:b5:cc:70: 14:06:b1:50:00:65:89:0f:98:95:a7:68:a1:dd:4a: 57:10:a4:a9:88:40:d9:d2:cf:ef:50:fd:02:51:08: 85:9e:7d:b5:89:55:58:d7:99:fa:4c:e7:ce:08:9e: e2:1e:2d:46:98:41:e5:06:13:9c:1a:6a:36:5d:f8: 25:16:7e:5b:70:e8:31:96:a8:30:2e:e4:0a:54:4a: af:e5:00:e7:84:b4:fc:7f:83:44:23:e9:0a:71:b5: b2:49:fa:52:00:08:a1:53:6d:29:11:c0:ce:04:02: b0:87:6f:34:f3:74:ca:8e:9d:0c:37:ad:9f:b4:b9: 96:d0:de:d5:0c:3e:25:e5:cf:0d:a4:8c:7a:cb:b5: cb:c2:4a:c6:2a:16:fb:88:6e:43:ad:6b:ba:7b:b7: 16:ed:eb:0f:15:ee:68:9a:5a:d3:b1:78:29:6a:5d: 63:c7:b4:43:5a:7d:ce:4c:12:09:a2:bc:4c:7c:52: c6:1a:b7:7e:48:57:9a:17:3a:9c:12:39:9c:ec:5b: 80:84:8f:1c:ff:da:a3:60:7c:69:ac:8b:a6:b9:06: 8b:7c:10:7a:d0:03:a2:42:61:d0:c4:b1:ff:81:50: 25:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:32:63:4F:B6:D1:91:ED:7B:B8:F9:7E:B5:83:31:D4:B8:C0:19:36 X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140726.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.149.192.0/20 220.205.64.0/19 Signature Algorithm: sha256WithRSAEncryption 84:83:b7:c4:50:26:48:45:c1:14:5d:eb:e9:d5:0a:1f:fc:79: d5:a9:e2:e2:f8:b2:9e:34:42:29:e9:a9:76:6a:fc:c5:11:d9: 6f:05:bd:e2:ca:12:0d:4c:07:e5:ee:0f:65:a9:d4:51:a5:3c: 1d:9d:91:7f:84:55:31:d9:ae:06:60:65:f5:4d:d0:75:83:11: 4c:5d:90:9b:79:75:99:3c:4e:b8:64:b7:2d:da:d0:ee:63:2f: cc:91:eb:aa:6c:4a:31:4c:83:3e:31:3e:4f:d0:0f:7c:e0:06: 9b:29:8d:12:9b:90:7f:01:ec:53:e4:97:a8:77:1a:f0:ab:aa: f3:b9:d5:41:9a:ec:11:e0:97:0d:39:c0:35:52:7b:27:02:c9: 4e:0c:cd:73:a8:6b:59:44:a7:e3:ac:93:bb:28:3b:e9:2c:9f: c2:40:6e:99:8b:23:ec:ad:99:73:a9:d8:a3:40:54:5c:c0:59: e3:b8:11:94:86:eb:35:c5:b1:2d:9a:43:84:da:2d:d9:e5:5c: cd:9b:99:b1:d9:21:d3:59:a5:1e:05:a7:54:fd:5c:b6:7c:a3: 5e:b3:05:cc:ff:d7:d9:62:aa:09:68:51:1b:6d:40:85:30:06: 35:3e:1a:97:83:fd:fe:2d:58:79:3b:38:75:26:93:19:29:04: 8b:ab:ab:a7 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUUFNmf/M42h7GgjPu80EEU1R5HnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA1MjkwMDEyMTJaFw0yNzA1MjgwMDE3MTJaMDMxMTAvBgNV BAMTKDY4MzI2MzRGQjZEMTkxRUQ3QkI4Rjk3RUI1ODMzMUQ0QjhDMDE5MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdeD0yE+kba6rEMHT87t9RL55b OtmqRmSqabXMcBQGsVAAZYkPmJWnaKHdSlcQpKmIQNnSz+9Q/QJRCIWefbWJVVjX mfpM584InuIeLUaYQeUGE5waajZd+CUWfltw6DGWqDAu5ApUSq/lAOeEtPx/g0Qj 6QpxtbJJ+lIACKFTbSkRwM4EArCHbzTzdMqOnQw3rZ+0uZbQ3tUMPiXlzw2kjHrL tcvCSsYqFvuIbkOta7p7txbt6w8V7miaWtOxeClqXWPHtENafc5MEgmivEx8UsYa t35IV5oXOpwSOZzsW4CEjxz/2qNgfGmsi6a5Bot8EHrQA6JCYdDEsf+BUCVfAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUaDJjT7bRke17uPl+tYMx1LjAGTYwHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzE0MDcyNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEBHSVwAMEBdzNQDANBgkqhkiG9w0BAQsFAAOCAQEAhIO3xFAmSEXBFF3r 6dUKH/x51ani4viynjRCKempdmr8xRHZbwW94soSDUwH5e4PZanUUaU8HZ2Rf4RV MdmuBmBl9U3QdYMRTF2Qm3l1mTxOuGS3LdrQ7mMvzJHrqmxKMUyDPjE+T9APfOAG mymNEpuQfwHsU+SXqHca8Kuq87nVQZrsEeCXDTnANVJ7JwLJTgzNc6hrWUSn46yT uyg76SyfwkBumYsj7K2Zc6nYo0BUXMBZ47gRlIbrNcWxLZpDhNot2eVczZuZsdkh 01mlHgWnVP1ctnyjXrMFzP/X2WKqCWhRG21AhTAGNT4al4P9/i1YeTs4dSaTGSkE i6urpw== -----END CERTIFICATE-----Generated at Fri May 29 23:49:08 2026 by rpki-client