$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140726.roa File: AS140726.roa (raw, json) Hash identifier: LHXg8VC1+lhD5VedELvxN4ZWH7p16RhvsK7qHiX7+Bg= Subject key identifier: 51:76:2A:7A:8C:A2:EC:FE:94:B6:67:43:04:C5:42:81:A1:A6:13:02 Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 246583FC442E1EED715C3908727D219ADF0CB1F4 Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140726.roa Signing time: Thu 06 Aug 2026 16:54:54 +0000 ROA not before: Thu 06 Aug 2026 16:49:54 +0000 ROA not after: Thu 05 Aug 2027 16:54:54 +0000 asID: 140726 IP address blocks: 116.149.192.0/21 maxlen: 21 116.149.200.0/21 maxlen: 21 116.149.238.0/24 maxlen: 24 116.149.239.0/24 maxlen: 24 211.91.80.0/21 maxlen: 21 211.91.88.0/21 maxlen: 21 211.91.88.0/25 maxlen: 25 211.91.88.128/25 maxlen: 25 211.91.89.0/25 maxlen: 25 211.91.89.128/25 maxlen: 25 211.91.96.0/21 maxlen: 21 211.91.104.0/21 maxlen: 21 220.195.200.0/22 maxlen: 22 220.195.204.0/22 maxlen: 22 220.205.64.0/20 maxlen: 20 220.205.80.0/20 maxlen: 20 220.205.120.0/23 maxlen: 23 220.205.122.0/23 maxlen: 23 220.205.225.0/24 maxlen: 24 220.205.233.0/24 maxlen: 24 220.205.240.0/23 maxlen: 23 220.205.242.0/23 maxlen: 23 220.205.244.0/24 maxlen: 24 220.205.245.0/24 maxlen: 24 220.205.248.0/22 maxlen: 22 220.205.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:65:83:fc:44:2e:1e:ed:71:5c:39:08:72:7d:21:9a:df:0c:b1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Aug 6 16:49:54 2026 GMT Not After : Aug 5 16:54:54 2027 GMT Subject: CN=51762A7A8CA2ECFE94B6674304C54281A1A61302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:56:4f:49:0c:52:b4:fc:17:b1:37:c0:8d: 0f:53:02:95:37:d5:e3:70:35:35:96:81:17:52:7c: 47:b7:48:8a:85:d8:5e:29:2b:3c:05:75:d0:b3:2d: 82:5d:94:04:04:6a:90:16:56:79:07:33:35:42:f7: a2:9d:c5:b6:47:0e:47:6e:99:c9:c5:5f:84:c3:4a: 53:8e:52:ea:0f:af:5d:11:15:41:41:09:41:ab:64: 1c:07:83:9c:b6:e7:7c:d3:0c:e0:c8:96:d6:a6:3e: af:3c:ec:3d:c0:bb:18:1b:9e:0e:fb:99:70:f6:6e: 07:cd:4b:0b:2c:85:bf:89:8b:f7:ad:12:cf:28:29: 81:73:61:a2:f0:eb:91:a4:b8:61:09:0c:18:9a:4b: 4c:6b:87:9f:94:3e:c9:3e:29:3e:ad:87:87:0c:ef: 5c:21:e7:fb:d0:d2:97:fb:26:4c:2b:d2:1d:26:94: 68:87:e9:08:ff:21:36:4c:e5:e4:14:17:3f:0d:b8: fd:78:6e:7d:ec:fc:b2:56:c5:39:82:57:d3:ed:ab: b0:99:c8:1f:b3:d0:28:88:ce:c1:d8:37:bc:24:14: 8a:7f:2e:72:bd:ef:4e:b2:79:48:33:ef:a5:c5:dc: da:2d:39:62:43:2d:2a:37:f3:47:4d:71:b7:59:f5: cd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:76:2A:7A:8C:A2:EC:FE:94:B6:67:43:04:C5:42:81:A1:A6:13:02 X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140726.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.149.192.0/20 116.149.238.0/23 211.91.80.0-211.91.111.255 220.195.200.0/21 220.205.64.0/19 220.205.120.0/22 220.205.225.0/24 220.205.233.0/24 220.205.240.0-220.205.245.255 220.205.248.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:18:df:3a:62:9c:7e:c9:fb:88:0d:c9:ff:a7:c5:30:b4:42: 23:aa:97:7a:03:e5:00:03:7c:e6:d2:63:b8:1f:3e:43:35:8e: 0f:b4:18:b6:77:82:7d:eb:ae:6e:53:54:31:dc:79:4a:cd:0e: 2b:04:c4:20:9d:c7:69:ac:2f:7c:fe:a7:e0:50:1c:a4:3d:a1: 50:d4:26:eb:7d:30:7b:3c:9e:2f:72:18:ce:96:64:2d:a3:4d: 57:d7:42:13:01:30:29:df:b1:b9:0d:63:13:c8:3d:d0:ab:ca: a4:17:48:e9:ac:7e:9b:57:bb:ff:b3:91:a6:df:b6:8c:04:80: 14:cb:7c:d1:f3:39:ad:8a:33:65:a7:2c:85:0e:75:03:2a:a7: 19:13:ca:1e:0d:0c:60:c6:73:6d:25:79:30:3a:ff:2c:5d:a9: ca:6f:cb:7c:e2:1e:6a:ba:82:fc:64:6d:24:07:0e:2c:be:3b: 87:98:a4:dc:6d:32:65:b1:1c:6a:26:f4:cb:fc:e4:71:ab:fc: 44:7b:8d:2b:01:28:66:5f:39:69:a7:ab:45:37:77:e5:9d:4e: 73:73:8f:5e:a4:73:cb:62:92:e2:17:41:35:6d:8f:48:92:d2: 93:3c:e5:7d:d1:b6:0c:93:2c:f1:07:4a:8d:df:bb:c6:04:59: 10:51:85:7c -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIUJGWD/EQuHu1xXDkIcn0hmt8MsfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA4MDYxNjQ5NTRaFw0yNzA4MDUxNjU0NTRaMDMxMTAvBgNV BAMTKDUxNzYyQTdBOENBMkVDRkU5NEI2Njc0MzA0QzU0MjgxQTFBNjEzMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6FZPSQxStPwXsTfAjQ9TApU3 1eNwNTWWgRdSfEe3SIqF2F4pKzwFddCzLYJdlAQEapAWVnkHMzVC96KdxbZHDkdu mcnFX4TDSlOOUuoPr10RFUFBCUGrZBwHg5y253zTDODIltamPq887D3Auxgbng77 mXD2bgfNSwsshb+Ji/etEs8oKYFzYaLw65GkuGEJDBiaS0xrh5+UPsk+KT6th4cM 71wh5/vQ0pf7Jkwr0h0mlGiH6Qj/ITZM5eQUFz8NuP14bn3s/LJWxTmCV9Ptq7CZ yB+z0CiIzsHYN7wkFIp/LnK9706yeUgz76XF3NotOWJDLSo380dNcbdZ9c1HAgMB AAGjggIqMIICJjAdBgNVHQ4EFgQUUXYqeoyi7P6UtmdDBMVCgaGmEwIwHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzE0MDcyNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBggrBgEFBQcBBwEB/wRWMFQwUgQC AAEwTAMEBHSVwAMEAXSV7jAMAwQE01tQAwQE01tgAwQD3MPIAwQF3M1AAwQC3M14 AwQA3M3hAwQA3M3pMAwDBATczfADBAHczfQDBAPczfgwDQYJKoZIhvcNAQELBQAD ggEBAGwY3zpinH7J+4gNyf+nxTC0QiOql3oD5QADfObSY7gfPkM1jg+0GLZ3gn3r rm5TVDHceUrNDisExCCdx2msL3z+p+BQHKQ9oVDUJut9MHs8ni9yGM6WZC2jTVfX QhMBMCnfsbkNYxPIPdCryqQXSOmsfptXu/+zkabftowEgBTLfNHzOa2KM2WnLIUO dQMqpxkTyh4NDGDGc20leTA6/yxdqcpvy3ziHmq6gvxkbSQHDiy+O4eYpNxtMmWx HGom9Mv85HGr/ER7jSsBKGZfOWmnq0U3d+WdTnNzj16kc8tikuIXQTVtj0iS0pM8 5X3RtgyTLPEHSo3fu8YEWRBRhXw= -----END CERTIFICATE-----Generated at Sat Aug 29 07:01:59 2026 by rpki-client