$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140886.roa File: AS140886.roa (raw, json) Hash identifier: WUaoZKu7K4H2AeGcE1P71u/YcQk8t3wFdKe7sIqIROQ= Subject key identifier: 73:1C:23:6E:03:12:5C:22:49:C0:02:87:4A:B5:D8:1E:E7:0E:E1:B6 Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 5C2600021CF0A69E4584317C2332593FE61C1D2D Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140886.roa Signing time: Fri 29 May 2026 17:50:48 +0000 ROA not before: Fri 29 May 2026 17:45:48 +0000 ROA not after: Fri 28 May 2027 17:50:48 +0000 asID: 140886 IP address blocks: 211.97.72.0/22 maxlen: 22 211.97.80.0/22 maxlen: 22 211.97.81.0/24 maxlen: 24 211.97.82.0/24 maxlen: 24 211.97.84.0/24 maxlen: 24 211.97.85.0/24 maxlen: 24 211.97.88.0/22 maxlen: 22 211.97.92.0/22 maxlen: 22 211.97.92.0/24 maxlen: 24 211.97.93.0/24 maxlen: 24 211.97.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:26:00:02:1c:f0:a6:9e:45:84:31:7c:23:32:59:3f:e6:1c:1d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: May 29 17:45:48 2026 GMT Not After : May 28 17:50:48 2027 GMT Subject: CN=731C236E03125C2249C002874AB5D81EE70EE1B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e6:62:8d:58:17:59:c1:f9:55:92:b3:4f:1b: 9b:1c:40:20:32:32:02:39:20:9d:c8:9d:d9:bf:02: 6a:55:cc:84:61:ea:c0:53:96:84:70:1c:84:b6:73: d0:fc:23:c4:ba:e2:21:68:53:c6:b7:b8:7c:7e:8f: 22:f8:2f:e3:5e:f9:38:fe:69:ec:64:11:85:a1:03: f1:45:85:8c:f3:55:a4:ee:25:54:d1:4a:43:d3:b8: 2c:da:ea:6e:2f:57:63:2e:a3:0b:e0:13:52:20:69: ba:5b:6c:79:10:6b:1d:5e:b6:08:a7:c4:ec:eb:82: d1:3d:90:42:34:66:d2:31:6b:70:53:78:7c:98:fb: a6:cd:f9:cc:f9:b9:bd:12:97:b8:8b:5e:47:75:85: 4a:e2:15:ff:a4:d1:75:8f:00:05:d3:40:73:ea:7c: 59:aa:67:e1:91:67:b9:d8:75:56:04:1e:fb:eb:bd: 07:4a:8e:62:3a:6a:2f:c4:d5:0a:eb:13:86:cb:3c: 2f:23:dd:66:de:a7:2a:3b:1c:b7:51:63:3d:2c:c7: fd:61:84:23:81:d8:f3:8e:7a:ac:1c:b0:c7:bc:c8: 03:e2:3d:82:b1:60:1c:5a:67:b3:ee:f5:2f:05:2d: 0f:1c:c5:2d:e8:f9:4c:1b:e9:90:9c:c2:b9:1d:cd: 34:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1C:23:6E:03:12:5C:22:49:C0:02:87:4A:B5:D8:1E:E7:0E:E1:B6 X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.97.72.0/22 211.97.80.0-211.97.85.255 211.97.88.0/21 Signature Algorithm: sha256WithRSAEncryption 26:6f:9f:f7:ed:fe:50:99:83:4e:54:50:fc:e1:d1:e7:ef:96: 3f:70:12:ea:05:74:c0:fe:63:1c:bc:b0:c7:6d:1c:c8:8f:3f: ee:e4:36:40:21:ec:2c:c4:6d:22:63:33:2a:9c:23:25:ef:93: 69:68:b3:18:18:0d:13:e7:e9:8d:7d:0b:2d:57:2f:48:b4:cc: 9c:cc:93:cb:58:ba:a6:58:83:eb:44:63:a5:a9:0b:b7:92:cf: cc:40:22:b1:5f:67:2e:b5:68:8e:20:0d:69:ee:52:02:70:b6: 33:df:c8:dc:e4:9b:cd:dd:fb:aa:bd:c5:9c:f4:dd:31:74:d4: 0a:39:26:51:c2:3d:df:10:36:8d:8a:e0:df:a0:76:2f:15:0c: a6:38:d7:ef:58:c3:e0:ba:52:23:1a:31:d1:9c:8b:e7:80:58: 72:f7:e9:4a:f5:84:8b:c3:9f:cf:16:b3:69:ab:c2:24:55:33: 9f:30:45:ee:04:1d:fd:62:00:2b:00:36:19:4e:b9:a5:26:23: 04:c8:4a:a9:97:c8:fa:e0:00:0b:f8:95:8b:1c:3c:d7:5b:12: 52:4e:30:f1:cf:a7:96:f9:13:d0:e8:f2:c8:7a:51:c2:e0:3b: 53:c1:df:e5:e5:e2:9b:d3:71:45:3e:7b:85:11:be:0d:7b:09: 4d:4c:f7:fe -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUXCYAAhzwpp5FhDF8IzJZP+YcHS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA1MjkxNzQ1NDhaFw0yNzA1MjgxNzUwNDhaMDMxMTAvBgNV BAMTKDczMUMyMzZFMDMxMjVDMjI0OUMwMDI4NzRBQjVEODFFRTcwRUUxQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5mKNWBdZwflVkrNPG5scQCAy MgI5IJ3Indm/AmpVzIRh6sBTloRwHIS2c9D8I8S64iFoU8a3uHx+jyL4L+Ne+Tj+ aexkEYWhA/FFhYzzVaTuJVTRSkPTuCza6m4vV2MuowvgE1IgabpbbHkQax1etgin xOzrgtE9kEI0ZtIxa3BTeHyY+6bN+cz5ub0Sl7iLXkd1hUriFf+k0XWPAAXTQHPq fFmqZ+GRZ7nYdVYEHvvrvQdKjmI6ai/E1QrrE4bLPC8j3Wbepyo7HLdRYz0sx/1h hCOB2POOeqwcsMe8yAPiPYKxYBxaZ7Pu9S8FLQ8cxS3o+Uwb6ZCcwrkdzTRfAgMB AAGjggH4MIIB9DAdBgNVHQ4EFgQUcxwjbgMSXCJJwAKHSrXYHucO4bYwHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzE0MDg4Ni5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQC AAEwGgMEAtNhSDAMAwQE02FQAwQB02FUAwQD02FYMA0GCSqGSIb3DQEBCwUAA4IB AQAmb5/37f5QmYNOVFD84dHn75Y/cBLqBXTA/mMcvLDHbRzIjz/u5DZAIewsxG0i YzMqnCMl75NpaLMYGA0T5+mNfQstVy9ItMyczJPLWLqmWIPrRGOlqQu3ks/MQCKx X2cutWiOIA1p7lICcLYz38jc5JvN3fuqvcWc9N0xdNQKOSZRwj3fEDaNiuDfoHYv FQymONfvWMPgulIjGjHRnIvngFhy9+lK9YSLw5/PFrNpq8IkVTOfMEXuBB39YgAr ADYZTrmlJiMEyEqpl8j64AAL+JWLHDzXWxJSTjDxz6eW+RPQ6PLIelHC4DtTwd/l 5eKb03FFPnuFEb4NewlNTPf+ -----END CERTIFICATE-----Generated at Fri May 29 23:49:10 2026 by rpki-client