$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS9929.roa File: AS9929.roa (raw, json) Hash identifier: mray8Hc9hUlh6GaBtgna3nSLrzooGrE1tsFSWBs63Ic= Subject key identifier: 70:F9:35:AE:35:3A:4E:62:F8:31:0D:3D:19:A1:42:C4:1D:1F:EA:1E Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 7C68E8840ECDE9E63763EC67B613406AA3918F7E Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS9929.roa Signing time: Fri 29 May 2026 11:12:43 +0000 ROA not before: Fri 29 May 2026 11:07:43 +0000 ROA not after: Fri 28 May 2027 11:12:43 +0000 asID: 9929 IP address blocks: 61.240.48.0/21 maxlen: 21 61.241.78.0/24 maxlen: 24 61.242.136.0/23 maxlen: 23 61.242.144.0/22 maxlen: 22 61.243.220.0/24 maxlen: 24 116.142.222.0/24 maxlen: 24 116.162.63.0/24 maxlen: 24 116.162.75.0/24 maxlen: 24 116.169.20.0/23 maxlen: 23 116.170.64.0/24 maxlen: 24 211.90.165.0/24 maxlen: 24 211.90.199.0/24 maxlen: 24 211.91.121.0/24 maxlen: 24 211.97.190.0/24 maxlen: 24 220.194.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:68:e8:84:0e:cd:e9:e6:37:63:ec:67:b6:13:40:6a:a3:91:8f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: May 29 11:07:43 2026 GMT Not After : May 28 11:12:43 2027 GMT Subject: CN=70F935AE353A4E62F8310D3D19A142C41D1FEA1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:f1:c3:94:bd:51:bb:7f:f8:4a:ab:67:cb: f6:8a:63:58:43:6d:42:57:ac:d1:54:56:2c:ec:e4: 6f:0e:a4:c6:9e:91:ba:77:74:31:c4:a1:43:31:10: ec:14:b8:97:bf:09:d2:0e:43:fa:d0:52:14:ac:8f: 0c:2f:78:c2:37:9c:e3:25:7c:86:ea:ca:72:a8:a2: 56:74:4e:90:da:bf:5c:55:89:ea:ae:3a:af:36:91: ef:d0:54:bd:27:ed:2c:ab:cd:01:52:a1:ce:73:c3: 03:aa:1c:df:f9:86:1b:de:0f:e4:6a:34:04:00:60: 1b:d8:a3:63:70:24:f3:52:19:ff:ca:ea:87:dc:d4: 28:1e:27:fe:f2:99:3d:83:21:36:e5:24:b7:1b:b7: 7a:14:00:f5:b4:09:69:63:a4:71:54:f5:d5:38:82: 53:20:9d:db:e3:48:56:aa:5c:a2:54:5b:6a:d5:87: 7b:b2:a8:3b:5e:b0:f2:81:55:29:27:9f:ae:fd:fe: 4d:52:d2:25:b7:bc:12:39:b3:89:44:de:04:44:c9: f9:60:eb:cd:b0:66:22:a1:6a:a0:9c:22:a2:34:f5: a3:11:ed:4c:a2:ad:18:d6:e5:94:cf:0a:cd:55:0b: 39:42:0a:36:0b:2e:32:a8:96:17:54:85:3d:93:30: 0a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F9:35:AE:35:3A:4E:62:F8:31:0D:3D:19:A1:42:C4:1D:1F:EA:1E X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS9929.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.240.48.0/21 61.241.78.0/24 61.242.136.0/23 61.242.144.0/22 61.243.220.0/24 116.142.222.0/24 116.162.63.0/24 116.162.75.0/24 116.169.20.0/23 116.170.64.0/24 211.90.165.0/24 211.90.199.0/24 211.91.121.0/24 211.97.190.0/24 220.194.159.0/24 Signature Algorithm: sha256WithRSAEncryption 11:9c:ec:0b:af:ce:97:7b:13:fd:f6:5c:47:e6:2d:41:2d:dc: 54:70:9d:2d:4f:23:0b:bb:8b:40:e3:5a:3e:83:1d:a3:a8:42: 61:36:30:9e:ee:ab:7d:5f:df:40:04:fb:fa:26:64:df:61:6a: 41:f2:c3:90:f8:f8:9e:fe:5f:b7:df:3c:e9:96:d5:87:b4:c1: f7:e8:ec:1a:e5:2d:a5:7a:9c:7f:d5:74:0f:2b:74:13:b6:dc: 60:e0:e2:f0:4a:4c:6e:61:ea:9c:3a:c7:2a:29:68:a2:18:dc: 27:2e:5d:d2:aa:f3:03:10:35:6b:00:1f:c3:b5:cf:89:a5:ec: ad:94:9b:1b:4e:c0:11:af:00:54:1e:42:20:19:bc:26:a0:f9: 7b:9c:2b:b0:ab:fa:23:1b:45:75:21:a9:92:47:18:46:83:72: cc:91:12:b6:53:38:ab:1c:9d:61:db:15:47:b2:3f:c2:30:98: e0:fd:40:a9:ca:79:d5:eb:99:27:ef:7f:59:83:f7:d2:71:cb: 33:7e:0e:c6:32:ee:9a:e8:57:af:f5:48:a7:88:c5:89:73:d8: ff:05:00:a6:5b:9c:cb:5c:b4:c1:db:25:69:8a:e0:f5:e6:9e: ef:07:a3:a8:67:8d:49:ca:89:7c:0a:db:a6:58:80:f7:f5:1f: ce:8c:d8:06 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUfGjohA7N6eY3Y+xnthNAaqORj34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA1MjkxMTA3NDNaFw0yNzA1MjgxMTEyNDNaMDMxMTAvBgNV BAMTKDcwRjkzNUFFMzUzQTRFNjJGODMxMEQzRDE5QTE0MkM0MUQxRkVBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5m/HDlL1Ru3/4Sqtny/aKY1hD bUJXrNFUVizs5G8OpMaekbp3dDHEoUMxEOwUuJe/CdIOQ/rQUhSsjwwveMI3nOMl fIbqynKoolZ0TpDav1xViequOq82ke/QVL0n7SyrzQFSoc5zwwOqHN/5hhveD+Rq NAQAYBvYo2NwJPNSGf/K6ofc1CgeJ/7ymT2DITblJLcbt3oUAPW0CWljpHFU9dU4 glMgndvjSFaqXKJUW2rVh3uyqDtesPKBVSknn679/k1S0iW3vBI5s4lE3gREyflg 682wZiKhaqCcIqI09aMR7UyirRjW5ZTPCs1VCzlCCjYLLjKolhdUhT2TMApxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUcPk1rjU6TmL4MQ09GaFCxB0f6h4wHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzk5Mjkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwcwYIKwYBBQUHAQcBAf8EZDBiMGAEAgAB MFoDBAM98DADBAA98U4DBAE98ogDBAI98pADBAA989wDBAB0jt4DBAB0oj8DBAB0 oksDBAF0qRQDBAB0qkADBADTWqUDBADTWscDBADTW3kDBADTYb4DBADcwp8wDQYJ KoZIhvcNAQELBQADggEBABGc7Auvzpd7E/32XEfmLUEt3FRwnS1PIwu7i0DjWj6D HaOoQmE2MJ7uq31f30AE+/omZN9hakHyw5D4+J7+X7ffPOmW1Ye0wffo7BrlLaV6 nH/VdA8rdBO23GDg4vBKTG5h6pw6xyopaKIY3CcuXdKq8wMQNWsAH8O1z4ml7K2U mxtOwBGvAFQeQiAZvCag+XucK7Cr+iMbRXUhqZJHGEaDcsyRErZTOKscnWHbFUey P8IwmOD9QKnKedXrmSfvf1mD99JxyzN+DsYy7proV6/1SKeIxYlz2P8FAKZbnMtc tMHbJWmK4PXmnu8Ho6hnjUnKiXwK26ZYgPf1H86M2AY= -----END CERTIFICATE-----Generated at Fri May 29 23:48:42 2026 by rpki-client