$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS9929.roa File: AS9929.roa (raw, json) Hash identifier: KK74jwcDvE4/GRyR/ZxHCafKJSJIeyfgPASS8MlUljs= Subject key identifier: E1:7A:E6:35:BA:E4:E7:42:89:3E:71:BF:DB:71:2B:CF:76:64:4A:F0 Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 5D6807AE23AEF1AF03B585652850C6ED364C9ECF Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS9929.roa Signing time: Tue 28 Jul 2026 08:38:51 +0000 ROA not before: Tue 28 Jul 2026 08:33:51 +0000 ROA not after: Tue 27 Jul 2027 08:38:51 +0000 asID: 9929 IP address blocks: 61.240.48.0/21 maxlen: 21 61.241.78.0/24 maxlen: 24 61.242.136.0/23 maxlen: 23 61.242.144.0/22 maxlen: 22 61.243.220.0/24 maxlen: 24 116.142.222.0/24 maxlen: 24 116.147.14.0/23 maxlen: 23 116.162.63.0/24 maxlen: 24 116.162.75.0/24 maxlen: 24 116.169.20.0/23 maxlen: 23 116.170.64.0/24 maxlen: 24 116.170.81.0/24 maxlen: 24 116.178.96.0/24 maxlen: 24 116.178.97.0/24 maxlen: 24 211.90.165.0/24 maxlen: 24 211.90.199.0/24 maxlen: 24 211.91.121.0/24 maxlen: 24 211.97.190.0/24 maxlen: 24 220.194.159.0/24 maxlen: 24 220.196.96.0/23 maxlen: 23 220.196.200.0/21 maxlen: 21 220.197.72.0/24 maxlen: 24 220.197.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:68:07:ae:23:ae:f1:af:03:b5:85:65:28:50:c6:ed:36:4c:9e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Jul 28 08:33:51 2026 GMT Not After : Jul 27 08:38:51 2027 GMT Subject: CN=E17AE635BAE4E742893E71BFDB712BCF76644AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:42:c9:3a:a9:64:d1:18:eb:f5:06:dc:e8:d3: ef:e9:02:f8:36:d1:5f:e6:e4:22:6e:4c:85:bf:23: ee:25:0f:e4:8b:ef:07:12:6d:0d:a6:31:e1:84:c7: 4e:c8:9c:ba:85:f4:1c:bd:bf:8b:2b:21:38:de:f6: f0:8c:6e:78:39:4b:85:fb:d0:94:db:0b:c4:4f:86: c3:7e:a6:ae:44:89:2c:7e:8d:21:4c:6f:dd:34:b8: 6b:c8:bd:5a:20:68:9e:57:6a:bf:2d:a3:68:be:e3: 62:6e:bc:c0:79:74:49:22:57:24:bb:bc:f8:2b:71: 78:9a:d3:5c:6a:2c:15:63:d9:06:c3:17:99:2c:99: 1e:2b:32:dd:c2:b8:de:53:18:33:ca:f7:a5:86:ba: 66:8e:8e:48:08:72:32:0f:36:21:ee:eb:ae:ca:01: 04:36:90:0e:87:96:d2:aa:d0:a1:36:8b:44:6b:84: 96:93:e2:d5:15:37:6c:9e:e1:e9:95:68:89:45:55: 57:e1:bd:96:1c:16:53:db:f1:b7:24:4a:6d:0e:3c: c9:3a:a7:13:a4:83:ad:ef:01:c9:d3:e1:3e:2e:a4: c4:ae:a9:e2:58:0e:57:f0:54:32:e6:22:a5:f5:13: 85:43:3a:0c:a0:06:9a:0f:51:a5:fa:92:88:a7:06: 5d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7A:E6:35:BA:E4:E7:42:89:3E:71:BF:DB:71:2B:CF:76:64:4A:F0 X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS9929.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.240.48.0/21 61.241.78.0/24 61.242.136.0/23 61.242.144.0/22 61.243.220.0/24 116.142.222.0/24 116.147.14.0/23 116.162.63.0/24 116.162.75.0/24 116.169.20.0/23 116.170.64.0/24 116.170.81.0/24 116.178.96.0/23 211.90.165.0/24 211.90.199.0/24 211.91.121.0/24 211.97.190.0/24 220.194.159.0/24 220.196.96.0/23 220.196.200.0/21 220.197.72.0/23 Signature Algorithm: sha256WithRSAEncryption 88:05:c5:a4:2f:f1:07:5b:bd:7c:a8:60:22:58:94:9e:fb:5a: 00:59:7c:3c:a9:3d:c9:30:9a:c9:7a:5d:9c:42:ca:21:d6:7a: 46:ab:0c:c1:cd:43:4f:b3:4f:41:f3:8e:12:f0:db:8f:47:d0: 09:d7:e6:82:b9:08:1b:9d:1e:bd:53:c0:db:8d:ea:7c:d6:7b: 75:43:f0:44:46:59:32:4e:bd:19:4d:e5:7c:ed:d5:bd:0f:af: 9c:8e:cc:27:b5:59:12:9c:6e:4d:f7:b9:9c:2b:4a:dc:7c:87: a7:e1:3e:c7:16:21:ae:7d:b9:a1:b8:63:c4:92:30:dc:47:80: 2c:87:d1:f6:67:ed:58:ed:18:49:20:76:45:01:46:42:66:2f: b2:62:5e:b5:4f:35:46:d2:78:91:18:a6:96:25:8e:1a:02:d1: 0c:58:76:cb:fd:a2:dd:3d:28:61:20:e4:f2:63:43:43:71:c1: 1f:39:17:dd:4c:a2:d2:ee:1e:da:d8:dd:77:92:80:26:33:28: 46:e6:c4:9c:05:9b:37:3d:95:7e:44:4b:6c:56:83:a6:7c:53: 12:f8:e0:b1:7b:0a:8d:f8:1b:5e:62:d6:ff:23:75:e5:00:ee: fc:79:53:f9:a4:20:f9:2a:f3:cf:fa:95:93:17:f4:85:ed:91: 23:c9:12:b8 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUXWgHriOu8a8DtYVlKFDG7TZMns8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA3MjgwODMzNTFaFw0yNzA3MjcwODM4NTFaMDMxMTAvBgNV BAMTKEUxN0FFNjM1QkFFNEU3NDI4OTNFNzFCRkRCNzEyQkNGNzY2NDRBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQsk6qWTRGOv1Btzo0+/pAvg2 0V/m5CJuTIW/I+4lD+SL7wcSbQ2mMeGEx07InLqF9By9v4srITje9vCMbng5S4X7 0JTbC8RPhsN+pq5EiSx+jSFMb900uGvIvVogaJ5Xar8to2i+42JuvMB5dEkiVyS7 vPgrcXia01xqLBVj2QbDF5ksmR4rMt3CuN5TGDPK96WGumaOjkgIcjIPNiHu667K AQQ2kA6HltKq0KE2i0RrhJaT4tUVN2ye4emVaIlFVVfhvZYcFlPb8bckSm0OPMk6 pxOkg63vAcnT4T4upMSuqeJYDlfwVDLmIqX1E4VDOgygBpoPUaX6koinBl2zAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU4XrmNbrk50KJPnG/23Erz3ZkSvAwHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzk5Mjkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgZoGCCsGAQUFBwEHAQH/BIGKMIGHMIGE BAIAATB+AwQDPfAwAwQAPfFOAwQBPfKIAwQCPfKQAwQAPfPcAwQAdI7eAwQBdJMO AwQAdKI/AwQAdKJLAwQBdKkUAwQAdKpAAwQAdKpRAwQBdLJgAwQA01qlAwQA01rH AwQA01t5AwQA02G+AwQA3MKfAwQB3MRgAwQD3MTIAwQB3MVIMA0GCSqGSIb3DQEB CwUAA4IBAQCIBcWkL/EHW718qGAiWJSe+1oAWXw8qT3JMJrJel2cQsoh1npGqwzB zUNPs09B844S8NuPR9AJ1+aCuQgbnR69U8Dbjep81nt1Q/BERlkyTr0ZTeV87dW9 D6+cjswntVkSnG5N97mcK0rcfIen4T7HFiGufbmhuGPEkjDcR4Ash9H2Z+1Y7RhJ IHZFAUZCZi+yYl61TzVG0niRGKaWJY4aAtEMWHbL/aLdPShhIOTyY0NDccEfORfd TKLS7h7a2N13koAmMyhG5sScBZs3PZV+REtsVoOmfFMS+OCxewqN+BteYtb/I3Xl AO78eVP5pCD5KvPP+pWTF/SF7ZEjyRK4 -----END CERTIFICATE-----Generated at Sat Aug 29 06:35:29 2026 by rpki-client