$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS141771.roa File: AS141771.roa (raw, json) Hash identifier: acL6A9FBOTix6vMOO6LaaytfCTJ8VG74FAh1dtGJsNE= Subject key identifier: B9:37:2C:22:99:86:1B:B8:99:DA:9C:AE:CC:95:EB:8B:01:9B:03:BD Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 2C33FA1352A97038C4FAE3E5710C734BDAFFD31E Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS141771.roa Signing time: Mon 29 Jun 2026 15:16:27 +0000 ROA not before: Mon 29 Jun 2026 15:11:27 +0000 ROA not after: Mon 28 Jun 2027 15:16:27 +0000 asID: 141771 IP address blocks: 101.50.8.0/22 maxlen: 22 101.50.12.0/22 maxlen: 22 116.68.136.0/22 maxlen: 22 116.68.140.0/22 maxlen: 22 116.68.176.0/22 maxlen: 22 116.68.180.0/22 maxlen: 22 116.197.160.0/22 maxlen: 22 116.197.164.0/22 maxlen: 22 116.254.104.0/22 maxlen: 22 116.254.108.0/22 maxlen: 22 122.200.40.0/22 maxlen: 22 122.200.44.0/22 maxlen: 22 123.242.192.0/22 maxlen: 22 123.242.196.0/22 maxlen: 22 123.254.96.0/22 maxlen: 22 123.254.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:33:fa:13:52:a9:70:38:c4:fa:e3:e5:71:0c:73:4b:da:ff:d3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: Jun 29 15:11:27 2026 GMT Not After : Jun 28 15:16:27 2027 GMT Subject: CN=B9372C2299861BB899DA9CAECC95EB8B019B03BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:8a:4f:f9:3e:90:8e:c2:4f:1a:0c:0e:0c: b1:2d:b3:9d:29:30:26:68:bd:28:f7:43:fc:65:de: a9:8d:f5:a7:49:81:3b:c6:11:d2:1f:55:a1:3a:13: 98:8f:59:b5:27:e5:0a:07:e9:77:51:f2:98:fb:bf: cd:b1:43:25:62:c6:62:2a:04:60:c2:b9:47:78:7a: 55:d4:b1:ea:33:56:46:d5:d0:71:dc:04:ef:03:f9: f1:19:5c:c0:33:f1:6b:b6:87:b1:f2:5c:5b:52:94: 5a:50:5d:42:39:a2:64:1e:04:5f:fd:5c:f5:89:6b: 9c:37:3a:d3:0c:45:1b:89:74:85:af:23:33:8e:a7: 18:86:86:15:03:b6:46:8a:b3:e1:7c:09:00:0b:f0: 01:2e:93:a1:14:57:22:85:6a:96:ae:ca:5e:6e:20: c4:ee:95:1a:17:4f:ee:09:e9:21:e3:86:89:cb:1c: c6:50:35:87:a0:ff:1e:44:3a:c5:03:8c:93:0d:cd: 15:96:af:e3:6f:d0:69:5e:77:ec:63:34:df:e4:66: 44:9d:9b:89:b0:c7:08:de:d6:49:2f:66:94:7e:10: 75:f2:ee:85:90:79:c3:03:f9:83:fa:df:5a:6b:90: ab:6b:ee:1e:61:7d:7d:c6:74:1e:02:bf:89:30:3a: c1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:37:2C:22:99:86:1B:B8:99:DA:9C:AE:CC:95:EB:8B:01:9B:03:BD X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/AS141771.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.50.8.0/21 116.68.136.0/21 116.68.176.0/21 116.197.160.0/21 116.254.104.0/21 122.200.40.0/21 123.242.192.0/21 123.254.96.0/21 Signature Algorithm: sha256WithRSAEncryption 7b:f8:b2:05:ec:8d:75:a6:ae:0f:6d:77:a7:a1:8d:fb:d5:08: 94:1f:c0:bb:94:9d:fd:7f:fc:c8:8b:35:00:f5:93:6a:08:95: 4b:b6:0c:c3:8d:06:b7:6f:65:db:d4:b9:7e:72:4b:1b:6e:19: 69:89:5e:dc:db:a4:86:10:77:01:f9:10:7f:a5:4f:ab:c5:19: 02:65:8c:aa:d5:cf:3b:03:46:0a:1c:70:43:fc:bb:1e:b7:7c: 2c:f4:86:c0:d3:7a:9d:79:09:7a:59:19:ce:82:d4:03:c2:d6: 07:39:6f:62:64:60:94:50:53:43:4d:50:ea:71:1a:d1:23:e4: 86:ba:74:a7:19:4f:76:c5:a1:9f:f8:79:b8:c4:6e:16:a9:4f: da:4b:7b:be:f8:80:12:d8:a2:e6:47:55:8d:eb:0f:6b:e9:15: eb:0f:3b:da:68:22:ac:e1:50:eb:0c:a3:db:3a:70:90:0b:b3: 69:8a:74:bc:ec:54:4e:9a:13:77:70:ef:18:c4:a6:ea:fa:e5: 0e:76:4f:29:23:73:96:fe:a5:18:61:8f:4f:80:73:cb:50:f4: 1d:bf:08:cb:90:4f:a1:25:d0:cc:e7:31:3d:d3:f4:6e:f0:e5: da:42:8c:1b:d4:f4:50:97:37:88:45:a2:73:35:2d:54:aa:05: 2a:04:6c:59 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIULDP6E1KpcDjE+uPlcQxzS9r/0x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjA2MjkxNTExMjdaFw0yNzA2MjgxNTE2MjdaMDMxMTAvBgNV BAMTKEI5MzcyQzIyOTk4NjFCQjg5OURBOUNBRUNDOTVFQjhCMDE5QjAzQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmIpP+T6QjsJPGgwODLEts50p MCZovSj3Q/xl3qmN9adJgTvGEdIfVaE6E5iPWbUn5QoH6XdR8pj7v82xQyVixmIq BGDCuUd4elXUseozVkbV0HHcBO8D+fEZXMAz8Wu2h7HyXFtSlFpQXUI5omQeBF/9 XPWJa5w3OtMMRRuJdIWvIzOOpxiGhhUDtkaKs+F8CQAL8AEuk6EUVyKFapauyl5u IMTulRoXT+4J6SHjhonLHMZQNYeg/x5EOsUDjJMNzRWWr+Nv0Gled+xjNN/kZkSd m4mwxwje1kkvZpR+EHXy7oWQecMD+YP631prkKtr7h5hfX3GdB4Cv4kwOsExAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUuTcsIpmGG7iZ2pyuzJXriwGbA70wHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC9BUzE0MTc3MS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJBggrBgEFBQcBBwEB/wQ6MDgwNgQC AAEwMAMEA2UyCAMEA3REiAMEA3REsAMEA3TFoAMEA3T+aAMEA3rIKAMEA3vywAME A3v+YDANBgkqhkiG9w0BAQsFAAOCAQEAe/iyBeyNdaauD213p6GN+9UIlB/Au5Sd /X/8yIs1APWTagiVS7YMw40Gt29l29S5fnJLG24ZaYle3NukhhB3AfkQf6VPq8UZ AmWMqtXPOwNGChxwQ/y7Hrd8LPSGwNN6nXkJelkZzoLUA8LWBzlvYmRglFBTQ01Q 6nEa0SPkhrp0pxlPdsWhn/h5uMRuFqlP2kt7vviAEtii5kdVjesPa+kV6w872mgi rOFQ6wyj2zpwkAuzaYp0vOxUTpoTd3DvGMSm6vrlDnZPKSNzlv6lGGGPT4Bzy1D0 Hb8Iy5BPoSXQzOcxPdP0bvDl2kKMG9T0UJc3iEWiczUtVKoFKgRsWQ== -----END CERTIFICATE-----Generated at Tue Jul 14 21:53:51 2026 by rpki-client