$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: KbvTwSjHs1CU3C0x1/qWjuMXfkSjPEVjb9VRMkrLl2U= Subject key identifier: D5:FA:1C:8A:AE:99:92:E1:47:C1:3D:31:16:24:A3:7F:A7:79:51:10 Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Certificate serial: 1EF7A97842C0C8CD8E8E8077D6A4C8128473A474 Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS7029.roa Signing time: Mon 08 Jun 2026 06:54:11 +0000 ROA not before: Mon 08 Jun 2026 06:49:11 +0000 ROA not after: Mon 07 Jun 2027 06:54:11 +0000 asID: 7029 IP address blocks: 122.8.24.0/22 maxlen: 24 122.8.28.0/22 maxlen: 24 122.8.104.0/22 maxlen: 24 122.8.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f7:a9:78:42:c0:c8:cd:8e:8e:80:77:d6:a4:c8:12:84:73:a4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9 Validity Not Before: Jun 8 06:49:11 2026 GMT Not After : Jun 7 06:54:11 2027 GMT Subject: CN=D5FA1C8AAE9992E147C13D311624A37FA7795110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c1:af:cf:23:33:f0:c2:ac:6e:55:d7:8a:6e: 6d:72:dd:83:c8:02:d2:a2:c6:10:7e:de:48:04:68: 98:ef:13:a3:c1:76:32:17:80:1d:6f:0a:b1:6f:7d: 8a:1e:c1:00:74:24:f4:ea:4f:3a:69:8c:62:9d:da: 02:6b:c0:5d:34:8e:25:0c:99:59:39:37:45:19:f5: cf:29:bb:4f:5b:78:32:28:14:61:78:44:74:89:ee: 2c:00:da:df:d8:d1:ae:42:d6:e4:b3:df:62:48:02: 0f:71:b2:c9:da:29:5c:c2:3d:1c:3e:9c:ae:0e:48: ea:27:f6:e4:4e:dc:3b:71:0e:bb:d2:c3:13:6c:fc: 42:b7:08:af:27:27:28:48:3e:61:2a:d6:fa:a8:2b: 88:70:ac:64:21:5b:18:63:19:5c:84:05:0a:17:f7: 1a:32:26:40:3f:48:8a:28:4f:c7:00:2b:21:e3:78: c9:c2:c0:a3:7f:0a:ac:2f:ff:01:0d:13:d9:76:92: 5d:c1:79:a9:e6:ac:44:7d:02:c2:2a:5d:c5:1f:d7: 5a:09:0b:b5:b7:62:a2:77:ac:09:37:b4:1f:e5:b9: 06:07:dd:46:98:2c:4c:58:86:49:c4:c4:a7:9e:73: cb:5f:ba:a9:46:cc:02:1e:1d:43:01:a3:e6:0b:bc: ef:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FA:1C:8A:AE:99:92:E1:47:C1:3D:31:16:24:A3:7F:A7:79:51:10 X509v3 Authority Key Identifier: keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.8.24.0/21 122.8.104.0/22 122.8.120.0/22 Signature Algorithm: sha256WithRSAEncryption 71:28:08:9d:de:65:49:ab:d6:62:d8:2c:2c:a0:6b:f1:92:ef: 11:44:50:ba:d7:30:41:a7:c6:bd:b7:10:8b:21:69:dc:28:bb: 2b:d4:a7:f2:7c:65:05:a9:fe:ea:d2:b4:58:06:6b:77:cb:1e: 4c:fe:d7:1d:6e:e6:e9:b0:27:90:19:cb:c8:8e:d5:4f:4d:0e: 02:09:49:76:5a:5f:23:5d:99:75:01:74:f6:ff:c7:92:d9:7d: 76:d5:50:35:a5:7f:1b:e3:ad:6b:7f:c9:4b:31:1f:7f:21:1d: 58:c6:65:cf:29:c8:bb:1f:fd:6e:31:31:d4:b2:a0:ad:f2:28: 8f:e2:65:ec:e7:2c:61:91:b3:91:e0:70:2d:1f:b6:39:d6:59: 3d:aa:95:c5:82:ef:5e:0b:a8:01:44:9a:ac:41:96:82:36:18: 07:12:8c:7f:8e:95:fe:dc:11:d0:e8:ab:9b:44:88:8d:9f:b8: ce:56:e8:b7:3e:54:3a:9a:fa:b3:31:b8:4a:90:fe:51:6d:f5: 7a:61:e2:fb:1d:83:9e:55:66:cd:be:8e:07:84:d2:e9:80:8a: d1:8a:04:f6:2a:eb:4e:8a:a9:ab:65:3a:fc:bf:9c:24:79:b0: fb:59:e2:1b:c7:7a:d8:18:4e:2f:f7:4e:f1:18:52:7d:03:34: 1c:df:da:67 -----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgIUHvepeELAyM2OjoB31qTIEoRzpHQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTM3MEYwMDAwMTEwLwYDVQQFEygwMTgyRDRDRDBD NkQyMURDMkMyOTZFRDI2MDZBNzBENzk2RDVCQkI5MB4XDTI2MDYwODA2NDkxMVoX DTI3MDYwNzA2NTQxMVowMzExMC8GA1UEAxMoRDVGQTFDOEFBRTk5OTJFMTQ3QzEz RDMxMTYyNEEzN0ZBNzc5NTExMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJLBr88jM/DCrG5V14pubXLdg8gC0qLGEH7eSARomO8To8F2MheAHW8KsW99 ih7BAHQk9OpPOmmMYp3aAmvAXTSOJQyZWTk3RRn1zym7T1t4MigUYXhEdInuLADa 39jRrkLW5LPfYkgCD3GyydopXMI9HD6crg5I6if25E7cO3EOu9LDE2z8QrcIrycn KEg+YSrW+qgriHCsZCFbGGMZXIQFChf3GjImQD9IiihPxwArIeN4ycLAo38KrC// AQ0T2XaSXcF5qeasRH0CwipdxR/XWgkLtbdionesCTe0H+W5BgfdRpgsTFiGScTE p55zy1+6qUbMAh4dQwGj5gu87/0CAwEAAaOCAe4wggHqMB0GA1UdDgQWBBTV+hyK rpmS4UfBPTEWJKN/p3lREDAfBgNVHSMEGDAWgBQBgtTNDG0h3CwpbtJganDXltW7 uTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEzNjU0ODA2MzY0NDIyMTYzLzAvMDE4MkQ0 Q0QwQzZEMjFEQzJDMjk2RUQyNjA2QTcwRDc5NkQ1QkJCOS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvQVlMVXpReHRJ ZHdzS1c3U1lHcHcxNWJWdTdrLmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUH MAuGQHJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMzY1NDgwNjM2 NDQyMjE2My8wL0FTNzAyOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEA3oIGAMEAnoIaAMEAnoIeDANBgkq hkiG9w0BAQsFAAOCAQEAcSgInd5lSavWYtgsLKBr8ZLvEURQutcwQafGvbcQiyFp 3Ci7K9Sn8nxlBan+6tK0WAZrd8seTP7XHW7m6bAnkBnLyI7VT00OAglJdlpfI12Z dQF09v/Hktl9dtVQNaV/G+Ota3/JSzEffyEdWMZlzynIux/9bjEx1LKgrfIoj+Jl 7OcsYZGzkeBwLR+2OdZZPaqVxYLvXguoAUSarEGWgjYYBxKMf46V/twR0Oirm0SI jZ+4zlbotz5UOpr6szG4SpD+UW31emHi+x2DnlVmzb6OB4TS6YCK0YoE9irrToqp q2U6/L+cJHmw+1niG8d62BhOL/dO8RhSfQM0HN/aZw== -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:40 2026 by rpki-client