$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS141771.roa File: AS141771.roa (raw, json) Hash identifier: JY23H8UeLEjj+flbbzfIDxoD3sfV6FWOWMvVSS0cgL4= Subject key identifier: E2:75:1F:F5:3B:23:7D:69:61:3C:8F:33:63:0C:7A:C5:DD:11:97:A8 Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 363799CA94F77EBA32ABD22E0D7FD56EFAE1704B Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS141771.roa Signing time: Mon 29 Jun 2026 15:05:25 +0000 ROA not before: Mon 29 Jun 2026 15:00:25 +0000 ROA not after: Mon 28 Jun 2027 15:05:25 +0000 asID: 141771 IP address blocks: 45.123.168.0/22 maxlen: 22 45.123.172.0/22 maxlen: 22 45.123.176.0/22 maxlen: 22 45.123.180.0/22 maxlen: 22 103.63.160.0/22 maxlen: 22 103.63.164.0/22 maxlen: 22 103.63.168.0/22 maxlen: 22 103.63.172.0/22 maxlen: 22 103.63.176.0/22 maxlen: 22 103.63.180.0/22 maxlen: 22 103.192.8.0/22 maxlen: 22 103.192.12.0/22 maxlen: 22 103.192.16.0/22 maxlen: 22 103.192.20.0/22 maxlen: 22 103.192.24.0/22 maxlen: 22 103.192.28.0/22 maxlen: 22 2405:1480:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:37:99:ca:94:f7:7e:ba:32:ab:d2:2e:0d:7f:d5:6e:fa:e1:70:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Jun 29 15:00:25 2026 GMT Not After : Jun 28 15:05:25 2027 GMT Subject: CN=E2751FF53B237D69613C8F33630C7AC5DD1197A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:d7:ab:25:88:3b:8d:db:dd:79:e6:d6:d4: 89:a2:5e:02:5c:d5:7a:68:e2:8f:a5:3e:f1:4c:a4: 2c:75:9d:56:d7:dd:1d:30:25:d8:1f:46:05:a5:5f: 86:0b:5b:03:3e:fd:f8:b7:f0:4d:e9:ca:88:ca:16: 5d:d5:b4:15:68:24:8b:7d:3b:fc:67:10:0a:66:76: fa:7f:8e:f3:e9:ab:de:b2:13:df:5f:c8:4b:68:53: ee:1b:3d:17:c6:77:96:33:aa:5d:8c:73:bb:76:26: d3:6b:b0:0e:fb:65:03:28:ef:dd:61:91:a5:9d:14: 8c:32:f0:e9:6d:b2:df:50:67:7a:69:be:e9:82:55: aa:ec:e8:ff:4e:71:34:c6:02:38:5a:cd:b6:8f:47: de:8b:9f:5e:b4:5b:af:b2:24:33:fb:27:19:8d:0f: fe:d8:b8:41:9f:ce:78:ff:43:57:26:63:32:2f:de: 44:23:6c:2e:58:a0:ce:f4:31:c2:df:46:f7:83:46: 60:7a:bc:33:0f:91:1f:c0:4c:e8:ac:e9:51:06:55: b9:ef:a0:d1:11:77:78:8f:d4:35:af:6e:a8:b2:c5: 87:a5:36:87:eb:f3:ba:b5:e5:b2:3a:d2:7a:88:a5: 83:b0:d7:9c:b3:8a:43:da:67:6a:13:49:50:bf:b6: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:75:1F:F5:3B:23:7D:69:61:3C:8F:33:63:0C:7A:C5:DD:11:97:A8 X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS141771.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.168.0-45.123.183.255 103.63.160.0-103.63.183.255 103.192.8.0-103.192.31.255 IPv6: 2405:1480:3000::/48 Signature Algorithm: sha256WithRSAEncryption 69:0a:6d:d0:a4:bd:b3:d5:44:96:bb:20:f0:27:37:b8:89:a8: 31:3e:a6:af:27:da:a8:76:15:cf:e3:28:86:69:f3:2f:3b:4d: 5d:b0:07:08:ad:8b:b5:32:19:4c:96:35:fe:4b:d4:7d:c9:e6: 8e:5d:28:84:e2:38:02:81:17:e9:d5:1e:4c:61:a5:ad:7d:31: 5e:8a:c9:fe:44:2d:41:b4:87:a6:9f:a1:dd:5d:fb:83:ca:ff: 1f:e5:65:96:b4:87:d2:84:18:c4:f0:e0:bc:fb:40:ba:0d:fb: 85:11:77:cd:cb:f4:0a:c8:ed:c7:68:3f:ce:2d:98:7c:7f:27: f5:e8:79:61:5b:73:47:34:a9:d8:55:14:1c:ed:fe:7c:85:0e: 0b:14:b5:1e:e6:92:c1:eb:36:19:42:48:f3:b0:cf:8f:e3:1b: 61:02:85:b3:78:1c:54:f8:4b:3f:ee:72:c1:ed:11:ba:bd:7a: 21:53:81:cc:3f:ee:36:3d:79:26:20:98:c8:2e:13:e6:33:ea: 90:7b:6f:d2:a1:c4:88:26:62:d3:b1:d7:86:64:39:81:33:7e: ec:78:ed:1a:f8:f0:b6:8b:d4:4f:0f:ee:ea:4d:ef:0a:49:3d: b5:ff:9b:95:e7:16:82:cf:0d:73:79:8d:04:6e:0a:10:67:2d: 1d:2e:d7:4b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgIUNjeZypT3froyq9IuDX/VbvrhcEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA2MjkxNTAwMjVaFw0yNzA2MjgxNTA1MjVaMDMxMTAvBgNV BAMTKEUyNzUxRkY1M0IyMzdENjk2MTNDOEYzMzYzMEM3QUM1REQxMTk3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqNerJYg7jdvdeebW1ImiXgJc 1Xpo4o+lPvFMpCx1nVbX3R0wJdgfRgWlX4YLWwM+/fi38E3pyojKFl3VtBVoJIt9 O/xnEApmdvp/jvPpq96yE99fyEtoU+4bPRfGd5Yzql2Mc7t2JtNrsA77ZQMo791h kaWdFIwy8Oltst9QZ3ppvumCVars6P9OcTTGAjhazbaPR96Ln160W6+yJDP7JxmN D/7YuEGfznj/Q1cmYzIv3kQjbC5YoM70McLfRveDRmB6vDMPkR/ATOis6VEGVbnv oNERd3iP1DWvbqiyxYelNofr87q15bI60nqIpYOw15yzikPaZ2oTSVC/tq4LAgMB AAGjggIZMIICFTAdBgNVHQ4EFgQU4nUf9TsjfWlhPI8zYwx6xd0Rl6gwHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTc0NzI2NTMxNDIxOTYyNTEvMC9BUzE0MTc3MS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBUBggrBgEFBQcBBwEB/wRFMEMwMAQC AAEwKjAMAwQDLXuoAwQDLXuwMAwDBAVnP6ADBANnP7AwDAMEA2fACAMEBWfAADAP BAIAAjAJAwcAJAUUgDAAMA0GCSqGSIb3DQEBCwUAA4IBAQBpCm3QpL2z1USWuyDw Jze4iagxPqavJ9qodhXP4yiGafMvO01dsAcIrYu1MhlMljX+S9R9yeaOXSiE4jgC gRfp1R5MYaWtfTFeisn+RC1BtIemn6HdXfuDyv8f5WWWtIfShBjE8OC8+0C6DfuF EXfNy/QKyO3HaD/OLZh8fyf16HlhW3NHNKnYVRQc7f58hQ4LFLUe5pLB6zYZQkjz sM+P4xthAoWzeBxU+Es/7nLB7RG6vXohU4HMP+42PXkmIJjILhPmM+qQe2/SocSI JmLTsdeGZDmBM37seO0a+PC2i9RPD+7qTe8KST21/5uV5xaCzw1zeY0EbgoQZy0d LtdL -----END CERTIFICATE-----Generated at Tue Jul 14 22:58:10 2026 by rpki-client