$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140886.roa File: AS140886.roa (raw, json) Hash identifier: K5iUVEu675lj+AF0RThtVbTFERKfLsnu04bkletpO2Y= Subject key identifier: 71:FE:D1:63:3E:56:A2:8C:40:12:37:5B:86:DC:C2:15:33:92:A1:C1 Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 6EB7A9AA0F891D85DC0748CE1CA7ACBCF24BB216 Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140886.roa Signing time: Tue 01 Sep 2026 02:53:48 +0000 ROA not before: Tue 01 Sep 2026 02:48:48 +0000 ROA not after: Tue 31 Aug 2027 02:53:48 +0000 asID: 140886 IP address blocks: 211.97.72.0/22 maxlen: 22 211.97.72.0/24 maxlen: 24 211.97.80.0/22 maxlen: 22 211.97.81.0/24 maxlen: 24 211.97.82.0/24 maxlen: 24 211.97.84.0/24 maxlen: 24 211.97.85.0/24 maxlen: 24 211.97.88.0/22 maxlen: 22 211.97.92.0/22 maxlen: 22 211.97.92.0/24 maxlen: 24 211.97.93.0/24 maxlen: 24 211.97.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b7:a9:aa:0f:89:1d:85:dc:07:48:ce:1c:a7:ac:bc:f2:4b:b2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: Sep 1 02:48:48 2026 GMT Not After : Aug 31 02:53:48 2027 GMT Subject: CN=71FED1633E56A28C4012375B86DCC2153392A1C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ec:75:59:e5:cc:57:2d:08:f0:0b:9c:e4:38: 6a:57:ff:02:bc:67:6b:80:e2:5f:da:8b:15:26:f8: 96:80:3b:3a:d7:1c:11:f3:77:93:c3:40:c6:3b:d6: d3:17:dd:ab:98:db:be:82:34:fb:3d:39:1a:3e:32: da:cd:96:fa:6a:bb:09:95:e4:1e:98:c4:b0:c6:c3: 64:78:0e:7a:08:fe:96:38:26:4c:46:b5:eb:58:a2: f5:89:cd:b6:51:7d:7f:b6:5d:fa:63:10:7b:67:24: 02:af:a0:98:34:15:9b:df:6b:cc:02:ea:81:a9:fd: ef:78:1f:bb:27:3d:46:84:be:e2:6c:11:bd:91:e1: e8:df:58:90:d3:61:f0:f1:2a:16:76:d5:66:bf:4d: c2:48:92:79:9d:d6:23:ac:c8:ec:eb:75:c9:3c:7c: 82:89:05:b8:8d:8b:eb:bc:09:73:bf:9d:ca:25:20: 22:38:27:36:72:69:ef:a2:6c:b3:5b:56:18:7a:c5: bc:3f:67:ff:96:e3:61:a6:ce:6f:21:c9:0d:ce:8a: 5a:d9:8e:75:33:0b:ad:ed:ea:1c:65:ff:55:45:3f: 6f:a9:1d:e0:c6:5d:24:ce:1b:9c:4f:b3:b1:76:97: fe:f7:38:bf:97:f9:80:64:31:b6:ef:b1:64:b0:9a: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FE:D1:63:3E:56:A2:8C:40:12:37:5B:86:DC:C2:15:33:92:A1:C1 X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/AS140886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.97.72.0/22 211.97.80.0-211.97.85.255 211.97.88.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:29:63:ac:c1:14:71:b4:ca:f8:2e:e7:a2:00:bf:a9:b8:ce: d3:9e:a3:c1:30:05:2b:74:84:90:ea:05:bc:62:1d:2f:ae:7c: dd:57:c1:d3:78:e1:37:19:6a:d4:09:68:15:00:8e:56:ba:c3: 43:93:8c:93:e4:db:18:90:d3:35:ce:00:38:e5:67:d7:fe:ff: a8:8e:85:db:e3:63:c6:31:03:e2:eb:b7:6d:1b:50:32:5b:04: c0:a6:89:11:35:a6:2e:52:88:58:ba:82:0c:65:c0:bb:ef:87: 81:a3:66:db:54:57:d0:6e:2a:45:9b:e5:ce:13:8c:29:49:6d: 79:a3:90:16:d8:d0:a8:7f:3a:0b:f6:1d:d9:b2:51:87:4f:53: 7d:42:0f:44:db:00:d3:63:6a:09:b4:18:db:c1:19:1c:91:0c: 14:85:2f:8e:68:55:a9:77:bc:af:38:99:38:a0:a1:03:b8:47: 94:ba:d3:b7:40:c6:df:57:8d:e8:0a:a4:5d:cd:5b:89:dc:09: 8c:97:7d:d7:72:ff:a4:22:0d:b0:7b:fb:85:3d:1f:d6:41:3d: 79:a2:b8:01:60:1f:ec:3f:08:f2:f9:20:4e:16:11:ff:5f:32: be:a0:45:fb:95:c0:67:67:44:05:a4:8a:ed:cb:37:26:34:50: 1e:5d:f2:a7 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUbrepqg+JHYXcB0jOHKesvPJLshYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA5MDEwMjQ4NDhaFw0yNzA4MzEwMjUzNDhaMDMxMTAvBgNV BAMTKDcxRkVEMTYzM0U1NkEyOEM0MDEyMzc1Qjg2RENDMjE1MzM5MkExQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf7HVZ5cxXLQjwC5zkOGpX/wK8 Z2uA4l/aixUm+JaAOzrXHBHzd5PDQMY71tMX3auY276CNPs9ORo+MtrNlvpquwmV 5B6YxLDGw2R4DnoI/pY4JkxGtetYovWJzbZRfX+2XfpjEHtnJAKvoJg0FZvfa8wC 6oGp/e94H7snPUaEvuJsEb2R4ejfWJDTYfDxKhZ21Wa/TcJIknmd1iOsyOzrdck8 fIKJBbiNi+u8CXO/ncolICI4JzZyae+ibLNbVhh6xbw/Z/+W42Gmzm8hyQ3OilrZ jnUzC63t6hxl/1VFP2+pHeDGXSTOG5xPs7F2l/73OL+X+YBkMbbvsWSwmnk7AgMB AAGjggH4MIIB9DAdBgNVHQ4EFgQUcf7RYz5WooxAEjdbhtzCFTOSocEwHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC9BUzE0MDg4Ni5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQC AAEwGgMEAtNhSDAMAwQE02FQAwQB02FUAwQD02FYMA0GCSqGSIb3DQEBCwUAA4IB AQAKKWOswRRxtMr4LueiAL+puM7TnqPBMAUrdISQ6gW8Yh0vrnzdV8HTeOE3GWrU CWgVAI5WusNDk4yT5NsYkNM1zgA45WfX/v+ojoXb42PGMQPi67dtG1AyWwTApokR NaYuUohYuoIMZcC774eBo2bbVFfQbipFm+XOE4wpSW15o5AW2NCofzoL9h3ZslGH T1N9Qg9E2wDTY2oJtBjbwRkckQwUhS+OaFWpd7yvOJk4oKEDuEeUutO3QMbfV43o CqRdzVuJ3AmMl33Xcv+kIg2we/uFPR/WQT15orgBYB/sPwjy+SBOFhH/XzK+oEX7 lcBnZ0QFpIrtyzcmNFAeXfKn -----END CERTIFICATE-----Generated at Wed Sep 30 08:57:15 2026 by rpki-client