$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS140717.roa File: AS140717.roa (raw, json) Hash identifier: rfEwRyW7PARyZuu3TKBv4tlT8bMGb5eRco7yTFvzC1w= Subject key identifier: 6E:35:72:56:A0:92:61:51:C9:15:63:18:36:0C:BF:95:85:45:B9:D6 Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644 Certificate serial: 116FA3B66C81F7D1B7E3B5413926BB2445C248FF Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS140717.roa Signing time: Fri 05 Jun 2026 06:31:06 +0000 ROA not before: Fri 05 Jun 2026 06:26:06 +0000 ROA not after: Fri 04 Jun 2027 06:31:06 +0000 asID: 140717 IP address blocks: 157.0.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 01:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:6f:a3:b6:6c:81:f7:d1:b7:e3:b5:41:39:26:bb:24:45:c2:48:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644 Validity Not Before: Jun 5 06:26:06 2026 GMT Not After : Jun 4 06:31:06 2027 GMT Subject: CN=6E357256A0926151C9156318360CBF958545B9D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6d:42:59:0c:db:cf:84:45:9e:55:25:4d:e9: c1:04:79:f4:1b:13:a5:6b:d7:40:ae:45:ab:6d:92: f5:92:4d:f8:c9:b5:fa:59:ad:5e:25:87:28:c0:36: dc:14:e3:7b:c9:a6:4c:ba:dd:54:6e:c5:c9:6b:ab: 06:42:a9:1d:57:fb:e0:90:7c:5f:cb:7c:45:b2:5a: e1:dd:d4:fb:31:6a:52:26:90:54:fd:2d:b9:4b:44: 5b:28:a4:43:2b:2f:60:d1:04:e3:75:9c:63:d8:d9: c5:61:46:34:e6:c0:8e:de:6b:cd:d7:8c:3a:da:16: a3:5c:c1:a9:1b:86:2c:b1:1f:75:29:d1:78:c6:c0: fc:9d:ec:8f:89:b0:16:e4:6c:68:18:45:43:f7:e1: 83:4c:d2:45:33:bd:0b:96:f5:70:f6:02:aa:7b:04: 0d:40:67:14:fe:08:25:aa:3f:62:67:bc:d5:1f:9b: d8:76:b4:e3:11:8a:1f:54:c8:c3:04:dc:89:bc:b3: 2e:fe:87:28:7e:f6:99:3b:16:cc:c2:82:60:b0:cb: 1a:8e:fa:eb:11:5c:cf:9f:9b:61:ca:22:33:bc:f1: 59:9a:80:7c:3d:ab:43:87:c5:a5:02:89:48:be:a9: 11:4f:5e:41:0d:42:31:fc:7b:7c:a2:73:2a:42:82: 51:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:35:72:56:A0:92:61:51:C9:15:63:18:36:0C:BF:95:85:45:B9:D6 X509v3 Authority Key Identifier: keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/AS140717.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.0.144.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:ec:1a:e5:1f:c9:7c:ee:17:12:ad:f8:b0:c3:d4:ce:87:fd: 97:5e:02:ec:33:af:74:e3:ab:0e:ed:a5:eb:43:57:9c:a2:c1: f2:ed:03:62:be:77:4b:fd:3c:bd:b2:2f:a3:23:7d:bc:87:e8: 21:11:4e:ba:d1:e0:2d:06:29:c9:4e:03:e6:d0:9d:6c:55:45: 22:30:a5:06:87:2c:25:46:c5:da:f4:59:c2:5d:fc:a5:d9:7f: 95:6c:a5:5d:d7:5a:ca:1a:16:70:f3:60:71:64:fd:db:fd:3c: 68:e8:6d:02:14:65:d5:68:8e:42:86:91:37:dd:cb:0b:92:a4: fb:49:07:f5:ff:a9:1e:b7:e9:8b:45:1c:33:2c:d1:fd:93:ca: 6d:85:a4:47:d1:ce:fc:76:ea:22:ad:bf:6f:3d:2a:55:40:04: 3f:b6:47:d3:9c:5b:f0:b4:83:fd:12:f4:51:f4:09:01:be:8e: 66:c8:ef:6f:de:c8:05:40:db:29:38:e7:50:d4:c9:f8:42:3e: 0a:8d:7b:ae:6e:31:7e:96:06:f3:0a:ce:3e:07:e7:be:36:ec: 31:8c:b1:13:22:d5:b9:91:7b:65:71:c7:5f:5b:2c:f9:ed:6f: 04:9b:60:2c:91:7d:35:24:a9:ce:5d:87:6a:fe:2d:d2:c9:7f: ac:23:62:1b -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUEW+jtmyB99G347VBOSa7JEXCSP8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyhFQUNCN0I1MEYz MzhERjI3OTRFQkEzRjYxOEM3MjMzQjIyODNFNjQ0MB4XDTI2MDYwNTA2MjYwNloX DTI3MDYwNDA2MzEwNlowMzExMC8GA1UEAxMoNkUzNTcyNTZBMDkyNjE1MUM5MTU2 MzE4MzYwQ0JGOTU4NTQ1QjlENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJFtQlkM28+ERZ5VJU3pwQR59BsTpWvXQK5Fq22S9ZJN+Mm1+lmtXiWHKMA2 3BTje8mmTLrdVG7FyWurBkKpHVf74JB8X8t8RbJa4d3U+zFqUiaQVP0tuUtEWyik QysvYNEE43WcY9jZxWFGNObAjt5rzdeMOtoWo1zBqRuGLLEfdSnReMbA/J3sj4mw FuRsaBhFQ/fhg0zSRTO9C5b1cPYCqnsEDUBnFP4IJao/Yme81R+b2Ha04xGKH1TI wwTcibyzLv6HKH72mTsWzMKCYLDLGo766xFcz5+bYcoiM7zxWZqAfD2rQ4fFpQKJ SL6pEU9eQQ1CMfx7fKJzKkKCUbsCAwEAAaOCAeQwggHgMB0GA1UdDgQWBBRuNXJW oJJhUckVYxg2DL+VhUW51jAfBgNVHSMEGDAWgBTqy3tQ8zjfJ5Tro/YYxyM7IoPm RDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzAvRUFDQjdC NTBGMzM4REYyNzk0RUJBM0Y2MThDNzIzM0IyMjgzRTY0NC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvNnN0N1VQTTQz eWVVNjZQMkdNY2pPeUtENWtRLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5 NTM0MjU5My8wL0FTMTQwNzE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnQCQMA0GCSqGSIb3DQEBCwUA A4IBAQA77BrlH8l87hcSrfiww9TOh/2XXgLsM69046sO7aXrQ1ecosHy7QNivndL /Ty9si+jI328h+ghEU660eAtBinJTgPm0J1sVUUiMKUGhywlRsXa9FnCXfyl2X+V bKVd11rKGhZw82BxZP3b/Txo6G0CFGXVaI5ChpE33csLkqT7SQf1/6ket+mLRRwz LNH9k8pthaRH0c78duoirb9vPSpVQAQ/tkfTnFvwtIP9EvRR9AkBvo5myO9v3sgF QNspOOdQ1Mn4Qj4KjXuubjF+lgbzCs4+B+e+NuwxjLETItW5kXtlccdfWyz57W8E m2AskX01JKnOXYdq/i3SyX+sI2Ib -----END CERTIFICATE-----Generated at Sat Jun 13 12:42:09 2026 by rpki-client