$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140053.roa File: AS140053.roa (raw, json) Hash identifier: KNfXlWfUo6EjHMMkoWccTEuxm4lijQmyXDEQsILrbPQ= Subject key identifier: C3:9B:0C:46:8D:D7:CF:65:00:11:FC:0D:EF:A0:B8:D6:4D:F6:78:35 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 786EBB25D5DC3DBC048233EA85D62F610102CE2B Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140053.roa Signing time: Tue 02 Jun 2026 16:24:20 +0000 ROA not before: Tue 02 Jun 2026 16:19:20 +0000 ROA not after: Tue 01 Jun 2027 16:24:20 +0000 asID: 140053 IP address blocks: 240e:5e:10e0::/46 maxlen: 46 240e:5e:10e4::/46 maxlen: 46 240e:5e:10e8::/46 maxlen: 46 240e:5e:10ec::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6e:bb:25:d5:dc:3d:bc:04:82:33:ea:85:d6:2f:61:01:02:ce:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 2 16:19:20 2026 GMT Not After : Jun 1 16:24:20 2027 GMT Subject: CN=C39B0C468DD7CF650011FC0DEFA0B8D64DF67835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4a:bc:fd:2a:ff:b3:fd:c2:65:e2:c7:54:cf: 6c:26:bc:ce:03:d9:f8:8e:08:c7:17:04:bc:fb:6a: 91:68:2e:dd:eb:f4:f2:10:c1:a5:a8:a0:0f:94:6c: a5:e6:f8:94:42:66:65:37:0a:86:29:d5:20:c2:b8: 99:ca:5c:95:54:bd:d8:bc:19:c2:e5:bb:1a:88:fc: 27:91:a4:12:a2:ee:fc:ee:e8:29:ee:dd:81:60:a6: 4d:1c:3a:91:10:8b:86:02:a9:59:bf:30:f5:0e:71: 60:55:88:2b:5a:bf:7c:7c:aa:2c:df:b9:4a:d3:c4: 7f:3e:fd:67:d7:10:3d:55:56:87:5e:a1:b5:8f:c4: 16:38:95:51:97:0c:7e:16:13:ff:6b:6e:6e:10:27: 35:24:b8:4a:13:af:18:a4:e0:dc:60:93:9c:bf:29: d8:34:a0:9d:3e:fa:8c:c1:16:10:35:d6:2b:f4:7d: 99:bb:b0:b6:35:f7:cb:d6:3a:05:6b:b2:76:71:49: b8:48:e1:7b:eb:8c:99:1e:60:c8:9c:3b:9e:93:f7: d9:50:cd:b2:70:8e:3b:2d:ac:b3:98:59:5c:51:c6: 14:ca:a5:45:c4:74:92:b3:38:35:42:f0:da:28:e8: b1:d6:61:42:d2:bf:d4:8c:8c:84:8f:b3:22:a3:68: 11:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9B:0C:46:8D:D7:CF:65:00:11:FC:0D:EF:A0:B8:D6:4D:F6:78:35 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140053.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:5e:10e0::/44 Signature Algorithm: sha256WithRSAEncryption a3:af:a0:87:b9:80:7c:c7:a7:bb:83:b9:bf:e4:e6:0e:e6:e9: 6d:2f:86:c0:3b:61:a8:b1:44:b4:00:d4:ae:13:28:82:f4:44: 9c:a5:2e:eb:70:53:36:71:a5:48:41:b9:a6:97:4b:fe:ba:2c: 90:12:56:12:24:2b:61:09:3c:cc:42:0b:81:68:60:61:cb:25: 34:7b:d9:a4:82:83:43:fa:78:d3:95:5f:1b:85:87:e1:7c:33: 5f:00:c9:ee:e8:74:23:3f:bf:ba:59:40:14:20:99:94:6e:84: 60:66:78:c7:7c:b9:a7:22:d2:8b:38:07:50:96:30:64:4d:8b: b6:7c:84:06:c2:df:0f:34:68:02:3b:46:6d:19:54:f9:27:f4: 0e:60:5f:5e:1d:09:68:04:e1:2c:aa:e3:2b:7b:45:4d:3b:75: a6:e4:f7:d3:46:24:20:db:18:3b:44:5c:9e:59:a3:4d:fb:ba: 76:a9:d1:74:a8:c4:b8:52:98:95:4b:af:bf:77:f5:93:a1:d2: ca:8d:20:76:70:ef:8f:10:65:e4:3a:88:fa:47:09:d8:72:45: 3f:49:8a:33:e4:81:65:54:72:79:7a:32:83:ff:f0:e5:87:e8: 5c:27:04:06:f9:59:2f:5b:db:ea:74:3f:0a:a4:21:ce:5b:12: 42:0c:74:98 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUeG67JdXcPbwEgjPqhdYvYQECziswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwMjE2MTkyMFoX DTI3MDYwMTE2MjQyMFowMzExMC8GA1UEAxMoQzM5QjBDNDY4REQ3Q0Y2NTAwMTFG QzBERUZBMEI4RDY0REY2NzgzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1KvP0q/7P9wmXix1TPbCa8zgPZ+I4IxxcEvPtqkWgu3ev08hDBpaigD5Rs peb4lEJmZTcKhinVIMK4mcpclVS92LwZwuW7Goj8J5GkEqLu/O7oKe7dgWCmTRw6 kRCLhgKpWb8w9Q5xYFWIK1q/fHyqLN+5StPEfz79Z9cQPVVWh16htY/EFjiVUZcM fhYT/2tubhAnNSS4ShOvGKTg3GCTnL8p2DSgnT76jMEWEDXWK/R9mbuwtjX3y9Y6 BWuydnFJuEjhe+uMmR5gyJw7npP32VDNsnCOOy2ss5hZXFHGFMqlRcR0krM4NULw 2ijosdZhQtK/1IyMhI+zIqNoEbMCAwEAAaOCAecwggHjMB0GA1UdDgQWBBTDmwxG jdfPZQAR/A3voLjWTfZ4NTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMDUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJA4AXhDgMA0GCSqGSIb3DQEB CwUAA4IBAQCjr6CHuYB8x6e7g7m/5OYO5ultL4bAO2GosUS0ANSuEyiC9EScpS7r cFM2caVIQbmml0v+uiyQElYSJCthCTzMQguBaGBhyyU0e9mkgoND+njTlV8bhYfh fDNfAMnu6HQjP7+6WUAUIJmUboRgZnjHfLmnItKLOAdQljBkTYu2fIQGwt8PNGgC O0ZtGVT5J/QOYF9eHQloBOEsquMre0VNO3Wm5PfTRiQg2xg7RFyeWaNN+7p2qdF0 qMS4UpiVS6+/d/WTodLKjSB2cO+PEGXkOoj6RwnYckU/SYoz5IFlVHJ5ejKD//Dl h+hcJwQG+VkvW9vqdD8KpCHOWxJCDHSY -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:34 2026 by rpki-client