$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140056.roa File: AS140056.roa (raw, json) Hash identifier: hBoJczFV4dKjo4kujDv88v9aoBaLW9I6dR5kO1PkfhA= Subject key identifier: E7:E0:91:42:E2:A2:B3:89:0F:DA:14:7C:2E:ED:97:95:30:D7:B7:FE Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 02A6F980C6833C8D84BED4092CA4D0B866D8AFBA Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140056.roa Signing time: Tue 02 Jun 2026 16:24:06 +0000 ROA not before: Tue 02 Jun 2026 16:19:06 +0000 ROA not after: Tue 01 Jun 2027 16:24:06 +0000 asID: 140056 IP address blocks: 240e:1f:ce00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a6:f9:80:c6:83:3c:8d:84:be:d4:09:2c:a4:d0:b8:66:d8:af:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 2 16:19:06 2026 GMT Not After : Jun 1 16:24:06 2027 GMT Subject: CN=E7E09142E2A2B3890FDA147C2EED979530D7B7FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cd:d4:95:eb:c0:d4:6e:3d:ba:75:86:42:08: 4e:35:7e:9b:c2:d9:6c:c0:33:33:36:76:20:70:ee: 99:5d:ba:83:94:02:d2:86:df:12:be:78:5b:fa:2c: 1e:d4:11:4b:81:16:d7:f7:b0:e2:6c:6b:2a:51:0b: f8:9c:3b:30:6d:6a:78:7a:c5:89:12:0d:3d:e5:a4: 94:cc:81:14:a3:13:88:ec:f2:3b:d9:96:3e:1b:cb: e6:08:7c:c7:51:06:36:fc:a4:02:1d:0a:93:d4:31: 5d:f9:17:51:f8:5e:b0:bc:ce:4d:49:e7:ac:21:fd: fc:0d:41:00:a7:1f:a1:15:e6:39:c1:fc:b8:3d:31: 41:c3:20:91:53:b3:cc:0b:10:a4:e0:89:bd:4b:99: 75:88:5f:a6:44:ca:5d:5b:b7:5b:c0:de:9e:72:94: 86:e7:da:d2:9d:f9:e7:ff:22:0e:9a:b6:49:eb:c4: d7:77:f1:b8:f9:76:8e:2f:c9:cf:6f:9d:af:78:fa: 98:73:79:cf:dd:20:45:67:54:cb:85:9b:23:b4:e9: c0:3f:91:c9:96:58:1d:20:92:72:55:eb:d0:ba:8b: 2b:ce:5c:a3:eb:36:6b:04:2a:87:d6:78:62:d1:85: 87:28:67:9b:b1:60:75:e7:6e:46:73:61:84:b6:ac: 69:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E0:91:42:E2:A2:B3:89:0F:DA:14:7C:2E:ED:97:95:30:D7:B7:FE X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140056.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:1f:ce00::/40 Signature Algorithm: sha256WithRSAEncryption 32:c8:70:e3:72:d4:cb:d1:e6:c7:54:59:71:32:7f:50:26:f4: 64:27:1b:97:aa:29:46:e9:65:61:d1:03:e7:3b:39:a6:3b:93: a0:31:c5:8b:a8:72:29:1d:59:d5:51:c2:2b:a1:b2:e0:99:d3: f0:30:21:5c:5b:f7:fd:3f:67:bd:91:fe:5a:03:bb:a7:f8:2a: f1:49:29:d7:03:c1:65:86:6a:f0:84:a2:fc:39:7b:12:78:cb: db:ee:01:05:75:78:69:8b:32:16:46:0e:ec:57:ad:8f:77:c8: f1:04:cd:4e:5a:37:25:aa:1b:dd:2c:5a:d3:9f:46:9c:3a:d1: b4:d5:a5:2c:e9:d7:14:b2:6a:4a:82:a6:cb:79:d8:9b:65:18: f1:ed:80:5e:ee:62:82:b3:1a:4d:00:6e:d4:5a:7b:27:11:11: 81:56:e6:dc:fd:7b:2e:b1:99:2f:b7:d0:44:8c:02:63:ec:ff: 36:c4:18:2a:ce:83:6a:c0:16:10:d2:c8:b2:2b:07:21:44:5d: f7:d0:8f:78:df:ba:d9:46:6e:a4:3b:d8:0a:91:7f:f0:fe:3b: fc:ce:85:c9:c8:61:59:01:df:81:5a:1b:3c:45:51:76:ac:b3: 64:fb:49:a9:74:fe:b3:13:3f:71:78:2b:4c:18:d7:4d:3c:99: d3:30:56:0d -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUAqb5gMaDPI2EvtQJLKTQuGbYr7owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwMjE2MTkwNloX DTI3MDYwMTE2MjQwNlowMzExMC8GA1UEAxMoRTdFMDkxNDJFMkEyQjM4OTBGREEx NDdDMkVFRDk3OTUzMEQ3QjdGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOLN1JXrwNRuPbp1hkIITjV+m8LZbMAzMzZ2IHDumV26g5QC0obfEr54W/os HtQRS4EW1/ew4mxrKlEL+Jw7MG1qeHrFiRINPeWklMyBFKMTiOzyO9mWPhvL5gh8 x1EGNvykAh0Kk9QxXfkXUfhesLzOTUnnrCH9/A1BAKcfoRXmOcH8uD0xQcMgkVOz zAsQpOCJvUuZdYhfpkTKXVu3W8DennKUhufa0p355/8iDpq2SevE13fxuPl2ji/J z2+dr3j6mHN5z90gRWdUy4WbI7TpwD+RyZZYHSCSclXr0LqLK85co+s2awQqh9Z4 YtGFhyhnm7FgdeduRnNhhLasaVMCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBTn4JFC 4qKziQ/aFHwu7ZeVMNe3/jAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMDU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJA4AH84wDQYJKoZIhvcNAQEL BQADggEBADLIcONy1MvR5sdUWXEyf1Am9GQnG5eqKUbpZWHRA+c7OaY7k6AxxYuo cikdWdVRwiuhsuCZ0/AwIVxb9/0/Z72R/loDu6f4KvFJKdcDwWWGavCEovw5exJ4 y9vuAQV1eGmLMhZGDuxXrY93yPEEzU5aNyWqG90sWtOfRpw60bTVpSzp1xSyakqC pst52JtlGPHtgF7uYoKzGk0AbtRaeycREYFW5tz9ey6xmS+30ESMAmPs/zbEGCrO g2rAFhDSyLIrByFEXffQj3jfutlGbqQ72AqRf/D+O/zOhcnIYVkB34FaGzxFUXas s2T7Sal0/rMTP3F4K0wY1008mdMwVg0= -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:42 2026 by rpki-client