$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140238.roa File: AS140238.roa (raw, json) Hash identifier: QNbNW2AXGdBT/Qoy0i7iNiQjsyEbxzvNaC2edp/NEdY= Subject key identifier: 3E:4E:D0:CF:0D:5A:13:32:04:73:A5:B6:71:B5:4A:46:FA:B4:7D:AF Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 10EC2188E5CE5A3F223966B5A0B756998B703324 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140238.roa Signing time: Thu 28 May 2026 16:01:18 +0000 ROA not before: Thu 28 May 2026 15:56:18 +0000 ROA not after: Thu 27 May 2027 16:01:18 +0000 asID: 140238 IP address blocks: 240e:bf:b8dc::/48 maxlen: 48 240e:bf:b8dd::/48 maxlen: 48 240e:bf:b8de::/48 maxlen: 48 240e:bf:b8df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ec:21:88:e5:ce:5a:3f:22:39:66:b5:a0:b7:56:99:8b:70:33:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 15:56:18 2026 GMT Not After : May 27 16:01:18 2027 GMT Subject: CN=3E4ED0CF0D5A13320473A5B671B54A46FAB47DAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7f:e0:56:74:8f:25:7e:85:2a:e7:84:26:15: 8f:83:ce:a0:d5:79:e4:2d:ec:1f:03:e2:58:08:1e: ec:4b:db:9d:af:46:f5:31:cf:03:69:fe:53:19:fc: cb:79:32:8e:1c:26:2b:36:05:64:8a:44:fa:a8:ab: 06:f5:a9:a5:66:25:f6:44:06:ed:0e:52:65:b9:1a: 59:f3:fd:aa:aa:59:e8:f9:6c:0a:03:cc:dc:ab:ca: b7:2c:0a:da:12:80:09:27:e6:4c:79:5e:b6:e6:2c: 90:47:d8:0e:7e:71:a1:73:a0:94:00:10:06:e7:fd: e0:6f:e6:e6:02:1d:8b:27:7f:c1:1a:1d:b3:4d:9e: 63:99:33:20:c0:99:d9:f7:11:8d:06:9c:0f:83:40: 40:39:a6:24:e0:29:b8:ba:ca:52:fb:ed:d8:e3:4f: e5:aa:f4:6e:b7:a3:d2:77:95:ea:8b:57:eb:ad:5b: bf:0c:59:6d:68:4c:ec:30:b3:d6:ac:89:2b:9a:ce: 86:0d:94:08:0d:7a:d8:fc:e2:b4:9f:3b:5f:a9:a1: c1:87:f9:0e:21:9a:28:6c:fa:7e:40:4b:e8:3c:6c: b2:56:94:1a:67:61:71:c3:b7:4d:8c:1a:8e:e0:f2: 0b:18:18:14:7c:bc:61:dd:09:65:0e:45:b4:43:ab: 1a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4E:D0:CF:0D:5A:13:32:04:73:A5:B6:71:B5:4A:46:FA:B4:7D:AF X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:bf:b8dc::/46 Signature Algorithm: sha256WithRSAEncryption a7:30:81:1b:23:26:29:48:3d:0c:61:a0:ef:a6:57:0b:c3:f5: a4:61:5a:43:da:9f:73:be:45:27:54:e3:4c:6b:10:7b:30:7c: b7:66:d2:a7:99:b6:42:7b:25:a9:b5:52:7e:08:50:89:16:b8: 4b:30:35:c6:43:1c:8f:21:e7:66:9b:bb:28:8e:aa:82:cc:2c: 7d:82:58:e8:db:c3:e5:8e:84:fb:61:15:8d:90:8c:4b:1f:e0: c9:25:22:e0:f6:be:41:92:0a:69:df:4e:72:b8:e3:0c:ae:01: 42:de:c5:d0:0c:06:80:37:ee:57:da:7d:0c:06:bc:95:45:65: c5:bf:a5:b5:be:f9:c2:f8:a3:0c:f3:e2:94:d3:d2:13:37:0a: c9:2d:93:96:e6:df:3c:78:29:b5:f7:9c:15:af:bb:2e:59:25: e0:90:d0:98:db:b9:ff:28:f4:26:ce:22:ca:01:19:a4:f0:4d: e7:a1:0f:6e:c5:b3:5e:11:44:0e:d9:83:7e:97:87:94:04:44: 6f:d8:e4:4e:b3:4f:79:58:98:a5:c7:5c:c4:be:b2:ae:e1:c1: 13:3d:5c:6b:d3:69:6f:ba:10:59:43:a1:4a:5e:e1:a9:e2:03: ae:9c:99:87:0d:96:6c:e2:92:68:65:39:9f:2f:d1:e9:ed:2b: a3:d9:bf:97 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUEOwhiOXOWj8iOWa1oLdWmYtwMyQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE1NTYxOFoX DTI3MDUyNzE2MDExOFowMzExMC8GA1UEAxMoM0U0RUQwQ0YwRDVBMTMzMjA0NzNB NUI2NzFCNTRBNDZGQUI0N0RBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMV/4FZ0jyV+hSrnhCYVj4POoNV55C3sHwPiWAge7Evbna9G9THPA2n+Uxn8 y3kyjhwmKzYFZIpE+qirBvWppWYl9kQG7Q5SZbkaWfP9qqpZ6PlsCgPM3KvKtywK 2hKACSfmTHletuYskEfYDn5xoXOglAAQBuf94G/m5gIdiyd/wRods02eY5kzIMCZ 2fcRjQacD4NAQDmmJOApuLrKUvvt2ONP5ar0brej0neV6otX661bvwxZbWhM7DCz 1qyJK5rOhg2UCA162PzitJ87X6mhwYf5DiGaKGz6fkBL6DxsslaUGmdhccO3TYwa juDyCxgYFHy8Yd0JZQ5FtEOrGucCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQ+TtDP DVoTMgRzpbZxtUpG+rR9rzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJA4Av7jcMA0GCSqGSIb3DQEB CwUAA4IBAQCnMIEbIyYpSD0MYaDvplcLw/WkYVpD2p9zvkUnVONMaxB7MHy3ZtKn mbZCeyWptVJ+CFCJFrhLMDXGQxyPIedmm7sojqqCzCx9gljo28PljoT7YRWNkIxL H+DJJSLg9r5Bkgpp305yuOMMrgFC3sXQDAaAN+5X2n0MBryVRWXFv6W1vvnC+KMM 8+KU09ITNwrJLZOW5t88eCm195wVr7suWSXgkNCY27n/KPQmziLKARmk8E3noQ9u xbNeEUQO2YN+l4eUBERv2OROs095WJilx1zEvrKu4cETPVxr02lvuhBZQ6FKXuGp 4gOunJmHDZZs4pJoZTmfL9Hp7Suj2b+X -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:36 2026 by rpki-client