$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140245.roa File: AS140245.roa (raw, json) Hash identifier: HGzrnPCLanljzJMvUzu886q3tPa/yavqrxEDSzd6REE= Subject key identifier: DD:02:BA:F8:DC:D6:11:E1:1D:FB:C8:5C:73:5C:C5:93:E7:C6:74:45 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 75096DAA75EAE44130897D194417FF602366D394 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140245.roa Signing time: Thu 28 May 2026 16:08:14 +0000 ROA not before: Thu 28 May 2026 16:03:14 +0000 ROA not after: Thu 27 May 2027 16:08:14 +0000 asID: 140245 IP address blocks: 240e:9b:f000::/48 maxlen: 48 240e:9b:f001::/48 maxlen: 48 240e:9b:f002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:09:6d:aa:75:ea:e4:41:30:89:7d:19:44:17:ff:60:23:66:d3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 16:03:14 2026 GMT Not After : May 27 16:08:14 2027 GMT Subject: CN=DD02BAF8DCD611E11DFBC85C735CC593E7C67445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:51:cf:6e:6e:9a:d8:c9:1b:1f:05:f3:19: 77:22:bb:1b:30:d6:4d:2f:2e:f4:ab:a4:c8:92:5d: 6f:db:49:59:94:63:a5:4b:89:69:37:ab:91:0b:a4: 4c:bd:e5:9e:57:c7:ab:81:0e:da:6e:25:94:a0:dc: 74:bc:48:80:ed:d6:d8:04:44:f9:ca:7e:00:65:38: 3f:66:37:de:f7:48:74:fd:6c:b4:7f:1d:dc:a6:67: 39:63:dc:76:7e:90:0e:0f:c7:ce:ea:02:66:17:ae: 82:65:dd:2a:84:ac:75:4d:94:61:ca:03:21:e0:98: 50:21:40:00:00:52:e2:4b:ba:fe:22:86:51:59:6d: 3a:fd:d2:1c:75:75:9c:56:c8:0d:91:d1:35:e3:02: e1:b1:36:68:57:05:4f:fe:58:bd:38:da:46:55:34: 3f:66:0e:86:72:4e:3a:93:d2:28:20:ba:ae:6c:0a: f7:58:bb:bc:c9:87:88:db:d7:73:ae:8e:1d:5d:bb: ef:ac:5e:6e:4f:5e:d5:32:32:5b:cb:57:6f:4c:50: ea:b4:9d:e3:a5:8a:ef:44:18:d7:4e:f3:0c:33:a3: de:d6:3f:ac:38:93:bb:ca:fc:82:e4:fb:e4:ec:ed: 5f:72:b7:e1:5f:36:61:f4:b6:69:67:a8:f6:5f:05: 90:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:02:BA:F8:DC:D6:11:E1:1D:FB:C8:5C:73:5C:C5:93:E7:C6:74:45 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140245.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:9b:f000::-240e:9b:f002:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3b:72:bd:19:97:ba:b5:94:ea:d5:d0:ec:6c:11:3e:3e:75:99: c3:03:c7:53:32:90:29:54:00:c8:a2:60:5b:34:c1:8d:fb:00: a5:af:19:d3:8f:24:50:74:14:04:b1:6f:2b:5d:ff:56:5c:15: 71:4e:c1:a7:e7:19:b4:c3:5f:8c:b0:7c:dc:07:72:f0:45:a3: 3a:32:01:ed:20:bd:33:0f:9e:35:ed:c2:ac:e1:80:54:11:b3: 2c:5e:be:d1:ed:4d:2e:53:d1:06:ec:d3:49:f1:e1:95:5a:f5: 14:d4:9e:65:31:2a:16:53:7b:45:a9:61:c2:38:40:7d:0e:37: 25:81:75:8d:4e:a3:a7:6e:ed:6e:37:76:ed:59:cc:2e:b8:dd: 25:d9:36:36:27:75:d2:05:1c:7c:52:65:16:b9:ab:2c:5b:dd: 6e:cf:36:45:4c:d3:21:33:38:10:ba:68:ea:61:f3:8b:c5:ee: 64:62:5b:2b:20:8b:f0:ff:bc:b4:ee:ae:7d:7d:5b:b1:38:f9: 9e:6e:a7:73:84:fc:a0:91:40:6b:99:2e:86:a8:6e:33:7b:56: a0:b6:95:31:e5:17:2d:65:91:90:d0:cb:dc:e9:6d:34:b3:62: 86:4a:e6:67:52:37:bc:bc:1d:b4:d5:55:b2:0d:af:85:08:46: 4f:f0:4e:7c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUdQltqnXq5EEwiX0ZRBf/YCNm05QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MDMxNFoX DTI3MDUyNzE2MDgxNFowMzExMC8GA1UEAxMoREQwMkJBRjhEQ0Q2MTFFMTFERkJD ODVDNzM1Q0M1OTNFN0M2NzQ0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZNUc9ubprYyRsfBfMZdyK7GzDWTS8u9KukyJJdb9tJWZRjpUuJaTerkQuk TL3lnlfHq4EO2m4llKDcdLxIgO3W2ARE+cp+AGU4P2Y33vdIdP1stH8d3KZnOWPc dn6QDg/HzuoCZheugmXdKoSsdU2UYcoDIeCYUCFAAABS4ku6/iKGUVltOv3SHHV1 nFbIDZHRNeMC4bE2aFcFT/5YvTjaRlU0P2YOhnJOOpPSKCC6rmwK91i7vMmHiNvX c66OHV2776xebk9e1TIyW8tXb0xQ6rSd46WK70QY107zDDOj3tY/rDiTu8r8guT7 5OztX3K34V82YfS2aWeo9l8FkO8CAwEAAaOCAfEwggHtMB0GA1UdDgQWBBTdArr4 3NYR4R37yFxzXMWT58Z0RTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMjQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATMBEDBgQkDgCb8AMHACQOAJvwAjAN BgkqhkiG9w0BAQsFAAOCAQEAO3K9GZe6tZTq1dDsbBE+PnWZwwPHUzKQKVQAyKJg WzTBjfsApa8Z048kUHQUBLFvK13/VlwVcU7Bp+cZtMNfjLB83Ady8EWjOjIB7SC9 Mw+eNe3CrOGAVBGzLF6+0e1NLlPRBuzTSfHhlVr1FNSeZTEqFlN7RalhwjhAfQ43 JYF1jU6jp27tbjd27VnMLrjdJdk2Nid10gUcfFJlFrmrLFvdbs82RUzTITM4ELpo 6mHzi8XuZGJbKyCL8P+8tO6ufX1bsTj5nm6nc4T8oJFAa5kuhqhuM3tWoLaVMeUX LWWRkNDL3OltNLNihkrmZ1I3vLwdtNVVsg2vhQhGT/BOfA== -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:34 2026 by rpki-client