$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140246.roa File: AS140246.roa (raw, json) Hash identifier: DYWzb/AK7YVsEEBX1a7TWeNUjkRM9BwJAhURcaIAOcI= Subject key identifier: C6:09:74:2B:8A:20:50:61:15:DE:AE:2B:E8:8A:9F:1A:79:8E:5D:D9 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 26434930D0F7CBEE65BCDCC1C8E296EEAC4BCB66 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140246.roa Signing time: Thu 28 May 2026 16:08:14 +0000 ROA not before: Thu 28 May 2026 16:03:14 +0000 ROA not after: Thu 27 May 2027 16:08:14 +0000 asID: 140246 IP address blocks: 240e:9b:f003::/48 maxlen: 48 240e:9b:f004::/48 maxlen: 48 240e:9b:f005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:43:49:30:d0:f7:cb:ee:65:bc:dc:c1:c8:e2:96:ee:ac:4b:cb:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 16:03:14 2026 GMT Not After : May 27 16:08:14 2027 GMT Subject: CN=C609742B8A20506115DEAE2BE88A9F1A798E5DD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:c1:5d:d3:5a:0d:08:5e:7a:9e:65:6b:b7: 0d:2d:d6:30:cf:9e:56:e3:74:be:f3:60:9a:25:84: b4:26:43:2e:56:35:58:d3:b2:98:67:6c:9d:bf:0d: 93:1b:d2:b6:5f:e0:43:e6:e7:58:36:36:a9:da:c4: a0:c4:6a:fa:bc:cc:19:8d:ea:92:4a:e4:43:a1:04: 9a:44:cd:73:be:91:84:6c:b6:55:66:95:54:b8:96: 4e:50:f9:7c:dd:40:bb:ba:1d:c8:81:33:02:b4:bb: fb:d8:d4:19:11:cc:15:4e:14:a5:2d:9d:fe:f6:45: 6c:7b:47:fe:c9:57:08:29:1e:8b:7b:a5:53:04:5d: 85:26:3c:7a:0f:75:6c:00:76:83:38:bc:ad:79:09: 23:b3:d9:c2:88:9e:62:a2:a5:62:9a:60:d2:b9:9e: 62:68:20:08:18:48:ab:41:d8:b2:e0:d1:03:cf:70: 07:52:54:b3:39:80:be:fe:18:41:8b:46:63:07:51: 89:54:f6:dc:fb:20:a1:cb:7d:a8:c2:15:8b:34:9c: e4:15:d2:de:68:0f:5a:99:74:82:91:0c:9b:c4:e0: f1:66:1a:ba:d9:ae:d9:50:2d:df:f2:c6:40:47:77: 1f:9b:6e:74:1e:39:74:b4:48:19:99:7c:f9:95:53: e7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:09:74:2B:8A:20:50:61:15:DE:AE:2B:E8:8A:9F:1A:79:8E:5D:D9 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140246.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:9b:f003::-240e:9b:f005:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4a:a4:ae:56:f9:26:6f:75:df:06:83:84:f9:0c:74:94:35:ff: f6:99:df:81:04:24:75:3f:69:c2:b6:63:63:f1:b7:7c:3c:17: 8a:94:4f:09:c9:7b:18:13:7d:9f:68:22:dd:2d:d7:b1:a9:23: 4c:73:cd:83:cf:93:92:2b:72:f9:ab:29:a2:7d:86:d0:df:ce: 43:75:5c:ed:8e:1a:4f:de:d8:56:56:e6:ba:6d:5d:f7:0f:4a: 98:2d:0f:6e:0d:1d:b1:a1:1e:e5:bc:f8:8e:36:ce:8d:51:a2: 4e:f8:fd:fb:c5:27:0f:6e:a9:5c:32:86:0a:7a:bb:c2:93:ca: b2:37:5c:3b:b1:4c:bc:97:8f:a6:c0:0e:d5:ef:44:b0:64:14: bb:e0:68:7b:b4:4f:6d:cb:ca:ca:2e:93:da:b1:5f:34:3d:de: db:c8:b2:08:ba:e7:08:a2:28:d5:80:c5:9a:6c:13:56:fc:aa: 1b:6e:97:8a:b2:d4:f4:7f:62:ca:99:b5:2b:e5:ae:ee:d7:6c: 0e:69:6f:bd:56:0c:66:97:9f:a6:8b:70:83:21:69:5a:b4:0b: 82:20:d2:ef:d8:ef:09:0e:5d:fd:e9:f5:31:43:03:d5:ed:24: a9:1c:15:93:d4:d5:ab:b0:0a:cd:61:6a:de:bc:37:56:3a:6e: c3:3f:25:db -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUJkNJMND3y+5lvNzByOKW7qxLy2YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MDMxNFoX DTI3MDUyNzE2MDgxNFowMzExMC8GA1UEAxMoQzYwOTc0MkI4QTIwNTA2MTE1REVB RTJCRTg4QTlGMUE3OThFNUREOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwiwV3TWg0IXnqeZWu3DS3WMM+eVuN0vvNgmiWEtCZDLlY1WNOymGdsnb8N kxvStl/gQ+bnWDY2qdrEoMRq+rzMGY3qkkrkQ6EEmkTNc76RhGy2VWaVVLiWTlD5 fN1Au7odyIEzArS7+9jUGRHMFU4UpS2d/vZFbHtH/slXCCkei3ulUwRdhSY8eg91 bAB2gzi8rXkJI7PZwoieYqKlYppg0rmeYmggCBhIq0HYsuDRA89wB1JUszmAvv4Y QYtGYwdRiVT23Psgoct9qMIVizSc5BXS3mgPWpl0gpEMm8Tg8WYautmu2VAt3/LG QEd3H5tudB45dLRIGZl8+ZVT52kCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBTGCXQr iiBQYRXerivoip8aeY5d2TAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMjQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAkDgCb8AMDBwEkDgCb8AQw DQYJKoZIhvcNAQELBQADggEBAEqkrlb5Jm913waDhPkMdJQ1//aZ34EEJHU/acK2 Y2Pxt3w8F4qUTwnJexgTfZ9oIt0t17GpI0xzzYPPk5IrcvmrKaJ9htDfzkN1XO2O Gk/e2FZW5rptXfcPSpgtD24NHbGhHuW8+I42zo1Rok74/fvFJw9uqVwyhgp6u8KT yrI3XDuxTLyXj6bADtXvRLBkFLvgaHu0T23Lysouk9qxXzQ93tvIsgi65wiiKNWA xZpsE1b8qhtul4qy1PR/YsqZtSvlru7XbA5pb71WDGaXn6aLcIMhaVq0C4Ig0u/Y 7wkOXf3p9TFDA9XtJKkcFZPU1auwCs1hat68N1Y6bsM/Jds= -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:42 2026 by rpki-client