$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140249.roa File: AS140249.roa (raw, json) Hash identifier: KRBqPbdXsCWAReI3NVUhFtPsirvJ/EBDKIlknu4jYSA= Subject key identifier: 65:3F:48:86:FB:94:BC:42:44:CC:99:25:A4:F1:57:EA:61:F4:51:F6 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 5FF0E7880C736AD937F8FC76B26A5F001B47FD9F Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140249.roa Signing time: Thu 28 May 2026 16:08:14 +0000 ROA not before: Thu 28 May 2026 16:03:14 +0000 ROA not after: Thu 27 May 2027 16:08:14 +0000 asID: 140249 IP address blocks: 240e:9b:f00c::/48 maxlen: 48 240e:9b:f00d::/48 maxlen: 48 240e:9b:f00e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f0:e7:88:0c:73:6a:d9:37:f8:fc:76:b2:6a:5f:00:1b:47:fd:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 16:03:14 2026 GMT Not After : May 27 16:08:14 2027 GMT Subject: CN=653F4886FB94BC4244CC9925A4F157EA61F451F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:c4:72:3b:bf:4d:84:94:a0:9b:e6:fb:77: c9:57:e3:0f:b3:9e:c8:b2:4b:5e:c0:a5:cf:33:66: 75:c9:4d:b3:00:18:19:5a:e6:dd:fb:9a:e3:df:2c: 56:0e:9c:6a:a7:7d:95:e2:37:f9:bf:4b:63:7c:81: e9:25:67:2f:f5:1e:c9:b6:3c:16:09:42:3e:3f:4e: 45:52:89:2c:70:41:22:18:2b:a9:2a:4e:2c:ad:7d: 06:a4:c9:6c:bd:9e:a8:85:06:9c:2c:c1:5b:21:e2: fa:4e:17:9c:b7:d1:22:0e:20:07:0c:2f:07:42:2f: 15:63:37:db:b9:fe:e9:a6:a7:a0:7f:9c:f0:8d:a6: bf:e0:f5:ee:fb:80:a6:dd:0f:c8:d9:18:78:e1:fd: 0c:29:51:22:a6:2c:f7:88:b3:cc:ac:5c:52:f6:c3: 4a:bf:94:70:d4:b6:39:b0:41:30:17:36:11:7c:fb: 2d:15:25:91:ad:ec:84:78:7c:27:d4:ba:a0:a0:58: 82:12:f7:f6:74:0b:24:99:11:af:76:b7:c3:25:d1: 0f:79:75:09:a1:71:9d:b4:bb:3f:1c:5d:19:de:d9: a5:c3:e0:1a:e3:1e:a5:6a:54:61:7d:06:d3:63:8f: 14:d4:0a:cf:a1:26:3b:48:15:26:06:61:90:5c:31: c7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3F:48:86:FB:94:BC:42:44:CC:99:25:A4:F1:57:EA:61:F4:51:F6 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140249.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:9b:f00c::-240e:9b:f00e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 90:d7:a5:d0:36:6e:cc:48:6c:1f:81:91:1a:a1:dc:78:15:08: 48:d8:cc:79:84:48:7b:b0:29:de:e7:a9:da:f7:1c:96:04:70: 75:9e:fc:16:1f:dc:a7:d0:a7:fa:d8:73:bf:8d:81:5b:89:4e: 01:77:88:2a:b6:cd:e2:ae:f9:f5:ee:80:37:a0:8f:05:14:cb: cb:af:b5:be:d8:b1:e6:84:76:d5:5a:e8:20:21:72:ea:57:50: 34:41:d4:0f:9f:28:2e:ba:62:37:6c:06:8a:89:d6:11:6d:56: 07:e2:48:47:a4:f7:a9:b5:91:63:69:ae:42:ab:1d:82:8c:11: 27:43:35:aa:e9:47:52:33:5a:a2:b1:6e:bd:6d:df:44:c7:ce: 5e:7c:7f:d9:8d:7e:be:08:a5:ea:2d:77:53:df:f4:96:99:44: 23:4c:30:4b:b4:0f:e3:d6:28:eb:e6:9d:8a:ac:64:24:78:3c: f7:e0:fa:2c:5e:44:05:a6:c8:64:1f:81:d6:f1:d6:85:2f:8a: 40:9b:07:d3:bd:14:f4:31:1e:64:96:34:b2:07:ea:17:60:ca: e1:83:22:08:c6:de:16:58:b8:f2:5b:69:8c:50:b2:ab:7b:62: 6d:92:d0:a2:67:61:2f:e8:8c:7e:ac:db:45:e9:35:e3:8f:78: 77:b7:ed:08 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUX/DniAxzatk3+Px2smpfABtH/Z8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MDMxNFoX DTI3MDUyNzE2MDgxNFowMzExMC8GA1UEAxMoNjUzRjQ4ODZGQjk0QkM0MjQ0Q0M5 OTI1QTRGMTU3RUE2MUY0NTFGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrDxHI7v02ElKCb5vt3yVfjD7OeyLJLXsClzzNmdclNswAYGVrm3fua498s Vg6caqd9leI3+b9LY3yB6SVnL/UeybY8FglCPj9ORVKJLHBBIhgrqSpOLK19BqTJ bL2eqIUGnCzBWyHi+k4XnLfRIg4gBwwvB0IvFWM327n+6aanoH+c8I2mv+D17vuA pt0PyNkYeOH9DClRIqYs94izzKxcUvbDSr+UcNS2ObBBMBc2EXz7LRUlka3shHh8 J9S6oKBYghL39nQLJJkRr3a3wyXRD3l1CaFxnbS7PxxdGd7ZpcPgGuMepWpUYX0G 02OPFNQKz6EmO0gVJgZhkFwxxw0CAwEAAaOCAfIwggHuMB0GA1UdDgQWBBRlP0iG +5S8QkTMmSWk8VfqYfRR9jAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMjQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwIkDgCb8AwDBwAkDgCb8A4w DQYJKoZIhvcNAQELBQADggEBAJDXpdA2bsxIbB+BkRqh3HgVCEjYzHmESHuwKd7n qdr3HJYEcHWe/BYf3KfQp/rYc7+NgVuJTgF3iCq2zeKu+fXugDegjwUUy8uvtb7Y seaEdtVa6CAhcupXUDRB1A+fKC66YjdsBoqJ1hFtVgfiSEek96m1kWNprkKrHYKM ESdDNarpR1IzWqKxbr1t30THzl58f9mNfr4Ipeotd1Pf9JaZRCNMMEu0D+PWKOvm nYqsZCR4PPfg+ixeRAWmyGQfgdbx1oUvikCbB9O9FPQxHmSWNLIH6hdgyuGDIgjG 3hZYuPJbaYxQsqt7Ym2S0KJnYS/ojH6s20XpNeOPeHe37Qg= -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:44 2026 by rpki-client