$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140253.roa File: AS140253.roa (raw, json) Hash identifier: dm4icAubb4Fw4j+6JSDD7lakGm+cX2EGhuADkNBM4C8= Subject key identifier: DD:1B:10:7B:E2:FA:F5:16:11:D7:0F:C8:6C:8F:91:A3:77:BD:38:EC Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 7FD2725064B7FD67B139F25B9C9AC958D69C0D62 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140253.roa Signing time: Thu 28 May 2026 16:08:14 +0000 ROA not before: Thu 28 May 2026 16:03:14 +0000 ROA not after: Thu 27 May 2027 16:08:14 +0000 asID: 140253 IP address blocks: 240e:9b:f018::/48 maxlen: 48 240e:9b:f019::/48 maxlen: 48 240e:9b:f01a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d2:72:50:64:b7:fd:67:b1:39:f2:5b:9c:9a:c9:58:d6:9c:0d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 16:03:14 2026 GMT Not After : May 27 16:08:14 2027 GMT Subject: CN=DD1B107BE2FAF51611D70FC86C8F91A377BD38EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:13:f2:3b:93:c9:e7:09:28:69:0e:95:c4: 8f:b5:47:2a:cf:e2:08:a8:af:bd:cf:7b:c8:ec:ea: d9:d5:eb:ab:c6:63:c4:60:fd:33:53:d7:5d:b1:ac: 83:c0:f0:c4:c1:c5:da:ee:61:d1:7f:4b:80:d2:90: 7a:ec:be:02:ad:de:d7:f6:46:ea:cd:d5:9d:0e:12: 1d:c7:da:9e:6e:41:8c:8c:b6:1c:bc:3a:7d:df:71: 24:ec:70:d8:3f:94:5c:8b:86:85:b9:eb:90:9f:2f: f6:d4:3e:2d:43:1d:20:75:cc:3f:5f:8b:57:6f:13: 74:ba:98:64:e3:40:ee:fa:89:5f:71:9f:1c:29:21: ea:04:c7:e7:89:66:6f:55:7e:f5:9a:d7:7c:de:e0: 71:8b:10:49:c0:59:3a:f0:df:37:0a:37:b8:72:1d: 1e:50:c2:c7:65:69:0e:69:14:3d:74:9a:85:5e:9b: 59:1d:88:60:a0:0a:de:fc:98:a5:6a:8e:69:90:ee: 46:40:e5:e9:1a:11:08:36:95:be:5f:80:a2:06:b2: b3:05:d0:c8:64:36:aa:01:31:e1:85:72:af:59:5c: 44:6c:1c:44:eb:c5:8c:b5:19:56:38:1d:43:eb:8f: 8e:f9:08:ba:ba:30:f1:1f:7b:c0:b8:8d:fe:6a:3c: e3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1B:10:7B:E2:FA:F5:16:11:D7:0F:C8:6C:8F:91:A3:77:BD:38:EC X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140253.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:9b:f018::-240e:9b:f01a:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a5:09:22:f0:f4:17:1e:5e:13:49:70:90:51:b9:ba:85:71:86: 62:6a:6f:44:1e:7a:b2:51:0a:34:05:bb:36:47:61:31:2c:7a: 5a:c3:eb:7e:08:69:07:1d:5e:ac:de:1b:04:f1:05:49:2b:b8: 3f:a0:29:12:84:c1:25:e3:b1:72:d5:4c:2f:3a:62:38:4a:11: f8:38:04:c9:62:44:d0:01:6f:bd:00:e5:cd:57:f4:90:d4:bb: fc:be:de:ae:6d:ad:90:5e:92:d1:51:e8:28:ac:24:8f:c0:a7: df:c1:e4:72:23:d3:d0:82:ee:4a:84:33:ba:f2:0b:5b:e3:a4: 98:ce:87:9a:a6:31:73:0c:07:17:54:9d:8f:79:6a:4d:3b:cb: f3:55:1a:57:22:e5:83:04:ba:b2:85:38:4c:fe:12:ed:5c:76: 0b:68:91:93:25:06:48:60:3f:37:f0:6c:dc:1e:cd:44:ca:e6: 1f:7b:55:d8:8a:43:50:a1:f0:84:41:5d:1f:ab:fa:57:47:44: 8f:d1:db:3e:b2:cd:b8:9d:a3:73:62:62:fc:0f:6e:64:79:e2: 1a:d4:b9:eb:6d:d2:a8:48:b2:b0:c3:c9:76:f6:99:fb:6a:3c: a7:5b:54:aa:3f:5d:80:52:0d:09:e2:f8:f7:83:63:e0:29:15: ca:c3:00:9c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUf9JyUGS3/WexOfJbnJrJWNacDWIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MDMxNFoX DTI3MDUyNzE2MDgxNFowMzExMC8GA1UEAxMoREQxQjEwN0JFMkZBRjUxNjExRDcw RkM4NkM4RjkxQTM3N0JEMzhFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALOqE/I7k8nnCShpDpXEj7VHKs/iCKivvc97yOzq2dXrq8ZjxGD9M1PXXbGs g8DwxMHF2u5h0X9LgNKQeuy+Aq3e1/ZG6s3VnQ4SHcfanm5BjIy2HLw6fd9xJOxw 2D+UXIuGhbnrkJ8v9tQ+LUMdIHXMP1+LV28TdLqYZONA7vqJX3GfHCkh6gTH54lm b1V+9ZrXfN7gcYsQScBZOvDfNwo3uHIdHlDCx2VpDmkUPXSahV6bWR2IYKAK3vyY pWqOaZDuRkDl6RoRCDaVvl+AogayswXQyGQ2qgEx4YVyr1lcRGwcROvFjLUZVjgd Q+uPjvkIurow8R97wLiN/mo847UCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBTdGxB7 4vr1FhHXD8hsj5Gjd7047DAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMjUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwMkDgCb8BgDBwAkDgCb8Bow DQYJKoZIhvcNAQELBQADggEBAKUJIvD0Fx5eE0lwkFG5uoVxhmJqb0QeerJRCjQF uzZHYTEselrD634IaQcdXqzeGwTxBUkruD+gKRKEwSXjsXLVTC86YjhKEfg4BMli RNABb70A5c1X9JDUu/y+3q5trZBektFR6CisJI/Ap9/B5HIj09CC7kqEM7ryC1vj pJjOh5qmMXMMBxdUnY95ak07y/NVGlci5YMEurKFOEz+Eu1cdgtokZMlBkhgPzfw bNwezUTK5h97VdiKQ1Ch8IRBXR+r+ldHRI/R2z6yzbido3NiYvwPbmR54hrUuett 0qhIsrDDyXb2mftqPKdbVKo/XYBSDQni+PeDY+ApFcrDAJw= -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:04 2026 by rpki-client