$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140291.roa File: AS140291.roa (raw, json) Hash identifier: jwKfukwEI8VOQ6SaKgbmfw8MiHv+Q/4H0GXOMgIVgRo= Subject key identifier: 35:CA:26:92:DF:E0:87:91:C2:B4:55:F6:1E:CD:9D:C2:06:EB:12:F0 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 6F5A6DD3DFEFF95C9B2A662848FCF8C11018E70F Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140291.roa Signing time: Thu 11 Jun 2026 15:45:17 +0000 ROA not before: Thu 11 Jun 2026 15:40:17 +0000 ROA not after: Thu 10 Jun 2027 15:45:17 +0000 asID: 140291 IP address blocks: 240e:5a:40c0::/42 maxlen: 42 240e:5a:4100::/42 maxlen: 42 240e:5a:4140::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5a:6d:d3:df:ef:f9:5c:9b:2a:66:28:48:fc:f8:c1:10:18:e7:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 11 15:40:17 2026 GMT Not After : Jun 10 15:45:17 2027 GMT Subject: CN=35CA2692DFE08791C2B455F61ECD9DC206EB12F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:71:ae:db:f9:b8:6c:32:ca:1f:0b:78:6a: 69:e1:a3:b7:b1:19:5d:ea:96:89:ab:8e:db:25:fc: 0d:dc:70:ee:94:5d:69:27:51:bc:f3:8e:0d:97:44: 63:cc:bd:82:27:e8:40:98:fb:cb:87:03:a0:32:a8: 4d:c8:21:a3:5c:09:11:5a:84:63:d4:be:51:03:97: 91:d2:df:84:5b:9c:6a:bc:ec:2a:c6:cf:6c:d1:17: f9:2f:ae:01:92:d7:ce:21:64:5a:27:dc:82:f5:fe: 5f:9c:55:7a:06:81:ee:45:2f:b1:b2:f9:aa:3a:4a: 37:6b:e5:d4:be:e3:29:5e:96:06:1c:1e:94:10:5f: 5c:43:77:d6:e6:1e:99:62:de:66:b3:45:79:a9:16: 94:a2:76:3c:68:cc:46:4c:c5:ab:82:05:8a:11:bb: 3c:2e:35:b9:61:48:e6:b0:62:6a:4b:81:92:39:dd: 81:cd:2d:6a:2b:01:f6:4b:1e:90:b1:e6:5f:25:75: e7:0f:f6:e3:97:e5:f8:9b:d1:e0:b5:dc:cb:f2:87: 86:11:6d:28:fe:56:ad:ee:d2:18:45:5a:57:5e:82: 8c:f6:67:66:69:1b:6e:c6:0a:30:f4:0a:55:bc:4b: bb:6f:84:3b:76:79:ea:e7:92:05:8c:96:78:80:61: cb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CA:26:92:DF:E0:87:91:C2:B4:55:F6:1E:CD:9D:C2:06:EB:12:F0 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140291.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:5a:40c0::-240e:5a:417f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 24:d8:f3:81:f8:8b:b9:fb:48:bf:30:d0:aa:2f:f0:78:0e:b4: c2:a0:a9:4b:7d:8b:74:d8:c4:4b:89:0c:e1:a4:5d:94:8d:4d: 95:44:8b:70:35:16:c2:b2:ad:bf:d6:21:ab:28:2d:5f:e3:98: 20:77:13:f4:f8:25:7b:f4:f0:c9:39:03:d1:29:96:9b:4c:c6: 23:64:33:9c:d6:6d:13:9b:78:01:fe:f6:16:29:09:b2:e8:78: de:9d:7a:66:ae:92:58:14:12:4b:2b:95:98:6b:fd:0d:ce:73: fb:41:17:21:ef:ea:2f:56:d6:6f:dc:63:2a:68:bc:78:77:06: 41:a3:86:b3:e9:3a:8f:68:f2:55:9b:1e:ce:12:f3:d9:ee:51: 5b:a2:d9:31:00:7e:67:7f:c6:e9:b7:45:4e:d4:7d:e6:ea:36: 7a:a6:46:09:19:d4:57:ac:b0:57:85:df:6d:80:00:cb:04:56: 50:96:a5:7c:bb:84:db:bc:ca:e4:c3:53:f3:71:38:a8:48:23: 93:0e:52:9d:38:c9:80:c6:ce:a7:59:a7:2f:66:93:b8:59:ef: f1:57:41:ec:83:cb:6e:17:b8:67:39:f4:c5:ac:4c:d9:31:d9: 2a:3e:f3:0f:48:e2:d9:fe:6b:ef:43:87:2d:62:2b:55:0f:fc: 23:c5:bb:28 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUb1pt09/v+VybKmYoSPz4wRAY5w8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxMTE1NDAxN1oX DTI3MDYxMDE1NDUxN1owMzExMC8GA1UEAxMoMzVDQTI2OTJERkUwODc5MUMyQjQ1 NUY2MUVDRDlEQzIwNkVCMTJGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuSca7b+bhsMsofC3hqaeGjt7EZXeqWiauO2yX8Ddxw7pRdaSdRvPOODZdE Y8y9gifoQJj7y4cDoDKoTcgho1wJEVqEY9S+UQOXkdLfhFucarzsKsbPbNEX+S+u AZLXziFkWifcgvX+X5xVegaB7kUvsbL5qjpKN2vl1L7jKV6WBhwelBBfXEN31uYe mWLeZrNFeakWlKJ2PGjMRkzFq4IFihG7PC41uWFI5rBiakuBkjndgc0taisB9kse kLHmXyV15w/245fl+JvR4LXcy/KHhhFtKP5Wre7SGEVaV16CjPZnZmkbbsYKMPQK VbxLu2+EO3Z56ueSBYyWeIBhy60CAwEAAaOCAfIwggHuMB0GA1UdDgQWBBQ1yiaS 3+CHkcK0VfYezZ3CBusS8DAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMjkxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwYkDgBaQMADBwckDgBaQQAw DQYJKoZIhvcNAQELBQADggEBACTY84H4i7n7SL8w0Kov8HgOtMKgqUt9i3TYxEuJ DOGkXZSNTZVEi3A1FsKyrb/WIasoLV/jmCB3E/T4JXv08Mk5A9EplptMxiNkM5zW bRObeAH+9hYpCbLoeN6demauklgUEksrlZhr/Q3Oc/tBFyHv6i9W1m/cYypovHh3 BkGjhrPpOo9o8lWbHs4S89nuUVui2TEAfmd/xum3RU7UfebqNnqmRgkZ1FessFeF 322AAMsEVlCWpXy7hNu8yuTDU/NxOKhII5MOUp04yYDGzqdZpy9mk7hZ7/FXQeyD y24XuGc59MWsTNkx2So+8w9I4tn+a+9Dhy1iK1UP/CPFuyg= -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:40 2026 by rpki-client