$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140294.roa File: AS140294.roa (raw, json) Hash identifier: +7IQP4KKAPtpnISfzN9+0cuANc3xl7lnPU8V+4rmAKw= Subject key identifier: AA:1E:5F:03:A6:B9:E6:F4:27:99:25:C5:8B:F8:B9:90:86:EB:79:F7 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 4A9F330369F261A3EA4A7B4277B766F7C6C7B267 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140294.roa Signing time: Thu 11 Jun 2026 15:45:18 +0000 ROA not before: Thu 11 Jun 2026 15:40:18 +0000 ROA not after: Thu 10 Jun 2027 15:45:18 +0000 asID: 140294 IP address blocks: 240e:5a:4300::/42 maxlen: 42 240e:5a:4340::/42 maxlen: 42 240e:5a:4380::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9f:33:03:69:f2:61:a3:ea:4a:7b:42:77:b7:66:f7:c6:c7:b2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 11 15:40:18 2026 GMT Not After : Jun 10 15:45:18 2027 GMT Subject: CN=AA1E5F03A6B9E6F4279925C58BF8B99086EB79F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:aa:88:48:70:3c:dc:8e:7c:21:f3:62:7c: 77:1f:36:68:dd:55:ae:e8:46:14:ad:d4:8c:9e:83: 9a:40:7f:03:53:c6:9e:22:a3:5d:f9:03:86:14:c4: 88:33:fe:4c:04:f4:6f:70:36:88:e8:3b:72:74:9d: dd:54:1b:e5:ac:d1:44:db:bf:63:e4:12:8e:fb:70: ef:a1:05:0f:16:ce:ef:9e:79:96:ec:ba:ec:22:5f: 70:c7:89:e2:02:88:01:e4:31:b0:46:a4:a9:91:c6: ce:73:99:24:b8:84:67:32:38:fb:90:e6:bb:60:d5: a7:17:e5:67:b3:26:41:1c:bc:a0:a9:23:a2:f5:e3: 57:20:a6:da:ff:e8:8a:cf:0f:ac:d5:94:75:5f:39: a9:30:18:2a:a5:0f:bd:f1:c6:01:34:3c:93:b7:04: 9a:45:3d:ff:7f:86:4e:dc:c3:6c:6e:c5:db:5b:85: 9e:04:5b:9d:1c:8e:f8:5a:86:8d:10:3b:89:98:b2: 0c:75:d9:ab:37:e8:6a:79:62:a7:e1:c0:c0:8d:80: e9:37:23:2a:c3:7c:9b:5a:9b:a8:4d:22:83:bb:16: b3:75:1a:4f:07:b1:77:eb:a5:af:5d:e1:3b:64:6c: 62:4a:54:8b:c0:f5:07:3d:d7:2c:ad:84:a7:df:41: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1E:5F:03:A6:B9:E6:F4:27:99:25:C5:8B:F8:B9:90:86:EB:79:F7 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140294.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:5a:4300::-240e:5a:43bf:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2a:e6:00:2f:d0:4f:88:07:0c:ad:a9:88:b1:95:f2:5b:8c:54: 24:6d:3d:81:2e:05:ea:38:a7:d0:5d:f3:25:cf:e4:42:3b:ef: 21:e4:11:59:2b:45:27:6b:aa:df:a1:99:83:11:ff:5e:79:52: 2e:aa:ae:43:51:17:85:bf:a5:b2:81:18:0f:64:95:f4:62:f3: f8:d9:e7:44:5c:8b:9e:01:2f:95:5e:05:c6:77:9f:24:3e:90: c5:b0:54:11:a7:66:2b:e6:fa:87:f4:dd:0d:54:5a:c6:44:03: 8f:94:a4:5b:c4:5a:d8:1d:a0:86:cc:9a:29:cc:5b:6a:a8:32: 35:af:d8:00:43:a6:95:67:a2:7c:27:b4:a5:58:36:82:0d:dd: fb:52:60:81:bf:5d:11:e4:d6:e5:d9:f3:fd:85:b1:73:3a:87: ab:68:51:f3:11:2e:0b:89:e6:f1:87:50:83:5b:c3:96:29:9d: 0b:6e:00:f5:8f:ff:02:fb:21:53:ad:21:5b:7d:2d:53:dc:52: 5b:a2:4e:0d:1e:4c:45:30:12:b6:6b:9d:68:60:99:d9:0a:eb: 16:98:48:8c:4e:32:93:10:fc:ed:ab:10:db:33:dc:df:5f:31: 40:0c:87:08:96:89:ff:c0:c6:b5:39:4b:43:d9:c8:fa:7b:38: 81:3d:74:24 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUSp8zA2nyYaPqSntCd7dm98bHsmcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxMTE1NDAxOFoX DTI3MDYxMDE1NDUxOFowMzExMC8GA1UEAxMoQUExRTVGMDNBNkI5RTZGNDI3OTky NUM1OEJGOEI5OTA4NkVCNzlGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlYqohIcDzcjnwh82J8dx82aN1VruhGFK3UjJ6DmkB/A1PGniKjXfkDhhTE iDP+TAT0b3A2iOg7cnSd3VQb5azRRNu/Y+QSjvtw76EFDxbO7555luy67CJfcMeJ 4gKIAeQxsEakqZHGznOZJLiEZzI4+5Dmu2DVpxflZ7MmQRy8oKkjovXjVyCm2v/o is8PrNWUdV85qTAYKqUPvfHGATQ8k7cEmkU9/3+GTtzDbG7F21uFngRbnRyO+FqG jRA7iZiyDHXZqzfoanlip+HAwI2A6TcjKsN8m1qbqE0ig7sWs3UaTwexd+ulr13h O2RsYkpUi8D1Bz3XLK2Ep99Bd5UCAwEAAaOCAfEwggHtMB0GA1UdDgQWBBSqHl8D prnm9CeZJcWL+LmQhut59zAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMjk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATMBEDBgAkDgBaQwMHBiQOAFpDgDAN BgkqhkiG9w0BAQsFAAOCAQEAKuYAL9BPiAcMramIsZXyW4xUJG09gS4F6jin0F3z Jc/kQjvvIeQRWStFJ2uq36GZgxH/XnlSLqquQ1EXhb+lsoEYD2SV9GLz+NnnRFyL ngEvlV4FxnefJD6QxbBUEadmK+b6h/TdDVRaxkQDj5SkW8Ra2B2ghsyaKcxbaqgy Na/YAEOmlWeifCe0pVg2gg3d+1Jggb9dEeTW5dnz/YWxczqHq2hR8xEuC4nm8YdQ g1vDlimdC24A9Y//AvshU60hW30tU9xSW6JODR5MRTAStmudaGCZ2QrrFphIjE4y kxD87asQ2zPc318xQAyHCJaJ/8DGtTlLQ9nI+ns4gT10JA== -----END CERTIFICATE-----Generated at Sun Jun 14 06:30:58 2026 by rpki-client