$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140295.roa File: AS140295.roa (raw, json) Hash identifier: V8P6laVPe7AhR+4Rj2Xod5oPSb5NGhv6wb2mK7aSOnQ= Subject key identifier: 1F:92:9E:58:54:48:9A:97:97:98:75:05:DB:79:9E:AD:6E:2E:FF:60 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 7BA09D1B4C774897624DBEEE7D6428C9207C8F9B Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140295.roa Signing time: Thu 11 Jun 2026 15:45:17 +0000 ROA not before: Thu 11 Jun 2026 15:40:17 +0000 ROA not after: Thu 10 Jun 2027 15:45:17 +0000 asID: 140295 IP address blocks: 240e:5a:43c0::/42 maxlen: 42 240e:5a:4400::/42 maxlen: 42 240e:5a:4440::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a0:9d:1b:4c:77:48:97:62:4d:be:ee:7d:64:28:c9:20:7c:8f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 11 15:40:17 2026 GMT Not After : Jun 10 15:45:17 2027 GMT Subject: CN=1F929E5854489A9797987505DB799EAD6E2EFF60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:74:43:96:a8:2f:67:50:b0:8f:99:c1:74: 4b:7a:ae:87:65:d2:1d:87:30:fa:cf:1e:f2:1c:21: 83:4f:8d:82:ac:28:4c:db:81:68:6c:a0:1d:f2:e0: 6b:2e:48:18:cc:b2:51:f6:26:e2:8a:40:ab:ee:91: 72:65:b7:ff:8b:79:00:d4:92:c0:75:49:dc:74:82: 98:f5:c5:a1:38:a3:fb:95:0d:5f:42:60:6d:d2:40: 56:b8:79:3d:b4:a2:fd:bf:68:e1:9b:a4:bb:5c:16: 04:ab:5d:30:57:d5:31:18:e6:c1:3e:2d:54:f0:d7: bf:1b:37:91:06:10:23:67:16:e0:d3:9e:c8:96:45: 4e:65:8f:07:ff:dc:28:52:c5:be:86:bd:56:4b:fb: d1:d0:c1:24:61:ba:1e:ee:82:40:7b:24:86:a8:46: 17:85:e9:ab:61:80:d6:9f:80:99:bb:bd:20:df:5c: ab:a9:43:81:89:21:6a:c0:28:f2:df:5b:53:cc:d5: 1d:8c:a9:64:63:02:3e:b3:a8:97:c3:62:d2:8e:a5: b0:db:1d:30:19:90:df:89:8f:a7:c2:7b:87:cf:e2: 2d:4a:09:d3:9c:bc:b8:c3:8c:af:ac:81:c9:3d:71: c3:81:8e:0e:19:b1:43:37:c7:73:8f:c5:68:c6:c7: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:92:9E:58:54:48:9A:97:97:98:75:05:DB:79:9E:AD:6E:2E:FF:60 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140295.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:5a:43c0::-240e:5a:447f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7c:03:ea:e0:32:28:02:b8:b4:42:ee:ca:31:87:a6:04:4e:8d: 22:9f:a8:25:06:d2:ae:eb:b7:bb:f8:7f:e3:cd:68:fc:0a:ed: e0:f8:1c:b4:6d:5d:2c:d9:f3:4d:19:2a:53:19:b2:53:48:7c: 32:62:c8:56:80:cc:0c:f2:e4:26:b8:e3:dd:aa:00:46:f4:28: 41:1d:66:39:34:72:0b:d4:da:69:99:b4:51:f5:da:73:56:ed: 6a:24:f5:37:fe:8f:0f:8c:ac:42:72:7f:b7:b5:2b:9d:71:f6: 65:72:d1:8b:44:49:11:b2:34:48:e4:d8:dd:5d:af:78:d7:13: 96:7d:13:bc:ad:78:f0:88:b5:55:3a:f8:c8:6c:80:b7:3f:7a: c7:72:0c:0e:40:c3:7c:44:b3:d1:bc:b5:ec:47:13:27:0d:73: eb:eb:61:e5:79:18:8b:1b:d8:30:30:01:c3:0f:94:ac:87:28: 78:cc:ce:d7:23:48:39:8e:04:d6:0e:0a:30:5c:98:fc:ff:b0: 40:c5:f7:86:da:b3:d7:70:da:b4:d3:ff:39:92:5a:6f:a4:ff: 99:72:90:a9:bb:5d:c9:8c:2b:f8:9e:6e:0b:19:4e:93:c6:08: 3c:dc:52:3e:e0:37:6a:92:9d:6a:80:d1:7e:26:72:95:36:8d: 1a:ce:eb:87 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUe6CdG0x3SJdiTb7ufWQoySB8j5swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxMTE1NDAxN1oX DTI3MDYxMDE1NDUxN1owMzExMC8GA1UEAxMoMUY5MjlFNTg1NDQ4OUE5Nzk3OTg3 NTA1REI3OTlFQUQ2RTJFRkY2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALU2dEOWqC9nULCPmcF0S3quh2XSHYcw+s8e8hwhg0+NgqwoTNuBaGygHfLg ay5IGMyyUfYm4opAq+6RcmW3/4t5ANSSwHVJ3HSCmPXFoTij+5UNX0JgbdJAVrh5 PbSi/b9o4Zuku1wWBKtdMFfVMRjmwT4tVPDXvxs3kQYQI2cW4NOeyJZFTmWPB//c KFLFvoa9Vkv70dDBJGG6Hu6CQHskhqhGF4Xpq2GA1p+Ambu9IN9cq6lDgYkhasAo 8t9bU8zVHYypZGMCPrOol8Ni0o6lsNsdMBmQ34mPp8J7h8/iLUoJ05y8uMOMr6yB yT1xw4GODhmxQzfHc4/FaMbHsTkCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBQfkp5Y VEial5eYdQXbeZ6tbi7/YDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMjk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwYkDgBaQ8ADBwckDgBaRAAw DQYJKoZIhvcNAQELBQADggEBAHwD6uAyKAK4tELuyjGHpgROjSKfqCUG0q7rt7v4 f+PNaPwK7eD4HLRtXSzZ800ZKlMZslNIfDJiyFaAzAzy5Ca4492qAEb0KEEdZjk0 cgvU2mmZtFH12nNW7Wok9Tf+jw+MrEJyf7e1K51x9mVy0YtESRGyNEjk2N1dr3jX E5Z9E7ytePCItVU6+MhsgLc/esdyDA5Aw3xEs9G8texHEycNc+vrYeV5GIsb2DAw AcMPlKyHKHjMztcjSDmOBNYOCjBcmPz/sEDF94bas9dw2rTT/zmSWm+k/5lykKm7 XcmMK/iebgsZTpPGCDzcUj7gN2qSnWqA0X4mcpU2jRrO64c= -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:08 2026 by rpki-client