$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140299.roa File: AS140299.roa (raw, json) Hash identifier: umbM5IGWSwqBTwHCeTaW/34RUdZBY1PN6pmrZKIH4Mo= Subject key identifier: 45:0E:CD:9B:01:C7:60:6C:B2:F4:C2:62:DD:68:78:A3:E9:15:89:3D Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 65857B9B832A405F3558C5F58198ED2AE6967D8E Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140299.roa Signing time: Thu 11 Jun 2026 15:45:06 +0000 ROA not before: Thu 11 Jun 2026 15:40:06 +0000 ROA not after: Thu 10 Jun 2027 15:45:06 +0000 asID: 140299 IP address blocks: 240e:5a:46c0::/42 maxlen: 42 240e:5a:4700::/42 maxlen: 42 240e:5a:4740::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:85:7b:9b:83:2a:40:5f:35:58:c5:f5:81:98:ed:2a:e6:96:7d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 11 15:40:06 2026 GMT Not After : Jun 10 15:45:06 2027 GMT Subject: CN=450ECD9B01C7606CB2F4C262DD6878A3E915893D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:aa:18:a7:0a:20:27:b7:db:44:f7:3a:e6:30: 62:9b:c0:49:d4:38:d1:eb:23:00:45:48:34:4d:2f: c1:8a:00:4e:9f:8d:95:ae:bd:88:cf:84:12:ed:a7: 26:e3:9c:c4:ca:7c:fa:19:31:63:4b:66:08:16:73: 52:67:fa:7a:26:d7:0e:ee:d0:05:64:c6:58:8a:ee: a0:46:56:40:67:cc:f8:c0:ef:50:c2:2f:72:5f:e7: 69:99:09:fc:a7:a5:f9:f6:e0:43:0e:dc:25:d8:60: f2:2b:e7:ae:70:bc:fb:1d:f7:72:c8:0d:c7:48:b4: ed:10:0e:64:d2:ef:2b:f7:56:15:6d:1f:40:96:69: 4a:f4:4f:da:3e:07:4a:0b:c6:e0:c8:39:2a:23:00: 03:93:c2:e3:eb:e2:c9:42:8b:f5:ed:a4:8b:9f:12: 7f:6c:38:71:89:1f:35:c9:43:3e:60:51:22:9f:d6: c0:dd:c9:c7:c2:7d:0c:ab:02:8f:2f:99:6a:ff:27: d0:54:50:36:24:2a:df:b7:b7:d4:52:3b:96:a0:a3: f9:38:b2:e3:e7:0e:85:7e:9c:45:60:5f:55:04:56: ec:55:07:8a:9b:60:9e:9c:0d:46:40:a6:c1:7e:68: e0:42:6b:b6:34:6c:9d:25:d6:ef:55:09:f6:f1:0c: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0E:CD:9B:01:C7:60:6C:B2:F4:C2:62:DD:68:78:A3:E9:15:89:3D X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140299.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:5a:46c0::-240e:5a:477f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 31:28:49:3a:d3:b8:90:06:be:09:7e:1c:94:f5:87:2f:79:a4: fc:75:04:44:1f:86:e0:2c:a0:ee:23:7f:ce:8c:2d:49:b5:b1: 26:d6:e7:48:eb:ab:85:9a:00:68:d1:1e:2f:de:7f:60:2e:63: 90:de:73:81:5b:70:ab:4d:1b:10:b4:a9:8c:70:ac:16:21:21: 7c:c2:c3:78:be:47:f2:bb:1f:61:40:04:7e:53:e1:29:b9:0e: 2d:8b:9e:f5:22:3c:80:aa:fa:ce:7f:14:d9:79:6f:f9:df:7f: 37:a5:29:ac:7a:3a:99:90:37:db:ac:82:3a:b4:0a:44:e8:1a: 6b:97:41:83:e6:3b:76:32:2e:06:4e:31:ba:c1:89:d0:e3:c5: f1:01:a6:b0:1b:dc:7c:09:92:eb:62:4a:b2:b6:93:c5:8f:15: 35:0c:5b:37:ef:a2:f1:ac:3e:21:cd:d3:90:10:ec:3d:4e:87: 16:2f:7e:af:91:19:53:1c:6f:5b:e4:18:e7:fb:3e:63:b4:43: 8d:37:e8:15:ad:1b:18:48:a4:25:4e:97:1d:e1:66:c3:61:00: 86:0f:29:69:1f:01:cb:aa:93:3a:cd:9c:82:3e:ef:de:ac:70: fe:97:ed:a0:dd:a2:43:a0:f4:c6:d7:6e:f1:da:a3:11:35:fb: 82:cd:27:00 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUZYV7m4MqQF81WMX1gZjtKuaWfY4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxMTE1NDAwNloX DTI3MDYxMDE1NDUwNlowMzExMC8GA1UEAxMoNDUwRUNEOUIwMUM3NjA2Q0IyRjRD MjYyREQ2ODc4QTNFOTE1ODkzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6qGKcKICe320T3OuYwYpvASdQ40esjAEVINE0vwYoATp+Nla69iM+EEu2n JuOcxMp8+hkxY0tmCBZzUmf6eibXDu7QBWTGWIruoEZWQGfM+MDvUMIvcl/naZkJ /Kel+fbgQw7cJdhg8ivnrnC8+x33csgNx0i07RAOZNLvK/dWFW0fQJZpSvRP2j4H SgvG4Mg5KiMAA5PC4+viyUKL9e2ki58Sf2w4cYkfNclDPmBRIp/WwN3Jx8J9DKsC jy+Zav8n0FRQNiQq37e31FI7lqCj+Tiy4+cOhX6cRWBfVQRW7FUHiptgnpwNRkCm wX5o4EJrtjRsnSXW71UJ9vEMopkCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBRFDs2b AcdgbLL0wmLdaHij6RWJPTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMjk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwYkDgBaRsADBwckDgBaRwAw DQYJKoZIhvcNAQELBQADggEBADEoSTrTuJAGvgl+HJT1hy95pPx1BEQfhuAsoO4j f86MLUm1sSbW50jrq4WaAGjRHi/ef2AuY5Dec4FbcKtNGxC0qYxwrBYhIXzCw3i+ R/K7H2FABH5T4Sm5Di2LnvUiPICq+s5/FNl5b/nffzelKax6OpmQN9usgjq0CkTo GmuXQYPmO3YyLgZOMbrBidDjxfEBprAb3HwJkutiSrK2k8WPFTUMWzfvovGsPiHN 05AQ7D1OhxYvfq+RGVMcb1vkGOf7PmO0Q4036BWtGxhIpCVOlx3hZsNhAIYPKWkf AcuqkzrNnII+796scP6X7aDdokOg9MbXbvHaoxE1+4LNJwA= -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:35 2026 by rpki-client