$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140303.roa File: AS140303.roa (raw, json) Hash identifier: jxoMUWUcupupDoA4ClGkBcIVK6aSHUWP9W5u6pv4X5Q= Subject key identifier: B8:2D:A1:D0:2B:06:34:8C:5F:F7:FD:2A:1D:F3:AF:98:84:18:72:E9 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 74D872C1C16A8DE0EDD8D2EDA121743B7DCCD886 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140303.roa Signing time: Thu 11 Jun 2026 15:45:17 +0000 ROA not before: Thu 11 Jun 2026 15:40:17 +0000 ROA not after: Thu 10 Jun 2027 15:45:17 +0000 asID: 140303 IP address blocks: 240e:5a:49c0::/42 maxlen: 42 240e:5a:4a00::/42 maxlen: 42 240e:5a:4a40::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d8:72:c1:c1:6a:8d:e0:ed:d8:d2:ed:a1:21:74:3b:7d:cc:d8:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 11 15:40:17 2026 GMT Not After : Jun 10 15:45:17 2027 GMT Subject: CN=B82DA1D02B06348C5FF7FD2A1DF3AF98841872E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:62:65:17:7b:9b:ac:23:07:9e:37:57:7e:9c: 83:f1:cc:e3:bf:f2:e9:9e:26:20:75:a2:77:f6:85: b4:57:2e:d2:a7:fc:03:ae:42:41:4d:ee:50:f9:06: 49:8d:a5:57:43:8b:19:a7:c4:1c:ac:99:13:77:bf: 61:9c:98:b9:2c:b2:ad:52:b2:b4:ef:33:82:e1:65: 5f:46:8f:1e:3b:53:42:36:a1:ab:0f:f2:a2:5d:a9: 2a:96:7c:3c:fa:c1:7d:40:1c:a1:6e:d8:c4:8f:3b: 67:6f:eb:33:f8:d5:7a:17:6c:5d:ae:4d:4f:dc:4b: a2:0c:0f:3e:e2:d4:17:83:58:93:25:48:21:df:04: 5d:c8:11:8a:5f:74:45:e5:c7:f8:18:ab:64:dd:55: ca:84:b4:a8:73:ce:92:89:22:8f:0f:cf:79:33:2f: af:0b:f9:b5:77:61:7d:70:fb:c1:91:76:e4:12:7b: 17:a1:0b:7f:76:01:f6:ea:b7:25:89:04:7e:53:0e: d5:8e:52:1d:c2:d4:b3:c7:3d:7c:f2:3a:03:a0:af: d3:c5:51:f8:11:44:4e:eb:59:dd:d6:cd:ea:af:3a: 8a:49:8d:02:57:b0:96:c7:01:a4:f3:8d:65:95:68: 25:6d:6e:ac:99:63:20:8c:48:39:66:c1:3a:92:01: d5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2D:A1:D0:2B:06:34:8C:5F:F7:FD:2A:1D:F3:AF:98:84:18:72:E9 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140303.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:5a:49c0::-240e:5a:4a7f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2c:dc:4c:32:eb:68:b3:d4:c7:7f:5c:77:61:35:54:ec:f7:cf: 60:87:ef:69:99:f7:39:ff:b1:bc:aa:c1:73:68:fe:94:0b:db: b7:7c:04:4e:b9:2d:0b:8c:2a:d8:ea:0f:b9:f3:6d:3c:4b:41: 46:99:71:7a:85:7c:04:b6:0d:9c:6c:e3:31:d6:b8:76:c7:64: c8:e0:08:da:cf:92:97:92:80:3d:09:5e:25:c9:25:86:29:2c: 9a:6a:24:1a:b4:53:c0:c7:28:2b:d8:cc:aa:41:fb:e9:6c:81: 75:cd:c1:df:f5:af:08:a0:3b:dc:85:61:f9:20:d7:1d:fc:d6: 0b:22:57:cc:76:51:0f:ee:d5:ca:93:3b:42:2a:93:c7:37:02: ab:77:ef:b9:27:fd:0c:c9:cc:f4:8e:24:51:b2:6c:f2:8e:72: 58:37:81:17:36:e1:33:39:e6:f2:94:dc:94:d6:7f:c5:5a:cd: a4:8d:23:4e:e1:62:a2:66:7e:b1:43:d9:aa:a1:77:ee:b6:f6: 45:3d:e1:ae:b3:06:67:17:e8:c9:0d:6b:cb:cf:cd:cf:81:79: ca:d3:91:6c:e3:be:71:d4:fa:8f:db:88:58:2e:08:89:2a:55: ae:b4:d8:68:e8:67:96:9c:0b:7f:37:a6:48:1b:9a:a4:1e:18: eb:bb:14:0f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUdNhywcFqjeDt2NLtoSF0O33M2IYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxMTE1NDAxN1oX DTI3MDYxMDE1NDUxN1owMzExMC8GA1UEAxMoQjgyREExRDAyQjA2MzQ4QzVGRjdG RDJBMURGM0FGOTg4NDE4NzJFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRiZRd7m6wjB543V36cg/HM47/y6Z4mIHWid/aFtFcu0qf8A65CQU3uUPkG SY2lV0OLGafEHKyZE3e/YZyYuSyyrVKytO8zguFlX0aPHjtTQjahqw/yol2pKpZ8 PPrBfUAcoW7YxI87Z2/rM/jVehdsXa5NT9xLogwPPuLUF4NYkyVIId8EXcgRil90 ReXH+BirZN1VyoS0qHPOkokijw/PeTMvrwv5tXdhfXD7wZF25BJ7F6ELf3YB9uq3 JYkEflMO1Y5SHcLUs8c9fPI6A6Cv08VR+BFETutZ3dbN6q86ikmNAlewlscBpPON ZZVoJW1urJljIIxIOWbBOpIB1akCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBS4LaHQ KwY0jF/3/Sod86+YhBhy6TAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzAzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwYkDgBaScADBwckDgBaSgAw DQYJKoZIhvcNAQELBQADggEBACzcTDLraLPUx39cd2E1VOz3z2CH72mZ9zn/sbyq wXNo/pQL27d8BE65LQuMKtjqD7nzbTxLQUaZcXqFfAS2DZxs4zHWuHbHZMjgCNrP kpeSgD0JXiXJJYYpLJpqJBq0U8DHKCvYzKpB++lsgXXNwd/1rwigO9yFYfkg1x38 1gsiV8x2UQ/u1cqTO0Iqk8c3Aqt377kn/QzJzPSOJFGybPKOclg3gRc24TM55vKU 3JTWf8VazaSNI07hYqJmfrFD2aqhd+629kU94a6zBmcX6MkNa8vPzc+BecrTkWzj vnHU+o/biFguCIkqVa602GjoZ5acC383pkgbmqQeGOu7FA8= -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:45 2026 by rpki-client