$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140314.roa File: AS140314.roa (raw, json) Hash identifier: I5svY+sPqyd8naRghMx83Ql9Qnz4VzHZnB8B38c0avI= Subject key identifier: 89:9B:9E:5E:E5:25:34:B6:81:52:CE:CC:96:8F:58:12:B8:A6:0A:BE Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 2F55E47621152430877FC9A4D1F4D79228C86689 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140314.roa Signing time: Tue 02 Jun 2026 16:07:11 +0000 ROA not before: Tue 02 Jun 2026 16:02:11 +0000 ROA not after: Tue 01 Jun 2027 16:07:11 +0000 asID: 140314 IP address blocks: 240e:108:4058::/48 maxlen: 48 240e:108:4858::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:55:e4:76:21:15:24:30:87:7f:c9:a4:d1:f4:d7:92:28:c8:66:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 2 16:02:11 2026 GMT Not After : Jun 1 16:07:11 2027 GMT Subject: CN=899B9E5EE52534B68152CECC968F5812B8A60ABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:d0:29:b0:7a:3d:7f:48:1d:c5:80:f2:52: d0:1e:90:fa:0e:0f:10:5a:70:c0:59:f0:67:34:5e: f4:b8:d8:93:66:8c:a4:ef:f5:e4:c8:86:9b:60:20: 12:40:7e:3b:1f:3e:1a:7a:64:ea:6c:08:4a:d6:6b: 1f:39:9f:8c:ca:78:d5:01:b7:d9:9a:63:04:8e:e6: 2a:f1:46:1a:af:92:d2:7c:df:49:66:ea:58:7f:2e: 5f:d2:27:8b:1e:e5:89:23:c0:00:de:73:34:ba:91: 47:6b:b2:0a:a1:0e:79:ff:ef:9f:69:6e:f1:92:c8: 32:56:91:10:88:9c:b2:62:fd:8b:f8:bb:47:5e:d9: e0:cf:f8:82:eb:1e:08:a1:9b:a4:37:db:4f:92:d9: 08:a3:de:85:94:42:51:d0:f2:d3:d6:e1:25:b7:ed: 6d:70:40:74:67:b5:6b:b3:6c:11:2a:06:86:4b:02: 06:5a:54:ef:a4:f1:19:33:db:95:8a:be:45:58:5e: a7:34:ad:51:89:fc:42:a6:1d:61:77:40:36:f3:0b: 74:1c:1d:38:d4:6b:4d:45:7f:a5:d3:cd:a4:cc:41: b7:f5:77:be:5c:a6:73:bd:3b:43:72:b1:27:a3:db: 2d:c6:34:0b:af:01:5e:ac:2d:1d:16:ca:4a:55:7f: 8d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9B:9E:5E:E5:25:34:B6:81:52:CE:CC:96:8F:58:12:B8:A6:0A:BE X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140314.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:108:4058::/48 240e:108:4858::/48 Signature Algorithm: sha256WithRSAEncryption 77:10:4e:d1:90:cc:4e:6a:a8:e3:ea:28:c4:ad:ce:91:a3:bc: 21:f7:fb:b5:95:27:ae:f8:a7:a3:f2:a6:96:dd:c2:fb:54:c2: dd:10:90:60:bf:0d:ef:cc:f8:ca:aa:c5:ae:45:00:44:0d:2e: c9:a6:48:b4:5c:ab:d2:95:e2:30:f9:24:e7:8a:50:3c:81:6b: 65:97:7c:da:0c:52:33:a9:57:49:e0:ec:89:64:3b:17:aa:ec: 4b:c8:16:b9:64:54:f8:55:23:1f:22:91:70:0f:31:7c:15:c8: d3:e6:b7:df:4d:7a:78:63:1a:f0:1f:22:c0:9c:85:80:b4:06: 40:01:2c:ac:10:b3:cd:7c:c6:dd:18:28:ea:0e:fe:3e:e4:c7: d5:d1:62:9b:74:1a:f2:42:aa:60:43:54:ed:4f:01:52:3c:0b: f5:43:b0:67:b6:c6:d8:c8:31:8b:b2:1a:c1:0e:96:9e:7f:ca: cb:36:e1:fb:f1:f4:9c:e3:b7:cc:6e:21:60:f1:82:f7:d5:12: be:fe:52:5f:8e:60:0f:df:57:73:de:3d:99:a1:f9:f1:e9:e8: 7c:04:1b:17:e5:02:ee:da:ef:e0:fd:08:86:af:00:9d:22:ca: 4c:7c:fc:f7:34:66:64:c0:ed:c2:61:0e:88:00:fe:e8:fe:91: 9b:23:1d:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgIUL1XkdiEVJDCHf8mk0fTXkijIZokwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwMjE2MDIxMVoX DTI3MDYwMTE2MDcxMVowMzExMC8GA1UEAxMoODk5QjlFNUVFNTI1MzRCNjgxNTJD RUNDOTY4RjU4MTJCOEE2MEFCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKyk0Cmwej1/SB3FgPJS0B6Q+g4PEFpwwFnwZzRe9LjYk2aMpO/15MiGm2Ag EkB+Ox8+Gnpk6mwIStZrHzmfjMp41QG32ZpjBI7mKvFGGq+S0nzfSWbqWH8uX9In ix7liSPAAN5zNLqRR2uyCqEOef/vn2lu8ZLIMlaREIicsmL9i/i7R17Z4M/4guse CKGbpDfbT5LZCKPehZRCUdDy09bhJbftbXBAdGe1a7NsESoGhksCBlpU76TxGTPb lYq+RVhepzStUYn8QqYdYXdANvMLdBwdONRrTUV/pdPNpMxBt/V3vlymc707Q3Kx J6PbLcY0C68BXqwtHRbKSlV/jSsCAwEAAaOCAfAwggHsMB0GA1UdDgQWBBSJm55e 5SU0toFSzsyWj1gSuKYKvjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzE0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJA4BCEBYAwcAJA4BCEhYMA0G CSqGSIb3DQEBCwUAA4IBAQB3EE7RkMxOaqjj6ijErc6Ro7wh9/u1lSeu+Kej8qaW 3cL7VMLdEJBgvw3vzPjKqsWuRQBEDS7Jpki0XKvSleIw+STnilA8gWtll3zaDFIz qVdJ4OyJZDsXquxLyBa5ZFT4VSMfIpFwDzF8FcjT5rffTXp4YxrwHyLAnIWAtAZA ASysELPNfMbdGCjqDv4+5MfV0WKbdBryQqpgQ1TtTwFSPAv1Q7BntsbYyDGLshrB Dpaef8rLNuH78fSc47fMbiFg8YL31RK+/lJfjmAP31dz3j2Zofnx6eh8BBsX5QLu 2u/g/QiGrwCdIspMfPz3NGZkwO3CYQ6IAP7o/pGbIx1S -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:37 2026 by rpki-client