$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140315.roa File: AS140315.roa (raw, json) Hash identifier: FVSVbE4fbhHEKEEI8CrbDGbBXMI478pHW9fIGIAdTu4= Subject key identifier: F3:FC:49:1A:FC:2C:55:76:E0:4A:EC:CA:FF:F0:A9:0D:3A:F6:7C:A6 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 6E24232759EE80E1274F11B07F63897871C23422 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140315.roa Signing time: Tue 02 Jun 2026 16:24:36 +0000 ROA not before: Tue 02 Jun 2026 16:19:36 +0000 ROA not after: Tue 01 Jun 2027 16:24:36 +0000 asID: 140315 IP address blocks: 240e:108:4056::/48 maxlen: 48 240e:108:4856::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:24:23:27:59:ee:80:e1:27:4f:11:b0:7f:63:89:78:71:c2:34:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 2 16:19:36 2026 GMT Not After : Jun 1 16:24:36 2027 GMT Subject: CN=F3FC491AFC2C5576E04AECCAFFF0A90D3AF67CA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9e:72:57:2d:bc:d3:1c:94:22:8e:3f:72:c9: be:21:2e:d8:d1:f8:a6:fc:8f:46:d4:59:d0:ab:9a: ba:f8:98:9f:58:8b:9e:6b:8d:89:4a:97:3c:e1:21: a2:88:be:f7:ce:59:79:34:5d:25:e6:b5:6c:8e:35: cc:ab:68:7c:37:f2:a2:ae:33:61:2e:5b:0b:37:c6: a9:42:63:12:eb:64:59:7e:37:bf:f0:63:fd:68:8d: e5:68:14:f0:b7:06:fa:30:28:e7:ec:38:9c:33:65: 85:69:5a:5e:15:9b:16:2a:34:09:79:cb:44:a8:19: 55:68:33:31:11:1a:2b:75:85:2a:50:20:a5:2a:0c: b7:70:ec:8a:5f:54:6e:b4:37:54:86:f0:a1:29:3d: b9:f0:fb:65:0d:06:c5:2b:96:0b:87:00:dd:66:85: b3:a2:6b:2f:98:85:4e:90:90:db:6f:87:b4:4e:37: bd:a1:4d:47:e9:8a:49:14:ae:c9:40:a1:ab:d7:b5: d7:24:46:0e:f9:87:3a:fc:f9:60:c7:a8:31:f4:6f: 2d:9b:55:a8:a8:cc:ae:d8:2a:60:b4:6e:49:f4:f3: d4:43:95:e7:70:a6:2d:7f:c4:77:cb:10:c2:2b:5d: c8:85:ee:71:b6:97:f6:5f:62:8e:4a:c3:0c:81:b3: d3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FC:49:1A:FC:2C:55:76:E0:4A:EC:CA:FF:F0:A9:0D:3A:F6:7C:A6 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140315.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:108:4056::/48 240e:108:4856::/48 Signature Algorithm: sha256WithRSAEncryption 40:7d:bc:a4:b6:45:a0:db:0c:90:31:9c:24:f5:38:35:cb:ce: a8:22:4b:30:10:2f:a9:fa:e4:0e:bc:42:c8:fd:82:68:d0:9f: 84:b0:92:a5:65:bc:e5:5a:01:d9:5e:d3:da:59:3e:36:88:06: ef:12:35:a1:08:45:f3:ff:13:c7:ed:4c:b2:30:ba:1b:b6:4a: 5b:01:63:ab:d0:01:33:e8:3a:3d:52:68:40:dd:3a:2a:68:fb: 51:4b:5a:67:4a:f5:d5:6a:ff:59:56:33:1b:20:1c:c1:14:de: d2:ff:23:33:cd:99:5e:3f:53:5a:e9:b3:b6:86:71:d6:a0:81: 93:c8:7c:52:a9:68:76:b0:f4:d5:55:f5:03:37:e9:a3:1d:8c: fc:2a:46:df:98:7a:dd:85:fa:3b:21:f1:32:24:4e:af:b9:ab: 77:58:54:62:f7:9d:26:05:a3:39:61:7b:4d:72:28:04:61:62: 0e:f8:a2:59:ca:ab:a2:fe:b6:45:bd:40:f9:5c:27:8c:61:c9: fe:14:3c:c2:e3:18:e4:63:47:c6:a7:62:6e:66:31:fd:d0:4d: 30:2a:98:00:58:46:8a:94:1d:c5:fd:fb:f1:00:cf:77:0a:c8: 84:e5:97:54:c1:94:1a:fa:f1:b1:61:4f:0d:ec:05:08:76:ff: 9d:6f:2a:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgIUbiQjJ1nugOEnTxGwf2OJeHHCNCIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwMjE2MTkzNloX DTI3MDYwMTE2MjQzNlowMzExMC8GA1UEAxMoRjNGQzQ5MUFGQzJDNTU3NkUwNEFF Q0NBRkZGMEE5MEQzQUY2N0NBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN+eclctvNMclCKOP3LJviEu2NH4pvyPRtRZ0KuauviYn1iLnmuNiUqXPOEh ooi+985ZeTRdJea1bI41zKtofDfyoq4zYS5bCzfGqUJjEutkWX43v/Bj/WiN5WgU 8LcG+jAo5+w4nDNlhWlaXhWbFio0CXnLRKgZVWgzMREaK3WFKlAgpSoMt3Dsil9U brQ3VIbwoSk9ufD7ZQ0GxSuWC4cA3WaFs6JrL5iFTpCQ22+HtE43vaFNR+mKSRSu yUChq9e11yRGDvmHOvz5YMeoMfRvLZtVqKjMrtgqYLRuSfTz1EOV53CmLX/Ed8sQ witdyIXucbaX9l9ijkrDDIGz09ECAwEAAaOCAfAwggHsMB0GA1UdDgQWBBTz/Eka /CxVduBK7Mr/8KkNOvZ8pjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJA4BCEBWAwcAJA4BCEhWMA0G CSqGSIb3DQEBCwUAA4IBAQBAfbyktkWg2wyQMZwk9Tg1y86oIkswEC+p+uQOvELI /YJo0J+EsJKlZbzlWgHZXtPaWT42iAbvEjWhCEXz/xPH7UyyMLobtkpbAWOr0AEz 6Do9UmhA3ToqaPtRS1pnSvXVav9ZVjMbIBzBFN7S/yMzzZleP1Na6bO2hnHWoIGT yHxSqWh2sPTVVfUDN+mjHYz8KkbfmHrdhfo7IfEyJE6vuat3WFRi950mBaM5YXtN cigEYWIO+KJZyqui/rZFvUD5XCeMYcn+FDzC4xjkY0fGp2JuZjH90E0wKpgAWEaK lB3F/fvxAM93CsiE5ZdUwZQa+vGxYU8N7AUIdv+dbyqQ -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:39 2026 by rpki-client