$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140349.roa File: AS140349.roa (raw, json) Hash identifier: UhR8i9fLUYjStB7jYInPEPL5PgrY+6HG7/y3dBcqwn8= Subject key identifier: 8E:F2:09:5B:57:CA:63:A6:B3:C7:C7:4A:6B:A1:88:11:35:56:C8:DB Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 351FCD2B49CC9DA864A1C5F27F920A70BCB647A8 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140349.roa Signing time: Sun 24 May 2026 16:14:37 +0000 ROA not before: Sun 24 May 2026 16:09:37 +0000 ROA not after: Sun 23 May 2027 16:14:37 +0000 asID: 140349 IP address blocks: 240e:44d:2b40::/42 maxlen: 42 240e:44d:2c40::/42 maxlen: 42 240e:44d:2d40::/42 maxlen: 42 240e:44d:2e40::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1f:cd:2b:49:cc:9d:a8:64:a1:c5:f2:7f:92:0a:70:bc:b6:47:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 24 16:09:37 2026 GMT Not After : May 23 16:14:37 2027 GMT Subject: CN=8EF2095B57CA63A6B3C7C74A6BA188113556C8DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:83:94:a4:31:27:b2:84:09:21:7a:c3:d7:92: e0:5a:bf:2c:3d:91:29:c3:56:8c:6c:e8:7d:19:42: 0b:a3:67:bb:1d:39:2a:c1:e8:35:b4:ce:07:a5:e1: 11:a9:ca:f1:a5:d3:8d:ae:de:c5:40:b8:50:61:9c: 15:53:25:2d:4d:f6:14:65:96:a1:28:e2:50:fd:81: 13:4e:93:5a:fd:e3:49:e7:1b:26:52:95:05:2c:57: 3d:32:5f:63:6f:aa:95:be:fc:78:7c:aa:cb:e6:84: df:63:97:c0:90:37:06:3d:3d:ab:a0:9a:e4:bb:2a: 8a:a9:36:a2:b9:ef:a6:4c:2d:27:ca:1e:6e:35:8f: 1c:18:f7:e3:30:e4:57:07:ad:64:57:7a:79:54:49: eb:00:79:4a:f6:23:4f:ee:7d:3d:bb:61:13:bb:ab: e0:1f:ea:2d:ec:23:09:b7:dc:6b:c4:78:69:28:de: 7c:3f:85:69:3c:9d:93:97:55:bb:30:58:39:e9:fb: 4a:b4:bb:01:48:44:5a:26:79:ef:5c:85:b0:22:69: 8a:48:6a:c8:d5:8d:82:72:b0:e4:ac:a0:73:d4:9c: 20:46:97:47:6d:cf:72:5e:ad:7a:90:93:1c:66:fd: 02:72:4b:5c:d1:d4:b3:9d:06:68:45:c4:6e:f8:85: 93:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F2:09:5B:57:CA:63:A6:B3:C7:C7:4A:6B:A1:88:11:35:56:C8:DB X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140349.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:44d:2b40::/42 240e:44d:2c40::/42 240e:44d:2d40::/42 240e:44d:2e40::/42 Signature Algorithm: sha256WithRSAEncryption 2e:70:f0:3a:73:a2:41:b2:37:f9:01:23:43:85:5f:05:ca:f5: d4:76:03:93:a2:85:7d:b5:7e:64:a1:1d:fb:34:3e:1c:43:43: fc:a3:6d:ce:7e:89:2f:5a:ba:73:27:71:98:f7:cf:af:45:4f: 20:52:e1:3d:f1:46:01:99:e5:0d:d0:a2:1b:9b:dc:0b:c5:ca: 21:e4:1b:3a:f6:7e:63:d3:25:15:12:3f:71:72:95:85:00:9b: 54:48:31:f1:82:9b:8c:35:ce:87:a8:8c:d7:36:13:2b:e1:ca: 4d:07:92:c1:7a:f1:4b:27:cf:5a:27:c0:28:83:db:93:98:fc: 10:0b:c9:00:ab:5f:0d:72:e2:39:ef:22:7d:a7:6e:a2:75:84: 2d:a6:36:32:0a:1a:8a:e2:1f:a6:a4:8a:05:31:97:a9:5c:05: 39:e5:88:8c:66:8a:65:9f:fa:7d:26:32:db:6b:69:75:6c:4c: 74:ba:f3:a0:31:13:74:1f:d7:75:31:23:b9:6f:0a:36:64:85: be:57:6f:70:3f:1d:35:90:a0:25:53:fb:51:88:20:74:f6:39: bb:f2:82:4c:bc:96:ea:d6:24:40:7d:60:f9:b9:c9:3e:f0:dc: 58:24:a8:ee:d6:f8:6c:4c:f2:10:91:28:4d:47:f5:93:11:60: 98:dd:6b:5b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgIUNR/NK0nMnahkocXyf5IKcLy2R6gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyNDE2MDkzN1oX DTI3MDUyMzE2MTQzN1owMzExMC8GA1UEAxMoOEVGMjA5NUI1N0NBNjNBNkIzQzdD NzRBNkJBMTg4MTEzNTU2QzhEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOmDlKQxJ7KECSF6w9eS4Fq/LD2RKcNWjGzofRlCC6Nnux05KsHoNbTOB6Xh EanK8aXTja7exUC4UGGcFVMlLU32FGWWoSjiUP2BE06TWv3jSecbJlKVBSxXPTJf Y2+qlb78eHyqy+aE32OXwJA3Bj09q6Ca5Lsqiqk2ornvpkwtJ8oebjWPHBj34zDk VwetZFd6eVRJ6wB5SvYjT+59PbthE7ur4B/qLewjCbfca8R4aSjefD+FaTydk5dV uzBYOen7SrS7AUhEWiZ571yFsCJpikhqyNWNgnKw5Kygc9ScIEaXR23Pcl6tepCT HGb9AnJLXNHUs50GaEXEbviFk60CAwEAAaOCAgIwggH+MB0GA1UdDgQWBBSO8glb V8pjprPHx0proYgRNVbI2zAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcGJA4ETStAAwcGJA4ETSxAAwcG JA4ETS1AAwcGJA4ETS5AMA0GCSqGSIb3DQEBCwUAA4IBAQAucPA6c6JBsjf5ASND hV8FyvXUdgOTooV9tX5koR37ND4cQ0P8o23OfokvWrpzJ3GY98+vRU8gUuE98UYB meUN0KIbm9wLxcoh5Bs69n5j0yUVEj9xcpWFAJtUSDHxgpuMNc6HqIzXNhMr4cpN B5LBevFLJ89aJ8Aog9uTmPwQC8kAq18NcuI57yJ9p26idYQtpjYyChqK4h+mpIoF MZepXAU55YiMZopln/p9JjLba2l1bEx0uvOgMRN0H9d1MSO5bwo2ZIW+V29wPx01 kKAlU/tRiCB09jm78oJMvJbq1iRAfWD5uck+8NxYJKju1vhsTPIQkShNR/WTEWCY 3Wtb -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:42 2026 by rpki-client