$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140361.roa File: AS140361.roa (raw, json) Hash identifier: s/TrsP6W4+/+piky9blbrMrkXuMg7kSFwAvQX3MXC/0= Subject key identifier: B0:1B:B4:7F:6A:33:0A:77:0F:68:06:38:74:25:0B:4B:3E:DD:61:D2 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 5FCE37C68F0FC4A1FE037D98BCAB5E9DBFB0BC8C Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140361.roa Signing time: Sun 24 May 2026 16:13:39 +0000 ROA not before: Sun 24 May 2026 16:08:39 +0000 ROA not after: Sun 23 May 2027 16:13:39 +0000 asID: 140361 IP address blocks: 240e:44d:2040::/42 maxlen: 42 240e:44d:2140::/42 maxlen: 42 240e:44d:2240::/42 maxlen: 42 240e:44d:2340::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ce:37:c6:8f:0f:c4:a1:fe:03:7d:98:bc:ab:5e:9d:bf:b0:bc:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 24 16:08:39 2026 GMT Not After : May 23 16:13:39 2027 GMT Subject: CN=B01BB47F6A330A770F68063874250B4B3EDD61D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:d9:fc:f2:5b:0b:5f:38:69:d6:08:98:f7: 15:fe:13:1a:96:5b:63:36:cd:f6:14:83:81:f8:51: 8f:c1:ea:07:14:d4:1c:2d:05:cf:96:62:a5:c9:06: 17:c5:6b:cf:47:c5:17:4b:80:7e:56:ca:95:d7:f8: 5e:fc:e1:1f:55:c5:7e:a0:27:bf:a4:ae:c1:47:97: 19:2c:a0:6a:b8:b4:c6:7c:a0:84:65:b2:28:ce:26: 0b:ef:ca:83:cc:2a:1b:a8:0d:fb:76:8a:26:a9:81: 7b:f6:a8:29:c8:fb:54:15:15:37:66:5b:42:aa:43: 76:0a:39:28:da:00:16:e5:27:d8:db:be:fb:54:2a: 9f:e1:05:87:c0:e6:6b:8f:66:f3:1d:cf:de:3e:f3: 1a:1f:2a:03:96:05:7c:11:7a:b3:6d:59:35:67:ee: 51:10:64:5c:9b:39:db:12:e6:91:2e:60:c9:ae:c5: d2:6d:af:f4:de:61:ee:3d:d5:6d:c1:f7:9f:79:18: d5:b2:a7:00:ca:f0:ee:36:c1:12:a1:a1:9b:b8:41: 68:d0:15:a8:19:34:bb:12:72:71:6a:9b:2c:46:34: 1d:03:b7:97:36:4d:cf:60:8d:23:9e:99:a7:1d:6e: c9:bd:b8:dd:ab:87:ac:82:4a:4d:99:92:90:f4:35: 8b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1B:B4:7F:6A:33:0A:77:0F:68:06:38:74:25:0B:4B:3E:DD:61:D2 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140361.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:44d:2040::/42 240e:44d:2140::/42 240e:44d:2240::/42 240e:44d:2340::/42 Signature Algorithm: sha256WithRSAEncryption 7f:fd:34:c5:39:86:f7:62:f1:34:b6:0a:34:d0:1d:c1:c0:24: 9d:67:25:fe:c1:01:52:62:48:ca:c3:8e:56:ac:a6:31:83:02: 25:b5:24:dc:52:ec:d3:3e:17:8e:23:19:1f:3f:db:39:4f:97: b6:90:4b:e9:58:16:e8:71:e2:b6:b2:08:fd:c9:b2:c2:e6:0a: 8a:87:6e:4e:86:12:e8:7a:63:88:33:c6:88:22:12:b1:3f:4f: f0:c7:72:32:c7:19:bb:a0:fb:ad:09:eb:8e:57:37:21:fb:2f: db:6c:c4:cf:f9:8d:cf:57:f5:61:86:e5:87:76:5b:79:39:55: fb:f4:d4:5c:46:66:b6:07:22:b4:3d:ab:e9:85:f6:e9:3b:27: d1:af:64:aa:75:92:1f:9d:72:28:ab:10:ac:c1:56:27:9b:61: 37:b5:74:80:50:d3:5d:06:71:7c:2a:8d:40:83:7e:0d:0c:68: ba:98:e0:a0:c0:fd:73:5c:01:b9:61:c1:1e:7e:45:c4:76:b8: 37:8a:73:77:64:cd:ab:88:72:d8:a9:a1:48:d0:96:7a:87:9d: d6:a2:1f:28:35:a2:87:f6:04:b9:d3:e1:d7:f8:e9:ae:e7:7c: 9e:50:bd:4b:d8:9f:91:bf:07:67:3f:9e:a6:06:c7:a9:56:eb: a3:68:e9:6b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgIUX843xo8PxKH+A32YvKtenb+wvIwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyNDE2MDgzOVoX DTI3MDUyMzE2MTMzOVowMzExMC8GA1UEAxMoQjAxQkI0N0Y2QTMzMEE3NzBGNjgw NjM4NzQyNTBCNEIzRURENjFEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZC2fzyWwtfOGnWCJj3Ff4TGpZbYzbN9hSDgfhRj8HqBxTUHC0Fz5ZipckG F8Vrz0fFF0uAflbKldf4XvzhH1XFfqAnv6SuwUeXGSygari0xnyghGWyKM4mC+/K g8wqG6gN+3aKJqmBe/aoKcj7VBUVN2ZbQqpDdgo5KNoAFuUn2Nu++1Qqn+EFh8Dm a49m8x3P3j7zGh8qA5YFfBF6s21ZNWfuURBkXJs52xLmkS5gya7F0m2v9N5h7j3V bcH3n3kY1bKnAMrw7jbBEqGhm7hBaNAVqBk0uxJycWqbLEY0HQO3lzZNz2CNI56Z px1uyb243auHrIJKTZmSkPQ1i08CAwEAAaOCAgIwggH+MB0GA1UdDgQWBBSwG7R/ ajMKdw9oBjh0JQtLPt1h0jAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcGJA4ETSBAAwcGJA4ETSFAAwcG JA4ETSJAAwcGJA4ETSNAMA0GCSqGSIb3DQEBCwUAA4IBAQB//TTFOYb3YvE0tgo0 0B3BwCSdZyX+wQFSYkjKw45WrKYxgwIltSTcUuzTPheOIxkfP9s5T5e2kEvpWBbo ceK2sgj9ybLC5gqKh25OhhLoemOIM8aIIhKxP0/wx3Iyxxm7oPutCeuOVzch+y/b bMTP+Y3PV/VhhuWHdlt5OVX79NRcRma2ByK0PavphfbpOyfRr2SqdZIfnXIoqxCs wVYnm2E3tXSAUNNdBnF8Ko1Ag34NDGi6mOCgwP1zXAG5YcEefkXEdrg3inN3ZM2r iHLYqaFI0JZ6h53Woh8oNaKH9gS50+HX+Omu53yeUL1L2J+RvwdnP56mBsepVuuj aOlr -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:40 2026 by rpki-client