$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140367.roa File: AS140367.roa (raw, json) Hash identifier: 4NOgMyy2WQQzw9N5wP4HXoMDbb9YQ625gT5PkPgg+Jk= Subject key identifier: B5:D4:B8:86:20:6D:23:8E:E5:BA:F0:4F:54:B2:73:80:94:65:9C:92 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 59F2E3EC5610DDA372437991B4DA2E1BED993EDD Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140367.roa Signing time: Mon 01 Jun 2026 16:31:26 +0000 ROA not before: Mon 01 Jun 2026 16:26:26 +0000 ROA not after: Mon 31 May 2027 16:31:26 +0000 asID: 140367 IP address blocks: 240e:96b:6009::/48 maxlen: 48 240e:96b:600a::/48 maxlen: 48 240e:96b:600b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f2:e3:ec:56:10:dd:a3:72:43:79:91:b4:da:2e:1b:ed:99:3e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 1 16:26:26 2026 GMT Not After : May 31 16:31:26 2027 GMT Subject: CN=B5D4B886206D238EE5BAF04F54B2738094659C92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b5:55:6a:a6:66:4c:dc:84:a9:60:39:58:82: b3:49:40:81:04:92:0c:41:e1:df:64:3b:1d:d9:a2: eb:2d:d7:2c:c7:a9:e1:df:06:3f:8e:6d:16:81:6d: 33:de:fc:ca:bc:ec:15:1e:90:04:13:f8:ac:59:c5: 4f:ea:64:2d:3e:13:e4:00:6c:83:13:d1:43:63:47: e8:59:fe:ae:c9:c6:9f:3c:9b:8b:7e:35:95:dd:53: 2e:6b:ac:35:46:f5:3b:b3:22:ff:fd:7f:ce:fd:4a: 65:50:d5:73:40:4e:31:8d:67:1c:c7:9d:50:41:90: 5c:02:c0:fb:41:19:fc:c6:e9:00:ef:b5:c8:a5:25: b1:09:19:28:b9:e2:5f:44:46:3a:d7:9a:89:7c:48: 3c:de:ec:2e:cd:7f:1c:67:d8:4b:15:ac:20:02:1b: 05:1a:70:9e:0f:f3:40:be:99:e6:ca:00:6f:03:06: 5f:b3:83:2f:82:72:e7:cd:c2:bf:f4:d9:0d:be:d6: 0d:85:4d:8b:f1:95:71:1c:7b:a3:7c:b9:1d:19:c6: ae:41:57:13:1f:1f:da:ba:c2:c6:8d:81:32:c0:1f: de:8b:9b:ff:23:4c:5f:14:aa:b3:65:fb:39:d8:e1: f2:93:29:2e:84:5d:0e:ad:c6:8a:b2:06:96:1f:ae: ba:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D4:B8:86:20:6D:23:8E:E5:BA:F0:4F:54:B2:73:80:94:65:9C:92 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140367.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:96b:6009::-240e:96b:600b:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 80:78:80:ac:b7:b2:69:18:e2:49:7f:0a:3d:f9:68:f5:81:ed: 49:99:49:10:bd:b0:d6:93:44:ff:b1:db:47:a9:c8:fd:ad:8f: 37:46:84:4d:31:0f:f6:26:d5:6f:5f:48:13:2b:cf:13:b0:73: 5a:66:0d:11:e1:48:14:09:8d:c8:a6:fb:89:a9:7a:42:30:fb: e0:e0:1e:7a:cc:1f:ce:71:3f:8a:8d:3c:62:1b:a6:15:5b:52: 91:81:a7:36:04:53:2b:20:99:a0:29:6f:11:6e:f8:e8:9e:f1: 2c:7a:03:64:42:ac:0b:47:57:dc:67:d4:d7:8e:b6:d2:70:73: 4d:96:c2:b3:c8:bc:ef:8d:30:80:46:d0:80:84:5a:cf:93:ef: 1e:c6:c7:40:0a:5b:0d:13:37:66:d6:38:32:d5:79:34:3d:7e: 52:95:7a:19:a2:10:35:7b:b7:03:29:cc:4b:27:b3:4e:13:62: 58:56:71:88:5d:0c:bc:8b:ef:4f:5e:59:11:64:b7:42:fa:58: 43:ab:3a:22:23:41:46:8e:2b:a0:59:e4:39:6e:b0:48:34:76: 83:26:1f:b6:30:46:77:b7:26:c3:af:45:b1:d5:73:fe:b1:72: c5:53:a3:74:f5:7e:76:86:fe:0e:d8:a7:70:d1:64:4f:11:81: c8:fd:0b:4d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUWfLj7FYQ3aNyQ3mRtNouG+2ZPt0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwMTE2MjYyNloX DTI3MDUzMTE2MzEyNlowMzExMC8GA1UEAxMoQjVENEI4ODYyMDZEMjM4RUU1QkFG MDRGNTRCMjczODA5NDY1OUM5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJC1VWqmZkzchKlgOViCs0lAgQSSDEHh32Q7Hdmi6y3XLMep4d8GP45tFoFt M978yrzsFR6QBBP4rFnFT+pkLT4T5ABsgxPRQ2NH6Fn+rsnGnzybi341ld1TLmus NUb1O7Mi//1/zv1KZVDVc0BOMY1nHMedUEGQXALA+0EZ/MbpAO+1yKUlsQkZKLni X0RGOteaiXxIPN7sLs1/HGfYSxWsIAIbBRpwng/zQL6Z5soAbwMGX7ODL4Jy583C v/TZDb7WDYVNi/GVcRx7o3y5HRnGrkFXEx8f2rrCxo2BMsAf3oub/yNMXxSqs2X7 Odjh8pMpLoRdDq3GirIGlh+uuqcCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBS11LiG IG0jjuW68E9UsnOAlGWckjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAkDglrYAkDBwIkDglrYAgw DQYJKoZIhvcNAQELBQADggEBAIB4gKy3smkY4kl/Cj35aPWB7UmZSRC9sNaTRP+x 20epyP2tjzdGhE0xD/Ym1W9fSBMrzxOwc1pmDRHhSBQJjcim+4mpekIw++DgHnrM H85xP4qNPGIbphVbUpGBpzYEUysgmaApbxFu+Oie8Sx6A2RCrAtHV9xn1NeOttJw c02WwrPIvO+NMIBG0ICEWs+T7x7Gx0AKWw0TN2bWODLVeTQ9flKVehmiEDV7twMp zEsns04TYlhWcYhdDLyL709eWRFkt0L6WEOrOiIjQUaOK6BZ5DlusEg0doMmH7Yw Rne3JsOvRbHVc/6xcsVTo3T1fnaG/g7Yp3DRZE8Rgcj9C00= -----END CERTIFICATE-----Generated at Sun Jun 14 06:31:01 2026 by rpki-client