$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140372.roa File: AS140372.roa (raw, json) Hash identifier: rONew1jp2U5wJXo2YbgAx3BxSr4vscyYExk/MagP79o= Subject key identifier: AE:58:AA:49:65:92:C0:0F:1A:86:15:49:B6:B1:DC:1A:07:10:5C:7D Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 07E4A86F7201984F81DEF10D14C6DCE4D40D37C8 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140372.roa Signing time: Mon 01 Jun 2026 16:31:26 +0000 ROA not before: Mon 01 Jun 2026 16:26:26 +0000 ROA not after: Mon 31 May 2027 16:31:26 +0000 asID: 140372 IP address blocks: 240e:96b:6018::/48 maxlen: 48 240e:96b:6019::/48 maxlen: 48 240e:96b:601a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e4:a8:6f:72:01:98:4f:81:de:f1:0d:14:c6:dc:e4:d4:0d:37:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 1 16:26:26 2026 GMT Not After : May 31 16:31:26 2027 GMT Subject: CN=AE58AA496592C00F1A861549B6B1DC1A07105C7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a5:ae:74:94:ca:74:28:21:1a:c1:35:5d:e3: b8:75:ce:e9:c5:14:6d:5a:25:a3:81:92:44:d9:cd: 74:45:cc:f2:8a:e2:2f:bc:ad:44:7c:b1:45:8d:43: aa:b6:2a:0f:2a:66:b7:71:42:c3:b4:83:bf:db:14: 32:55:fc:8c:50:11:55:5f:ef:34:dc:eb:d1:ce:c5: 80:2d:e4:79:70:21:6f:95:4f:96:77:03:ec:10:4a: 15:5f:d8:b9:54:51:ca:14:67:56:79:b7:24:a6:61: 0d:17:50:37:3c:7d:b7:e0:3c:a0:e5:e9:c2:fa:89: f7:b8:ad:7e:77:a6:81:c9:da:28:cc:84:9d:84:0d: ad:bd:76:69:80:a5:f2:c9:0a:77:86:c2:cc:eb:18: 27:ae:29:24:ac:08:75:9b:2d:06:17:ac:02:3a:60: fc:f5:e1:cc:4d:32:05:9a:ac:6e:06:29:dd:da:84: 7e:a3:3e:d4:f9:e1:08:f5:d6:48:93:b9:db:60:f4: 07:26:e4:78:18:6f:d8:69:83:3e:61:7a:ab:3d:44: b5:2d:dd:82:b9:b6:0a:32:2e:00:9c:84:18:3d:83: 54:01:d6:47:d4:e8:56:7e:7a:fd:71:3f:6c:69:d5: 12:32:9f:7d:98:e4:7a:e0:af:dd:cf:6a:19:49:dc: f2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:58:AA:49:65:92:C0:0F:1A:86:15:49:B6:B1:DC:1A:07:10:5C:7D X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140372.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:96b:6018::-240e:96b:601a:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a5:be:ee:bd:26:ee:5b:e4:b6:9f:38:45:bf:7f:4c:65:39:3d: b8:ca:02:69:6f:ce:4d:a8:ad:4e:d3:3e:d8:90:cc:e8:f4:f1: 96:dc:16:88:f2:48:4e:8f:7b:fb:99:d7:f9:49:79:39:c0:10: 0b:d8:d4:85:14:13:e7:a2:d9:41:fb:12:31:1e:ab:77:ae:f8: 14:bc:6d:6d:f3:67:61:d5:d6:0f:39:5c:77:1c:0f:ee:a1:ae: 50:28:83:76:21:72:2a:96:c7:33:6f:11:1a:2a:18:0c:a6:e8: 67:c7:99:13:77:f7:3a:9f:ab:87:1c:f7:5c:26:7c:31:2d:99: 91:b9:09:a9:c7:d2:27:fe:3a:67:34:fb:81:02:74:76:b2:6d: 2a:75:1b:47:0b:72:6a:f5:96:e9:cd:cf:9f:9b:50:c3:8f:5f: ac:f9:93:7d:15:69:07:44:cf:ef:9e:25:99:6d:c1:6a:32:a5: 8a:50:48:df:a3:a7:76:30:79:07:97:39:69:e2:89:aa:bb:1f: 6d:bf:e4:20:28:56:0e:f7:9c:2b:1e:70:d0:a1:62:bd:17:6a: 58:07:e9:06:73:16:d3:4b:ec:ee:79:f1:00:a3:93:fb:e9:39: 9b:49:f3:79:19:d6:42:bb:dc:a8:95:d9:f5:7e:f8:97:0b:09: de:2e:b6:ee -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUB+Sob3IBmE+B3vENFMbc5NQNN8gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwMTE2MjYyNloX DTI3MDUzMTE2MzEyNlowMzExMC8GA1UEAxMoQUU1OEFBNDk2NTkyQzAwRjFBODYx NTQ5QjZCMURDMUEwNzEwNUM3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJWlrnSUynQoIRrBNV3juHXO6cUUbVolo4GSRNnNdEXM8oriL7ytRHyxRY1D qrYqDypmt3FCw7SDv9sUMlX8jFARVV/vNNzr0c7FgC3keXAhb5VPlncD7BBKFV/Y uVRRyhRnVnm3JKZhDRdQNzx9t+A8oOXpwvqJ97itfnemgcnaKMyEnYQNrb12aYCl 8skKd4bCzOsYJ64pJKwIdZstBhesAjpg/PXhzE0yBZqsbgYp3dqEfqM+1PnhCPXW SJO522D0BybkeBhv2GmDPmF6qz1EtS3dgrm2CjIuAJyEGD2DVAHWR9ToVn56/XE/ bGnVEjKffZjkeuCv3c9qGUnc8tUCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBSuWKpJ ZZLADxqGFUm2sdwaBxBcfTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwMkDglrYBgDBwAkDglrYBow DQYJKoZIhvcNAQELBQADggEBAKW+7r0m7lvktp84Rb9/TGU5PbjKAmlvzk2orU7T PtiQzOj08ZbcFojySE6Pe/uZ1/lJeTnAEAvY1IUUE+ei2UH7EjEeq3eu+BS8bW3z Z2HV1g85XHccD+6hrlAog3YhciqWxzNvERoqGAym6GfHmRN39zqfq4cc91wmfDEt mZG5CanH0if+Omc0+4ECdHaybSp1G0cLcmr1lunNz5+bUMOPX6z5k30VaQdEz++e JZltwWoypYpQSN+jp3YweQeXOWniiaq7H22/5CAoVg73nCsecNChYr0XalgH6QZz FtNL7O558QCjk/vpOZtJ83kZ1kK73KiV2fV++JcLCd4utu4= -----END CERTIFICATE-----Generated at Sun Jun 14 06:30:57 2026 by rpki-client