$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140484.roa File: AS140484.roa (raw, json) Hash identifier: 0bjB04Mu7jfiwwQnOOHUzmNnQVlNNcA3OS1OlAc7UVs= Subject key identifier: 13:F2:7E:27:75:70:6D:CC:3D:6C:4E:C7:7E:6E:64:B6:BD:F2:6B:F5 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 101BE103A448EB0299B4DFE7630C0889D2D3863E Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140484.roa Signing time: Thu 28 May 2026 16:08:02 +0000 ROA not before: Thu 28 May 2026 16:03:02 +0000 ROA not after: Thu 27 May 2027 16:08:02 +0000 asID: 140484 IP address blocks: 115.228.138.0/23 maxlen: 23 115.228.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1b:e1:03:a4:48:eb:02:99:b4:df:e7:63:0c:08:89:d2:d3:86:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 16:03:02 2026 GMT Not After : May 27 16:08:02 2027 GMT Subject: CN=13F27E2775706DCC3D6C4EC77E6E64B6BDF26BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:fd:ec:62:d3:11:05:c3:a1:f1:4a:97:e0: 36:fb:eb:fc:89:c6:c3:02:06:1c:ef:fb:5d:83:36: 7e:e4:47:a6:9a:13:be:6d:28:ee:20:80:2b:15:14: e7:39:ee:de:23:cb:cb:a9:86:25:f7:0a:1c:7a:c8: d9:bf:d4:2a:0e:0e:e9:fb:f4:3a:08:38:e1:77:c2: 62:1e:27:47:e7:f5:96:3e:f0:4d:38:70:ce:36:58: dd:5a:18:65:19:fc:a6:33:02:7c:5c:49:a2:d7:3f: 49:19:cd:b5:06:37:ff:27:30:7e:f6:82:a9:4c:68: b0:ef:35:ff:b5:56:72:d6:00:b2:72:97:7e:08:cb: 0d:e8:dd:3a:99:5f:e7:ff:b9:32:99:4d:ee:24:76: c6:b2:32:3c:02:39:ce:22:e4:30:af:eb:01:e7:91: 2d:0b:4c:42:db:65:28:cc:3b:41:b0:3b:2d:bb:8a: 47:48:a7:a7:78:98:61:10:56:39:6c:3c:f7:c9:20: 38:08:bf:35:00:1b:7d:50:9e:ca:74:3b:61:1b:d9: a0:49:bd:c5:7b:57:04:a1:25:72:97:18:02:9f:0c: 9b:b0:3e:ad:11:86:be:10:e9:fc:91:1f:31:af:ba: bc:97:a2:c7:8b:dd:6e:46:93:a5:38:55:4f:c8:e8: 26:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F2:7E:27:75:70:6D:CC:3D:6C:4E:C7:7E:6E:64:B6:BD:F2:6B:F5 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140484.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.228.138.0-115.228.143.255 Signature Algorithm: sha256WithRSAEncryption 03:86:cd:74:70:43:d8:71:7a:01:66:81:0d:31:df:73:b2:af: ad:b5:3e:0b:6c:f7:fe:28:3f:e4:bf:37:b0:4a:d7:5b:d2:c4: 44:72:b8:d9:af:e0:69:37:f5:5c:97:55:79:15:89:7b:ac:8e: 28:61:30:0a:8c:27:ef:b7:a8:44:72:fb:fc:1a:8a:24:23:1d: 51:69:c4:85:98:d3:c1:a8:a9:16:42:64:09:2b:12:ec:28:6e: c0:74:30:e3:bd:c9:54:23:7e:9a:33:72:b6:2a:9d:69:e8:8b: aa:e8:2f:e9:04:80:bf:58:5c:37:a8:02:79:74:0d:46:4e:95: 38:b7:ca:bb:c4:a8:b7:c3:84:50:7e:9b:21:e7:3e:74:fc:fd: e3:58:7f:03:e2:ea:cd:f3:da:6c:67:03:fd:f1:bb:de:53:e6: b7:2f:c5:65:6f:9c:f7:58:28:c0:ca:e0:1d:8b:07:57:04:1c: 20:c9:6a:e2:0a:84:be:d5:68:d4:c9:b4:78:c1:63:2c:7d:89: 5e:07:97:60:24:4b:48:99:ec:b0:10:a2:c5:58:90:bc:71:24: d3:1a:ca:8c:5f:e8:35:a4:db:fb:b5:da:3f:a1:5e:77:e1:65: 66:30:d5:c4:b4:53:31:b5:a3:c7:be:74:df:e2:5d:90:81:e1: d8:e3:80:3b -----BEGIN CERTIFICATE----- MIIE+TCCA+GgAwIBAgIUEBvhA6RI6wKZtN/nYwwIidLThj4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MDMwMloX DTI3MDUyNzE2MDgwMlowMzExMC8GA1UEAxMoMTNGMjdFMjc3NTcwNkRDQzNENkM0 RUM3N0U2RTY0QjZCREYyNkJGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpd/exi0xEFw6HxSpfgNvvr/InGwwIGHO/7XYM2fuRHppoTvm0o7iCAKxUU 5znu3iPLy6mGJfcKHHrI2b/UKg4O6fv0Ogg44XfCYh4nR+f1lj7wTThwzjZY3VoY ZRn8pjMCfFxJotc/SRnNtQY3/ycwfvaCqUxosO81/7VWctYAsnKXfgjLDejdOplf 5/+5MplN7iR2xrIyPAI5ziLkMK/rAeeRLQtMQttlKMw7QbA7LbuKR0inp3iYYRBW OWw898kgOAi/NQAbfVCeynQ7YRvZoEm9xXtXBKElcpcYAp8Mm7A+rRGGvhDp/JEf Ma+6vJeix4vdbkaTpThVT8joJmMCAwEAAaOCAewwggHoMB0GA1UdDgQWBBQT8n4n dXBtzD1sTsd+bmS2vfJr9TAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwNDg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFz5IoDBARz5IAwDQYJKoZI hvcNAQELBQADggEBAAOGzXRwQ9hxegFmgQ0x33Oyr621Pgts9/4oP+S/N7BK11vS xERyuNmv4Gk39VyXVXkViXusjihhMAqMJ++3qERy+/waiiQjHVFpxIWY08GoqRZC ZAkrEuwobsB0MOO9yVQjfpozcrYqnWnoi6roL+kEgL9YXDeoAnl0DUZOlTi3yrvE qLfDhFB+myHnPnT8/eNYfwPi6s3z2mxnA/3xu95T5rcvxWVvnPdYKMDK4B2LB1cE HCDJauIKhL7VaNTJtHjBYyx9iV4Hl2AkS0iZ7LAQosVYkLxxJNMayoxf6DWk2/u1 2j+hXnfhZWYw1cS0UzG1o8e+dN/iXZCB4djjgDs= -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:35 2026 by rpki-client