$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140509.roa File: AS140509.roa (raw, json) Hash identifier: BikEA7cvwgvJ8Q+Q4bdXj4TG6VT99ExKg/dzVVBAYYE= Subject key identifier: 6E:49:0D:33:AC:F4:59:20:40:DF:5A:09:1F:DB:78:30:B7:92:42:92 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 3FB2C7DEC886DB26B4F8706C51902A49F30B8851 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140509.roa Signing time: Thu 28 May 2026 16:11:06 +0000 ROA not before: Thu 28 May 2026 16:06:06 +0000 ROA not after: Thu 27 May 2027 16:11:06 +0000 asID: 140509 IP address blocks: 240e:a7:7fc3::/48 maxlen: 48 240e:a7:7fc4::/48 maxlen: 48 240e:a7:7fc5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b2:c7:de:c8:86:db:26:b4:f8:70:6c:51:90:2a:49:f3:0b:88:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 16:06:06 2026 GMT Not After : May 27 16:11:06 2027 GMT Subject: CN=6E490D33ACF4592040DF5A091FDB7830B7924292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:34:54:68:78:11:dd:b5:18:87:ee:94:5b: 1e:8a:a4:7a:b3:1d:6b:a6:1d:7a:1a:9c:33:0e:c3: 14:52:a7:46:99:ad:10:17:76:61:69:4e:6c:72:8d: b0:3c:26:40:7c:0f:46:b1:d5:98:b1:b7:11:7f:45: 88:a1:4c:fc:bc:c1:b0:ee:12:19:16:42:c3:ce:9d: d0:93:ce:00:00:24:94:bb:ad:f6:d8:e3:2d:9e:90: c1:e3:16:ec:4e:66:20:55:8c:1a:71:db:69:f8:0e: d3:d3:62:3f:78:9e:ef:bc:b4:c4:8c:7c:7e:00:89: 34:22:dd:2e:13:96:31:36:f8:8f:9d:0e:18:cf:d9: 93:43:3b:ce:c2:66:53:dc:47:e0:8b:f5:1c:6e:6c: 8e:61:18:15:0f:15:f4:f5:56:d5:c5:db:0a:8e:3c: 91:c8:22:10:24:2f:e6:bc:dc:42:57:57:c7:4c:b5: 5b:1d:93:01:fa:9f:9c:d3:41:ed:d3:96:a8:a1:81: 1e:80:26:77:27:9d:de:97:0c:c5:61:c3:37:c6:2e: ad:e2:b3:5d:56:d2:d0:16:e0:5e:c1:fd:c0:c8:90: 69:78:52:2c:80:ed:33:90:49:ca:b8:84:76:5c:db: e2:dc:b5:56:c5:10:5b:73:24:7c:be:57:1a:1d:7f: 83:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:49:0D:33:AC:F4:59:20:40:DF:5A:09:1F:DB:78:30:B7:92:42:92 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:a7:7fc3::-240e:a7:7fc5:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 94:a0:32:a9:1b:6c:5e:2b:fb:a9:a3:d9:79:6a:19:b5:49:50: a5:a5:d0:9d:68:35:a4:77:ac:7f:35:44:be:5d:22:f2:52:0e: 3d:a9:91:23:a0:64:b0:09:79:b8:83:0e:f5:c6:93:bb:0a:c9: 8e:09:36:de:f5:c8:b0:bb:11:bd:e5:d8:f5:b2:e1:7d:8c:07: 08:47:06:f1:69:2d:4a:cf:ef:0c:98:08:ea:d3:83:55:29:10: a5:7a:bf:e5:22:41:69:10:da:a1:34:3a:a9:f4:cd:75:f8:23: 7c:24:82:c6:a6:e2:2b:48:94:ef:36:aa:b4:ce:3f:65:e7:3b: 40:71:39:2c:b9:c6:1e:3d:83:83:3f:d7:39:c9:82:b1:21:3b: 26:12:50:3b:17:51:7a:5e:78:64:23:03:83:a8:45:9d:70:b4: 43:31:19:cd:c6:0c:97:f0:37:4c:66:5f:79:b7:5e:e7:71:0b: cd:c4:36:d4:93:f8:c2:92:7a:d3:f9:40:11:c8:74:3f:ed:78: f9:78:5f:43:14:d3:db:4a:73:c4:13:25:75:54:4b:bf:1d:a6: 1d:3d:4d:68:df:a6:6b:88:0d:dc:3b:2d:a4:84:72:5b:c2:22: 6f:a3:0b:42:49:39:be:d0:7f:28:07:32:4c:90:f5:40:79:83: 18:63:e2:46 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUP7LH3siG2ya0+HBsUZAqSfMLiFEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MDYwNloX DTI3MDUyNzE2MTEwNlowMzExMC8GA1UEAxMoNkU0OTBEMzNBQ0Y0NTkyMDQwREY1 QTA5MUZEQjc4MzBCNzkyNDI5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKg+NFRoeBHdtRiH7pRbHoqkerMda6YdehqcMw7DFFKnRpmtEBd2YWlObHKN sDwmQHwPRrHVmLG3EX9FiKFM/LzBsO4SGRZCw86d0JPOAAAklLut9tjjLZ6QweMW 7E5mIFWMGnHbafgO09NiP3ie77y0xIx8fgCJNCLdLhOWMTb4j50OGM/Zk0M7zsJm U9xH4Iv1HG5sjmEYFQ8V9PVW1cXbCo48kcgiECQv5rzcQldXx0y1Wx2TAfqfnNNB 7dOWqKGBHoAmdyed3pcMxWHDN8YureKzXVbS0BbgXsH9wMiQaXhSLIDtM5BJyriE dlzb4ty1VsUQW3MkfL5XGh1/g6cCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBRuSQ0z rPRZIEDfWgkf23gwt5JCkjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwNTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAkDgCnf8MDBwEkDgCnf8Qw DQYJKoZIhvcNAQELBQADggEBAJSgMqkbbF4r+6mj2XlqGbVJUKWl0J1oNaR3rH81 RL5dIvJSDj2pkSOgZLAJebiDDvXGk7sKyY4JNt71yLC7Eb3l2PWy4X2MBwhHBvFp LUrP7wyYCOrTg1UpEKV6v+UiQWkQ2qE0Oqn0zXX4I3wkgsam4itIlO82qrTOP2Xn O0BxOSy5xh49g4M/1znJgrEhOyYSUDsXUXpeeGQjA4OoRZ1wtEMxGc3GDJfwN0xm X3m3XudxC83ENtST+MKSetP5QBHIdD/tePl4X0MU09tKc8QTJXVUS78dph09TWjf pmuIDdw7LaSEclvCIm+jC0JJOb7QfygHMkyQ9UB5gxhj4kY= -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:46 2026 by rpki-client