$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140512.roa File: AS140512.roa (raw, json) Hash identifier: yGqgB9rjo7vfXJCkvjeENgHuE5EEezzyiCxMXLKzsG4= Subject key identifier: 3E:31:FF:3F:7C:84:D2:66:BA:EE:4B:C1:F0:03:16:BE:60:F7:7A:32 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 486F447E9EF4F8DB0E91486CD9EB3E6857B21A65 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140512.roa Signing time: Thu 28 May 2026 16:11:06 +0000 ROA not before: Thu 28 May 2026 16:06:06 +0000 ROA not after: Thu 27 May 2027 16:11:06 +0000 asID: 140512 IP address blocks: 240e:a7:7fcc::/48 maxlen: 48 240e:a7:7fcd::/48 maxlen: 48 240e:a7:7fce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:6f:44:7e:9e:f4:f8:db:0e:91:48:6c:d9:eb:3e:68:57:b2:1a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 16:06:06 2026 GMT Not After : May 27 16:11:06 2027 GMT Subject: CN=3E31FF3F7C84D266BAEE4BC1F00316BE60F77A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:fc:0f:d4:db:f6:16:4e:e7:11:eb:ed:05: fb:61:9f:47:dd:e9:fc:e6:02:1e:b7:c2:30:b2:0d: e7:0d:f9:f1:a0:bf:7f:f0:65:19:43:d1:c5:72:e4: cb:77:65:c0:39:8d:52:ba:9e:a6:f3:4f:73:e8:96: 33:c9:55:b7:4d:eb:58:38:fd:ef:cb:e6:34:07:bc: ee:71:5f:f5:37:0f:f0:2d:cf:e5:0c:9f:c8:76:b3: 9a:29:46:aa:65:8e:c6:22:73:fe:ba:36:bd:e5:4d: 47:8f:4b:25:36:62:bd:bc:51:e8:98:1f:e4:81:ea: 19:b8:c1:66:1f:2c:5c:a5:60:4d:8c:a5:1d:7d:b5: 59:f3:f4:51:6f:97:a0:06:a7:64:86:5b:50:c0:07: 57:8e:77:d5:42:75:70:c8:0e:9b:7b:8d:29:a6:97: a5:4a:ca:4c:9e:6e:f9:13:89:2a:8b:be:b2:1f:71: c1:eb:1f:5d:57:65:93:ef:40:f0:fc:5c:95:12:93: 52:88:7b:a0:e1:50:a6:4f:7b:29:4c:ac:e5:0f:9f: a6:88:ba:9b:fd:d9:19:34:49:a4:8c:c5:98:57:5e: e4:35:5e:62:6a:04:69:fa:29:2c:86:42:59:05:56: ad:ac:43:ba:ca:33:48:20:4e:5c:57:24:0d:80:51: 9b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:31:FF:3F:7C:84:D2:66:BA:EE:4B:C1:F0:03:16:BE:60:F7:7A:32 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140512.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:a7:7fcc::-240e:a7:7fce:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a0:fd:c9:d3:3d:ad:5a:71:92:81:62:40:7a:19:1a:8e:66:44: 36:88:8e:d4:93:e9:90:25:c9:da:26:5e:51:ce:09:db:d0:59: 19:66:e4:e7:2a:92:c2:0a:24:9f:a5:72:58:56:20:74:d4:07: 77:45:f9:45:5d:39:67:36:b7:35:8f:18:9b:c2:65:b0:b1:5e: c1:4e:c1:4a:78:20:ca:80:63:ef:1c:e2:7f:35:37:1f:88:cc: ca:58:4f:f0:16:49:6d:7f:bc:4f:60:2f:fe:62:4a:22:28:29: 67:7d:fa:23:81:b3:3c:21:a8:f5:30:29:cc:15:f9:00:c6:3c: 90:d0:47:69:a8:25:1f:e0:a5:b9:e2:ee:5b:98:ac:49:15:5a: 06:5e:5e:d7:b3:41:7f:66:b2:06:99:0b:86:e3:84:fa:99:c4: 34:c6:c5:7c:d1:ef:8a:00:7c:d5:e0:56:7d:6d:6e:a4:34:4c: f6:44:46:4f:09:81:46:ac:6b:a1:b7:36:11:07:d9:04:c2:d1: 90:79:6f:f6:e1:e3:46:8e:a2:14:aa:45:75:4e:8e:75:94:88: 7e:48:19:75:3e:94:1f:56:00:56:cf:c3:db:dd:ed:3f:73:e9: d8:11:fc:f9:32:be:6a:9b:1c:0d:5e:55:c0:66:d3:a7:f1:ba: 86:90:35:5f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUSG9Efp70+NsOkUhs2es+aFeyGmUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MDYwNloX DTI3MDUyNzE2MTEwNlowMzExMC8GA1UEAxMoM0UzMUZGM0Y3Qzg0RDI2NkJBRUU0 QkMxRjAwMzE2QkU2MEY3N0EzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMcU/A/U2/YWTucR6+0F+2GfR93p/OYCHrfCMLIN5w358aC/f/BlGUPRxXLk y3dlwDmNUrqepvNPc+iWM8lVt03rWDj978vmNAe87nFf9TcP8C3P5QyfyHazmilG qmWOxiJz/ro2veVNR49LJTZivbxR6Jgf5IHqGbjBZh8sXKVgTYylHX21WfP0UW+X oAanZIZbUMAHV4531UJ1cMgOm3uNKaaXpUrKTJ5u+ROJKou+sh9xwesfXVdlk+9A 8PxclRKTUoh7oOFQpk97KUys5Q+fpoi6m/3ZGTRJpIzFmFde5DVeYmoEafopLIZC WQVWraxDusozSCBOXFckDYBRm2MCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBQ+Mf8/ fITSZrruS8HwAxa+YPd6MjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwNTEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwIkDgCnf8wDBwAkDgCnf84w DQYJKoZIhvcNAQELBQADggEBAKD9ydM9rVpxkoFiQHoZGo5mRDaIjtST6ZAlydom XlHOCdvQWRlm5OcqksIKJJ+lclhWIHTUB3dF+UVdOWc2tzWPGJvCZbCxXsFOwUp4 IMqAY+8c4n81Nx+IzMpYT/AWSW1/vE9gL/5iSiIoKWd9+iOBszwhqPUwKcwV+QDG PJDQR2moJR/gpbni7luYrEkVWgZeXtezQX9msgaZC4bjhPqZxDTGxXzR74oAfNXg Vn1tbqQ0TPZERk8JgUasa6G3NhEH2QTC0ZB5b/bh40aOohSqRXVOjnWUiH5IGXU+ lB9WAFbPw9vd7T9z6dgR/PkyvmqbHA1eVcBm06fxuoaQNV8= -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:43 2026 by rpki-client