$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140519.roa File: AS140519.roa (raw, json) Hash identifier: EC1nzlZUaXxpw9jjjEnTR0iPEIXEbC9CN6J3U9UVKRM= Subject key identifier: 8E:DA:4B:3C:23:78:94:3E:CC:48:EF:A3:9B:53:86:15:7A:F8:FE:51 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 30A6DDC1326BD1D7DB4F8CE3D00E37CB3351E54E Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140519.roa Signing time: Thu 28 May 2026 16:11:59 +0000 ROA not before: Thu 28 May 2026 16:06:59 +0000 ROA not after: Thu 27 May 2027 16:11:59 +0000 asID: 140519 IP address blocks: 240e:a7:7fe1::/48 maxlen: 48 240e:a7:7fe2::/48 maxlen: 48 240e:a7:7fe3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a6:dd:c1:32:6b:d1:d7:db:4f:8c:e3:d0:0e:37:cb:33:51:e5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 16:06:59 2026 GMT Not After : May 27 16:11:59 2027 GMT Subject: CN=8EDA4B3C2378943ECC48EFA39B5386157AF8FE51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:11:c6:49:9c:0b:d2:08:97:bb:39:49:bf:4c: 60:bd:ac:a0:4e:dd:05:69:38:68:dd:2f:7d:d3:b6: 34:ba:45:38:5d:e7:f9:f7:47:94:98:2b:89:8e:64: 33:f3:80:e9:61:b5:3b:31:4a:d1:3e:35:71:ec:8c: e6:2c:e1:df:26:e9:9a:d5:95:4b:e7:b6:ca:ba:a5: cb:b8:b7:39:b8:2c:d8:d1:29:7f:c3:76:ec:87:5a: 97:41:43:c3:e0:c1:06:6e:cf:f4:4f:5c:9c:b0:7c: d4:c2:31:96:89:a5:a0:fd:52:ba:fd:eb:da:17:9e: 96:d5:5f:c6:0e:0b:5d:5a:a0:4f:be:ba:2e:b5:23: b2:7f:6f:b6:52:16:dd:2a:24:2c:6d:55:06:c0:c2: 39:05:b1:3d:bd:b4:7e:75:3e:c9:35:dd:be:45:16: 8e:1d:a0:90:0c:0b:73:66:c2:f2:02:f7:8a:04:3d: 2a:17:d7:11:85:f3:dc:05:30:db:01:2e:29:81:65: c2:13:db:30:51:07:83:76:29:79:79:78:6c:82:26: ab:d4:76:5c:4e:9d:0b:60:bc:63:fb:6e:ec:23:67: 56:f5:10:87:f9:54:c2:77:5f:c1:2a:d7:90:79:90: ba:23:66:4d:3c:8f:95:58:a6:db:e8:3e:a3:da:7c: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DA:4B:3C:23:78:94:3E:CC:48:EF:A3:9B:53:86:15:7A:F8:FE:51 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140519.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:a7:7fe1::-240e:a7:7fe3:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 95:09:f8:10:dc:b9:46:be:21:05:05:43:e0:e4:6e:c8:ec:38: 20:38:6c:aa:03:0d:26:dc:d8:19:47:b7:2c:76:97:86:8d:03: 89:01:62:ba:14:2c:ae:d0:ec:06:00:90:8a:36:0f:73:b9:09: f3:0f:49:ea:54:50:dd:37:16:89:5f:6d:1a:30:9e:da:83:37: b9:a5:67:ac:19:29:ce:64:12:1f:16:4f:76:9b:e0:21:65:6f: 38:75:15:77:0f:e6:cb:d8:3a:a4:0d:b2:aa:b0:84:cc:e4:85: b2:28:47:a9:00:5b:56:31:56:72:c0:a0:ae:87:4f:12:ff:ba: 1d:30:9e:91:04:61:4c:7d:85:68:ec:75:14:89:51:ab:31:b7: 11:b7:e5:77:c9:1f:40:f5:db:7c:47:d4:56:40:32:19:d6:97: f4:3d:fb:9d:20:74:6b:7c:78:eb:e8:bb:92:a5:3a:54:e0:b5: 04:1e:42:ee:0a:e6:dd:fa:0b:f7:19:aa:76:78:3c:d9:91:96: 1f:6f:7a:f9:65:2d:f0:75:cb:7d:bf:7b:4c:3e:54:e0:ee:5a: 11:3f:36:8a:0a:7b:71:4b:2d:5a:13:4c:d8:6e:e0:fb:38:9f: be:2b:70:6e:50:b1:fd:35:d2:ea:f4:8f:1e:5e:23:23:31:31: 2e:1b:e1:35 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUMKbdwTJr0dfbT4zj0A43yzNR5U4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MDY1OVoX DTI3MDUyNzE2MTE1OVowMzExMC8GA1UEAxMoOEVEQTRCM0MyMzc4OTQzRUNDNDhF RkEzOUI1Mzg2MTU3QUY4RkU1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoRxkmcC9IIl7s5Sb9MYL2soE7dBWk4aN0vfdO2NLpFOF3n+fdHlJgriY5k M/OA6WG1OzFK0T41ceyM5izh3ybpmtWVS+e2yrqly7i3Obgs2NEpf8N27Idal0FD w+DBBm7P9E9cnLB81MIxlomloP1Suv3r2heeltVfxg4LXVqgT766LrUjsn9vtlIW 3SokLG1VBsDCOQWxPb20fnU+yTXdvkUWjh2gkAwLc2bC8gL3igQ9KhfXEYXz3AUw 2wEuKYFlwhPbMFEHg3YpeXl4bIImq9R2XE6dC2C8Y/tu7CNnVvUQh/lUwndfwSrX kHmQuiNmTTyPlVim2+g+o9p81tMCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBSO2ks8 I3iUPsxI76ObU4YVevj+UTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwNTE5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAkDgCnf+EDBwIkDgCnf+Aw DQYJKoZIhvcNAQELBQADggEBAJUJ+BDcuUa+IQUFQ+DkbsjsOCA4bKoDDSbc2BlH tyx2l4aNA4kBYroULK7Q7AYAkIo2D3O5CfMPSepUUN03FolfbRowntqDN7mlZ6wZ Kc5kEh8WT3ab4CFlbzh1FXcP5svYOqQNsqqwhMzkhbIoR6kAW1YxVnLAoK6HTxL/ uh0wnpEEYUx9hWjsdRSJUasxtxG35XfJH0D123xH1FZAMhnWl/Q9+50gdGt8eOvo u5KlOlTgtQQeQu4K5t36C/cZqnZ4PNmRlh9vevllLfB1y32/e0w+VODuWhE/NooK e3FLLVoTTNhu4Ps4n74rcG5Qsf010ur0jx5eIyMxMS4b4TU= -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:42 2026 by rpki-client