$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140521.roa File: AS140521.roa (raw, json) Hash identifier: hCUcqitjWCVL3vG5+GkvAWkxoX6PIitqJ9uY/ID3he4= Subject key identifier: 71:3D:93:76:C8:9A:F4:BA:2D:CF:65:00:BE:CF:50:55:C9:78:E7:45 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 423794FDC166AA62A36200302B0E47FF24609845 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140521.roa Signing time: Thu 28 May 2026 16:11:58 +0000 ROA not before: Thu 28 May 2026 16:06:58 +0000 ROA not after: Thu 27 May 2027 16:11:58 +0000 asID: 140521 IP address blocks: 240e:a7:7fe7::/48 maxlen: 48 240e:a7:7fe8::/48 maxlen: 48 240e:a7:7fe9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:37:94:fd:c1:66:aa:62:a3:62:00:30:2b:0e:47:ff:24:60:98:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 16:06:58 2026 GMT Not After : May 27 16:11:58 2027 GMT Subject: CN=713D9376C89AF4BA2DCF6500BECF5055C978E745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2b:d3:86:d6:2c:31:bf:14:4b:74:04:5b:50: 08:bd:c9:88:44:50:fc:4d:d7:7e:e3:bf:ca:c8:a5: 60:db:5b:1a:20:61:31:43:5e:0d:b3:29:ae:35:9b: 9e:46:ba:39:5d:8e:19:8a:3d:cc:1c:98:b0:61:7d: ff:2a:f6:29:f0:4a:8b:26:6a:a2:ec:4e:67:e8:3e: 6d:94:e4:80:60:f3:cd:93:75:aa:63:c9:df:52:10: fc:86:e6:2d:d0:7a:95:2a:2e:e2:3f:44:92:a7:cd: e8:60:8e:88:a9:8c:39:93:b2:89:ca:aa:b0:fd:02: d3:a6:c5:8d:f6:c8:9e:e0:01:84:7a:ee:d0:14:1e: 23:16:fa:9f:d5:db:fa:96:08:53:65:01:27:5d:16: de:fc:6b:74:ba:07:c5:8b:a0:2a:76:ce:63:d2:c2: dd:fe:aa:72:da:57:43:32:b8:87:30:b1:5f:47:85: b7:50:f3:7a:eb:31:b4:25:72:9b:01:43:cd:e5:4e: 06:99:28:b5:93:45:b4:73:42:53:8b:87:2e:18:7c: 57:d7:2f:39:be:3b:f2:d1:2f:f7:8b:6e:66:47:cc: 1a:58:c8:db:e0:2b:1b:bb:f8:67:dd:be:ca:f9:dd: c3:6d:5a:0c:52:92:00:1d:51:9d:e0:6a:59:9c:34: 86:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3D:93:76:C8:9A:F4:BA:2D:CF:65:00:BE:CF:50:55:C9:78:E7:45 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140521.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:a7:7fe7::-240e:a7:7fe9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a4:c5:39:68:25:78:ba:3e:b9:70:c6:df:1b:7c:d2:e2:35:1e: 0f:03:21:b0:3c:37:85:7f:64:83:25:b6:ad:88:f8:4c:23:8f: 8e:ba:94:a1:53:9b:26:3a:48:a2:00:b2:2a:2e:1a:48:a4:11: 4d:2c:47:fd:aa:81:a2:e9:eb:10:91:f6:17:08:72:b9:07:f2: 18:6a:c6:7d:dd:16:73:f9:9a:98:1e:08:10:af:1a:cc:a3:0d: 29:97:94:9a:7d:8c:d0:fb:32:44:4a:04:12:19:7b:43:02:59: ee:00:cd:e3:48:e6:16:1f:81:0e:0e:ec:4e:d2:1b:5e:7e:c6: 5f:aa:4d:d3:b7:a5:da:79:ba:ea:86:d8:c6:33:ec:59:37:e7: 0c:be:50:d3:db:6b:39:e0:99:2a:2d:cb:4a:56:36:6f:b2:a0: ef:6a:d9:03:c2:94:6e:f7:88:5e:c3:fe:52:1c:e9:f8:e1:cd: e5:0d:8e:01:a7:57:52:6e:72:36:17:23:72:59:bc:51:0d:b6: 72:1d:10:5f:0b:6d:a2:3d:29:62:e6:ab:1e:53:c0:0e:65:57: 80:3d:16:38:92:01:8b:ae:1a:c5:b1:28:5a:a1:e8:73:a4:56: 42:e0:40:2c:dc:05:27:a6:7a:a6:f9:1a:a3:1f:69:97:fa:61: 9f:c6:6c:59 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUQjeU/cFmqmKjYgAwKw5H/yRgmEUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MDY1OFoX DTI3MDUyNzE2MTE1OFowMzExMC8GA1UEAxMoNzEzRDkzNzZDODlBRjRCQTJEQ0Y2 NTAwQkVDRjUwNTVDOTc4RTc0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO0r04bWLDG/FEt0BFtQCL3JiERQ/E3XfuO/ysilYNtbGiBhMUNeDbMprjWb nka6OV2OGYo9zByYsGF9/yr2KfBKiyZqouxOZ+g+bZTkgGDzzZN1qmPJ31IQ/Ibm LdB6lSou4j9EkqfN6GCOiKmMOZOyicqqsP0C06bFjfbInuABhHru0BQeIxb6n9Xb +pYIU2UBJ10W3vxrdLoHxYugKnbOY9LC3f6qctpXQzK4hzCxX0eFt1DzeusxtCVy mwFDzeVOBpkotZNFtHNCU4uHLhh8V9cvOb478tEv94tuZkfMGljI2+ArG7v4Z92+ yvndw21aDFKSAB1RneBqWZw0hoMCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBRxPZN2 yJr0ui3PZQC+z1BVyXjnRTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwNTIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAkDgCnf+cDBwEkDgCnf+gw DQYJKoZIhvcNAQELBQADggEBAKTFOWgleLo+uXDG3xt80uI1Hg8DIbA8N4V/ZIMl tq2I+Ewjj466lKFTmyY6SKIAsiouGkikEU0sR/2qgaLp6xCR9hcIcrkH8hhqxn3d FnP5mpgeCBCvGsyjDSmXlJp9jND7MkRKBBIZe0MCWe4AzeNI5hYfgQ4O7E7SG15+ xl+qTdO3pdp5uuqG2MYz7Fk35wy+UNPbazngmSoty0pWNm+yoO9q2QPClG73iF7D /lIc6fjhzeUNjgGnV1JucjYXI3JZvFENtnIdEF8LbaI9KWLmqx5TwA5lV4A9FjiS AYuuGsWxKFqh6HOkVkLgQCzcBSemeqb5GqMfaZf6YZ/GbFk= -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:38 2026 by rpki-client