$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140522.roa File: AS140522.roa (raw, json) Hash identifier: wDZAFMvHcD2NYeXv70de7Ky+dflMwsz+Ak1SgZqNBqI= Subject key identifier: 06:BA:2E:AA:A7:5E:CD:83:84:47:6C:84:61:F7:71:D0:C1:44:5E:90 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 361FB33474918093E2C6924C697272734BF23A25 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140522.roa Signing time: Thu 28 May 2026 16:11:59 +0000 ROA not before: Thu 28 May 2026 16:06:59 +0000 ROA not after: Thu 27 May 2027 16:11:59 +0000 asID: 140522 IP address blocks: 240e:a7:7fea::/48 maxlen: 48 240e:a7:7feb::/48 maxlen: 48 240e:a7:7fec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:1f:b3:34:74:91:80:93:e2:c6:92:4c:69:72:72:73:4b:f2:3a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 16:06:59 2026 GMT Not After : May 27 16:11:59 2027 GMT Subject: CN=06BA2EAAA75ECD8384476C8461F771D0C1445E90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:fc:96:63:da:b5:b5:3e:6e:e1:e7:df:c8: 60:bf:76:3b:5e:06:a1:81:f6:29:9a:6e:c1:4f:c4: c4:0d:4c:c6:d2:33:14:9d:a4:9d:5b:16:b7:f4:ba: df:52:ab:6d:62:2c:6c:b3:bd:01:27:fa:21:32:ba: 6c:ce:6b:39:bf:3e:9b:f0:85:5d:39:93:fd:2b:02: 0f:af:5b:a8:21:d4:3f:28:db:28:33:b6:25:af:02: b4:ca:a5:29:7d:7a:71:9d:2d:03:4c:de:96:6d:11: d0:45:c4:0e:1d:fc:0b:0f:12:21:13:ec:51:8e:85: a7:0b:ae:10:a6:c9:d4:ea:d3:dc:12:cb:44:6a:59: e8:22:2b:72:51:0f:13:3c:38:b1:56:4b:18:0a:9f: ef:d1:2e:89:dd:c9:d7:b0:01:61:e2:0f:be:03:80: b8:2e:05:cd:60:3f:f1:e1:74:b4:b6:89:79:68:c6: 33:82:b0:e2:16:36:43:a0:f2:39:1e:ee:ef:1a:92: 0b:d3:4e:6a:28:3f:7f:f7:3a:34:81:8f:62:99:48: ef:24:1d:25:ba:23:80:f3:26:02:ee:61:ac:b3:25: e3:d5:f7:d6:4c:a5:f4:99:eb:ac:04:13:c8:52:b5: 20:46:cc:62:da:6e:8b:35:28:84:dc:07:28:f1:72: af:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BA:2E:AA:A7:5E:CD:83:84:47:6C:84:61:F7:71:D0:C1:44:5E:90 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140522.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:a7:7fea::-240e:a7:7fec:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7a:27:20:36:7e:3c:96:d6:17:16:05:8e:c1:57:fe:69:e5:18: 77:77:d1:a5:fb:23:db:14:6b:8c:0a:be:b0:5c:f6:8d:35:ab: e5:36:e0:0c:60:49:5d:0e:11:13:e5:d1:68:03:fc:2f:d2:ba: 4a:be:72:92:e8:ad:5d:84:73:32:16:60:75:32:91:ae:ba:9e: dd:3a:b1:fc:a3:f5:a4:15:e0:f1:a0:9f:21:e8:a0:32:3d:55: e0:75:17:43:54:ba:50:9c:a5:55:18:1b:ab:42:3b:9e:82:2e: 27:ff:b0:5d:bd:40:48:82:df:8b:5b:03:5d:0f:ff:21:82:21: 68:18:58:d8:38:3c:95:88:43:67:5e:36:15:e3:4a:8f:c5:fe: 06:51:fe:5b:97:0b:f7:56:02:46:25:60:35:cd:d6:58:a4:bd: 6a:61:3d:60:38:96:93:be:e2:e9:45:b6:cd:db:b2:5b:90:ab: 99:ca:38:07:5d:7e:4c:6a:c4:22:5a:c4:aa:a6:9b:15:3f:a5: 1f:17:b4:11:02:14:71:51:cc:e2:07:e3:e6:d0:f2:fb:8c:13: 35:b6:59:cf:a2:ae:ae:28:0b:c1:0a:e3:e1:b1:25:81:c7:ff: 36:f1:f2:cd:b2:49:0e:1f:42:a4:73:71:dc:76:3f:99:b8:e1: 49:5d:48:1b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUNh+zNHSRgJPixpJMaXJyc0vyOiUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE2MDY1OVoX DTI3MDUyNzE2MTE1OVowMzExMC8GA1UEAxMoMDZCQTJFQUFBNzVFQ0Q4Mzg0NDc2 Qzg0NjFGNzcxRDBDMTQ0NUU5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZN/JZj2rW1Pm7h59/IYL92O14GoYH2KZpuwU/ExA1MxtIzFJ2knVsWt/S6 31KrbWIsbLO9ASf6ITK6bM5rOb8+m/CFXTmT/SsCD69bqCHUPyjbKDO2Ja8CtMql KX16cZ0tA0zelm0R0EXEDh38Cw8SIRPsUY6FpwuuEKbJ1OrT3BLLRGpZ6CIrclEP Ezw4sVZLGAqf79Euid3J17ABYeIPvgOAuC4FzWA/8eF0tLaJeWjGM4Kw4hY2Q6Dy OR7u7xqSC9NOaig/f/c6NIGPYplI7yQdJbojgPMmAu5hrLMl49X31kyl9JnrrAQT yFK1IEbMYtpuizUohNwHKPFyr8UCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBQGui6q p17Ng4RHbIRh93HQwURekDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwNTIyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwEkDgCnf+oDBwAkDgCnf+ww DQYJKoZIhvcNAQELBQADggEBAHonIDZ+PJbWFxYFjsFX/mnlGHd30aX7I9sUa4wK vrBc9o01q+U24AxgSV0OERPl0WgD/C/Sukq+cpLorV2EczIWYHUyka66nt06sfyj 9aQV4PGgnyHooDI9VeB1F0NUulCcpVUYG6tCO56CLif/sF29QEiC34tbA10P/yGC IWgYWNg4PJWIQ2deNhXjSo/F/gZR/luXC/dWAkYlYDXN1likvWphPWA4lpO+4ulF ts3bsluQq5nKOAddfkxqxCJaxKqmmxU/pR8XtBECFHFRzOIH4+bQ8vuMEzW2Wc+i rq4oC8EK4+GxJYHH/zbx8s2ySQ4fQqRzcdx2P5m44UldSBs= -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:36 2026 by rpki-client