$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140530.roa File: AS140530.roa (raw, json) Hash identifier: GxijMQKuEQbgwazk0pblAAbS4NJQ138WP5nWv/NF/lY= Subject key identifier: 90:D3:2D:A4:E3:4C:E5:A2:3F:87:6A:59:42:11:D3:EE:FF:14:9B:C2 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 206F090139506D9847122C095DA11003A9CADCBB Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140530.roa Signing time: Thu 28 May 2026 16:02:32 +0000 ROA not before: Thu 28 May 2026 15:57:32 +0000 ROA not after: Thu 27 May 2027 16:02:32 +0000 asID: 140530 IP address blocks: 240e:45c:6300::/40 maxlen: 40 240e:45c:6500::/40 maxlen: 40 240e:45c:6700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:6f:09:01:39:50:6d:98:47:12:2c:09:5d:a1:10:03:a9:ca:dc:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 15:57:32 2026 GMT Not After : May 27 16:02:32 2027 GMT Subject: CN=90D32DA4E34CE5A23F876A594211D3EEFF149BC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:b3:eb:4e:ad:15:95:f0:ae:24:fb:67:93: ef:f3:03:b6:d8:48:b9:d5:06:d7:b7:79:90:43:46: 74:b1:c6:a2:d1:37:89:91:68:18:37:96:e0:bb:97: c7:4b:1e:84:3a:df:59:89:97:50:d3:73:be:e3:a9: 5b:34:37:b2:a6:c0:10:03:8e:8e:27:a7:43:d1:38: 23:1c:54:c8:27:72:26:91:48:30:79:90:08:87:eb: 06:fd:02:71:e1:e6:b5:83:bd:22:57:ca:96:ed:29: 10:73:3c:d3:b5:62:69:65:95:a8:ab:01:29:17:7d: 76:98:ae:a2:ab:ac:32:fe:20:35:0d:f9:32:71:77: 1c:d0:49:fd:2b:ca:be:92:87:6a:81:e2:81:d3:47: 2f:2a:f2:39:7d:fc:fd:fb:06:f5:92:75:06:c6:a4: 9d:80:cb:65:8d:42:51:33:ec:21:9f:91:25:5c:99: 04:c2:9b:c0:da:03:f0:e8:41:03:b7:f3:93:3e:50: ae:92:8c:1f:90:ab:37:b6:57:ea:19:ef:52:81:cd: dc:ee:5e:da:91:ad:22:6f:61:5b:09:57:fa:52:d9: 91:8d:45:d7:1a:fe:20:8f:c0:e0:8c:a7:06:66:39: a0:e1:00:f3:df:35:4d:08:90:4f:74:bf:95:24:be: 61:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D3:2D:A4:E3:4C:E5:A2:3F:87:6A:59:42:11:D3:EE:FF:14:9B:C2 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:45c:6300::/40 240e:45c:6500::/40 240e:45c:6700::/40 Signature Algorithm: sha256WithRSAEncryption 1a:74:ec:2f:28:25:b8:b2:ab:14:71:10:eb:48:b8:ae:69:6a: d2:93:ee:e2:7c:62:2b:cd:c8:4a:15:73:b3:2d:74:1d:ba:24: 29:bc:9a:aa:39:50:55:80:1c:4c:f3:97:b3:53:a4:16:be:46: 9c:d2:ca:ce:9a:44:b1:62:0f:ef:96:68:25:d2:24:c2:73:a3: 6b:22:6f:4b:bd:b2:34:c6:20:52:07:a1:dc:b1:e4:05:a8:48: 6b:b8:4b:5e:76:fa:cc:7b:b4:85:7d:e6:c9:fe:af:dc:89:60: cd:59:58:f9:fd:8c:09:f1:56:0a:de:b1:e7:14:a5:34:f5:38: 8e:0a:34:f3:be:b6:8e:c9:4b:c1:e6:85:34:8d:0c:e3:d8:ac: 8c:9f:3a:99:84:4b:12:75:e1:38:b0:a4:45:91:7a:a4:b1:8f: 68:5c:59:30:bb:1a:83:f0:89:c7:3a:ab:06:57:db:c1:21:44: 77:41:fb:15:d7:47:d6:60:79:3c:33:7a:ec:9f:79:d3:85:a0: 1c:84:3b:a0:ed:8f:3b:83:48:a3:46:6f:45:b0:eb:54:2a:0b: d4:e7:93:39:d8:00:dc:ab:e1:47:53:97:a3:cc:de:3b:9a:cf: 67:61:1d:be:62:c3:16:30:e8:b1:5c:0e:80:8a:a1:01:53:5b: 5d:5d:bd:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUIG8JATlQbZhHEiwJXaEQA6nK3LswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE1NTczMloX DTI3MDUyNzE2MDIzMlowMzExMC8GA1UEAxMoOTBEMzJEQTRFMzRDRTVBMjNGODc2 QTU5NDIxMUQzRUVGRjE0OUJDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3ws+tOrRWV8K4k+2eT7/MDtthIudUG17d5kENGdLHGotE3iZFoGDeW4LuX x0sehDrfWYmXUNNzvuOpWzQ3sqbAEAOOjienQ9E4IxxUyCdyJpFIMHmQCIfrBv0C ceHmtYO9IlfKlu0pEHM807ViaWWVqKsBKRd9dpiuoqusMv4gNQ35MnF3HNBJ/SvK vpKHaoHigdNHLyryOX38/fsG9ZJ1BsaknYDLZY1CUTPsIZ+RJVyZBMKbwNoD8OhB A7fzkz5QrpKMH5CrN7ZX6hnvUoHN3O5e2pGtIm9hWwlX+lLZkY1F1xr+II/A4Iyn BmY5oOEA8981TQiQT3S/lSS+YaECAwEAAaOCAfYwggHyMB0GA1UdDgQWBBSQ0y2k 40zloj+HallCEdPu/xSbwjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYAJA4EXGMDBgAkDgRcZQMGACQO BFxnMA0GCSqGSIb3DQEBCwUAA4IBAQAadOwvKCW4sqsUcRDrSLiuaWrSk+7ifGIr zchKFXOzLXQduiQpvJqqOVBVgBxM85ezU6QWvkac0srOmkSxYg/vlmgl0iTCc6Nr Im9LvbI0xiBSB6HcseQFqEhruEtedvrMe7SFfebJ/q/ciWDNWVj5/YwJ8VYK3rHn FKU09TiOCjTzvraOyUvB5oU0jQzj2KyMnzqZhEsSdeE4sKRFkXqksY9oXFkwuxqD 8InHOqsGV9vBIUR3QfsV10fWYHk8M3rsn3nThaAchDug7Y87g0ijRm9FsOtUKgvU 55M52ADcq+FHU5ejzN47ms9nYR2+YsMWMOixXA6AiqEBU1tdXb11 -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:43 2026 by rpki-client