$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140531.roa File: AS140531.roa (raw, json) Hash identifier: zUzCKzUW4bxUIwJTNr6PhsPbhvyD8f13qxGbgr3S+oQ= Subject key identifier: 90:18:78:8A:EC:DB:EF:3E:A1:C7:E5:E9:3D:04:A7:A7:9A:31:9E:BE Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 07C9B31C4194230274D61283493BE0BE497ADE3B Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140531.roa Signing time: Thu 28 May 2026 16:02:32 +0000 ROA not before: Thu 28 May 2026 15:57:32 +0000 ROA not after: Thu 27 May 2027 16:02:32 +0000 asID: 140531 IP address blocks: 240e:45c:6900::/40 maxlen: 40 240e:45c:6b00::/40 maxlen: 40 240e:45c:6d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c9:b3:1c:41:94:23:02:74:d6:12:83:49:3b:e0:be:49:7a:de:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 15:57:32 2026 GMT Not After : May 27 16:02:32 2027 GMT Subject: CN=9018788AECDBEF3EA1C7E5E93D04A7A79A319EBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c0:97:83:9e:b1:fc:08:c3:93:7f:91:cb:aa: 8c:0d:cf:4b:b5:b2:8b:b0:c2:a3:53:5c:19:66:87: 30:f9:8e:7b:cb:ab:46:7e:5a:4a:50:0a:c0:60:fe: b7:ce:be:ae:0f:0c:d3:9f:99:01:7c:6e:55:42:c4: 8c:bc:b4:dd:fd:f8:ac:4c:ad:c2:1b:49:ac:ca:37: 99:64:02:65:ba:04:32:d6:2f:d5:6f:2e:60:db:b5: 2e:d7:5e:d7:8d:bc:91:9d:04:e8:d1:e0:1c:8a:de: 6b:93:8e:bf:44:71:07:ea:d3:94:4b:e0:2b:20:b7: 14:73:0d:70:b4:22:45:75:22:ec:3c:32:56:71:70: fc:c6:11:98:0d:c5:11:f7:ea:c6:6e:cf:22:a4:04: 6b:75:9d:6b:ad:98:e2:70:7d:7c:ea:c8:97:89:ed: 3f:b1:7f:69:a8:d8:0a:bb:42:36:db:a2:fb:11:03: 83:bf:5a:e7:ea:56:76:0a:72:ea:36:74:7a:78:0a: 96:00:44:d8:54:38:77:71:82:6d:e7:0e:81:25:f0: b7:95:2b:3d:8d:c2:c6:d3:71:85:45:de:9b:34:c0: 41:52:c1:b0:ec:69:a3:49:b5:9a:c9:dd:0a:76:d5: e9:e5:a9:13:86:f2:83:2d:76:a0:4b:3b:be:ad:4a: 28:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:18:78:8A:EC:DB:EF:3E:A1:C7:E5:E9:3D:04:A7:A7:9A:31:9E:BE X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:45c:6900::/40 240e:45c:6b00::/40 240e:45c:6d00::/40 Signature Algorithm: sha256WithRSAEncryption 1f:0b:d2:1a:85:83:70:12:bf:16:5c:1c:23:44:0c:2a:a2:d8: aa:71:b1:4c:9a:e7:f3:62:b5:bf:5b:ca:75:50:6e:db:f7:9c: 53:28:0a:69:95:f3:32:5d:d7:93:dd:ba:3e:8f:49:2d:09:bb: 53:9d:97:10:43:84:75:1b:f3:8a:a6:ed:1d:f1:50:6d:21:8f: 56:76:e4:d7:48:c7:32:2c:53:25:e2:35:3d:80:ac:f7:38:e6: 33:f8:ef:c9:43:38:14:fe:14:cc:19:c8:25:65:98:35:61:08: 59:95:6d:13:5e:fe:bb:53:2e:69:23:2e:ec:56:25:8c:14:59: a7:60:51:ce:53:bd:b0:c0:af:48:c9:98:72:d7:01:b7:3f:3d: 2d:aa:19:2f:26:05:62:7d:36:38:0a:8b:4a:ee:5c:3c:9f:dc: 58:4f:4c:a3:bf:c8:8d:74:c3:da:32:65:ef:8d:c6:70:e5:42: 03:b6:9a:e5:a8:5d:94:07:c6:cf:1f:ef:93:78:9a:36:be:ff: 1d:b4:ab:80:d9:46:e2:a3:d2:27:7b:75:32:ee:1c:d6:8f:e6: c4:7b:58:3d:0e:01:c1:cc:ce:8c:e2:08:0b:eb:c4:ea:14:38: 6e:3a:70:14:c7:13:c6:ae:2d:ec:2f:d4:cf:88:d8:43:9c:d9: 7d:c9:60:f0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUB8mzHEGUIwJ01hKDSTvgvkl63jswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE1NTczMloX DTI3MDUyNzE2MDIzMlowMzExMC8GA1UEAxMoOTAxODc4OEFFQ0RCRUYzRUExQzdF NUU5M0QwNEE3QTc5QTMxOUVCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN7Al4OesfwIw5N/kcuqjA3PS7Wyi7DCo1NcGWaHMPmOe8urRn5aSlAKwGD+ t86+rg8M05+ZAXxuVULEjLy03f34rEytwhtJrMo3mWQCZboEMtYv1W8uYNu1Ltde 1428kZ0E6NHgHIrea5OOv0RxB+rTlEvgKyC3FHMNcLQiRXUi7DwyVnFw/MYRmA3F Effqxm7PIqQEa3Wda62Y4nB9fOrIl4ntP7F/aajYCrtCNtui+xEDg79a5+pWdgpy 6jZ0engKlgBE2FQ4d3GCbecOgSXwt5UrPY3CxtNxhUXemzTAQVLBsOxpo0m1msnd CnbV6eWpE4bygy12oEs7vq1KKLUCAwEAAaOCAfYwggHyMB0GA1UdDgQWBBSQGHiK 7NvvPqHH5ek9BKenmjGevjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYAJA4EXGkDBgAkDgRcawMGACQO BFxtMA0GCSqGSIb3DQEBCwUAA4IBAQAfC9IahYNwEr8WXBwjRAwqotiqcbFMmufz YrW/W8p1UG7b95xTKApplfMyXdeT3bo+j0ktCbtTnZcQQ4R1G/OKpu0d8VBtIY9W duTXSMcyLFMl4jU9gKz3OOYz+O/JQzgU/hTMGcglZZg1YQhZlW0TXv67Uy5pIy7s ViWMFFmnYFHOU72wwK9IyZhy1wG3Pz0tqhkvJgVifTY4CotK7lw8n9xYT0yjv8iN dMPaMmXvjcZw5UIDtprlqF2UB8bPH++TeJo2vv8dtKuA2Ubio9Ine3Uy7hzWj+bE e1g9DgHBzM6M4ggL68TqFDhuOnAUxxPGri3sL9TPiNhDnNl9yWDw -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:37 2026 by rpki-client