$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140532.roa File: AS140532.roa (raw, json) Hash identifier: COW9bJIhaTplfOsunhGtb9481fllBzrBVhwD5VlXfjE= Subject key identifier: 46:FA:04:6A:5B:F9:6D:BB:E4:EB:6A:D8:B2:CF:10:A3:D8:F0:68:A8 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 0E0BBCB899F83FFA985D989461B31EB1876CAECB Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140532.roa Signing time: Thu 28 May 2026 16:02:33 +0000 ROA not before: Thu 28 May 2026 15:57:33 +0000 ROA not after: Thu 27 May 2027 16:02:33 +0000 asID: 140532 IP address blocks: 240e:45c:7300::/40 maxlen: 40 240e:45c:7500::/40 maxlen: 40 240e:45c:7700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0b:bc:b8:99:f8:3f:fa:98:5d:98:94:61:b3:1e:b1:87:6c:ae:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 15:57:33 2026 GMT Not After : May 27 16:02:33 2027 GMT Subject: CN=46FA046A5BF96DBBE4EB6AD8B2CF10A3D8F068A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c4:20:6d:13:f9:9c:61:0b:44:5b:d7:45:9d: e9:c3:52:67:7b:85:74:2f:ef:d5:b7:78:0c:37:c7: f3:bd:ac:b8:3b:2b:ff:3b:c3:fd:59:db:5e:2c:f1: 61:08:5b:f2:58:67:0e:e5:32:4b:24:b0:e6:7c:00: db:40:96:72:c4:d7:2a:6e:79:42:f7:31:6a:6d:5b: ae:a7:6f:2a:45:0f:b6:d5:3e:26:99:d5:a4:6c:d6: 48:f7:4b:5a:e3:16:df:a1:d9:3e:c4:ba:45:f9:df: 57:41:28:41:a4:21:9d:4e:9d:db:22:7e:d1:70:d7: 83:d6:1b:62:22:48:0b:42:c7:51:b4:a8:cd:af:45: cd:c7:ee:59:7d:4c:30:98:0d:91:e5:75:da:92:a5: c1:b5:cd:53:d5:fe:c7:3b:fc:b8:85:b3:b4:48:29: 6c:a4:8e:a2:d8:cf:6a:a8:91:86:56:d3:85:6b:17: c2:53:10:cc:a5:a8:82:b5:b5:c6:fc:cb:e9:9e:83: d8:e5:8f:6b:82:a8:f2:3d:c9:11:a6:fa:a9:9b:cc: c4:29:29:95:1f:35:dd:5c:24:9a:0e:9a:7d:7e:bb: 59:59:64:7a:40:87:c8:fb:4a:ed:83:ee:42:9e:f1: 0c:a8:de:eb:03:63:f5:ea:e9:a6:a4:07:69:b0:01: 05:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FA:04:6A:5B:F9:6D:BB:E4:EB:6A:D8:B2:CF:10:A3:D8:F0:68:A8 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:45c:7300::/40 240e:45c:7500::/40 240e:45c:7700::/40 Signature Algorithm: sha256WithRSAEncryption 48:d2:e4:0f:f6:94:6a:83:91:88:56:c6:5f:d9:d2:17:6c:76: 93:b4:ff:11:1d:91:b6:87:97:8a:79:99:1f:19:cb:a3:aa:a7: ed:3a:7d:ab:af:dd:1b:81:34:85:5b:27:50:15:9a:7c:9f:cf: 3f:7c:7f:03:d7:b5:5d:e4:70:88:2a:b9:95:dc:5f:a3:47:a2: 6e:8d:70:91:15:1d:18:73:ca:d0:7c:af:39:54:3e:04:ad:d3: 8c:0d:7b:a0:85:dc:d4:77:34:5a:71:33:91:eb:63:6e:e1:41: b9:86:6b:41:8c:80:cd:4d:b4:3c:6f:b9:8d:09:80:9b:f2:2a: 7e:bc:b0:34:69:83:4b:e5:6d:bb:61:4e:c0:7c:21:91:da:37: 00:c4:c4:2f:fa:47:c1:52:c6:4e:24:08:22:7d:cb:0e:cb:19: c6:d9:d9:ad:33:bb:8e:a6:9a:ab:d0:ab:61:79:ef:c7:95:31: 36:1c:20:4f:79:d2:66:a9:a4:53:86:ca:76:31:7f:5d:3f:6c: 01:f2:c1:df:15:9e:c8:31:24:f6:2e:f8:1f:4e:14:01:cf:c2: 3e:5f:fb:0e:5e:19:fe:cf:b7:48:8b:c5:b2:fc:ea:88:9d:3a: b3:1b:c2:fd:5b:f3:63:d4:69:dc:d8:22:b4:8e:29:5b:c3:7e: 9e:92:88:3e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUDgu8uJn4P/qYXZiUYbMesYdsrsswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE1NTczM1oX DTI3MDUyNzE2MDIzM1owMzExMC8GA1UEAxMoNDZGQTA0NkE1QkY5NkRCQkU0RUI2 QUQ4QjJDRjEwQTNEOEYwNjhBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/EIG0T+ZxhC0Rb10Wd6cNSZ3uFdC/v1bd4DDfH872suDsr/zvD/VnbXizx YQhb8lhnDuUySySw5nwA20CWcsTXKm55Qvcxam1brqdvKkUPttU+JpnVpGzWSPdL WuMW36HZPsS6RfnfV0EoQaQhnU6d2yJ+0XDXg9YbYiJIC0LHUbSoza9FzcfuWX1M MJgNkeV12pKlwbXNU9X+xzv8uIWztEgpbKSOotjPaqiRhlbThWsXwlMQzKWogrW1 xvzL6Z6D2OWPa4Ko8j3JEab6qZvMxCkplR813Vwkmg6afX67WVlkekCHyPtK7YPu Qp7xDKje6wNj9erppqQHabABBbsCAwEAAaOCAfYwggHyMB0GA1UdDgQWBBRG+gRq W/ltu+TratiyzxCj2PBoqDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYAJA4EXHMDBgAkDgRcdQMGACQO BFx3MA0GCSqGSIb3DQEBCwUAA4IBAQBI0uQP9pRqg5GIVsZf2dIXbHaTtP8RHZG2 h5eKeZkfGcujqqftOn2rr90bgTSFWydQFZp8n88/fH8D17Vd5HCIKrmV3F+jR6Ju jXCRFR0Yc8rQfK85VD4ErdOMDXughdzUdzRacTOR62Nu4UG5hmtBjIDNTbQ8b7mN CYCb8ip+vLA0aYNL5W27YU7AfCGR2jcAxMQv+kfBUsZOJAgifcsOyxnG2dmtM7uO ppqr0Kthee/HlTE2HCBPedJmqaRThsp2MX9dP2wB8sHfFZ7IMST2LvgfThQBz8I+ X/sOXhn+z7dIi8Wy/OqInTqzG8L9W/Nj1Gnc2CK0jilbw36ekog+ -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:39 2026 by rpki-client