$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140534.roa File: AS140534.roa (raw, json) Hash identifier: abFGJ6Dw+PkhjuE9P5mwp4v2K7zZjvu5TozwJXVJ3eA= Subject key identifier: 89:10:AC:1A:E2:37:53:60:4C:F9:C5:45:88:8E:94:E3:5B:77:34:B7 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 644B6104D9F0491AC607CC0223C98C52F84C6472 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140534.roa Signing time: Thu 28 May 2026 16:02:32 +0000 ROA not before: Thu 28 May 2026 15:57:32 +0000 ROA not after: Thu 27 May 2027 16:02:32 +0000 asID: 140534 IP address blocks: 240e:45c:9100::/40 maxlen: 40 240e:45c:9300::/40 maxlen: 40 240e:45c:9500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4b:61:04:d9:f0:49:1a:c6:07:cc:02:23:c9:8c:52:f8:4c:64:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 15:57:32 2026 GMT Not After : May 27 16:02:32 2027 GMT Subject: CN=8910AC1AE23753604CF9C545888E94E35B7734B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:49:74:95:69:3a:06:8b:c9:e8:c5:ff:36:e3: 97:35:25:15:e8:89:ea:4a:df:52:6b:49:3a:0d:b0: d1:2b:f4:37:dc:43:2a:96:0f:da:89:c9:78:70:1a: 25:ef:7e:6c:fb:4d:d6:00:2b:ae:a7:db:60:9e:63: 84:fe:a0:06:e0:de:5c:af:52:1c:9c:be:55:7c:b9: 0a:6c:e4:32:cb:42:80:82:99:87:29:94:5b:88:00: b8:4a:09:01:a6:cb:94:b2:b4:64:9d:6c:ac:be:3f: 9d:cb:43:8e:05:d1:ea:d9:b8:c0:f2:ab:4b:75:e1: 43:2d:a3:de:76:89:02:6b:6c:09:bf:0d:a7:02:87: c5:db:0a:d3:69:48:8e:00:28:44:2f:a3:35:c5:af: a0:97:5b:13:d6:cb:43:eb:5f:cc:46:69:4b:ec:2a: 0e:82:00:08:af:76:8a:19:27:16:82:b3:ed:82:89: 3b:a5:c7:e0:e3:f0:5d:b7:8a:6e:e5:ea:8e:2d:d5: 61:ec:18:8e:18:af:c4:3a:3a:99:fa:89:da:5e:cd: 82:4a:81:21:75:11:54:3d:1d:e8:de:89:c5:dd:d6: b9:2b:e1:d7:54:2b:7c:9a:1b:e9:1d:18:2a:ae:6f: 85:56:24:d1:d4:71:73:3d:9a:10:41:6c:b8:e8:b2: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:10:AC:1A:E2:37:53:60:4C:F9:C5:45:88:8E:94:E3:5B:77:34:B7 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:45c:9100::/40 240e:45c:9300::/40 240e:45c:9500::/40 Signature Algorithm: sha256WithRSAEncryption b0:8f:99:25:b4:4d:b7:92:3b:c0:d5:85:41:43:2c:f4:fd:c0: 52:e2:9a:79:92:70:08:9b:6b:97:27:70:2f:19:09:4c:47:9d: 8b:1b:7c:58:45:06:a3:a9:26:25:cd:0b:01:b3:82:5d:3b:61: ae:8d:5a:3b:0e:e9:39:cc:8d:6d:2e:d2:d1:f6:cd:d7:71:47: 50:a3:d7:98:99:3d:98:c6:e1:af:29:22:ba:0b:69:72:24:91: 34:1d:95:f0:03:f3:a1:e3:a6:c8:60:a7:72:e6:2b:61:89:2d: 17:8d:bc:62:c5:af:6f:e8:ad:1d:f8:81:3e:d6:c3:2e:5e:93: 9a:f4:35:81:e7:98:67:dd:ea:30:c5:e4:08:d4:dc:5b:c1:0b: 35:84:06:c3:06:f8:02:ac:54:fb:e3:b2:94:90:9f:7e:97:92: 5f:e9:fc:f7:eb:d9:20:d5:5a:26:78:4f:49:bd:a7:2f:e2:9c: 4c:c1:67:a5:98:d3:fe:53:12:16:a0:b0:77:23:00:a4:d6:48: 7a:2a:14:82:ef:78:38:c7:71:48:a2:fb:6b:c0:e4:00:ba:9a: 72:c0:5a:93:79:25:97:40:f3:2b:e0:7a:fd:52:04:40:1c:56: 5e:f2:2f:26:fa:8c:01:41:b3:44:f3:f1:06:d3:d5:35:13:94: 98:07:4c:2f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUZEthBNnwSRrGB8wCI8mMUvhMZHIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE1NTczMloX DTI3MDUyNzE2MDIzMlowMzExMC8GA1UEAxMoODkxMEFDMUFFMjM3NTM2MDRDRjlD NTQ1ODg4RTk0RTM1Qjc3MzRCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhJdJVpOgaLyejF/zbjlzUlFeiJ6krfUmtJOg2w0Sv0N9xDKpYP2onJeHAa Je9+bPtN1gArrqfbYJ5jhP6gBuDeXK9SHJy+VXy5CmzkMstCgIKZhymUW4gAuEoJ AabLlLK0ZJ1srL4/nctDjgXR6tm4wPKrS3XhQy2j3naJAmtsCb8NpwKHxdsK02lI jgAoRC+jNcWvoJdbE9bLQ+tfzEZpS+wqDoIACK92ihknFoKz7YKJO6XH4OPwXbeK buXqji3VYewYjhivxDo6mfqJ2l7NgkqBIXURVD0d6N6Jxd3WuSvh11QrfJob6R0Y Kq5vhVYk0dRxcz2aEEFsuOiyVzECAwEAAaOCAfYwggHyMB0GA1UdDgQWBBSJEKwa 4jdTYEz5xUWIjpTjW3c0tzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYAJA4EXJEDBgAkDgRckwMGACQO BFyVMA0GCSqGSIb3DQEBCwUAA4IBAQCwj5kltE23kjvA1YVBQyz0/cBS4pp5knAI m2uXJ3AvGQlMR52LG3xYRQajqSYlzQsBs4JdO2GujVo7Duk5zI1tLtLR9s3XcUdQ o9eYmT2YxuGvKSK6C2lyJJE0HZXwA/Oh46bIYKdy5ithiS0Xjbxixa9v6K0d+IE+ 1sMuXpOa9DWB55hn3eowxeQI1NxbwQs1hAbDBvgCrFT747KUkJ9+l5Jf6fz369kg 1VomeE9Jvacv4pxMwWelmNP+UxIWoLB3IwCk1kh6KhSC73g4x3FIovtrwOQAuppy wFqTeSWXQPMr4Hr9UgRAHFZe8i8m+owBQbNE8/EG09U1E5SYB0wv -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:38 2026 by rpki-client