$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140535.roa File: AS140535.roa (raw, json) Hash identifier: x+BRO2ZRiG06bhJ8dTOipRYuY2za+6IzU3q8vu3oCIU= Subject key identifier: 13:F3:94:8B:C2:E2:F1:B7:00:B0:22:28:E8:7E:30:08:EC:37:2C:18 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 2ACF74FE3F8EC41DDF40225A02A0F2F42F8C1E03 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140535.roa Signing time: Thu 28 May 2026 16:02:32 +0000 ROA not before: Thu 28 May 2026 15:57:32 +0000 ROA not after: Thu 27 May 2027 16:02:32 +0000 asID: 140535 IP address blocks: 240e:45c:a500::/40 maxlen: 40 240e:45c:a700::/40 maxlen: 40 240e:45c:a900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:cf:74:fe:3f:8e:c4:1d:df:40:22:5a:02:a0:f2:f4:2f:8c:1e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 15:57:32 2026 GMT Not After : May 27 16:02:32 2027 GMT Subject: CN=13F3948BC2E2F1B700B02228E87E3008EC372C18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b0:f6:93:42:43:27:98:b7:73:49:4e:71:e7: 89:f9:79:fa:03:d3:5e:68:89:cd:ef:91:48:60:8f: 3c:19:48:ff:f7:12:4d:8e:3d:49:4e:ac:fc:3c:74: b2:1f:20:fc:3b:18:da:f5:50:7f:02:6d:cd:b1:8e: e5:18:4d:a8:40:89:bb:4e:de:27:4f:87:39:e4:f5: 62:98:c3:2c:be:6b:06:2f:ad:c5:8d:b8:85:a4:6b: 0a:e9:c7:d4:f7:0b:67:a5:12:ae:69:f6:4a:7e:0d: 43:d5:19:23:df:cc:4b:27:60:90:cc:87:ee:67:6d: b3:0b:02:80:63:39:17:ef:89:0b:47:8c:38:5a:63: 5b:3d:b2:e9:ad:d2:ea:62:2f:73:bb:23:2e:05:5e: 3f:42:2b:ab:76:e2:e1:89:35:db:95:e0:52:b8:58: bd:b8:0a:5e:1a:f2:21:0d:48:c7:6c:e3:c1:60:8a: 58:ba:80:20:ec:69:59:58:e6:3e:0e:cd:69:23:df: 62:c6:9c:d8:20:36:a1:b8:db:88:cc:bc:a6:98:0b: 2d:b4:c8:16:be:93:8c:78:97:41:d7:d4:b0:61:21: 72:0a:24:5c:5e:60:36:bd:59:a1:54:3d:5a:87:ac: 08:57:fa:b2:e4:c0:89:20:de:76:42:28:e9:ab:f2: 1a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F3:94:8B:C2:E2:F1:B7:00:B0:22:28:E8:7E:30:08:EC:37:2C:18 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:45c:a500::/40 240e:45c:a700::/40 240e:45c:a900::/40 Signature Algorithm: sha256WithRSAEncryption 36:38:68:5a:ac:a1:88:94:ce:8e:ba:7d:38:b5:47:b5:4f:1c: 90:eb:1d:e6:11:c5:c8:c5:c3:c4:ad:50:a2:5b:f5:7a:64:8c: d2:77:ae:3a:25:1a:cc:8f:a3:46:d5:e9:17:2b:dd:e7:8c:0d: 9b:9d:93:0a:95:b6:ea:3f:84:7c:44:19:82:2a:79:a3:09:fc: 6d:5d:dc:83:e0:bd:7b:f8:9d:18:fb:c6:9d:aa:cb:36:0a:1e: 77:04:da:45:0a:ff:1d:99:74:0e:26:1d:f1:bc:30:6b:4f:3e: 61:a1:58:67:d6:7a:40:9e:cd:ae:64:7f:84:9a:25:04:52:8f: 14:f5:40:e2:4d:d1:7a:f0:2d:f2:c9:e1:be:cf:26:6f:ca:9b: de:b0:72:16:8e:93:fa:1b:d7:6f:74:a1:be:f0:82:8d:e5:e4: 5b:03:01:60:a3:7d:7c:57:ab:ce:03:66:7d:f0:62:38:82:3c: a2:5b:98:22:8f:e7:79:30:cd:8d:90:e3:05:c3:12:85:b8:24: b1:15:18:50:a7:c1:56:f8:ac:9d:36:18:81:50:75:a0:f8:4e: a1:3e:70:02:90:85:1e:46:4a:af:e4:31:89:5b:bd:39:fe:76: ce:7a:f2:cb:01:96:39:3b:90:e7:f1:93:61:7d:f8:f9:43:66: eb:aa:aa:d8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUKs90/j+OxB3fQCJaAqDy9C+MHgMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE1NTczMloX DTI3MDUyNzE2MDIzMlowMzExMC8GA1UEAxMoMTNGMzk0OEJDMkUyRjFCNzAwQjAy MjI4RTg3RTMwMDhFQzM3MkMxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJuw9pNCQyeYt3NJTnHnifl5+gPTXmiJze+RSGCPPBlI//cSTY49SU6s/Dx0 sh8g/DsY2vVQfwJtzbGO5RhNqECJu07eJ0+HOeT1YpjDLL5rBi+txY24haRrCunH 1PcLZ6USrmn2Sn4NQ9UZI9/MSydgkMyH7mdtswsCgGM5F++JC0eMOFpjWz2y6a3S 6mIvc7sjLgVeP0Irq3bi4Yk125XgUrhYvbgKXhryIQ1Ix2zjwWCKWLqAIOxpWVjm Pg7NaSPfYsac2CA2objbiMy8ppgLLbTIFr6TjHiXQdfUsGEhcgokXF5gNr1ZoVQ9 WoesCFf6suTAiSDedkIo6avyGo0CAwEAAaOCAfYwggHyMB0GA1UdDgQWBBQT85SL wuLxtwCwIijofjAI7DcsGDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYAJA4EXKUDBgAkDgRcpwMGACQO BFypMA0GCSqGSIb3DQEBCwUAA4IBAQA2OGharKGIlM6Oun04tUe1TxyQ6x3mEcXI xcPErVCiW/V6ZIzSd646JRrMj6NG1ekXK93njA2bnZMKlbbqP4R8RBmCKnmjCfxt XdyD4L17+J0Y+8adqss2Ch53BNpFCv8dmXQOJh3xvDBrTz5hoVhn1npAns2uZH+E miUEUo8U9UDiTdF68C3yyeG+zyZvypvesHIWjpP6G9dvdKG+8IKN5eRbAwFgo318 V6vOA2Z98GI4gjyiW5gij+d5MM2NkOMFwxKFuCSxFRhQp8FW+KydNhiBUHWg+E6h PnACkIUeRkqv5DGJW705/nbOevLLAZY5O5Dn8ZNhffj5Q2brqqrY -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:40 2026 by rpki-client