$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140652.roa File: AS140652.roa (raw, json) Hash identifier: z2QnHmv4Shls+A4i0QrLoOk0Zc84dxYEeYXIwS/S1LQ= Subject key identifier: 35:34:5D:11:C5:1D:E7:5B:BB:E1:D0:95:5E:05:27:E9:A7:BD:CB:12 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 02597E30E4BE8FDA7D728DE90B27AFF53979194A Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140652.roa Signing time: Sat 30 May 2026 16:01:34 +0000 ROA not before: Sat 30 May 2026 15:56:34 +0000 ROA not after: Sat 29 May 2027 16:01:34 +0000 asID: 140652 IP address blocks: 240e:183:8210::/48 maxlen: 48 240e:183:8211::/48 maxlen: 48 240e:183:8212::/48 maxlen: 48 240e:183:8213::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:59:7e:30:e4:be:8f:da:7d:72:8d:e9:0b:27:af:f5:39:79:19:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 30 15:56:34 2026 GMT Not After : May 29 16:01:34 2027 GMT Subject: CN=35345D11C51DE75BBBE1D0955E0527E9A7BDCB12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:92:51:cf:c8:37:ac:df:a8:e6:d9:1d:9d:47: 4e:a6:01:ec:46:56:46:a2:a7:af:e1:03:aa:07:3c: 94:42:69:d9:37:c2:ff:61:94:6d:36:4b:c9:a9:f6: fd:c3:1f:d0:69:31:80:1c:ae:e1:f4:cb:28:ac:68: be:ad:55:79:44:eb:fd:c3:99:25:51:53:e3:14:4f: 71:81:d3:aa:d0:70:29:44:e4:39:20:e6:28:e3:e2: bd:35:0d:88:af:4d:1d:9d:bd:d9:40:1f:aa:04:c4: a1:64:cc:bc:cd:01:bc:0b:d0:3a:39:ef:fa:1f:85: 71:54:fc:6d:13:2c:75:4b:19:55:02:d6:5b:ba:9a: 52:52:93:80:fc:b7:0f:74:6a:8a:45:2a:ad:d9:4c: da:84:6a:96:44:1f:5c:0c:6f:6c:3e:97:9a:f2:f7: 52:c6:14:eb:ed:13:88:11:fc:be:d8:b9:7d:67:db: 32:1a:d1:18:c3:8f:81:bc:7f:b4:d1:87:16:6a:da: d5:84:0c:58:e2:60:ff:b4:3c:38:71:46:bf:36:95: 96:d2:c5:f2:db:7f:72:b7:45:f1:df:3b:b0:ea:fb: 03:77:e6:1d:59:0e:12:0a:9d:a3:dd:6f:a2:52:f8: 75:1a:ff:dd:20:20:6b:e8:35:e8:c9:95:66:c8:f0: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:34:5D:11:C5:1D:E7:5B:BB:E1:D0:95:5E:05:27:E9:A7:BD:CB:12 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140652.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:183:8210::/46 Signature Algorithm: sha256WithRSAEncryption 03:bb:33:7c:d7:50:35:13:9b:29:50:8e:47:66:3e:54:04:1a: bb:70:59:49:40:2c:19:f7:4f:65:6e:29:d8:50:49:55:a1:22: 37:22:9f:87:cc:02:dd:9a:11:68:9f:d4:6c:af:72:94:ce:d7: a2:8d:fa:9d:1b:2b:18:a4:8f:1e:5b:d7:63:fa:36:4b:4d:a6: 95:22:76:90:ed:b5:e5:7b:65:80:c5:c2:4a:c3:3b:1a:b8:a5: fb:1d:c0:3a:27:0f:66:44:27:9c:a0:58:07:4f:e2:e3:10:e0: 31:fe:9c:8e:81:64:31:6c:06:fe:95:5d:3c:e9:44:7a:6d:e3: c8:c3:57:ba:0f:f4:53:c4:b0:21:4a:83:6c:2c:49:f3:f3:5d: ac:02:9b:28:40:db:4b:44:da:4a:48:db:ac:e5:5b:0e:1f:60: 27:37:e5:0b:29:60:4b:59:29:a9:43:1f:64:f6:09:6d:b0:b2: fd:48:cb:23:68:20:d3:56:08:5d:6d:de:85:59:c4:17:47:0e: 30:5c:43:bb:34:86:8e:17:b1:52:8e:56:0d:ac:c8:38:b1:c5: f7:c4:c8:d1:be:bf:45:01:7c:35:38:04:04:47:db:f1:c2:bb: 07:eb:75:53:20:2f:56:5b:31:8b:20:3f:61:ea:8a:77:1f:90: 87:91:7c:59 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUAll+MOS+j9p9co3pCyev9Tl5GUowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUzMDE1NTYzNFoX DTI3MDUyOTE2MDEzNFowMzExMC8GA1UEAxMoMzUzNDVEMTFDNTFERTc1QkJCRTFE MDk1NUUwNTI3RTlBN0JEQ0IxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWSUc/IN6zfqObZHZ1HTqYB7EZWRqKnr+EDqgc8lEJp2TfC/2GUbTZLyan2 /cMf0GkxgByu4fTLKKxovq1VeUTr/cOZJVFT4xRPcYHTqtBwKUTkOSDmKOPivTUN iK9NHZ292UAfqgTEoWTMvM0BvAvQOjnv+h+FcVT8bRMsdUsZVQLWW7qaUlKTgPy3 D3RqikUqrdlM2oRqlkQfXAxvbD6XmvL3UsYU6+0TiBH8vti5fWfbMhrRGMOPgbx/ tNGHFmra1YQMWOJg/7Q8OHFGvzaVltLF8tt/crdF8d87sOr7A3fmHVkOEgqdo91v olL4dRr/3SAga+g16MmVZsjwa2cCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQ1NF0R xR3nW7vh0JVeBSfpp73LEjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwNjUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJA4Bg4IQMA0GCSqGSIb3DQEB CwUAA4IBAQADuzN811A1E5spUI5HZj5UBBq7cFlJQCwZ909lbinYUElVoSI3Ip+H zALdmhFon9Rsr3KUzteijfqdGysYpI8eW9dj+jZLTaaVInaQ7bXle2WAxcJKwzsa uKX7HcA6Jw9mRCecoFgHT+LjEOAx/pyOgWQxbAb+lV086UR6bePIw1e6D/RTxLAh SoNsLEnz812sApsoQNtLRNpKSNus5VsOH2AnN+ULKWBLWSmpQx9k9gltsLL9SMsj aCDTVghdbd6FWcQXRw4wXEO7NIaOF7FSjlYNrMg4scX3xMjRvr9FAXw1OAQER9vx wrsH63VTIC9WWzGLID9h6op3H5CHkXxZ -----END CERTIFICATE-----Generated at Sun Jun 14 06:30:58 2026 by rpki-client