$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140852.roa File: AS140852.roa (raw, json) Hash identifier: Doq23Jbt4LVXWKPf2FZIoujY4hebx2/1r1i3n5kRAns= Subject key identifier: C4:D2:7E:16:65:B7:99:91:82:C5:3D:B2:9C:12:E3:CE:B9:FC:23:DD Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 4F0A924219E4335B35407CF843113445704DDB39 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140852.roa Signing time: Tue 26 May 2026 16:07:05 +0000 ROA not before: Tue 26 May 2026 16:02:05 +0000 ROA not after: Tue 25 May 2027 16:07:05 +0000 asID: 140852 IP address blocks: 240e:13:800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0a:92:42:19:e4:33:5b:35:40:7c:f8:43:11:34:45:70:4d:db:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 26 16:02:05 2026 GMT Not After : May 25 16:07:05 2027 GMT Subject: CN=C4D27E1665B7999182C53DB29C12E3CEB9FC23DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:02:36:3f:40:fb:fb:fa:c5:b2:29:e9:1b: 93:2b:0f:05:1c:d5:a7:4f:fc:4f:e6:64:34:d1:a9: bc:b1:1c:ef:4e:2a:f7:b0:0a:4c:cb:34:12:bd:c2: 20:03:fb:73:91:ac:e6:cd:eb:15:df:4f:bc:8e:37: 32:da:9a:ea:f4:a7:78:78:f5:17:af:88:9d:a9:e8: 7c:9d:a6:7f:88:8e:1a:93:b4:43:5b:c0:f3:53:f3: 52:54:ef:c1:25:fd:8d:82:ff:b2:6a:46:60:e4:3c: 61:3f:8c:7b:83:ac:90:23:2f:0b:a4:f7:c2:94:c3: 8c:1e:00:3d:2b:12:f3:7e:83:ff:62:df:a2:14:cb: 43:7f:0e:79:db:07:58:49:bf:55:73:5e:8e:6c:b9: 63:53:20:a3:e2:ec:01:fd:6d:e1:a4:51:f9:5f:c0: d8:98:7a:e3:f0:6c:64:94:52:71:18:33:93:5c:1a: 57:01:89:73:49:b1:d1:65:97:fc:fc:bc:a3:e8:3c: ea:2c:a6:0c:c2:1d:f7:45:97:8e:16:7a:b2:02:5d: 62:82:e7:c5:51:a9:0d:bc:31:ca:7d:b3:c0:cb:32: 82:32:a2:53:ef:06:12:2b:18:3c:51:73:c1:a8:ac: 60:1a:ad:7f:26:e7:3a:65:ee:d3:e1:ba:4f:a8:b6: ce:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D2:7E:16:65:B7:99:91:82:C5:3D:B2:9C:12:E3:CE:B9:FC:23:DD X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140852.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:13:800::/48 Signature Algorithm: sha256WithRSAEncryption 81:42:9a:1b:25:cf:5a:86:4a:e2:1f:07:51:1f:dc:d7:3c:e3: 19:1b:5b:3b:13:aa:56:4f:62:6e:f4:32:f7:d7:ae:a7:f9:7f: 8f:43:47:1a:37:c8:e8:36:1f:fe:0d:6b:b7:d3:20:c1:6d:86: bf:21:2d:f0:78:92:79:2c:78:72:ed:82:66:fd:02:bf:82:c4: ef:8f:ca:89:b6:a9:b7:44:08:51:70:57:16:93:5e:27:6a:d2: 00:a9:fa:1f:0a:ef:ce:41:9d:0c:af:0b:bf:d5:8d:8e:18:44: e9:b1:98:8d:6f:0c:36:9e:7f:e8:3b:c7:50:ae:51:b4:b7:07: af:2b:89:12:1f:ea:1a:50:fe:de:2d:6e:eb:1d:4b:7f:1e:c6: 26:ea:1f:21:b0:27:bb:6e:b2:03:a4:97:c3:8d:ed:b6:0e:84: 7d:9f:84:81:7b:72:ed:d8:85:38:57:07:18:a3:7b:2c:21:ff: 93:c4:1d:7d:38:88:9c:c6:80:e6:ca:e0:56:4f:bd:58:c8:a4: dd:bb:32:62:94:ba:64:96:cc:8e:20:32:cf:3f:51:ed:31:3d: 49:88:66:a2:41:4c:54:5e:82:7e:f6:b9:14:45:3b:0b:ea:47: 1a:e0:bc:88:de:72:60:6d:26:40:22:8e:25:6d:61:0d:3b:54: 58:25:2f:5e -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUTwqSQhnkM1s1QHz4QxE0RXBN2zkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyNjE2MDIwNVoX DTI3MDUyNTE2MDcwNVowMzExMC8GA1UEAxMoQzREMjdFMTY2NUI3OTk5MTgyQzUz REIyOUMxMkUzQ0VCOUZDMjNERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+iAjY/QPv7+sWyKekbkysPBRzVp0/8T+ZkNNGpvLEc704q97AKTMs0Er3C IAP7c5Gs5s3rFd9PvI43Mtqa6vSneHj1F6+InanofJ2mf4iOGpO0Q1vA81PzUlTv wSX9jYL/smpGYOQ8YT+Me4OskCMvC6T3wpTDjB4APSsS836D/2LfohTLQ38OedsH WEm/VXNejmy5Y1Mgo+LsAf1t4aRR+V/A2Jh64/BsZJRScRgzk1waVwGJc0mx0WWX /Py8o+g86iymDMId90WXjhZ6sgJdYoLnxVGpDbwxyn2zwMsygjKiU+8GEisYPFFz waisYBqtfybnOmXu0+G6T6i2zgcCAwEAAaOCAecwggHjMB0GA1UdDgQWBBTE0n4W ZbeZkYLFPbKcEuPOufwj3TAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwODUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJA4AEwgAMA0GCSqGSIb3DQEB CwUAA4IBAQCBQpobJc9ahkriHwdRH9zXPOMZG1s7E6pWT2Ju9DL3166n+X+PQ0ca N8joNh/+DWu30yDBbYa/IS3weJJ5LHhy7YJm/QK/gsTvj8qJtqm3RAhRcFcWk14n atIAqfofCu/OQZ0Mrwu/1Y2OGETpsZiNbww2nn/oO8dQrlG0twevK4kSH+oaUP7e LW7rHUt/HsYm6h8hsCe7brIDpJfDje22DoR9n4SBe3Lt2IU4VwcYo3ssIf+TxB19 OIicxoDmyuBWT71YyKTduzJilLpklsyOIDLPP1HtMT1JiGaiQUxUXoJ+9rkURTsL 6kca4LyI3nJgbSZAIo4lbWENO1RYJS9e -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:38 2026 by rpki-client