$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140854.roa File: AS140854.roa (raw, json) Hash identifier: fVo/djF3XKm5nFEjIGyfLt+whv5PdjtkjsGbVCIoqaw= Subject key identifier: 29:60:4F:0C:D4:52:39:C9:AE:85:FE:8C:57:38:C3:23:37:C4:02:05 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 746F2C0C710131C471FDA3E76278C2D7A0EE0CF6 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140854.roa Signing time: Tue 26 May 2026 16:07:05 +0000 ROA not before: Tue 26 May 2026 16:02:05 +0000 ROA not after: Tue 25 May 2027 16:07:05 +0000 asID: 140854 IP address blocks: 240e:13:802::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6f:2c:0c:71:01:31:c4:71:fd:a3:e7:62:78:c2:d7:a0:ee:0c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 26 16:02:05 2026 GMT Not After : May 25 16:07:05 2027 GMT Subject: CN=29604F0CD45239C9AE85FE8C5738C32337C40205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:03:66:2a:23:ee:e8:ef:34:ba:a1:51:71:ca: 4c:d6:f4:b3:7d:f9:22:3a:aa:7e:23:96:2b:35:ff: ed:54:85:b8:9a:46:93:0e:50:58:c4:46:20:a2:5a: ec:c2:6f:b9:c4:46:4f:41:0f:76:e4:87:d3:da:62: 8d:55:dc:09:eb:bb:41:1b:d0:04:1e:5f:d1:f1:6f: 0e:a6:0e:ed:d4:b9:86:45:9e:82:9b:82:ea:51:4e: b0:db:75:c3:0a:46:07:10:cb:0e:50:96:c7:f9:82: e2:ca:42:b0:1a:ab:71:01:fa:66:31:aa:ee:26:e1: 2e:f2:1d:aa:ea:5d:bc:b4:8a:a4:36:97:32:51:9d: a6:f2:d5:ad:b4:69:6d:f4:35:2e:6e:d6:dc:db:90: 74:0b:25:d4:9e:7a:05:64:40:ac:3c:9d:18:2f:5b: 99:f6:36:4a:65:41:e1:5c:70:cb:82:19:4d:93:c0: 29:7a:f6:bb:d9:46:56:cc:17:c9:cd:94:88:bb:e0: 85:d1:a1:af:15:76:ca:7b:40:14:09:2f:2c:5e:2a: 36:83:24:4e:32:82:ae:a2:76:57:fe:fe:c2:cd:97: 9d:9c:d6:e4:ae:45:e0:66:cd:15:62:c7:f4:56:80: ec:1a:4e:78:00:a0:44:35:97:82:ff:95:ab:72:50: 0d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:60:4F:0C:D4:52:39:C9:AE:85:FE:8C:57:38:C3:23:37:C4:02:05 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140854.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:13:802::/48 Signature Algorithm: sha256WithRSAEncryption 37:bf:d7:93:9c:e2:86:cc:df:dd:4c:91:bf:de:6b:c3:7f:56: cc:33:72:e1:cf:6c:87:16:57:3f:83:62:93:c5:2b:80:dc:40: c1:25:77:80:0c:2a:76:c0:2f:22:e2:91:87:4d:ef:4c:d8:82: 1d:f9:f6:6f:9d:02:8d:de:a0:97:27:7a:05:1f:4f:6b:a4:8a: 1f:4b:9a:e3:37:d7:55:9b:a2:d7:6a:6f:57:60:05:3d:dd:c0: 72:e2:91:30:fb:39:ba:2d:45:2f:e0:d0:94:44:3e:f3:5d:c7: 5e:4e:ff:81:af:e9:a3:d0:0b:c4:47:7a:94:0e:0f:6f:a6:0f: 2c:88:e9:6a:5b:d9:0b:40:56:5f:fa:49:1a:5f:9e:7f:e5:ec: 3d:12:89:7d:14:31:c1:74:26:18:e9:4f:19:5c:bc:50:9b:8e: 89:6a:e2:13:52:60:01:84:95:c8:e8:e7:43:95:ad:06:70:c4: 6f:26:4a:31:9b:cf:4d:a6:b1:09:3b:de:01:b8:2e:d1:21:d4: 99:53:f0:17:57:40:0a:f3:4b:2e:bb:fb:cd:70:9c:e1:42:4a: e1:35:c5:43:b5:bc:2b:5c:72:b2:c5:ef:57:0e:fc:9e:ad:a6: 3d:6b:83:37:1f:2c:8f:0b:6a:6e:6e:82:52:c1:9b:bf:50:2b: e3:23:2e:3d -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUdG8sDHEBMcRx/aPnYnjC16DuDPYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyNjE2MDIwNVoX DTI3MDUyNTE2MDcwNVowMzExMC8GA1UEAxMoMjk2MDRGMENENDUyMzlDOUFFODVG RThDNTczOEMzMjMzN0M0MDIwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPADZioj7ujvNLqhUXHKTNb0s335IjqqfiOWKzX/7VSFuJpGkw5QWMRGIKJa 7MJvucRGT0EPduSH09pijVXcCeu7QRvQBB5f0fFvDqYO7dS5hkWegpuC6lFOsNt1 wwpGBxDLDlCWx/mC4spCsBqrcQH6ZjGq7ibhLvIdqupdvLSKpDaXMlGdpvLVrbRp bfQ1Lm7W3NuQdAsl1J56BWRArDydGC9bmfY2SmVB4Vxwy4IZTZPAKXr2u9lGVswX yc2UiLvghdGhrxV2yntAFAkvLF4qNoMkTjKCrqJ2V/7+ws2XnZzW5K5F4GbNFWLH 9FaA7BpOeACgRDWXgv+Vq3JQDfcCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQpYE8M 1FI5ya6F/oxXOMMjN8QCBTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwODU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJA4AEwgCMA0GCSqGSIb3DQEB CwUAA4IBAQA3v9eTnOKGzN/dTJG/3mvDf1bMM3Lhz2yHFlc/g2KTxSuA3EDBJXeA DCp2wC8i4pGHTe9M2IId+fZvnQKN3qCXJ3oFH09rpIofS5rjN9dVm6LXam9XYAU9 3cBy4pEw+zm6LUUv4NCURD7zXcdeTv+Br+mj0AvER3qUDg9vpg8siOlqW9kLQFZf +kkaX55/5ew9Eol9FDHBdCYY6U8ZXLxQm46JauITUmABhJXI6OdDla0GcMRvJkox m89NprEJO94BuC7RIdSZU/AXV0AK80suu/vNcJzhQkrhNcVDtbwrXHKyxe9XDvye raY9a4M3HyyPC2puboJSwZu/UCvjIy49 -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:42 2026 by rpki-client