$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140855.roa File: AS140855.roa (raw, json) Hash identifier: pcrINzXV/Eh/b9oDYs2Wr0oRmKXgWx75GY+dSPC7WdE= Subject key identifier: 1F:D8:3B:5D:28:D8:32:30:1F:6D:6B:F8:F3:23:26:2A:A6:E8:CF:A0 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 0BE80B7ED7C5F3E059E08E1902F30B004735FDDE Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140855.roa Signing time: Tue 26 May 2026 16:07:05 +0000 ROA not before: Tue 26 May 2026 16:02:05 +0000 ROA not after: Tue 25 May 2027 16:07:05 +0000 asID: 140855 IP address blocks: 240e:13:803::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e8:0b:7e:d7:c5:f3:e0:59:e0:8e:19:02:f3:0b:00:47:35:fd:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 26 16:02:05 2026 GMT Not After : May 25 16:07:05 2027 GMT Subject: CN=1FD83B5D28D832301F6D6BF8F323262AA6E8CFA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:9b:6a:06:cc:4e:5a:6e:a2:ce:b5:49:42: 80:76:f1:b6:65:ab:e0:d1:26:45:f6:4a:a7:3d:f0: 00:31:89:fa:bc:67:c0:90:fa:8f:3e:35:33:6c:56: 46:c9:08:3f:65:33:1c:11:2c:c7:d8:6f:2e:49:61: 13:e6:8c:2c:a9:91:8d:bf:9b:05:74:be:5b:75:85: 56:7b:56:e6:37:91:b0:da:06:8d:17:b1:2c:5d:3f: ec:fa:37:75:0c:b0:d1:74:ff:a8:34:b2:f2:71:f0: 91:ae:8d:c4:24:16:b6:96:22:3c:ee:c4:90:5a:f8: 11:dc:49:f6:ec:ae:57:a4:25:69:c6:95:f2:d5:56: 61:cb:02:af:86:30:88:13:68:c6:89:f2:8f:15:67: 74:9c:a6:08:42:6b:6f:f2:9c:54:d4:03:2b:a9:c3: 65:19:c9:59:92:99:27:35:49:b0:af:1b:a2:d0:d5: 45:bc:15:7f:ad:47:0f:a5:73:c9:08:75:6a:c1:a7: 0e:a0:33:5f:bd:23:58:d5:8b:20:27:cf:84:97:53: 40:84:c2:14:91:a2:00:6b:d2:c1:26:f8:28:f0:c5: 44:9d:42:71:97:59:85:12:d9:d2:f5:3a:89:0a:f2: 34:b1:b1:ea:01:bd:54:6f:28:25:39:e4:fb:20:b8: cf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D8:3B:5D:28:D8:32:30:1F:6D:6B:F8:F3:23:26:2A:A6:E8:CF:A0 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140855.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:13:803::/48 Signature Algorithm: sha256WithRSAEncryption ab:13:4d:ee:4e:ae:d2:7f:d8:55:e2:42:66:35:25:8f:5d:c8: c4:fb:26:b0:4a:c1:eb:c0:27:ed:23:d0:bb:63:b8:96:c7:32: 57:af:76:02:f9:c7:f9:79:c3:06:f5:9f:6a:e5:ac:b9:fb:df: 51:73:ba:82:d1:1b:54:b7:f9:94:8b:7f:d5:e9:92:1b:e9:3d: 34:13:43:e4:37:56:d0:43:16:43:4f:84:76:93:86:17:e5:58: 47:39:2d:b9:bf:cc:c4:f4:eb:48:76:01:88:4d:f9:6a:ce:34: ea:66:ca:04:97:7b:48:9f:a5:e5:b8:4c:3d:42:e5:ac:86:66: 8e:4d:09:83:0a:72:0a:65:f2:00:bc:4b:95:9f:a3:0b:79:13: da:80:21:7b:1e:4c:ed:7d:f7:a6:23:73:e1:7c:78:a7:ad:9e: 0a:8c:17:9b:2f:9d:47:77:26:6c:9d:65:ed:74:a7:3f:28:9c: 42:13:79:e5:26:44:77:65:b0:c0:3e:b4:1f:88:99:31:8e:c0: de:18:b4:68:f0:16:8e:c7:b4:c2:e1:3f:99:82:75:0a:65:ad: c4:57:92:d1:87:c7:d9:37:d9:22:ab:d8:35:dc:a0:b7:a9:52: 29:d1:11:77:26:5c:15:7a:70:38:0e:e9:dd:c3:a8:86:bf:d1: 5b:c4:f9:fd -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUC+gLftfF8+BZ4I4ZAvMLAEc1/d4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyNjE2MDIwNVoX DTI3MDUyNTE2MDcwNVowMzExMC8GA1UEAxMoMUZEODNCNUQyOEQ4MzIzMDFGNkQ2 QkY4RjMyMzI2MkFBNkU4Q0ZBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmMm2oGzE5abqLOtUlCgHbxtmWr4NEmRfZKpz3wADGJ+rxnwJD6jz41M2xW RskIP2UzHBEsx9hvLklhE+aMLKmRjb+bBXS+W3WFVntW5jeRsNoGjRexLF0/7Po3 dQyw0XT/qDSy8nHwka6NxCQWtpYiPO7EkFr4EdxJ9uyuV6QlacaV8tVWYcsCr4Yw iBNoxonyjxVndJymCEJrb/KcVNQDK6nDZRnJWZKZJzVJsK8botDVRbwVf61HD6Vz yQh1asGnDqAzX70jWNWLICfPhJdTQITCFJGiAGvSwSb4KPDFRJ1CcZdZhRLZ0vU6 iQryNLGx6gG9VG8oJTnk+yC4zxkCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQf2Dtd KNgyMB9ta/jzIyYqpujPoDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwODU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJA4AEwgDMA0GCSqGSIb3DQEB CwUAA4IBAQCrE03uTq7Sf9hV4kJmNSWPXcjE+yawSsHrwCftI9C7Y7iWxzJXr3YC +cf5ecMG9Z9q5ay5+99Rc7qC0RtUt/mUi3/V6ZIb6T00E0PkN1bQQxZDT4R2k4YX 5VhHOS25v8zE9OtIdgGITflqzjTqZsoEl3tIn6XluEw9QuWshmaOTQmDCnIKZfIA vEuVn6MLeRPagCF7HkztffemI3PhfHinrZ4KjBebL51HdyZsnWXtdKc/KJxCE3nl JkR3ZbDAPrQfiJkxjsDeGLRo8BaOx7TC4T+ZgnUKZa3EV5LRh8fZN9kiq9g13KC3 qVIp0RF3JlwVenA4Dundw6iGv9FbxPn9 -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:45 2026 by rpki-client