$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140856.roa File: AS140856.roa (raw, json) Hash identifier: iOxqxL5QN5Ss/A5CH7LqY7i9SaQLwCGgdAIOKsQ0bYI= Subject key identifier: 59:49:75:D3:5F:A3:00:AB:F5:0F:32:D0:08:98:B7:5A:78:8C:86:55 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 68AB3E84206033F3C0944BB6C49E473B7593D855 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140856.roa Signing time: Tue 26 May 2026 16:07:05 +0000 ROA not before: Tue 26 May 2026 16:02:05 +0000 ROA not after: Tue 25 May 2027 16:07:05 +0000 asID: 140856 IP address blocks: 240e:13:804::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ab:3e:84:20:60:33:f3:c0:94:4b:b6:c4:9e:47:3b:75:93:d8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 26 16:02:05 2026 GMT Not After : May 25 16:07:05 2027 GMT Subject: CN=594975D35FA300ABF50F32D00898B75A788C8655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:67:51:6a:be:74:bd:b1:15:29:96:d6:3b: 7d:3e:23:cf:45:0e:46:5e:57:f8:ed:c8:76:79:25: 23:77:fb:b2:7b:b1:ec:a0:9c:54:29:b8:93:af:c7: 77:fe:07:51:c2:e5:a3:be:4c:6c:dd:97:4e:be:7d: 41:d6:91:0d:3b:39:22:0f:5f:c7:bf:14:73:ab:ae: 3c:2a:9a:e2:e4:1f:b7:1c:0e:31:44:55:36:f6:c4: d6:50:4b:7b:f7:e4:b2:0b:cc:b8:dc:69:d2:99:45: 45:29:a3:0a:89:27:5f:8b:46:fa:f8:25:22:c7:df: 3e:85:52:27:a6:f7:2a:c0:66:4f:b6:36:27:16:02: 55:9f:c6:a7:a8:c4:be:d1:2f:60:d6:e9:0f:04:af: 78:ba:0b:59:2e:8c:44:1a:a5:83:e9:45:c8:c0:19: 06:c6:bf:51:0d:0d:cc:1e:f2:5b:20:48:8d:22:a7: 6e:99:78:d7:35:e1:74:26:5e:86:4a:2e:2d:9b:a1: 7a:24:e7:10:bc:c9:fe:39:98:39:36:9e:0b:d9:02: c0:94:3e:e3:31:16:fe:7b:a7:69:af:b5:d4:0a:26: 1a:80:90:6f:7d:eb:e4:e5:7c:9f:c1:56:59:4b:11: ef:c3:c1:33:00:ae:45:59:d4:7b:9c:86:26:f9:81: 8f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:49:75:D3:5F:A3:00:AB:F5:0F:32:D0:08:98:B7:5A:78:8C:86:55 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140856.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:13:804::/48 Signature Algorithm: sha256WithRSAEncryption 83:02:36:16:bf:9c:2b:c6:bf:cd:2a:a9:97:87:1f:bf:13:93: 30:2f:4b:c6:3e:7a:a1:0f:c8:bb:b2:51:50:76:85:71:fe:d1: 87:c6:fe:d0:3b:9a:1f:79:bf:ab:9e:82:20:c1:90:82:80:32: 2e:ca:bd:a5:c8:75:74:63:95:10:44:7f:7d:43:36:11:f8:c2: 71:a8:de:20:61:85:01:f9:2d:df:8c:96:35:ac:77:fa:5a:44: 3a:81:bc:b0:fd:f5:ef:a3:3a:2c:fd:bb:55:6b:51:1b:f1:98: b5:99:74:15:8a:f9:f9:3f:ea:3c:3e:46:5d:e1:38:1d:2c:2b: 1d:25:14:49:2a:ff:15:e1:0d:dc:4c:be:89:9c:08:02:91:bb: 85:76:9a:17:73:8d:2a:03:8f:a5:b6:d9:65:6b:73:02:93:71: 10:de:01:e1:a9:04:ac:2d:b2:c4:92:5b:86:f8:99:31:a7:90: 47:fd:61:de:d1:5c:aa:c1:9d:49:59:83:dc:3f:37:1f:01:06: 21:ea:ca:53:2f:06:67:f4:77:91:66:ed:ec:83:88:24:be:10: 0f:c3:df:80:e0:6a:d8:cf:c4:14:e1:f7:5b:64:3b:c5:00:b9: e8:81:8f:41:69:55:ef:c5:75:ae:db:6c:f6:e3:34:11:0a:45: a8:28:33:1f -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUaKs+hCBgM/PAlEu2xJ5HO3WT2FUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyNjE2MDIwNVoX DTI3MDUyNTE2MDcwNVowMzExMC8GA1UEAxMoNTk0OTc1RDM1RkEzMDBBQkY1MEYz MkQwMDg5OEI3NUE3ODhDODY1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALslZ1FqvnS9sRUpltY7fT4jz0UORl5X+O3IdnklI3f7snux7KCcVCm4k6/H d/4HUcLlo75MbN2XTr59QdaRDTs5Ig9fx78Uc6uuPCqa4uQftxwOMURVNvbE1lBL e/fksgvMuNxp0plFRSmjCoknX4tG+vglIsffPoVSJ6b3KsBmT7Y2JxYCVZ/Gp6jE vtEvYNbpDwSveLoLWS6MRBqlg+lFyMAZBsa/UQ0NzB7yWyBIjSKnbpl41zXhdCZe hkouLZuheiTnELzJ/jmYOTaeC9kCwJQ+4zEW/nunaa+11AomGoCQb33r5OV8n8FW WUsR78PBMwCuRVnUe5yGJvmBj3UCAwEAAaOCAecwggHjMB0GA1UdDgQWBBRZSXXT X6MAq/UPMtAImLdaeIyGVTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwODU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJA4AEwgEMA0GCSqGSIb3DQEB CwUAA4IBAQCDAjYWv5wrxr/NKqmXhx+/E5MwL0vGPnqhD8i7slFQdoVx/tGHxv7Q O5ofeb+rnoIgwZCCgDIuyr2lyHV0Y5UQRH99QzYR+MJxqN4gYYUB+S3fjJY1rHf6 WkQ6gbyw/fXvozos/btVa1Eb8Zi1mXQVivn5P+o8PkZd4TgdLCsdJRRJKv8V4Q3c TL6JnAgCkbuFdpoXc40qA4+lttlla3MCk3EQ3gHhqQSsLbLEkluG+Jkxp5BH/WHe 0VyqwZ1JWYPcPzcfAQYh6spTLwZn9HeRZu3sg4gkvhAPw9+A4GrYz8QU4fdbZDvF ALnogY9BaVXvxXWu22z24zQRCkWoKDMf -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:34 2026 by rpki-client