$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140858.roa File: AS140858.roa (raw, json) Hash identifier: MBa6qy9/WEEWzpk9nACY46LoS/iT2uOzKL3LENyu+pY= Subject key identifier: 68:06:75:8B:A3:FB:6C:38:1C:D9:3C:E1:D6:90:FC:78:2A:0C:26:6C Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 6463A2661414FB04B39753A9F840F1537454D955 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140858.roa Signing time: Tue 26 May 2026 16:07:05 +0000 ROA not before: Tue 26 May 2026 16:02:05 +0000 ROA not after: Tue 25 May 2027 16:07:05 +0000 asID: 140858 IP address blocks: 240e:13:806::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:63:a2:66:14:14:fb:04:b3:97:53:a9:f8:40:f1:53:74:54:d9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 26 16:02:05 2026 GMT Not After : May 25 16:07:05 2027 GMT Subject: CN=6806758BA3FB6C381CD93CE1D690FC782A0C266C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:d1:20:fc:23:e4:a0:82:5d:94:91:3f:91: 02:0b:dd:8e:aa:f2:c8:a2:66:92:30:11:03:16:26: e3:57:85:2b:b7:0d:bf:72:cd:eb:9a:3b:c8:6d:b2: 6c:c8:a4:51:4f:b8:fe:b7:95:da:77:f7:ce:d8:22: 2f:16:e8:f3:de:12:5c:0a:38:5f:90:2d:dc:02:73: 27:f3:df:23:87:8f:eb:a3:20:98:c0:c4:13:3d:64: 54:1c:26:c5:15:ae:33:a0:fa:fe:c7:ca:b4:0d:22: cf:37:97:ea:29:7c:76:66:ac:09:0e:98:9b:a1:eb: 59:f3:c8:b4:8f:25:ba:6c:d4:53:e1:13:89:07:48: f1:15:85:4b:45:69:78:45:14:7b:ca:e7:bf:73:34: 14:86:aa:e0:03:4f:35:cd:b8:79:8b:1c:82:0d:86: b0:a3:75:9c:a8:21:79:b3:58:69:63:c2:78:ef:64: 67:1f:56:03:52:85:aa:34:27:87:9c:ad:c3:3e:7e: 11:4f:d5:60:1b:02:70:58:3f:a7:9e:53:0a:f6:03: a6:15:b6:27:b1:32:19:4c:cf:b5:c7:71:c9:f5:46: 10:a8:7d:aa:17:b2:c9:96:58:59:84:75:e4:44:9a: b2:d0:71:be:72:6c:7c:68:91:79:b7:35:2b:e6:30: c3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:06:75:8B:A3:FB:6C:38:1C:D9:3C:E1:D6:90:FC:78:2A:0C:26:6C X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140858.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:13:806::/48 Signature Algorithm: sha256WithRSAEncryption 75:df:a4:e2:12:fa:8d:c3:86:fa:19:57:cb:18:95:e2:b1:9b: c7:8d:25:c8:5d:85:a8:d6:77:a3:15:94:ac:44:dc:77:ee:18: 69:52:8c:2f:3d:f0:7b:3e:bf:d4:80:1e:7a:e0:ae:ba:bb:1c: 0d:05:7d:4a:c7:fb:66:b4:fc:b6:c8:24:c9:92:af:7a:9b:74: 6a:eb:da:92:c0:ee:53:60:ca:cb:df:e1:50:e6:ef:cb:24:9a: db:dd:4c:aa:30:83:59:50:62:bb:1d:00:a9:8e:db:4f:9a:48: a1:44:ad:e6:9d:8e:ed:a3:eb:33:56:35:9b:3a:2e:2e:0a:67: c8:73:70:bb:57:6c:3d:45:a1:21:c0:4c:81:a8:c1:2a:4d:c3: af:5a:f5:28:d9:b9:f0:ed:b9:0c:7a:fe:ba:f5:91:73:7d:1d: 2b:08:6a:a4:40:1f:20:d7:f0:b1:dc:9f:bd:c6:d8:12:8f:fe: 51:ec:a4:c8:7c:09:51:ed:0a:70:78:c4:7e:3a:75:0f:c8:d4: 1d:aa:69:9c:22:64:da:5a:4e:07:3f:35:ad:ac:23:26:aa:ac: 44:16:62:fb:1f:b8:1b:e3:29:a0:53:fd:a1:60:34:7f:38:15: b7:92:52:91:ff:c7:96:d6:e6:2a:8a:06:fe:ce:b3:7f:bb:f4: d5:73:21:56 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUZGOiZhQU+wSzl1Op+EDxU3RU2VUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyNjE2MDIwNVoX DTI3MDUyNTE2MDcwNVowMzExMC8GA1UEAxMoNjgwNjc1OEJBM0ZCNkMzODFDRDkz Q0UxRDY5MEZDNzgyQTBDMjY2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwS0SD8I+Sggl2UkT+RAgvdjqryyKJmkjARAxYm41eFK7cNv3LN65o7yG2y bMikUU+4/reV2nf3ztgiLxbo894SXAo4X5At3AJzJ/PfI4eP66MgmMDEEz1kVBwm xRWuM6D6/sfKtA0izzeX6il8dmasCQ6Ym6HrWfPItI8lumzUU+ETiQdI8RWFS0Vp eEUUe8rnv3M0FIaq4ANPNc24eYscgg2GsKN1nKghebNYaWPCeO9kZx9WA1KFqjQn h5ytwz5+EU/VYBsCcFg/p55TCvYDphW2J7EyGUzPtcdxyfVGEKh9qheyyZZYWYR1 5ESastBxvnJsfGiRebc1K+YwwwECAwEAAaOCAecwggHjMB0GA1UdDgQWBBRoBnWL o/tsOBzZPOHWkPx4KgwmbDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwODU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJA4AEwgGMA0GCSqGSIb3DQEB CwUAA4IBAQB136TiEvqNw4b6GVfLGJXisZvHjSXIXYWo1nejFZSsRNx37hhpUowv PfB7Pr/UgB564K66uxwNBX1Kx/tmtPy2yCTJkq96m3Rq69qSwO5TYMrL3+FQ5u/L JJrb3UyqMINZUGK7HQCpjttPmkihRK3mnY7to+szVjWbOi4uCmfIc3C7V2w9RaEh wEyBqMEqTcOvWvUo2bnw7bkMev669ZFzfR0rCGqkQB8g1/Cx3J+9xtgSj/5R7KTI fAlR7QpweMR+OnUPyNQdqmmcImTaWk4HPzWtrCMmqqxEFmL7H7gb4ymgU/2hYDR/ OBW3klKR/8eW1uYqigb+zrN/u/TVcyFW -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:36 2026 by rpki-client