$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140863.roa File: AS140863.roa (raw, json) Hash identifier: 90IFPwIlcht3XR5B/NL/2QC64wjWwt9qBJAR0rnfOB4= Subject key identifier: 99:3B:9C:74:69:56:DC:71:D9:C5:37:98:30:7C:4B:00:EF:AA:ED:DA Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 3F92944857C2EE5047CB92641D02064BAC122162 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140863.roa Signing time: Tue 26 May 2026 16:07:05 +0000 ROA not before: Tue 26 May 2026 16:02:05 +0000 ROA not after: Tue 25 May 2027 16:07:05 +0000 asID: 140863 IP address blocks: 240e:13:80b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:92:94:48:57:c2:ee:50:47:cb:92:64:1d:02:06:4b:ac:12:21:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 26 16:02:05 2026 GMT Not After : May 25 16:07:05 2027 GMT Subject: CN=993B9C746956DC71D9C53798307C4B00EFAAEDDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:08:5c:95:ae:85:1a:bf:a2:a9:c3:60:b0: 7e:71:81:c9:1a:b8:99:02:cb:27:e0:85:7b:f3:89: 2f:dd:41:44:d5:cd:a3:34:96:bb:35:f8:22:3d:d2: 60:86:f8:57:03:39:94:58:02:e9:35:c2:15:f0:4b: b9:c6:6a:45:30:b9:97:96:41:07:bd:5f:2b:42:18: ca:3a:37:db:ab:f4:b5:d5:10:1e:2b:51:89:a8:85: 6a:b7:b3:00:e8:cf:10:68:8b:0c:d6:47:e2:6b:00: 61:76:59:5c:f6:b6:d1:b0:bd:35:fd:a7:b1:68:b4: dd:d7:e1:30:a6:b1:00:38:88:cc:0d:14:89:f6:eb: 55:f4:28:d8:db:cb:02:0b:96:fd:22:6d:f7:17:10: bc:a9:bd:80:df:3e:8e:08:b9:e9:36:ed:95:1b:d6: 33:ae:12:3a:a9:ce:86:68:9e:84:bd:a6:18:81:1b: fd:8e:3e:e9:d0:0e:c5:53:fb:c4:4a:d7:8c:85:cc: 74:3d:f6:96:d0:5e:00:e3:87:e2:47:60:58:91:71: 27:09:06:a6:05:9c:83:a1:1a:72:ba:5d:49:e0:72: b5:e9:c6:c8:cb:09:30:ae:00:7a:60:bf:5f:d7:d6: 24:25:0d:ca:7c:1d:9d:dc:68:bf:66:a4:2f:1e:95: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3B:9C:74:69:56:DC:71:D9:C5:37:98:30:7C:4B:00:EF:AA:ED:DA X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140863.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:13:80b::/48 Signature Algorithm: sha256WithRSAEncryption a9:ec:4d:53:a1:6c:23:0f:e2:cd:da:51:5d:90:8e:06:ad:80: 35:95:2b:a5:ca:e7:fb:99:c0:52:82:8f:71:5b:1e:30:45:d7: 07:9f:4d:02:77:6a:36:e5:33:19:92:a6:d4:4e:0a:c3:68:26: e0:f5:4f:e0:af:82:6c:18:f2:ce:f7:85:eb:10:6f:a3:8c:50: 0d:3a:78:02:42:ed:17:68:7a:35:89:40:c9:29:a1:8e:6a:6a: 1e:7e:c8:0c:af:80:bf:66:77:fe:b4:ae:b1:96:06:13:2d:c2: c8:5c:89:d5:0c:70:0a:27:0d:8b:1b:a6:d2:21:38:ad:6f:d2: df:64:76:75:3c:e2:68:90:92:db:06:ae:97:8d:44:bb:fa:69: c5:31:a8:65:14:ee:20:ed:98:e1:af:19:b9:d6:d0:78:77:88: 0e:1d:c1:0c:8f:cc:ec:c5:b4:93:a0:94:48:8b:25:40:40:20: 56:35:1c:a3:24:cb:69:b2:77:b0:a3:96:4b:93:8e:f8:fb:2a: 9e:3a:a8:20:98:86:65:d6:a8:e5:d1:ed:74:07:0c:30:44:6b: 0a:00:4f:d0:28:09:6d:ea:71:ff:81:6a:9b:29:69:50:f0:69: d2:1f:38:da:ab:a5:03:38:0b:1c:4b:3b:ef:7e:e6:a6:5b:e0: e0:f9:77:9a -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUP5KUSFfC7lBHy5JkHQIGS6wSIWIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyNjE2MDIwNVoX DTI3MDUyNTE2MDcwNVowMzExMC8GA1UEAxMoOTkzQjlDNzQ2OTU2REM3MUQ5QzUz Nzk4MzA3QzRCMDBFRkFBRUREQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRLCFyVroUav6Kpw2CwfnGByRq4mQLLJ+CFe/OJL91BRNXNozSWuzX4Ij3S YIb4VwM5lFgC6TXCFfBLucZqRTC5l5ZBB71fK0IYyjo326v0tdUQHitRiaiFarez AOjPEGiLDNZH4msAYXZZXPa20bC9Nf2nsWi03dfhMKaxADiIzA0UifbrVfQo2NvL AguW/SJt9xcQvKm9gN8+jgi56TbtlRvWM64SOqnOhmiehL2mGIEb/Y4+6dAOxVP7 xErXjIXMdD32ltBeAOOH4kdgWJFxJwkGpgWcg6EacrpdSeBytenGyMsJMK4AemC/ X9fWJCUNynwdndxov2akLx6VTB0CAwEAAaOCAecwggHjMB0GA1UdDgQWBBSZO5x0 aVbccdnFN5gwfEsA76rt2jAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwODYzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJA4AEwgLMA0GCSqGSIb3DQEB CwUAA4IBAQCp7E1ToWwjD+LN2lFdkI4GrYA1lSulyuf7mcBSgo9xWx4wRdcHn00C d2o25TMZkqbUTgrDaCbg9U/gr4JsGPLO94XrEG+jjFANOngCQu0XaHo1iUDJKaGO amoefsgMr4C/Znf+tK6xlgYTLcLIXInVDHAKJw2LG6bSITitb9LfZHZ1POJokJLb Bq6XjUS7+mnFMahlFO4g7Zjhrxm51tB4d4gOHcEMj8zsxbSToJRIiyVAQCBWNRyj JMtpsnewo5ZLk474+yqeOqggmIZl1qjl0e10BwwwRGsKAE/QKAlt6nH/gWqbKWlQ 8GnSHzjaq6UDOAscSzvvfuamW+Dg+Xea -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:40 2026 by rpki-client