$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141025.roa File: AS141025.roa (raw, json) Hash identifier: fSJ5KEG7DdnYyjv877HZpJEAmH0Xs3dPHBUfZTeoCIg= Subject key identifier: A4:1A:34:3C:A3:20:44:C6:15:17:F2:DD:53:9B:B2:2D:5D:7D:E9:18 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 4243C98EB4C237F3CFE7F059E7B2CE6081622758 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141025.roa Signing time: Thu 04 Jun 2026 16:15:31 +0000 ROA not before: Thu 04 Jun 2026 16:10:31 +0000 ROA not after: Thu 03 Jun 2027 16:15:31 +0000 asID: 141025 IP address blocks: 59.46.34.0/24 maxlen: 24 123.177.56.0/22 maxlen: 22 240e:60c:8000::/48 maxlen: 48 240e:981:240c::/48 maxlen: 48 240e:981:2500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:43:c9:8e:b4:c2:37:f3:cf:e7:f0:59:e7:b2:ce:60:81:62:27:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 4 16:10:31 2026 GMT Not After : Jun 3 16:15:31 2027 GMT Subject: CN=A41A343CA32044C61517F2DD539BB22D5D7DE918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:3d:7c:1a:50:78:73:3c:d2:6c:11:50:48: 7a:52:44:ec:68:21:c5:7e:77:95:83:ff:b1:42:0a: dc:ee:57:0f:e7:c8:32:66:9f:b7:a6:9c:34:e3:65: cc:17:a8:6a:6f:0b:50:77:4b:98:06:f2:f1:7f:5c: 08:d1:ef:a4:2e:55:9a:38:e0:ec:44:f1:c1:3d:85: a3:28:3f:73:8d:29:28:99:27:79:8f:34:8c:5c:4c: 91:e2:d9:dc:92:b4:0b:21:b3:b5:24:5b:06:58:97: a3:61:f7:77:de:d2:98:03:86:d3:fd:b8:2f:e7:97: d5:68:ea:50:7c:e5:5f:a9:fd:6a:09:c9:e9:09:fc: 52:f4:45:64:64:eb:fb:c0:14:92:b4:f9:2f:5c:18: 9d:ee:ce:3e:06:6e:eb:6a:c9:b1:74:f0:d5:4d:e6: 3e:bb:b1:6f:be:59:b4:5a:93:ab:21:e3:bc:f1:4a: 2c:72:49:d2:50:c2:67:e8:53:99:32:3a:1f:68:9f: b5:18:b6:c9:cd:05:f6:c2:6b:7a:62:21:09:fd:86: c0:b4:5d:2e:18:89:92:37:b2:10:0e:24:af:b0:a1: c7:38:8f:49:01:ef:db:01:51:69:ce:76:0d:9a:15: 5b:51:df:2a:18:a7:be:ef:c2:4c:ad:d9:36:79:5d: 5b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1A:34:3C:A3:20:44:C6:15:17:F2:DD:53:9B:B2:2D:5D:7D:E9:18 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.46.34.0/24 123.177.56.0/22 IPv6: 240e:60c:8000::/48 240e:981:240c::/48 240e:981:2500::/40 Signature Algorithm: sha256WithRSAEncryption 80:f0:fc:5e:44:dd:75:41:ae:92:c7:c4:a3:5c:ac:fd:68:47: 06:03:60:73:3b:75:dd:d1:1a:c2:00:95:df:ec:34:d4:d6:ef: a4:f3:94:02:54:20:3d:5f:7e:4f:ab:97:f3:6f:41:e1:65:a0: 7c:e4:35:76:79:37:2a:9e:8f:c7:9a:17:47:27:5b:fd:62:99: f9:f5:c5:24:40:9e:61:88:66:a6:ef:7a:94:3d:08:98:57:78: 8b:31:56:fe:de:94:30:50:b8:74:df:71:f6:c5:69:99:1c:94: 8f:f8:7b:ad:d8:5c:86:55:fb:11:7e:08:e6:1f:31:bb:c5:c2: 5e:37:f9:b3:d8:a4:c1:98:ba:16:f3:f5:4d:cb:ac:85:17:a6: 72:21:1b:60:6e:e5:95:1e:2f:49:3e:e9:eb:3c:c1:58:b2:cc: 49:87:63:a0:ab:96:6f:87:d9:c1:a1:de:4a:9c:04:ff:10:40: 3b:a3:09:56:6e:31:30:d8:d9:16:78:ce:94:90:71:ea:76:40: a6:37:57:24:14:04:e4:10:cd:d2:6f:4a:6a:81:d0:3c:1e:b8: 4c:7b:6e:de:9f:10:be:1b:6c:93:58:df:46:11:a3:1f:92:e9: f1:5c:94:bf:da:ac:62:97:70:6a:51:e4:a6:67:f8:18:2d:84: ef:57:df:75 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUQkPJjrTCN/PP5/BZ57LOYIFiJ1gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwNDE2MTAzMVoX DTI3MDYwMzE2MTUzMVowMzExMC8GA1UEAxMoQTQxQTM0M0NBMzIwNDRDNjE1MTdG MkRENTM5QkIyMkQ1RDdERTkxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbuPXwaUHhzPNJsEVBIelJE7GghxX53lYP/sUIK3O5XD+fIMmaft6acNONl zBeoam8LUHdLmAby8X9cCNHvpC5Vmjjg7ETxwT2Foyg/c40pKJkneY80jFxMkeLZ 3JK0CyGztSRbBliXo2H3d97SmAOG0/24L+eX1WjqUHzlX6n9agnJ6Qn8UvRFZGTr +8AUkrT5L1wYne7OPgZu62rJsXTw1U3mPruxb75ZtFqTqyHjvPFKLHJJ0lDCZ+hT mTI6H2iftRi2yc0F9sJremIhCf2GwLRdLhiJkjeyEA4kr7ChxziPSQHv2wFRac52 DZoVW1HfKhinvu/CTK3ZNnldWx8CAwEAAaOCAgwwggIIMB0GA1UdDgQWBBSkGjQ8 oyBExhUX8t1Tm7ItXX3pGDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQxMDI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MEcGCCsGAQUFBwEHAQH/BDgwNjASBAIAATAMAwQAOy4iAwQCe7E4MCAEAgACMBoD BwAkDgYMgAADBwAkDgmBJAwDBgAkDgmBJTANBgkqhkiG9w0BAQsFAAOCAQEAgPD8 XkTddUGuksfEo1ys/WhHBgNgczt13dEawgCV3+w01NbvpPOUAlQgPV9+T6uX829B 4WWgfOQ1dnk3Kp6Px5oXRydb/WKZ+fXFJECeYYhmpu96lD0ImFd4izFW/t6UMFC4 dN9x9sVpmRyUj/h7rdhchlX7EX4I5h8xu8XCXjf5s9ikwZi6FvP1TcushRemciEb YG7llR4vST7p6zzBWLLMSYdjoKuWb4fZwaHeSpwE/xBAO6MJVm4xMNjZFnjOlJBx 6nZApjdXJBQE5BDN0m9KaoHQPB64THtu3p8Qvhtsk1jfRhGjH5Lp8VyUv9qsYpdw alHkpmf4GC2E71ffdQ== -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:38 2026 by rpki-client