$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS140903.roa File: AS140903.roa (raw, json) Hash identifier: iyz26ug9khgPrNNhJtEuOhWmlszHQlfbJTsEIMCRpnM= Subject key identifier: BC:22:B1:06:70:7D:D1:12:5D:36:78:19:AE:E6:4D:7D:A9:03:29:D6 Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Certificate serial: 153B5FB08EB6C0552FFDF135CBB498CF919D41FB Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS140903.roa Signing time: Sun 17 May 2026 10:00:01 +0000 ROA not before: Sun 17 May 2026 09:55:01 +0000 ROA not after: Sun 16 May 2027 10:00:01 +0000 asID: 140903 IP address blocks: 114.111.16.0/20 maxlen: 24 240c:409f:1000::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3b:5f:b0:8e:b6:c0:55:2f:fd:f1:35:cb:b4:98:cf:91:9d:41:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Validity Not Before: May 17 09:55:01 2026 GMT Not After : May 16 10:00:01 2027 GMT Subject: CN=BC22B106707DD1125D367819AEE64D7DA90329D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:70:9e:40:98:75:15:55:56:91:a4:96:25: 86:99:c1:b8:dd:76:49:97:25:e8:23:58:66:43:af: 16:9f:68:39:51:46:dd:33:66:f0:c5:20:9f:82:de: 88:c6:6f:7d:ef:1a:ad:e5:f0:96:f9:fd:33:cd:cd: 59:80:9a:d7:9f:fe:ac:7d:6c:22:e9:3c:31:e0:12: 14:13:01:dc:15:2f:f4:a8:d9:c2:fa:8c:b0:62:a9: ec:dd:b9:97:71:4e:55:34:5d:dc:fa:37:ed:32:3e: c0:b6:b3:f7:62:4b:c4:85:ce:44:31:98:89:e6:ad: 11:4a:ec:a3:48:ed:79:0f:3a:90:b9:d3:82:e4:89: 32:40:11:42:00:08:00:bb:66:9f:dd:23:ce:7a:12: 19:ea:45:90:71:8e:0b:cf:fa:71:6a:19:81:46:d8: f9:16:af:89:13:53:50:31:d3:b9:6f:a5:01:e9:29: 9a:c2:9c:f1:b5:6f:4a:eb:8d:22:16:9c:19:3d:00: f4:92:a7:3c:ac:9c:2b:0f:3b:93:13:60:52:b1:92: df:2e:08:c3:4a:96:ab:ef:fe:67:24:e0:08:44:eb: 18:55:e6:7b:ea:72:07:e1:9c:f2:54:ec:d3:0a:bf: 6a:5e:fc:41:1d:5a:15:94:a3:cc:5e:fb:3d:8c:a4: f0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:22:B1:06:70:7D:D1:12:5D:36:78:19:AE:E6:4D:7D:A9:03:29:D6 X509v3 Authority Key Identifier: keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS140903.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.111.16.0/20 IPv6: 240c:409f:1000::/47 Signature Algorithm: sha256WithRSAEncryption 8e:99:fb:49:3e:a4:c1:0e:78:21:2e:99:83:c7:4a:bf:2f:fb: 07:cd:f2:e5:91:07:69:fb:74:27:aa:be:89:04:49:89:5d:d3: 51:8e:40:bf:17:41:c0:e5:65:7a:54:fb:40:91:61:8d:53:60: 06:aa:e0:4b:d6:12:c0:f4:67:f8:fe:f9:bb:7e:50:16:27:44: 30:24:8d:48:d6:a4:a6:b1:c4:d1:d7:68:10:7d:81:e7:13:bc: 6b:ae:46:96:88:10:4b:d4:df:c1:88:3f:68:e3:44:12:05:13: 0f:4c:88:eb:d3:01:d2:9d:06:00:80:ca:42:5d:b4:5c:89:de: 7a:1a:5c:6f:0a:68:ca:7f:81:e3:00:d0:09:f1:b8:dc:80:fd: 06:b1:98:c1:71:b8:f1:2e:0e:a0:67:49:a6:ac:35:27:56:cf: c3:f9:a3:e3:48:ec:27:46:93:69:25:63:d6:2e:1f:ca:36:2a: 00:ed:8c:18:2c:ff:f4:34:ce:96:20:07:01:32:04:7c:3b:62: 9e:7c:ad:1c:92:1a:e1:b8:ad:a8:fe:5a:40:c2:02:7c:dd:ef: 84:d2:26:1a:db:86:66:13:82:5e:42:99:1a:17:d8:80:7e:98: 8f:29:57:61:a6:47:b8:f1:42:1c:c0:6c:32:e7:69:ad:26:4b: 8d:33:68:07 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUFTtfsI62wFUv/fE1y7SYz5GdQfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB OEVCQTcwRTAeFw0yNjA1MTcwOTU1MDFaFw0yNzA1MTYxMDAwMDFaMDMxMTAvBgNV BAMTKEJDMjJCMTA2NzA3REQxMTI1RDM2NzgxOUFFRTY0RDdEQTkwMzI5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5nCeQJh1FVVWkaSWJYaZwbjd dkmXJegjWGZDrxafaDlRRt0zZvDFIJ+C3ojGb33vGq3l8Jb5/TPNzVmAmtef/qx9 bCLpPDHgEhQTAdwVL/So2cL6jLBiqezduZdxTlU0Xdz6N+0yPsC2s/diS8SFzkQx mInmrRFK7KNI7XkPOpC504LkiTJAEUIACAC7Zp/dI856EhnqRZBxjgvP+nFqGYFG 2PkWr4kTU1Ax07lvpQHpKZrCnPG1b0rrjSIWnBk9APSSpzysnCsPO5MTYFKxkt8u CMNKlqvv/mck4AhE6xhV5nvqcgfhnPJU7NMKv2pe/EEdWhWUo8xe+z2MpPB3AgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUvCKxBnB90RJdNngZruZNfakDKdYwHwYDVR0j BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BUzE0MDkwMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQC AAEwBgMEBHJvEDAPBAIAAjAJAwcBJAxAnxAAMA0GCSqGSIb3DQEBCwUAA4IBAQCO mftJPqTBDnghLpmDx0q/L/sHzfLlkQdp+3Qnqr6JBEmJXdNRjkC/F0HA5WV6VPtA kWGNU2AGquBL1hLA9Gf4/vm7flAWJ0QwJI1I1qSmscTR12gQfYHnE7xrrkaWiBBL 1N/BiD9o40QSBRMPTIjr0wHSnQYAgMpCXbRcid56GlxvCmjKf4HjANAJ8bjcgP0G sZjBcbjxLg6gZ0mmrDUnVs/D+aPjSOwnRpNpJWPWLh/KNioA7YwYLP/0NM6WIAcB MgR8O2KefK0ckhrhuK2o/lpAwgJ83e+E0iYa24ZmE4JeQpkaF9iAfpiPKVdhpke4 8UIcwGwy52mtJkuNM2gH -----END CERTIFICATE-----Generated at Fri May 29 23:49:09 2026 by rpki-client