$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS140292.roa File: AS140292.roa (raw, json) Hash identifier: OA3egY1a6abgZ6HObkk4XVPnHafmKObwIli1ifBRJKI= Subject key identifier: 94:97:5E:F6:C5:CC:ED:4F:3F:68:34:67:5A:29:FB:29:F4:90:B3:FC Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Certificate serial: 0F0759A3818B0B2E3AE3D0C0E528411BACB98C98 Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS140292.roa Signing time: Mon 20 Apr 2026 05:05:15 +0000 ROA not before: Mon 20 Apr 2026 05:00:15 +0000 ROA not after: Mon 19 Apr 2027 05:05:15 +0000 asID: 140292 IP address blocks: 103.220.124.0/22 maxlen: 22 103.220.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:07:59:a3:81:8b:0b:2e:3a:e3:d0:c0:e5:28:41:1b:ac:b9:8c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Validity Not Before: Apr 20 05:00:15 2026 GMT Not After : Apr 19 05:05:15 2027 GMT Subject: CN=94975EF6C5CCED4F3F6834675A29FB29F490B3FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:58:31:fb:fa:47:ca:c0:2b:48:b0:48:4f:61: 76:37:61:87:68:0d:2f:e0:62:53:78:f5:08:57:ea: 66:8d:d3:48:ad:db:30:70:47:a7:09:1b:d0:0e:fc: 5e:40:2e:9f:b7:39:24:1b:2f:37:01:47:8b:97:55: 94:60:14:e7:67:73:e2:26:1d:3a:b8:3a:d0:cd:2f: f8:96:53:d3:02:ed:e6:ce:71:c9:8c:e8:34:92:4a: c9:a4:c7:30:45:be:22:9b:ef:b7:13:b9:57:a7:3d: 03:3c:27:1c:94:1c:aa:f3:81:f4:4e:93:11:04:ea: c6:a0:1b:75:0b:f5:35:ff:26:cc:fa:43:6d:31:2e: b4:4f:63:b9:bf:ac:88:02:99:3a:26:4a:0b:1c:6b: a7:16:f4:74:79:d4:05:b0:69:1b:5a:c7:73:86:15: a2:66:de:1a:ad:9f:7f:28:6e:6d:3d:5c:81:9c:9c: 8f:40:c7:7d:c0:79:cf:1b:b0:5b:85:4e:69:b4:a3: 96:0f:f6:0c:6e:c4:ae:2f:59:04:60:62:04:9c:7d: 82:5f:dc:ca:55:dd:1f:d0:09:fd:a0:a6:66:e9:e4: 0b:82:ec:fd:f1:f3:51:ff:76:0f:e3:57:04:e6:71: 2f:e7:d4:04:e1:3d:89:25:b0:8a:6e:da:95:fd:2f: 1e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:97:5E:F6:C5:CC:ED:4F:3F:68:34:67:5A:29:FB:29:F4:90:B3:FC X509v3 Authority Key Identifier: keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/AS140292.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.124.0/22 103.220.160.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:78:ac:58:e8:88:d4:1c:ac:b0:ce:46:cd:a2:6d:a5:54:b6: 2f:96:89:bf:7b:70:0c:39:27:82:ea:d9:f8:f8:8b:60:5a:35: c9:aa:43:44:1f:96:29:74:44:31:f0:e4:2b:bd:5e:58:bb:fa: c4:2c:9b:1d:70:32:cc:aa:08:4a:27:71:24:e1:9f:52:2d:e6: 0e:66:8b:53:5e:1c:f9:ec:b6:38:00:ad:f8:a1:08:10:f3:6a: 27:0c:b3:83:96:16:94:73:e2:c2:3a:1b:4a:27:a4:f6:59:c7: 24:2c:e9:d8:33:41:ac:3b:58:f9:38:2d:15:90:b2:ac:04:18: 6b:78:05:4b:55:7a:fc:86:e6:23:95:a6:6b:b6:1c:5e:13:16: de:f0:b0:19:5e:ed:d3:d3:3a:ef:4f:18:2f:43:00:4e:08:03: 3d:0c:7a:e5:d7:48:4b:0f:d5:d9:95:83:cc:76:0d:15:e1:b4: 8c:ad:f9:64:1e:b4:a9:ce:6e:af:09:de:cb:1b:3b:03:c4:03: a2:0a:e6:7a:80:47:ec:57:9c:c5:e7:7e:6b:9c:39:4e:9b:d8: a3:d9:98:06:45:69:97:62:db:0a:16:c5:75:2b:60:66:80:35: 61:f5:f9:9d:d8:51:a5:0f:d9:54:ee:e3:b0:28:4e:2b:93:52: 78:32:e5:10 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUDwdZo4GLCy4649DA5ShBG6y5jJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy MjEwNjQyNjAeFw0yNjA0MjAwNTAwMTVaFw0yNzA0MTkwNTA1MTVaMDMxMTAvBgNV BAMTKDk0OTc1RUY2QzVDQ0VENEYzRjY4MzQ2NzVBMjlGQjI5RjQ5MEIzRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQWDH7+kfKwCtIsEhPYXY3YYdo DS/gYlN49QhX6maN00it2zBwR6cJG9AO/F5ALp+3OSQbLzcBR4uXVZRgFOdnc+Im HTq4OtDNL/iWU9MC7ebOccmM6DSSSsmkxzBFviKb77cTuVenPQM8JxyUHKrzgfRO kxEE6sagG3UL9TX/Jsz6Q20xLrRPY7m/rIgCmTomSgsca6cW9HR51AWwaRtax3OG FaJm3hqtn38obm09XIGcnI9Ax33Aec8bsFuFTmm0o5YP9gxuxK4vWQRgYgScfYJf 3MpV3R/QCf2gpmbp5AuC7P3x81H/dg/jVwTmcS/n1AThPYklsIpu2pX9Lx4PAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUlJde9sXM7U8/aDRnWin7KfSQs/wwHwYDVR0j BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwNjI5OTcxNjgxMzEvMC9BUzE0MDI5Mi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEAmfcfAMEAmfcoDANBgkqhkiG9w0BAQsFAAOCAQEAKnisWOiI1ByssM5G zaJtpVS2L5aJv3twDDkngurZ+PiLYFo1yapDRB+WKXREMfDkK71eWLv6xCybHXAy zKoISidxJOGfUi3mDmaLU14c+ey2OACt+KEIEPNqJwyzg5YWlHPiwjobSiek9lnH JCzp2DNBrDtY+TgtFZCyrAQYa3gFS1V6/IbmI5Wma7YcXhMW3vCwGV7t09M6708Y L0MATggDPQx65ddISw/V2ZWDzHYNFeG0jK35ZB60qc5urwneyxs7A8QDogrmeoBH 7Fecxed+a5w5TpvYo9mYBkVpl2LbChbFdStgZoA1YfX5ndhRpQ/ZVO7jsChOK5NS eDLlEA== -----END CERTIFICATE-----Generated at Mon Apr 20 15:03:41 2026 by rpki-client