$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140717.roa File: AS140717.roa (raw, json) Hash identifier: 3DWTOC5fbZPEo9s81F2F1tWfIjdC5inGbSuUZkVrA5U= Subject key identifier: E3:7D:5A:D7:86:F5:9D:65:4A:FC:9D:DB:6B:7D:76:CC:FA:E5:EA:F7 Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Certificate serial: 7BC35DB602FB43AF5AD06CEDF12BE20C35248139 Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140717.roa Signing time: Wed 27 May 2026 01:01:50 +0000 ROA not before: Wed 27 May 2026 00:56:50 +0000 ROA not after: Wed 26 May 2027 01:01:50 +0000 asID: 140717 IP address blocks: 112.80.22.0/23 maxlen: 23 112.81.84.0/22 maxlen: 22 112.81.88.0/22 maxlen: 22 112.81.92.0/23 maxlen: 23 112.86.56.0/22 maxlen: 22 112.87.168.0/22 maxlen: 22 112.87.172.0/22 maxlen: 22 2408:8000:a017::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 19:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c3:5d:b6:02:fb:43:af:5a:d0:6c:ed:f1:2b:e2:0c:35:24:81:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Validity Not Before: May 27 00:56:50 2026 GMT Not After : May 26 01:01:50 2027 GMT Subject: CN=E37D5AD786F59D654AFC9DDB6B7D76CCFAE5EAF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:1f:68:30:da:83:0d:02:23:fa:f4:d4:92: c3:0a:1a:a3:bc:93:d2:08:07:39:62:5d:b6:9b:00: 57:59:5d:7f:f7:b6:49:94:74:70:a0:c4:62:d9:c9: 27:75:10:a3:96:09:44:22:75:9f:71:9b:4a:9a:24: 23:fc:13:a0:26:35:b7:a3:b3:f0:b9:09:63:44:85: 0b:6f:80:4a:c5:80:46:cc:51:e3:f9:da:86:32:14: ed:6a:0d:f2:d6:8d:62:d8:54:c2:d1:3f:0e:f3:48: 88:dd:ca:c6:8d:10:b7:8c:0c:a0:0b:50:d3:22:58: d1:f2:e5:c9:81:2a:f3:1f:a9:ff:b4:7f:37:2e:6b: 64:9c:86:8a:93:46:3b:15:5f:b0:b4:85:e1:f4:30: a7:39:47:43:45:a1:6c:3e:34:92:e9:17:42:6b:11: 8f:aa:3a:e5:db:9e:ef:62:4f:6c:75:49:e5:0e:a5: 96:06:18:3e:a3:5f:73:4c:c8:2c:0d:92:5d:38:3c: d9:cd:bd:ab:83:d1:92:0a:9b:66:7a:a8:d8:77:e4: 1f:55:19:87:a5:25:03:1b:db:16:2e:82:e4:5f:86: cf:35:c8:01:39:35:90:69:7e:0b:70:fd:a7:31:f6: a0:ce:5a:a3:fc:ad:28:93:a4:f2:fd:24:3f:80:de: d4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7D:5A:D7:86:F5:9D:65:4A:FC:9D:DB:6B:7D:76:CC:FA:E5:EA:F7 X509v3 Authority Key Identifier: keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140717.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 112.80.22.0/23 112.81.84.0-112.81.93.255 112.86.56.0/22 112.87.168.0/21 IPv6: 2408:8000:a017::/48 Signature Algorithm: sha256WithRSAEncryption 7f:f2:7c:cb:ea:c3:70:89:bf:1c:69:f4:2a:ab:29:12:c4:f1: 83:8a:9e:a4:b7:5f:3d:52:de:25:cb:3a:43:60:54:db:51:6e: 60:c7:0a:f5:ff:3a:e2:f9:04:87:1c:e2:44:e5:2e:a6:8a:f4: 34:71:b7:5b:13:44:37:da:df:7d:69:2b:23:7a:8b:7b:54:70: 6c:5e:bb:f2:b2:a0:89:f9:ed:fb:22:10:4d:2b:5d:16:4f:da: a8:25:e6:39:34:77:ee:4e:44:c0:22:18:c7:cd:f3:35:0e:57: af:6b:89:39:71:66:c3:cb:46:fa:a4:d3:ce:e4:f8:b4:a0:21: c1:23:72:d2:ce:94:b7:f0:ed:b7:25:e0:72:5d:ab:36:31:69: ab:b9:9e:2c:ca:36:fe:78:39:41:fc:8c:a5:2d:29:73:ff:19: 03:d9:e3:1d:05:f4:a8:6e:32:89:7f:e3:0f:8d:a3:65:dd:e9: a8:05:c2:d8:c7:ad:3f:1f:f1:2a:08:bb:29:31:94:30:fb:68: a3:57:53:f2:85:19:4d:13:4c:9d:2f:a1:8a:ad:41:2f:ac:19: ed:54:e0:92:9c:a0:62:cf:ea:db:2d:b6:14:3e:9f:d8:3b:d2: 46:c6:04:af:39:9b:3f:23:bf:7a:c7:10:c1:e5:df:2b:52:14: cc:66:66:b2 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUe8NdtgL7Q69a0Gzt8SviDDUkgTkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDUyNzAwNTY1MFoX DTI3MDUyNjAxMDE1MFowMzExMC8GA1UEAxMoRTM3RDVBRDc4NkY1OUQ2NTRBRkM5 RERCNkI3RDc2Q0NGQUU1RUFGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKfH2gw2oMNAiP69NSSwwoao7yT0ggHOWJdtpsAV1ldf/e2SZR0cKDEYtnJ J3UQo5YJRCJ1n3GbSpokI/wToCY1t6Oz8LkJY0SFC2+ASsWARsxR4/nahjIU7WoN 8taNYthUwtE/DvNIiN3Kxo0Qt4wMoAtQ0yJY0fLlyYEq8x+p/7R/Ny5rZJyGipNG OxVfsLSF4fQwpzlHQ0WhbD40kukXQmsRj6o65due72JPbHVJ5Q6llgYYPqNfc0zI LA2SXTg82c29q4PRkgqbZnqo2HfkH1UZh6UlAxvbFi6C5F+GzzXIATk1kGl+C3D9 pzH2oM5ao/ytKJOk8v0kP4De1M8CAwEAAaOCAg8wggILMB0GA1UdDgQWBBTjfVrX hvWdZUr8ndtrfXbM+uXq9zAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5 NTM0MjU5My8xL0FTMTQwNzE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MEoGCCsGAQUFBwEHAQH/BDswOTAmBAIAATAgAwQBcFAWMAwDBAJwUVQDBAFwUVwD BAJwVjgDBANwV6gwDwQCAAIwCQMHACQIgACgFzANBgkqhkiG9w0BAQsFAAOCAQEA f/J8y+rDcIm/HGn0KqspEsTxg4qepLdfPVLeJcs6Q2BU21FuYMcK9f864vkEhxzi ROUupor0NHG3WxNEN9rffWkrI3qLe1RwbF678rKgifnt+yIQTStdFk/aqCXmOTR3 7k5EwCIYx83zNQ5Xr2uJOXFmw8tG+qTTzuT4tKAhwSNy0s6Ut/DttyXgcl2rNjFp q7meLMo2/ng5QfyMpS0pc/8ZA9njHQX0qG4yiX/jD42jZd3pqAXC2MetPx/xKgi7 KTGUMPtoo1dT8oUZTRNMnS+hiq1BL6wZ7VTgkpygYs/q2y22FD6f2DvSRsYErzmb PyO/escQweXfK1IUzGZmsg== -----END CERTIFICATE-----Generated at Sat May 30 00:41:29 2026 by rpki-client