$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS58540.roa File: AS58540.roa (raw, json) Hash identifier: TSY0z4g2ml0XJrRPP6gGTNNEujjalV5Ki0HIaE9WKcA= Subject key identifier: 2F:79:B1:52:89:60:66:3B:6E:ED:65:AF:01:51:05:E1:11:49:1D:6B Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 1DE2F0FA3B92F3F8EDEE76D071ECDBB2B5B9ED23 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS58540.roa Signing time: Tue 16 Jun 2026 17:54:05 +0000 ROA not before: Tue 16 Jun 2026 17:49:05 +0000 ROA not after: Tue 15 Jun 2027 17:54:05 +0000 asID: 58540 IP address blocks: 140.249.64.0/19 maxlen: 19 140.249.96.0/19 maxlen: 19 140.249.108.0/24 maxlen: 24 140.249.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e2:f0:fa:3b:92:f3:f8:ed:ee:76:d0:71:ec:db:b2:b5:b9:ed:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Jun 16 17:49:05 2026 GMT Not After : Jun 15 17:54:05 2027 GMT Subject: CN=2F79B1528960663B6EED65AF015105E111491D6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:5c:b9:5d:92:ad:92:c2:87:18:af:84:46: 2c:04:48:89:0b:29:91:d6:2c:b9:b9:33:d2:0b:ef: f8:75:05:67:8b:73:78:14:13:15:cd:f6:df:2d:e0: 71:87:e5:94:fd:2f:3f:16:9c:4a:eb:bb:a1:a4:55: a5:b5:b4:d6:7b:20:b1:0d:7f:9d:27:14:e4:d6:93: 3d:e3:5c:29:ee:1b:cd:5f:cc:ee:4d:7c:b2:f2:56: 20:c3:cc:45:fa:ab:20:2b:5c:f1:53:d0:16:2d:c9: 30:e1:38:0b:1e:c5:a1:9b:cf:e4:11:9b:2d:d7:56: 46:2f:0d:53:ba:39:ca:53:2e:21:c3:87:03:96:8f: 7f:d4:a7:f9:de:9b:b9:e5:58:4f:86:10:b0:0c:28: 9c:d5:e5:6a:74:30:4d:a4:f6:eb:0f:3a:97:92:47: b7:63:f0:8c:7f:b7:c8:e4:79:64:1a:6a:26:93:2d: a2:9b:38:8f:1f:a5:4e:a6:2a:ee:d1:db:7b:71:ce: 50:18:b7:5f:e0:a3:2a:c2:5b:34:9f:d3:cc:65:4d: ee:93:4b:d4:26:b0:35:5e:81:74:d7:45:27:f4:ee: 67:4c:63:8b:29:26:fe:70:37:01:57:75:e3:da:26: bb:fe:f2:ff:96:17:f5:2b:27:9a:b7:51:29:64:84: 3a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:79:B1:52:89:60:66:3B:6E:ED:65:AF:01:51:05:E1:11:49:1D:6B X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/AS58540.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.249.64.0/18 Signature Algorithm: sha256WithRSAEncryption ce:13:48:20:e9:46:21:d3:47:80:63:99:79:97:42:99:d0:29: e7:24:ab:a2:a3:3b:bc:7e:45:aa:70:53:94:36:7f:9d:a3:8a: 20:6f:55:18:95:c9:57:cc:d1:91:13:c6:c4:c4:eb:5a:77:ae: 74:1a:f9:a8:96:31:22:18:95:c1:88:60:06:32:d8:1d:60:9c: 7f:c4:ae:12:80:10:97:84:40:d7:b1:c0:8d:77:5c:e7:aa:a2: 63:c8:13:0c:19:90:bf:d7:09:38:9c:3b:cb:dd:f3:fb:0c:07: a8:0a:8e:a5:83:49:c0:70:4c:29:d5:24:ce:a1:5d:15:1a:77: b0:01:4d:b6:f0:3e:5f:92:3b:19:3d:63:4b:96:f8:26:b1:ff: 1e:55:9e:b6:53:f5:b8:6f:75:e1:14:05:ee:7d:97:0d:28:52: 8c:08:48:e5:a5:b5:cd:bd:20:b8:58:68:27:5f:7b:e0:3f:1a: 58:9b:32:e7:f2:b4:2e:dd:4e:1e:4f:92:a2:52:5e:31:ec:67: cd:9b:bd:82:f9:3f:b2:8b:22:8b:53:1e:40:48:7e:32:42:3f: d3:49:bc:f4:84:88:ae:69:ac:d3:f0:4e:22:23:1c:b3:fa:aa: 2e:60:05:fe:d7:5d:7e:02:ff:ee:aa:eb:8c:a1:32:73:52:15: e1:0d:ae:1b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUHeLw+juS8/jt7nbQcezbsrW57SMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYxNjE3NDkwNVoX DTI3MDYxNTE3NTQwNVowMzExMC8GA1UEAxMoMkY3OUIxNTI4OTYwNjYzQjZFRUQ2 NUFGMDE1MTA1RTExMTQ5MUQ2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1QXLldkq2SwocYr4RGLARIiQspkdYsubkz0gvv+HUFZ4tzeBQTFc323y3g cYfllP0vPxacSuu7oaRVpbW01nsgsQ1/nScU5NaTPeNcKe4bzV/M7k18svJWIMPM RfqrICtc8VPQFi3JMOE4Cx7FoZvP5BGbLddWRi8NU7o5ylMuIcOHA5aPf9Sn+d6b ueVYT4YQsAwonNXlanQwTaT26w86l5JHt2PwjH+3yOR5ZBpqJpMtops4jx+lTqYq 7tHbe3HOUBi3X+CjKsJbNJ/TzGVN7pNL1CawNV6BdNdFJ/TuZ0xjiykm/nA3AVd1 49omu/7y/5YX9SsnmrdRKWSEOuUCAwEAAaOCAeMwggHfMB0GA1UdDgQWBBQvebFS iWBmO27tZa8BUQXhEUkdazAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjBdBggrBgEFBQcBCwRRME8wTQYIKwYBBQUH MAuGQXJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8wL0FTNTg1NDAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAaM+UAwDQYJKoZIhvcNAQELBQAD ggEBAM4TSCDpRiHTR4BjmXmXQpnQKeckq6KjO7x+RapwU5Q2f52jiiBvVRiVyVfM 0ZETxsTE61p3rnQa+aiWMSIYlcGIYAYy2B1gnH/ErhKAEJeEQNexwI13XOeqomPI EwwZkL/XCTicO8vd8/sMB6gKjqWDScBwTCnVJM6hXRUad7ABTbbwPl+SOxk9Y0uW +Cax/x5VnrZT9bhvdeEUBe59lw0oUowISOWltc29ILhYaCdfe+A/GlibMufytC7d Th5PkqJSXjHsZ82bvYL5P7KLIotTHkBIfjJCP9NJvPSEiK5prNPwTiIjHLP6qi5g Bf7XXX4C/+6q64yhMnNSFeENrhs= -----END CERTIFICATE-----Generated at Tue Jul 14 23:47:53 2026 by rpki-client