$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140312.roa File: AS140312.roa (raw, json) Hash identifier: rTg6y/aN6YYZm/SWqErD4wKXOvlUTEGRLY83Rx+hcuw= Subject key identifier: B2:38:18:67:BD:A7:15:8D:99:B6:3D:64:A0:ED:DB:A5:E5:48:24:54 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 4F57455CCD4053B62BFC50932634EFCDBAFD1B47 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140312.roa Signing time: Tue 16 Jun 2026 16:16:10 +0000 ROA not before: Tue 16 Jun 2026 16:11:10 +0000 ROA not after: Tue 15 Jun 2027 16:16:10 +0000 asID: 140312 IP address blocks: 219.129.33.0/24 maxlen: 24 240e:108:404e::/48 maxlen: 48 240e:108:484e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 04:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:57:45:5c:cd:40:53:b6:2b:fc:50:93:26:34:ef:cd:ba:fd:1b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 16 16:11:10 2026 GMT Not After : Jun 15 16:16:10 2027 GMT Subject: CN=B2381867BDA7158D99B63D64A0EDDBA5E5482454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:76:cc:ff:a9:4e:1f:44:59:b3:bb:37:e8: 8a:71:f7:9f:9c:f0:97:56:a7:9f:d0:29:66:75:aa: 6f:d4:79:d4:b1:37:d7:35:d4:b7:d1:db:87:88:38: 4a:ba:10:30:02:64:6a:bc:30:de:65:55:12:84:d0: 7c:93:7b:fa:3e:63:ba:f1:d0:12:89:47:f2:4d:17: d7:ea:5b:b3:53:68:e0:df:0b:e8:25:24:90:ad:0e: 7d:be:03:a0:f5:61:f0:c4:69:28:f6:4e:dc:70:0e: 22:e7:af:61:12:c6:47:3a:e3:fc:59:ce:8a:fc:91: ed:2d:e6:d5:f8:e2:9e:3e:03:8d:5d:9c:8e:61:a6: f1:bc:55:6f:02:a1:cd:76:96:d0:5d:57:a2:e8:59: 8d:e0:1d:9b:8c:b9:dd:f7:cb:b4:b9:92:e6:d5:2c: 98:94:32:96:92:5e:17:2b:69:26:8b:6c:4a:08:46: 4b:ea:3d:2a:a8:60:34:d2:0a:2e:04:bc:54:f5:7c: fa:bb:cb:53:64:dd:12:b5:8e:2a:e5:6a:0d:72:3b: a5:06:af:1b:5d:fa:e8:58:c5:96:1b:86:c2:e4:5a: dd:88:ae:4e:43:55:50:c6:cf:0a:0d:45:cd:d5:5d: f6:06:10:de:3c:fa:a5:b9:d0:a2:2a:05:f2:66:b1: 8a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:38:18:67:BD:A7:15:8D:99:B6:3D:64:A0:ED:DB:A5:E5:48:24:54 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140312.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.129.33.0/24 IPv6: 240e:108:404e::/48 240e:108:484e::/48 Signature Algorithm: sha256WithRSAEncryption 36:5a:a1:65:9d:10:11:50:cf:e5:31:0c:fd:4b:1f:e7:c3:0d: 3a:44:4f:08:25:40:94:3c:d2:d2:65:f0:5b:ff:15:bb:2b:eb: 86:0b:05:5c:ed:c4:fd:aa:8d:29:c5:7f:b4:ce:1e:ff:ee:dd: a6:2b:fa:3d:ba:32:02:80:b8:ed:be:a7:4d:bb:4e:8d:f5:97: 08:cc:ac:13:54:37:cd:1d:68:11:c3:a5:87:7a:4b:03:65:bf: 95:14:dc:0f:08:57:96:49:2f:8a:e4:65:0a:29:d7:d0:79:84: 81:71:ad:de:e5:e1:25:dc:df:be:09:7d:67:e7:e5:db:8e:73: 3c:e6:96:91:95:20:b8:f8:a3:c3:c6:1b:59:37:1f:90:c3:85: fc:29:4b:e6:d4:e7:fc:a0:bf:c5:e4:db:1a:1c:3c:cb:e8:ec: 46:e9:6a:67:1f:2a:ab:47:4e:ce:80:08:9b:b5:af:3f:6c:87: 5e:56:e3:5b:2d:77:d2:fb:d5:e0:95:db:66:fb:ce:46:68:c4: e9:4c:32:3c:c6:1f:9d:d5:b4:5c:d9:99:02:71:da:96:56:9e: ce:c0:fe:30:64:d1:bc:f7:83:f7:aa:64:87:8c:e0:f2:b5:0c: 45:22:8e:ad:aa:f7:fd:3e:65:40:44:79:0d:08:a8:57:e2:c6: 0e:99:aa:e7 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUT1dFXM1AU7Yr/FCTJjTvzbr9G0cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxNjE2MTExMFoX DTI3MDYxNTE2MTYxMFowMzExMC8GA1UEAxMoQjIzODE4NjdCREE3MTU4RDk5QjYz RDY0QTBFRERCQTVFNTQ4MjQ1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZfdsz/qU4fRFmzuzfoinH3n5zwl1ann9ApZnWqb9R51LE31zXUt9Hbh4g4 SroQMAJkarww3mVVEoTQfJN7+j5juvHQEolH8k0X1+pbs1No4N8L6CUkkK0Ofb4D oPVh8MRpKPZO3HAOIuevYRLGRzrj/FnOivyR7S3m1fjinj4DjV2cjmGm8bxVbwKh zXaW0F1XouhZjeAdm4y53ffLtLmS5tUsmJQylpJeFytpJotsSghGS+o9KqhgNNIK LgS8VPV8+rvLU2TdErWOKuVqDXI7pQavG1366FjFlhuGwuRa3YiuTkNVUMbPCg1F zdVd9gYQ3jz6pbnQoioF8maxiv8CAwEAAaOCAf4wggH6MB0GA1UdDgQWBBSyOBhn vacVjZm2PWSg7dul5UgkVDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQA24EhMBgEAgACMBIDBwAkDgEI QE4DBwAkDgEISE4wDQYJKoZIhvcNAQELBQADggEBADZaoWWdEBFQz+UxDP1LH+fD DTpETwglQJQ80tJl8Fv/Fbsr64YLBVztxP2qjSnFf7TOHv/u3aYr+j26MgKAuO2+ p027To31lwjMrBNUN80daBHDpYd6SwNlv5UU3A8IV5ZJL4rkZQop19B5hIFxrd7l 4SXc374JfWfn5duOczzmlpGVILj4o8PGG1k3H5DDhfwpS+bU5/ygv8Xk2xocPMvo 7EbpamcfKqtHTs6ACJu1rz9sh15W41std9L71eCV22b7zkZoxOlMMjzGH53VtFzZ mQJx2pZWns7A/jBk0bz3g/eqZIeM4PK1DEUijq2q9/0+ZUBEeQ0IqFfixg6Zquc= -----END CERTIFICATE-----Generated at Tue Jul 7 15:58:57 2026 by rpki-client