$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140315.roa File: AS140315.roa (raw, json) Hash identifier: XL5q62MKJOhcUqYNFzWXh0RrQM+a/Fhg9ZJwi/gOGWA= Subject key identifier: D2:C6:54:6A:F0:A4:F4:A0:70:E2:A6:D1:19:7D:90:C0:73:17:8F:E4 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 2C6E733876D026FFBB3562B20AFB2256C5075C4D Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140315.roa Signing time: Tue 16 Jun 2026 16:16:09 +0000 ROA not before: Tue 16 Jun 2026 16:11:09 +0000 ROA not after: Tue 15 Jun 2027 16:16:09 +0000 asID: 140315 IP address blocks: 61.143.134.0/24 maxlen: 24 240e:108:4056::/48 maxlen: 48 240e:108:4856::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 04:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6e:73:38:76:d0:26:ff:bb:35:62:b2:0a:fb:22:56:c5:07:5c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 16 16:11:09 2026 GMT Not After : Jun 15 16:16:09 2027 GMT Subject: CN=D2C6546AF0A4F4A070E2A6D1197D90C073178FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5d:a2:1e:21:7a:ac:c7:66:cf:45:18:2a:18: e3:66:48:01:bc:7e:80:b9:14:fb:a0:71:cc:70:a0: f2:90:15:31:de:5b:7b:8b:11:6b:ad:bb:26:b4:18: f7:f8:22:d9:34:c8:b8:02:21:06:07:b7:7b:9f:2e: 6d:86:bc:6b:01:50:6f:63:42:de:37:69:da:46:c3: 05:e6:dd:3f:76:e7:69:c1:1a:ac:32:b6:3f:93:b3: bd:01:8c:2b:af:11:8d:82:fb:ff:49:c0:1c:6a:1a: 55:32:4f:27:2d:0c:c2:0a:83:3c:c4:7b:f6:99:a9: ba:8a:41:e6:b4:8c:05:fb:d6:4b:53:6b:f4:09:39: 30:cc:c0:2a:cf:4b:16:dd:7d:88:98:f2:98:b8:72: 88:e5:49:9d:d4:ee:15:63:fa:e8:be:1e:5d:3b:2e: 7e:e3:e4:81:b4:8c:62:af:72:7c:47:01:1d:8f:c6: 36:68:da:ed:fe:5c:6e:a6:21:04:b2:8d:dc:93:d2: f9:ad:a5:5f:1d:e7:4d:54:da:bb:7b:78:87:7a:b9: e9:0b:c6:5d:52:96:17:61:fc:93:87:ef:84:72:cc: b5:32:ef:98:38:9b:ec:a6:ef:5c:9c:a9:a9:84:a1: c5:ce:6b:9c:7d:18:00:b4:09:1d:ed:1c:2b:92:01: fa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C6:54:6A:F0:A4:F4:A0:70:E2:A6:D1:19:7D:90:C0:73:17:8F:E4 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140315.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.143.134.0/24 IPv6: 240e:108:4056::/48 240e:108:4856::/48 Signature Algorithm: sha256WithRSAEncryption 88:d3:8a:01:0e:95:b0:46:3f:99:77:22:76:be:35:75:30:0e: e3:9c:4a:e3:77:b5:10:98:1e:7b:02:52:e8:ac:8f:a7:e2:e4: 45:99:06:0d:7b:4d:f8:f9:24:b7:76:c1:d4:49:fb:7f:72:9c: 75:c0:01:cb:65:83:5d:53:ac:e3:3a:01:0b:7a:69:99:04:eb: f8:82:67:76:92:d5:5f:db:bc:db:9b:95:7a:b9:5e:c7:f3:b3: 37:2d:93:54:4c:d2:c3:8b:fc:4e:b7:40:96:3a:39:51:52:76: d7:2a:18:44:01:14:0d:92:45:ba:01:9f:50:92:55:ed:c3:4a: 4d:66:8d:ab:93:13:5a:6f:88:62:2c:d6:d6:44:c9:87:46:56: df:7b:cf:fa:b3:e5:f4:96:73:1e:2d:d6:e0:37:89:cb:02:ce: 1d:2c:e3:48:c8:e8:15:24:09:83:6d:97:54:da:21:a8:69:ac: f0:bc:b7:f8:c2:00:57:eb:ff:e4:ec:72:3a:3d:7b:07:66:6d: 3d:7c:a1:e4:94:84:ae:58:b0:c5:8d:54:52:04:28:6c:aa:4e: e7:4a:c6:f3:1f:57:1b:0d:54:9d:20:90:09:8a:30:14:50:29: da:bc:e6:42:39:e5:13:eb:49:f4:06:e7:9f:26:ce:00:16:77: 25:73:b7:41 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIULG5zOHbQJv+7NWKyCvsiVsUHXE0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxNjE2MTEwOVoX DTI3MDYxNTE2MTYwOVowMzExMC8GA1UEAxMoRDJDNjU0NkFGMEE0RjRBMDcwRTJB NkQxMTk3RDkwQzA3MzE3OEZFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOxdoh4heqzHZs9FGCoY42ZIAbx+gLkU+6BxzHCg8pAVMd5be4sRa627JrQY 9/gi2TTIuAIhBge3e58ubYa8awFQb2NC3jdp2kbDBebdP3bnacEarDK2P5OzvQGM K68RjYL7/0nAHGoaVTJPJy0MwgqDPMR79pmpuopB5rSMBfvWS1Nr9Ak5MMzAKs9L Ft19iJjymLhyiOVJndTuFWP66L4eXTsufuPkgbSMYq9yfEcBHY/GNmja7f5cbqYh BLKN3JPS+a2lXx3nTVTau3t4h3q56QvGXVKWF2H8k4fvhHLMtTLvmDib7KbvXJyp qYShxc5rnH0YALQJHe0cK5IB+iECAwEAAaOCAf4wggH6MB0GA1UdDgQWBBTSxlRq 8KT0oHDiptEZfZDAcxeP5DAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAPY+GMBgEAgACMBIDBwAkDgEI QFYDBwAkDgEISFYwDQYJKoZIhvcNAQELBQADggEBAIjTigEOlbBGP5l3Ina+NXUw DuOcSuN3tRCYHnsCUuisj6fi5EWZBg17Tfj5JLd2wdRJ+39ynHXAActlg11TrOM6 AQt6aZkE6/iCZ3aS1V/bvNublXq5Xsfzszctk1RM0sOL/E63QJY6OVFSdtcqGEQB FA2SRboBn1CSVe3DSk1mjauTE1pviGIs1tZEyYdGVt97z/qz5fSWcx4t1uA3icsC zh0s40jI6BUkCYNtl1TaIahprPC8t/jCAFfr/+Tscjo9ewdmbT18oeSUhK5YsMWN VFIEKGyqTudKxvMfVxsNVJ0gkAmKMBRQKdq85kI55RPrSfQG558mzgAWdyVzt0E= -----END CERTIFICATE-----Generated at Tue Jul 7 15:59:34 2026 by rpki-client