$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140317.roa File: AS140317.roa (raw, json) Hash identifier: gnkxHssdKbDSCbBw4FvmgG79QDX+h0pHEYWW55c8DGY= Subject key identifier: 00:07:6C:5D:FC:AD:F1:C1:47:64:B0:23:66:8F:03:9E:BE:26:77:3F Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 5241CD6988207F2FC253023F1A304E9AE3D9C710 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140317.roa Signing time: Tue 16 Jun 2026 16:16:10 +0000 ROA not before: Tue 16 Jun 2026 16:11:10 +0000 ROA not after: Tue 15 Jun 2027 16:16:10 +0000 asID: 140317 IP address blocks: 113.96.110.0/23 maxlen: 23 183.63.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 04:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:41:cd:69:88:20:7f:2f:c2:53:02:3f:1a:30:4e:9a:e3:d9:c7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 16 16:11:10 2026 GMT Not After : Jun 15 16:16:10 2027 GMT Subject: CN=00076C5DFCADF1C14764B023668F039EBE26773F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:2a:a9:f8:54:f7:94:d2:d5:6d:9d:5a:da: ce:fe:6b:88:2d:57:2e:d5:12:5f:3d:29:c6:ea:bc: 30:da:6d:13:39:75:95:e0:b9:f5:18:49:33:10:08: 9c:f6:83:fc:20:3f:6f:37:0f:35:34:d3:6f:60:c5: b4:7b:c3:45:70:cf:57:57:2f:61:65:07:92:90:7c: b4:80:ae:c6:a4:40:ce:1d:8d:c9:62:e5:de:f1:b9: 22:c5:ff:9b:1a:bd:02:17:1e:aa:be:90:16:28:8f: aa:19:12:e3:6c:41:b7:46:21:43:e5:b1:c8:33:d3: d2:ce:d4:c9:23:1b:6c:f4:2a:7d:14:7d:1a:45:7c: 57:50:1d:1b:89:fd:ed:ab:b7:c7:04:8c:f1:be:46: f0:37:48:d1:55:a2:90:b5:1c:8c:17:db:12:68:04: c2:60:ab:25:fe:7d:5e:f5:82:da:45:e3:a0:e0:90: 9f:2b:f0:1e:b1:ae:a3:e9:04:e7:90:1c:f2:17:40: ad:9a:65:66:b0:f4:d5:50:84:74:91:a0:f1:e6:fd: 5b:27:50:f9:b7:12:e2:d6:bb:94:09:89:90:fe:2a: 27:ed:86:d7:5b:27:d0:11:02:b7:6d:64:64:d7:4e: fc:53:d9:8e:89:28:bc:7a:0d:cd:a6:8e:91:0b:95: f1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:07:6C:5D:FC:AD:F1:C1:47:64:B0:23:66:8F:03:9E:BE:26:77:3F X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140317.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.96.110.0/23 183.63.32.0/22 Signature Algorithm: sha256WithRSAEncryption 14:58:f6:1b:54:da:98:c1:62:cb:25:72:b2:99:f4:f2:3d:54: a3:00:4e:18:62:9d:3c:63:6b:84:14:a7:26:80:2d:0d:1b:5c: 0a:0e:f8:06:00:38:b0:61:28:d0:bc:77:a4:04:68:04:e9:16: 93:15:38:8c:3e:cf:7b:a0:ba:c2:8f:72:42:a8:a8:e8:bf:48: dc:4a:ca:fd:79:31:46:63:7d:8a:83:ea:cf:39:40:89:55:d5: 43:87:11:86:45:8c:a9:27:54:1e:82:79:73:68:65:12:b3:14: 40:dd:31:3d:70:90:63:43:f5:76:87:72:80:39:ca:77:57:f8: 19:c5:93:b0:7b:3d:94:59:36:17:36:d8:d2:78:97:ce:a9:55: f2:b9:8c:a3:c7:e3:29:6c:10:8e:8c:e2:4e:b3:28:f1:4d:6c: 07:c3:5a:fa:90:bd:ff:23:16:17:93:4c:cd:49:8b:c8:97:cd: 26:7c:5d:d5:41:33:9a:b5:e3:5c:89:03:ca:e8:93:96:65:a8: 1e:c0:9a:88:15:34:82:41:84:86:b1:6b:bc:2c:1c:65:fa:aa: 84:68:fa:39:bb:fd:a7:8b:ba:c3:8f:39:b1:80:ac:37:aa:9e: d2:e9:f7:0b:76:02:de:65:07:19:1d:d3:de:16:27:72:ae:85: ee:a9:32:1d -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUUkHNaYggfy/CUwI/GjBOmuPZxxAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYxNjE2MTExMFoX DTI3MDYxNTE2MTYxMFowMzExMC8GA1UEAxMoMDAwNzZDNURGQ0FERjFDMTQ3NjRC MDIzNjY4RjAzOUVCRTI2NzczRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOLsKqn4VPeU0tVtnVrazv5riC1XLtUSXz0pxuq8MNptEzl1leC59RhJMxAI nPaD/CA/bzcPNTTTb2DFtHvDRXDPV1cvYWUHkpB8tICuxqRAzh2NyWLl3vG5IsX/ mxq9Ahceqr6QFiiPqhkS42xBt0YhQ+WxyDPT0s7UySMbbPQqfRR9GkV8V1AdG4n9 7au3xwSM8b5G8DdI0VWikLUcjBfbEmgEwmCrJf59XvWC2kXjoOCQnyvwHrGuo+kE 55Ac8hdArZplZrD01VCEdJGg8eb9WydQ+bcS4ta7lAmJkP4qJ+2G11sn0BECt21k ZNdO/FPZjokovHoNzaaOkQuV8d8CAwEAAaOCAeowggHmMB0GA1UdDgQWBBQAB2xd /K3xwUdksCNmjwOeviZ3PzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBcWBuAwQCtz8gMA0GCSqGSIb3 DQEBCwUAA4IBAQAUWPYbVNqYwWLLJXKymfTyPVSjAE4YYp08Y2uEFKcmgC0NG1wK DvgGADiwYSjQvHekBGgE6RaTFTiMPs97oLrCj3JCqKjov0jcSsr9eTFGY32Kg+rP OUCJVdVDhxGGRYypJ1QegnlzaGUSsxRA3TE9cJBjQ/V2h3KAOcp3V/gZxZOwez2U WTYXNtjSeJfOqVXyuYyjx+MpbBCOjOJOsyjxTWwHw1r6kL3/IxYXk0zNSYvIl80m fF3VQTOateNciQPK6JOWZagewJqIFTSCQYSGsWu8LBxl+qqEaPo5u/2ni7rDjzmx gKw3qp7S6fcLdgLeZQcZHdPeFidyroXuqTId -----END CERTIFICATE-----Generated at Tue Jul 7 15:58:56 2026 by rpki-client