$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140330.roa File: AS140330.roa (raw, json) Hash identifier: n627QHhoCxhotTZ+cVAy3tv03QXo9Ot5pyO4JrsiPlw= Subject key identifier: 62:24:3E:D1:29:69:B7:59:F3:5D:8E:B9:0A:65:26:62:75:FD:5C:53 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 53438CF58EB030559662189B192994D2BFE2AB62 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140330.roa Signing time: Wed 20 May 2026 16:15:18 +0000 ROA not before: Wed 20 May 2026 16:10:18 +0000 ROA not after: Wed 19 May 2027 16:15:18 +0000 asID: 140330 IP address blocks: 117.25.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 06:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:43:8c:f5:8e:b0:30:55:96:62:18:9b:19:29:94:d2:bf:e2:ab:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 20 16:10:18 2026 GMT Not After : May 19 16:15:18 2027 GMT Subject: CN=62243ED12969B759F35D8EB90A65266275FD5C53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:35:32:de:13:62:75:8d:21:d3:0e:40:fd: 4e:f2:b7:7c:04:b3:9b:78:55:6e:f6:48:92:cb:b9: 91:cd:25:1b:bc:65:da:38:68:e6:dc:9f:0d:bd:d1: 97:d8:94:4e:11:d4:f8:e7:cd:ec:ae:46:ed:39:45: b1:7c:42:59:90:8f:47:7d:f6:5f:31:31:34:e0:a6: 5a:14:6b:32:6c:36:a8:87:ba:42:2c:7b:64:3f:06: 08:b6:25:f5:0b:1f:6d:95:36:ac:b2:07:d1:08:33: 31:24:2c:8f:f4:51:d5:90:7a:8d:01:91:75:c3:45: c0:ce:f1:33:f6:e5:7b:4f:2a:01:33:82:d6:6f:82: 9a:ba:d5:95:09:c9:aa:e4:ee:7e:68:f6:e6:30:56: 8b:78:9b:5b:d1:a3:f7:69:4e:98:d3:31:e6:4c:77: 8c:ed:13:1d:52:1e:09:53:c1:bd:27:12:a9:64:07: d9:68:ee:84:47:a4:7c:72:b4:aa:b7:d4:37:9e:57: 92:79:7a:bd:63:74:88:d6:c9:0d:aa:6b:e4:51:8e: 69:26:d1:09:eb:30:d9:21:56:8b:ef:5f:25:a4:a9: 33:f1:38:d8:65:f0:55:8a:3e:1e:96:6b:7e:40:51: 5a:a5:ee:25:95:1e:e8:ce:4c:92:c5:b8:0e:d4:c1: 6d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:24:3E:D1:29:69:B7:59:F3:5D:8E:B9:0A:65:26:62:75:FD:5C:53 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.25.187.0/24 Signature Algorithm: sha256WithRSAEncryption 57:08:0d:16:ca:8a:97:c8:0f:c5:4b:ca:c5:53:6f:2a:95:9a: b5:b4:0e:0b:bf:0f:bf:47:b7:60:16:c8:14:37:c9:b1:9b:0f: 89:40:ca:05:48:60:16:a7:6a:5c:75:d9:ac:e5:4e:8f:32:a9: 87:53:19:f8:7e:7e:d8:c6:f3:f7:0e:77:3e:d4:01:79:23:90: bf:69:8a:4b:00:dc:e3:25:ba:b9:0a:37:ba:ff:70:bb:ae:8d: 71:80:a4:5a:38:50:aa:5e:4a:67:5e:b3:c1:99:be:64:68:93: 52:6b:3d:0b:70:b6:bb:d5:ac:5e:63:55:d3:0b:9f:01:40:28: d7:47:f8:34:f4:1e:a4:e7:6a:8b:dd:1d:89:c5:77:41:62:5d: 54:9e:d8:bc:c3:d2:77:6c:e3:78:b6:e6:5f:29:ab:8d:a6:54: db:b7:8b:7c:61:ff:e6:b7:af:a9:29:48:ca:63:7b:bf:6e:85: c1:a6:3f:ba:79:24:0b:cd:be:be:be:70:aa:09:57:22:89:b2: eb:2d:50:b9:bb:8a:3a:36:c9:ea:2f:88:90:8c:c5:ad:e7:f3: 6d:2f:61:a3:9f:fd:5a:f8:a9:b6:93:f5:46:79:03:e0:06:29: 68:84:3c:a3:7b:45:67:67:b4:95:c0:62:33:80:41:9d:6e:d4: df:6c:54:3c -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUU0OM9Y6wMFWWYhibGSmU0r/iq2IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyMDE2MTAxOFoX DTI3MDUxOTE2MTUxOFowMzExMC8GA1UEAxMoNjIyNDNFRDEyOTY5Qjc1OUYzNUQ4 RUI5MEE2NTI2NjI3NUZENUM1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNfNTLeE2J1jSHTDkD9TvK3fASzm3hVbvZIksu5kc0lG7xl2jho5tyfDb3R l9iUThHU+OfN7K5G7TlFsXxCWZCPR332XzExNOCmWhRrMmw2qIe6Qix7ZD8GCLYl 9QsfbZU2rLIH0QgzMSQsj/RR1ZB6jQGRdcNFwM7xM/ble08qATOC1m+CmrrVlQnJ quTufmj25jBWi3ibW9Gj92lOmNMx5kx3jO0THVIeCVPBvScSqWQH2WjuhEekfHK0 qrfUN55Xknl6vWN0iNbJDapr5FGOaSbRCesw2SFWi+9fJaSpM/E42GXwVYo+HpZr fkBRWqXuJZUe6M5MksW4DtTBbZUCAwEAAaOCAeQwggHgMB0GA1UdDgQWBBRiJD7R KWm3WfNdjrkKZSZidf1cUzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdRm7MA0GCSqGSIb3DQEBCwUA A4IBAQBXCA0WyoqXyA/FS8rFU28qlZq1tA4Lvw+/R7dgFsgUN8mxmw+JQMoFSGAW p2pcddms5U6PMqmHUxn4fn7YxvP3Dnc+1AF5I5C/aYpLANzjJbq5Cje6/3C7ro1x gKRaOFCqXkpnXrPBmb5kaJNSaz0LcLa71axeY1XTC58BQCjXR/g09B6k52qL3R2J xXdBYl1Unti8w9J3bON4tuZfKauNplTbt4t8Yf/mt6+pKUjKY3u/boXBpj+6eSQL zb6+vnCqCVciibLrLVC5u4o6NsnqL4iQjMWt5/NtL2Gjn/1a+Km2k/VGeQPgBilo hDyje0VnZ7SVwGIzgEGdbtTfbFQ8 -----END CERTIFICATE-----Generated at Sat May 23 07:08:26 2026 by rpki-client