$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140331.roa File: AS140331.roa (raw, json) Hash identifier: TszLUCsEUIAdUDxmbNtiMS0c/rbh9RvLRMgkccMkM2U= Subject key identifier: 43:EC:34:6D:41:3D:73:89:59:71:B4:16:CC:46:BF:3A:83:E2:A3:6E Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 6B739AA16D363BEE065F8D0B23F632F268F06954 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140331.roa Signing time: Wed 20 May 2026 16:15:18 +0000 ROA not before: Wed 20 May 2026 16:10:18 +0000 ROA not after: Wed 19 May 2027 16:15:18 +0000 asID: 140331 IP address blocks: 240e:267:3000::/40 maxlen: 40 240e:267:3100::/40 maxlen: 40 240e:267:3200::/40 maxlen: 40 240e:267:3300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 06:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:73:9a:a1:6d:36:3b:ee:06:5f:8d:0b:23:f6:32:f2:68:f0:69:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 20 16:10:18 2026 GMT Not After : May 19 16:15:18 2027 GMT Subject: CN=43EC346D413D73895971B416CC46BF3A83E2A36E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:32:0d:64:0e:23:fe:f1:cb:24:d2:be:a0:3f: 77:77:dc:7a:04:f4:70:b2:d7:5b:44:95:e6:89:12: 77:41:a3:2c:7b:eb:78:0e:4e:e8:4d:58:48:db:02: b8:3f:30:fd:78:8c:2a:a1:73:8e:d4:81:9d:52:f7: ad:4e:0c:92:f9:c5:2e:12:10:8d:a7:d7:ac:24:9a: 79:7f:fb:e2:d1:1b:62:db:36:eb:91:00:6c:2b:58: f3:f7:19:cd:3d:d8:e3:7d:57:0c:c9:56:52:c6:f2: 13:24:00:aa:51:d8:91:03:49:a5:22:bf:02:64:ed: 65:55:32:a2:f9:62:72:61:93:0a:d1:39:c2:87:cc: da:58:fe:f6:6b:83:a2:3e:f1:dd:5d:8d:b2:70:00: e5:34:a4:95:cd:a1:7c:4f:63:e0:a3:6d:b9:62:60: b0:0a:42:d4:33:a9:66:84:6e:bd:e1:34:47:a3:1d: eb:35:c2:17:ec:8f:f9:06:c8:04:cc:04:b4:d9:25: 0a:69:d8:48:e9:21:37:d2:28:d6:e1:89:14:cb:7a: 1f:9a:91:67:6c:1c:5a:d2:05:e5:59:56:e4:c7:e7: d3:0f:90:39:90:e0:aa:48:96:32:a2:23:93:61:20: a1:0c:d8:40:43:4b:bc:4d:56:bb:22:13:58:66:de: d2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EC:34:6D:41:3D:73:89:59:71:B4:16:CC:46:BF:3A:83:E2:A3:6E X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:267:3000::/38 Signature Algorithm: sha256WithRSAEncryption b1:b9:dc:54:1b:a9:a5:7b:36:86:93:aa:6b:9f:0c:aa:43:53: b2:fe:eb:9d:06:3f:0e:af:b7:f1:c0:b8:85:22:14:e1:ed:34: 1b:71:6c:48:e5:71:e2:de:8b:e7:92:f2:fa:e5:68:79:eb:62: af:1e:32:0d:29:42:2c:85:d2:58:7e:11:42:eb:72:a6:fb:c1: 36:72:dc:7f:e3:8f:32:f9:02:fe:3c:29:09:1f:c3:63:ed:14: 00:c0:e1:c1:94:aa:70:2b:de:46:59:0a:9c:12:71:6e:50:19: 82:14:99:d8:2f:7a:1c:a2:6a:96:8a:ba:6c:4b:91:36:cb:ec: 53:50:4c:7e:75:0f:3e:fc:dd:c5:84:54:92:91:1d:1d:6e:69: c9:bf:27:df:c4:36:07:4a:e6:d6:17:82:68:e6:84:37:5b:13: 6c:61:32:21:0c:60:fb:b8:f0:da:35:fe:98:d5:87:67:63:0f: da:2e:90:73:31:1c:fc:e3:27:dc:8d:a8:9f:8e:c7:f6:14:52: 94:f6:cf:fc:e6:39:04:73:62:fa:27:2a:64:4d:4d:51:b9:c8: c1:01:62:a9:89:8c:d5:95:d0:33:8e:7c:88:0b:a8:69:1c:31: 53:9a:69:04:59:3c:e6:0f:02:5e:b7:ba:0b:c2:93:d3:c3:c0: b9:f7:08:61 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUa3OaoW02O+4GX40LI/Yy8mjwaVQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyMDE2MTAxOFoX DTI3MDUxOTE2MTUxOFowMzExMC8GA1UEAxMoNDNFQzM0NkQ0MTNENzM4OTU5NzFC NDE2Q0M0NkJGM0E4M0UyQTM2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOsyDWQOI/7xyyTSvqA/d3fcegT0cLLXW0SV5okSd0GjLHvreA5O6E1YSNsC uD8w/XiMKqFzjtSBnVL3rU4MkvnFLhIQjafXrCSaeX/74tEbYts265EAbCtY8/cZ zT3Y431XDMlWUsbyEyQAqlHYkQNJpSK/AmTtZVUyovlicmGTCtE5wofM2lj+9muD oj7x3V2NsnAA5TSklc2hfE9j4KNtuWJgsApC1DOpZoRuveE0R6Md6zXCF+yP+QbI BMwEtNklCmnYSOkhN9Io1uGJFMt6H5qRZ2wcWtIF5VlW5Mfn0w+QOZDgqkiWMqIj k2EgoQzYQENLvE1WuyITWGbe0mMCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBRD7DRt QT1ziVlxtBbMRr86g+KjbjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJA4CZzAwDQYJKoZIhvcNAQEL BQADggEBALG53FQbqaV7NoaTqmufDKpDU7L+650GPw6vt/HAuIUiFOHtNBtxbEjl ceLei+eS8vrlaHnrYq8eMg0pQiyF0lh+EULrcqb7wTZy3H/jjzL5Av48KQkfw2Pt FADA4cGUqnAr3kZZCpwScW5QGYIUmdgvehyiapaKumxLkTbL7FNQTH51Dz783cWE VJKRHR1uacm/J9/ENgdK5tYXgmjmhDdbE2xhMiEMYPu48No1/pjVh2djD9oukHMx HPzjJ9yNqJ+Ox/YUUpT2z/zmOQRzYvonKmRNTVG5yMEBYqmJjNWV0DOOfIgLqGkc MVOaaQRZPOYPAl63ugvCk9PDwLn3CGE= -----END CERTIFICATE-----Generated at Sat May 23 07:08:20 2026 by rpki-client