$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140333.roa File: AS140333.roa (raw, json) Hash identifier: uQ5NZ7rXw3lJGt0Qb+/0vw8AOdrHd08iVwTU3/U9i6M= Subject key identifier: 8B:38:6A:5E:55:BB:04:03:D3:71:FE:A2:01:4F:6E:A7:08:16:6C:27 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 2CDA5C56B0D661DD243F06147AD29C80D05C343B Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140333.roa Signing time: Wed 20 May 2026 16:15:19 +0000 ROA not before: Wed 20 May 2026 16:10:19 +0000 ROA not after: Wed 19 May 2027 16:15:19 +0000 asID: 140333 IP address blocks: 240e:267:5000::/40 maxlen: 40 240e:267:5100::/40 maxlen: 40 240e:267:5200::/40 maxlen: 40 240e:267:5300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 06:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:da:5c:56:b0:d6:61:dd:24:3f:06:14:7a:d2:9c:80:d0:5c:34:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 20 16:10:19 2026 GMT Not After : May 19 16:15:19 2027 GMT Subject: CN=8B386A5E55BB0403D371FEA2014F6EA708166C27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:19:ba:28:c0:93:37:ea:93:07:52:e2:46:87: 42:ae:4f:e5:32:81:69:c6:a6:1c:b2:48:da:79:fb: a5:80:16:98:d0:f3:21:25:ce:72:1f:50:31:70:76: ea:0a:7a:62:ff:96:5b:04:53:0f:0a:91:8e:a6:98: 07:87:b1:e1:ba:a7:c0:36:78:e8:72:e5:65:2d:d2: 9e:85:81:91:16:39:02:58:4a:77:07:83:b9:a2:0f: be:25:ee:4d:56:ab:24:00:f2:29:24:1b:35:94:f4: f1:53:db:5e:04:d0:91:61:8a:c8:ae:e1:8e:d4:4c: 95:da:f0:38:60:95:22:0b:fc:de:4f:e5:5c:80:f8: d3:c7:6f:c1:23:97:96:89:84:b3:e5:65:bb:b5:83: 82:36:93:f8:8e:21:c7:87:da:2e:07:39:92:48:23: 62:a7:41:18:38:d2:b0:7b:a4:dd:38:0b:3d:74:07: 44:db:8e:17:95:5a:f1:0e:a1:cf:f3:86:ef:b0:ba: 29:80:fb:97:5c:76:4b:4f:4f:cd:14:67:1e:5e:1e: 2c:31:e3:5d:c1:ad:a4:d4:67:66:32:8e:fc:5e:4b: fb:ae:c2:22:a0:5d:32:b6:41:c5:6c:de:af:fb:a4: f4:39:5a:66:06:c5:c3:75:0f:af:b1:6f:5e:3d:fb: f6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:38:6A:5E:55:BB:04:03:D3:71:FE:A2:01:4F:6E:A7:08:16:6C:27 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:267:5000::/38 Signature Algorithm: sha256WithRSAEncryption 09:f4:02:a9:fa:9c:db:07:f4:69:2c:c6:6b:f9:0c:83:0b:a7: 08:bd:62:50:dd:54:bd:7e:d9:84:87:37:b8:2a:7c:2e:70:a3: f2:88:47:db:a4:30:0a:b0:83:a3:db:ea:29:a2:b6:cc:7c:88: fc:d0:fc:ed:ed:91:dc:c6:1c:fc:95:ed:25:1b:91:87:80:a4: 58:bb:36:dc:d6:7d:d3:d1:74:e4:68:eb:59:78:48:48:b4:2a: 37:34:b4:ab:40:3a:f0:98:eb:d3:2a:b5:0f:0b:bb:87:98:d2: e5:ca:70:54:1f:ad:19:b4:f8:a3:28:2a:76:bf:33:30:48:e1: 31:5d:a4:5b:c0:ce:6b:e2:de:e5:be:64:03:f6:3d:6d:62:49: 26:7d:7f:fb:77:2d:cf:3e:b9:18:4d:eb:e3:a4:d7:af:ab:ce: 19:b1:74:67:d2:47:ad:2c:95:02:67:f8:ab:1a:d4:3a:14:1a: 04:40:70:86:fd:11:40:39:73:77:73:c2:20:cb:2f:85:3c:65: 10:b0:47:02:40:18:e4:09:27:ce:5e:2c:1d:1f:36:21:54:65: c7:83:ba:0f:36:a5:2e:31:50:96:eb:d5:83:c0:f0:37:8b:f6: 08:d9:5d:2d:62:e2:39:6d:3e:5d:83:0b:fa:c6:cb:f4:13:2e: 36:8c:b0:f1 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIULNpcVrDWYd0kPwYUetKcgNBcNDswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyMDE2MTAxOVoX DTI3MDUxOTE2MTUxOVowMzExMC8GA1UEAxMoOEIzODZBNUU1NUJCMDQwM0QzNzFG RUEyMDE0RjZFQTcwODE2NkMyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJEZuijAkzfqkwdS4kaHQq5P5TKBacamHLJI2nn7pYAWmNDzISXOch9QMXB2 6gp6Yv+WWwRTDwqRjqaYB4ex4bqnwDZ46HLlZS3SnoWBkRY5AlhKdweDuaIPviXu TVarJADyKSQbNZT08VPbXgTQkWGKyK7hjtRMldrwOGCVIgv83k/lXID408dvwSOX lomEs+Vlu7WDgjaT+I4hx4faLgc5kkgjYqdBGDjSsHuk3TgLPXQHRNuOF5Va8Q6h z/OG77C6KYD7l1x2S09PzRRnHl4eLDHjXcGtpNRnZjKO/F5L+67CIqBdMrZBxWze r/uk9DlaZgbFw3UPr7FvXj379vkCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBSLOGpe VbsEA9Nx/qIBT26nCBZsJzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJA4CZ1AwDQYJKoZIhvcNAQEL BQADggEBAAn0Aqn6nNsH9Gksxmv5DIMLpwi9YlDdVL1+2YSHN7gqfC5wo/KIR9uk MAqwg6Pb6imitsx8iPzQ/O3tkdzGHPyV7SUbkYeApFi7NtzWfdPRdORo61l4SEi0 Kjc0tKtAOvCY69MqtQ8Lu4eY0uXKcFQfrRm0+KMoKna/MzBI4TFdpFvAzmvi3uW+ ZAP2PW1iSSZ9f/t3Lc8+uRhN6+Ok16+rzhmxdGfSR60slQJn+Ksa1DoUGgRAcIb9 EUA5c3dzwiDLL4U8ZRCwRwJAGOQJJ85eLB0fNiFUZceDug82pS4xUJbr1YPA8DeL 9gjZXS1i4jltPl2DC/rGy/QTLjaMsPE= -----END CERTIFICATE-----Generated at Sat May 23 07:08:24 2026 by rpki-client