$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140352.roa File: AS140352.roa (raw, json) Hash identifier: jRTbq8NTkeZBjE64BtLVWJSTWerQ/q42x7wI3AlA7UU= Subject key identifier: AB:B4:A4:70:67:13:80:8A:AA:B2:3F:EA:4B:9A:9D:C9:E6:6C:B0:81 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 28C7424AC5721206BBEFFF661841EE2FA8B3F37F Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140352.roa Signing time: Thu 21 May 2026 16:11:01 +0000 ROA not before: Thu 21 May 2026 16:06:01 +0000 ROA not after: Thu 20 May 2027 16:11:01 +0000 asID: 140352 IP address blocks: 240e:44d:7640::/42 maxlen: 42 240e:44d:7740::/42 maxlen: 42 240e:44d:7840::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 06:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c7:42:4a:c5:72:12:06:bb:ef:ff:66:18:41:ee:2f:a8:b3:f3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 21 16:06:01 2026 GMT Not After : May 20 16:11:01 2027 GMT Subject: CN=ABB4A4706713808AAAB23FEA4B9A9DC9E66CB081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c3:34:54:1a:c5:a6:bc:d7:4c:d2:3c:0b:ef: 5b:2e:77:7f:dc:cd:a6:aa:52:58:cc:b3:c4:48:f9: 1a:a3:2c:6d:e2:6f:43:9c:27:34:06:df:cb:0b:01: 29:01:8f:a0:b6:34:5f:a6:b6:32:11:dc:06:77:ca: 1a:41:43:71:a8:a3:9b:47:ec:40:08:39:57:4a:b1: f0:72:3c:83:34:9d:10:04:e0:15:cf:55:eb:aa:9a: 22:30:9a:09:e5:a7:93:85:f1:fc:27:e8:56:2a:71: bd:17:2d:2d:e0:10:5e:b8:9d:e6:49:d9:5a:be:19: cf:07:c2:f6:fa:c7:92:ee:76:29:f7:a0:63:37:8f: bc:ba:9b:b1:87:c2:68:ff:fb:ad:91:c3:5c:5c:1e: a4:4c:0e:14:13:8f:44:eb:38:4b:e6:4c:c5:9b:bc: 18:92:ba:fe:73:94:a3:a3:8c:5b:74:a4:9a:d6:1d: 0c:c2:e7:8b:cb:a0:ec:4a:9f:7c:33:b2:27:8e:da: dd:7a:80:d1:ef:c4:ac:c2:73:fa:bd:bf:91:a2:f1: a9:c8:6e:67:18:aa:19:d9:f4:9b:66:6b:a4:00:93: 86:5f:38:44:d6:ca:22:5c:9a:00:be:85:54:58:84: 75:83:0c:cd:07:86:2f:bc:6e:3a:9a:f8:9d:b1:1d: 65:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B4:A4:70:67:13:80:8A:AA:B2:3F:EA:4B:9A:9D:C9:E6:6C:B0:81 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140352.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:44d:7640::/42 240e:44d:7740::/42 240e:44d:7840::/42 Signature Algorithm: sha256WithRSAEncryption ac:37:db:ed:33:09:cc:52:a9:b3:78:7e:f7:f2:58:56:39:77: 74:ee:d9:c0:38:87:0b:08:db:b1:8f:ef:48:bc:d9:18:11:e9: 8f:df:c9:cb:e5:92:62:61:7c:83:74:0c:c4:70:f6:5c:5e:bd: 3e:62:4c:43:bd:ca:3a:f2:8f:1e:09:b8:c1:7c:0d:29:70:92: 69:93:79:ee:eb:2d:3e:71:97:42:2f:b9:05:aa:cf:6f:91:a8: 01:b0:42:1e:6f:cd:38:c9:39:b2:75:9a:d3:fa:4c:0f:35:dd: ef:49:01:94:21:70:94:f5:3d:20:53:9c:a2:b2:32:b2:20:26: 3e:1f:2b:72:70:0d:03:69:38:aa:65:76:c4:70:04:07:dc:7d: 16:48:4e:67:33:22:61:23:42:64:d3:c6:03:c5:3d:2f:5c:66: 51:b2:91:24:d5:67:2f:5f:a5:41:50:ec:fb:b8:e8:91:6b:3b: 06:b3:ea:2f:08:30:7d:34:d8:b3:c3:31:15:f4:40:88:b9:c2: 85:38:bf:0e:7a:33:43:d7:f5:57:82:8f:d5:90:88:ca:e7:99: 36:1a:f7:20:f5:e5:71:b1:c0:84:00:66:8c:cd:39:d5:21:a7: 98:3a:a8:68:fe:29:14:6e:0b:6d:e9:d9:24:93:70:b7:b0:53: 41:7b:ab:b5 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUKMdCSsVyEga77/9mGEHuL6iz838wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyMTE2MDYwMVoX DTI3MDUyMDE2MTEwMVowMzExMC8GA1UEAxMoQUJCNEE0NzA2NzEzODA4QUFBQjIz RkVBNEI5QTlEQzlFNjZDQjA4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrDNFQaxaa810zSPAvvWy53f9zNpqpSWMyzxEj5GqMsbeJvQ5wnNAbfywsB KQGPoLY0X6a2MhHcBnfKGkFDcaijm0fsQAg5V0qx8HI8gzSdEATgFc9V66qaIjCa CeWnk4Xx/CfoVipxvRctLeAQXrid5knZWr4ZzwfC9vrHku52KfegYzePvLqbsYfC aP/7rZHDXFwepEwOFBOPROs4S+ZMxZu8GJK6/nOUo6OMW3SkmtYdDMLni8ug7Eqf fDOyJ47a3XqA0e/ErMJz+r2/kaLxqchuZxiqGdn0m2ZrpACThl84RNbKIlyaAL6F VFiEdYMMzQeGL7xuOpr4nbEdZY0CAwEAAaOCAfkwggH1MB0GA1UdDgQWBBSrtKRw ZxOAiqqyP+pLmp3J5mywgTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcGJA4ETXZAAwcGJA4ETXdAAwcG JA4ETXhAMA0GCSqGSIb3DQEBCwUAA4IBAQCsN9vtMwnMUqmzeH738lhWOXd07tnA OIcLCNuxj+9IvNkYEemP38nL5ZJiYXyDdAzEcPZcXr0+YkxDvco68o8eCbjBfA0p cJJpk3nu6y0+cZdCL7kFqs9vkagBsEIeb804yTmydZrT+kwPNd3vSQGUIXCU9T0g U5yisjKyICY+HytycA0DaTiqZXbEcAQH3H0WSE5nMyJhI0Jk08YDxT0vXGZRspEk 1WcvX6VBUOz7uOiRazsGs+ovCDB9NNizwzEV9ECIucKFOL8OejND1/VXgo/VkIjK 55k2Gvcg9eVxscCEAGaMzTnVIaeYOqho/ikUbgtt6dkkk3C3sFNBe6u1 -----END CERTIFICATE-----Generated at Sat May 23 07:08:18 2026 by rpki-client