$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141006.roa File: AS141006.roa (raw, json) Hash identifier: p9ElcATHBFQP2nllaPibH3GyhrfB8zv3gqlOSpWGh/g= Subject key identifier: B9:77:CA:94:80:1A:73:C5:F5:F7:1B:59:E4:44:25:77:FA:34:73:B2 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 0624F1DB93C33A078596286602E64AC1F5A5DBC3 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141006.roa Signing time: Tue 26 May 2026 16:05:57 +0000 ROA not before: Tue 26 May 2026 16:00:57 +0000 ROA not after: Tue 25 May 2027 16:05:57 +0000 asID: 141006 IP address blocks: 1.183.208.0/20 maxlen: 20 240e:918:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 18:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:24:f1:db:93:c3:3a:07:85:96:28:66:02:e6:4a:c1:f5:a5:db:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 26 16:00:57 2026 GMT Not After : May 25 16:05:57 2027 GMT Subject: CN=B977CA94801A73C5F5F71B59E4442577FA3473B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:65:0e:08:36:9e:45:ab:08:ac:ed:ef:ff: 85:fb:8d:42:cb:2f:19:64:a1:dd:00:da:6a:62:3d: 92:a3:3c:a8:df:d6:a3:13:0e:6c:3f:78:bf:2a:92: ee:3c:12:17:e7:40:a3:d3:8a:d6:d6:ff:06:f3:8a: 2d:a1:7d:d9:19:3c:ff:1a:b6:60:37:67:83:ad:6e: 03:20:2a:51:57:b9:5b:11:30:66:2a:56:81:21:43: 54:21:2c:97:d4:91:6f:c6:f7:36:99:24:a8:fd:29: 7f:0b:7e:eb:a4:69:77:fe:a8:62:48:7f:ef:54:d9: e9:cc:49:24:a3:4e:74:36:7a:dc:d9:4d:4a:0b:c7: 72:46:0f:61:c9:6a:86:9e:c7:f4:e2:65:eb:8e:66: 12:97:7d:ad:4a:bc:5a:04:a5:ad:1a:2c:bd:0f:35: ec:c2:e7:37:7d:9d:d0:50:d7:05:22:15:1d:68:a3: a8:79:9a:0d:8a:2e:ed:aa:99:be:0d:5e:28:a2:77: c6:bf:a7:a9:e6:2b:54:20:89:30:3a:0f:99:82:db: 9c:bf:3b:ef:61:d9:e5:c6:84:10:be:73:94:a7:a2: d0:61:f4:2f:56:55:72:0d:98:38:62:9f:9d:48:3b: 5e:58:d4:3b:c2:0d:f2:06:48:08:7d:f9:08:54:25: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:77:CA:94:80:1A:73:C5:F5:F7:1B:59:E4:44:25:77:FA:34:73:B2 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS141006.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.183.208.0/20 IPv6: 240e:918:a000::/40 Signature Algorithm: sha256WithRSAEncryption 8b:d3:95:10:0d:b4:66:04:8a:bc:b0:7f:fc:49:ba:63:84:5d: 45:e6:f7:62:24:6d:53:b7:5d:7a:51:cf:42:41:0d:2c:54:b5: 27:a0:f1:76:d5:55:ed:09:7b:c6:a8:f2:de:2f:e3:f0:36:91: 2a:e4:2f:cc:a7:d9:ed:7c:d9:cb:96:37:0d:e8:d3:9b:28:0f: 01:1a:4b:15:02:69:03:81:c3:40:6f:12:2c:6b:92:c3:2f:fb: 0e:87:70:42:19:b1:3b:6a:01:be:1f:8c:25:75:aa:2f:7c:b6: 42:9d:5d:40:e9:e8:ed:c3:be:2e:74:3b:61:64:f5:1d:be:cc: 4a:3a:62:02:77:6c:7b:49:7c:af:57:5e:65:dc:84:6d:8c:c9: 30:41:fd:0e:ec:fc:09:91:81:5a:9a:5e:68:d7:34:ce:9e:2d: ec:78:2c:a2:3e:78:72:f0:30:22:71:4e:56:95:79:5b:2e:ba: b7:e3:3d:f5:ff:3d:aa:0c:d5:8a:91:88:9d:36:8d:1a:81:a0: 4d:e1:f6:37:d3:90:8a:a9:04:71:03:47:1b:0c:4e:f5:33:b3: 07:a5:0b:12:e0:68:ab:37:c2:3f:45:16:d6:9d:9d:2a:8c:a8: 82:19:71:1a:7d:0a:9b:05:fe:5e:8b:18:91:17:e5:e6:3a:97: 85:e3:a9:50 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUBiTx25PDOgeFlihmAuZKwfWl28MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyNjE2MDA1N1oX DTI3MDUyNTE2MDU1N1owMzExMC8GA1UEAxMoQjk3N0NBOTQ4MDFBNzNDNUY1Rjcx QjU5RTQ0NDI1NzdGQTM0NzNCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKC2ZQ4INp5Fqwis7e//hfuNQssvGWSh3QDaamI9kqM8qN/WoxMObD94vyqS 7jwSF+dAo9OK1tb/BvOKLaF92Rk8/xq2YDdng61uAyAqUVe5WxEwZipWgSFDVCEs l9SRb8b3NpkkqP0pfwt+66Rpd/6oYkh/71TZ6cxJJKNOdDZ63NlNSgvHckYPYclq hp7H9OJl645mEpd9rUq8WgSlrRosvQ817MLnN32d0FDXBSIVHWijqHmaDYou7aqZ vg1eKKJ3xr+nqeYrVCCJMDoPmYLbnL8772HZ5caEEL5zlKei0GH0L1ZVcg2YOGKf nUg7XljUO8IN8gZICH35CFQlnpkCAwEAAaOCAfQwggHwMB0GA1UdDgQWBBS5d8qU gBpzxfX3G1nkRCV3+jRzsjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQxMDA2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEAbfQMA4EAgACMAgDBgAkDgkY oDANBgkqhkiG9w0BAQsFAAOCAQEAi9OVEA20ZgSKvLB//Em6Y4RdReb3YiRtU7dd elHPQkENLFS1J6DxdtVV7Ql7xqjy3i/j8DaRKuQvzKfZ7XzZy5Y3DejTmygPARpL FQJpA4HDQG8SLGuSwy/7DodwQhmxO2oBvh+MJXWqL3y2Qp1dQOno7cO+LnQ7YWT1 Hb7MSjpiAndse0l8r1deZdyEbYzJMEH9Duz8CZGBWppeaNc0zp4t7Hgsoj54cvAw InFOVpV5Wy66t+M99f89qgzVipGInTaNGoGgTeH2N9OQiqkEcQNHGwxO9TOzB6UL EuBoqzfCP0UW1p2dKoyoghlxGn0KmwX+XosYkRfl5jqXheOpUA== -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:43 2026 by rpki-client