$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS140717.roa File: AS140717.roa (raw, json) Hash identifier: F4vKDqd+oRuW+dD54h6Z5jvEABTrqdWIPSBZ4SXxlOc= Subject key identifier: 3A:27:3D:C4:42:DA:2A:24:9C:10:FD:96:D8:63:F7:60:31:C1:1B:73 Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 0E8570EE8124D39B84785F05EC75E0C3F0F45D5C Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS140717.roa Signing time: Mon 25 May 2026 05:56:08 +0000 ROA not before: Mon 25 May 2026 05:51:08 +0000 ROA not after: Mon 24 May 2027 05:56:08 +0000 asID: 140717 IP address blocks: 117.48.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:85:70:ee:81:24:d3:9b:84:78:5f:05:ec:75:e0:c3:f0:f4:5d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: May 25 05:51:08 2026 GMT Not After : May 24 05:56:08 2027 GMT Subject: CN=3A273DC442DA2A249C10FD96D863F76031C11B73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:47:6b:a0:48:01:5f:56:69:84:22:ce:b8:0e: a3:3e:9c:8e:ad:f1:f3:64:0a:c1:a6:74:4c:49:a1: 59:7a:ec:4e:0d:06:05:22:2f:98:ba:9e:8b:5c:a5: 4e:01:56:93:83:8f:c1:28:03:70:d1:72:92:d5:6d: 7a:24:87:15:ca:51:52:a2:9f:1e:51:0a:3e:db:95: 0c:0e:29:96:46:8c:f1:90:f2:e4:2d:36:d7:9f:8e: bd:58:09:5f:f6:ff:57:70:2d:5e:39:9d:f7:0e:8d: 74:ff:60:0e:c7:38:22:a2:c0:74:c2:d8:23:0d:77: a7:97:55:45:43:21:f7:eb:23:f3:01:9c:d2:15:a6: ca:3a:3b:91:30:34:fe:1b:31:ab:15:f4:13:ef:74: d1:8d:bd:c1:ce:a3:c3:3f:a2:9c:20:f1:16:5c:37: 52:02:f2:68:b1:46:ac:fc:86:06:11:a5:97:05:9e: 2b:74:50:ab:89:7b:a3:2b:1c:0d:dc:cc:8e:c5:e1: 65:c2:16:ce:6a:0a:fd:60:a3:a7:27:66:e7:71:cf: 7c:2f:94:a7:0c:7b:04:48:67:df:05:4c:5a:7c:24: ba:76:ef:06:5d:b6:d2:43:07:b0:29:a7:ef:a7:69: 60:8f:ca:b3:93:67:50:fd:b2:47:af:05:37:be:3f: 45:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:27:3D:C4:42:DA:2A:24:9C:10:FD:96:D8:63:F7:60:31:C1:1B:73 X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS140717.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.48.156.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:78:ca:8c:99:0f:d4:25:b3:b2:a5:26:f1:aa:48:59:6f:38: 81:cb:85:1e:f0:be:17:72:17:b9:74:64:73:f1:44:99:40:f5: 68:b2:74:a2:b3:5e:ae:4d:21:77:43:ec:aa:12:20:4d:3e:ed: 58:50:bf:78:2d:fc:c3:23:77:8b:ed:74:fd:b9:bc:aa:5e:fd: 9e:96:36:92:a0:b7:f9:86:27:c2:1d:89:5d:84:b2:18:89:a9: a4:97:a5:ff:8d:74:10:f9:5e:01:4d:ff:05:10:a8:f9:56:a4: b9:78:a7:47:66:a6:ce:08:ae:d6:64:73:cd:e1:ce:8a:83:f7: 9b:c6:4c:1e:69:68:c5:83:1a:4d:e2:7d:6f:9b:68:04:8a:cb: 46:81:1a:b5:51:06:bd:27:e1:46:1e:cc:8e:1a:f2:34:a6:0d: af:65:38:10:69:df:9d:76:f3:a4:2a:d8:f2:ca:41:93:78:19: 3c:07:5b:c5:73:20:b6:c8:0f:15:2e:63:1b:d7:fc:ef:f3:6b: 20:cc:87:06:10:94:92:a7:95:bd:ee:c8:11:98:38:a3:53:b4: 09:34:26:cd:9f:ab:ed:c4:19:cf:9c:85:82:25:d5:cd:63:65: 66:68:fc:82:9b:2b:ea:77:77:71:79:b1:a9:b3:bb:54:9a:2a: eb:62:07:3d -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUDoVw7oEk05uEeF8F7HXgw/D0XVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA1MjUwNTUxMDhaFw0yNzA1MjQwNTU2MDhaMDMxMTAvBgNV BAMTKDNBMjczREM0NDJEQTJBMjQ5QzEwRkQ5NkQ4NjNGNzYwMzFDMTFCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwR2ugSAFfVmmEIs64DqM+nI6t 8fNkCsGmdExJoVl67E4NBgUiL5i6notcpU4BVpODj8EoA3DRcpLVbXokhxXKUVKi nx5RCj7blQwOKZZGjPGQ8uQtNtefjr1YCV/2/1dwLV45nfcOjXT/YA7HOCKiwHTC 2CMNd6eXVUVDIffrI/MBnNIVpso6O5EwNP4bMasV9BPvdNGNvcHOo8M/opwg8RZc N1IC8mixRqz8hgYRpZcFnit0UKuJe6MrHA3czI7F4WXCFs5qCv1go6cnZudxz3wv lKcMewRIZ98FTFp8JLp27wZdttJDB7App++naWCPyrOTZ1D9skevBTe+P0UPAgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQUOic9xELaKiScEP2W2GP3YDHBG3MwHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC9BUzE0MDcxNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAXUwnDANBgkqhkiG9w0BAQsFAAOCAQEAi3jKjJkP1CWzsqUm8apIWW84 gcuFHvC+F3IXuXRkc/FEmUD1aLJ0orNerk0hd0PsqhIgTT7tWFC/eC38wyN3i+10 /bm8ql79npY2kqC3+YYnwh2JXYSyGImppJel/410EPleAU3/BRCo+VakuXinR2am zgiu1mRzzeHOioP3m8ZMHmloxYMaTeJ9b5toBIrLRoEatVEGvSfhRh7MjhryNKYN r2U4EGnfnXbzpCrY8spBk3gZPAdbxXMgtsgPFS5jG9f87/NrIMyHBhCUkqeVve7I EZg4o1O0CTQmzZ+r7cQZz5yFgiXVzWNlZmj8gpsr6nd3cXmxqbO7VJoq62IHPQ== -----END CERTIFICATE-----Generated at Sat May 30 00:41:27 2026 by rpki-client