$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140886.roa File: AS140886.roa (raw, json) Hash identifier: 0bKmBMqY4GT9DntdzvxqqH9jrqXsD05dAbbNpon/ua4= Subject key identifier: 34:87:A4:E1:C4:B0:D7:2F:78:FF:7E:1A:A4:03:0D:BC:BE:BC:87:1B Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Certificate serial: 79633BD800B219F9BA80BB0A8622D1C9927AE2A5 Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140886.roa Signing time: Sun 13 Sep 2026 04:50:14 +0000 ROA not before: Sun 13 Sep 2026 04:45:14 +0000 ROA not after: Sun 12 Sep 2027 04:50:14 +0000 asID: 140886 IP address blocks: 121.31.28.0/22 maxlen: 22 121.31.40.0/22 maxlen: 22 2408:8001:40f0::/44 maxlen: 44 2408:875c::/37 maxlen: 37 2408:875c::/44 maxlen: 44 2408:875c:800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 05:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:63:3b:d8:00:b2:19:f9:ba:80:bb:0a:86:22:d1:c9:92:7a:e2:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Validity Not Before: Sep 13 04:45:14 2026 GMT Not After : Sep 12 04:50:14 2027 GMT Subject: CN=3487A4E1C4B0D72F78FF7E1AA4030DBCBEBC871B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:f9:b2:3c:61:eb:19:60:c2:94:92:74:fa: ca:2e:36:a4:0a:c7:39:d2:25:86:6e:4b:24:bd:f0: c2:fa:68:4c:e8:ca:bb:b5:62:45:7c:2f:da:93:8a: c3:05:a9:a3:83:cf:a7:bc:06:16:dd:28:d4:ce:6d: 1a:c5:bb:33:27:99:41:63:aa:2a:77:43:d4:6d:d3: ad:2d:6d:05:12:1e:d4:57:63:3f:60:10:7d:10:ff: c9:d5:db:e8:0f:6c:7e:a0:31:c5:e9:8e:f9:87:af: 7d:e9:62:50:7e:fd:ad:47:2e:60:23:ce:91:e3:db: 4b:61:ea:44:e6:e1:a3:51:43:57:f3:df:c8:09:18: 96:2c:4c:71:65:ee:b9:c5:17:a5:7f:09:17:45:24: 44:de:61:76:89:f1:4b:04:9a:16:8d:28:1e:99:be: 6e:7c:ab:da:43:73:44:a7:db:d3:94:9d:77:c5:d9: 3c:04:b4:d5:2c:ed:95:c8:26:ff:1a:7a:30:dd:ca: a2:97:5e:ea:8e:d7:9d:08:31:78:c0:96:52:dd:9b: c0:cc:9c:52:dc:31:b8:e6:98:44:af:28:b8:1e:79: cb:07:69:25:13:c4:a0:26:34:fa:92:79:b3:68:63: 94:dd:1f:67:5a:d8:33:69:b8:26:ef:0a:b6:d7:0c: 16:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:87:A4:E1:C4:B0:D7:2F:78:FF:7E:1A:A4:03:0D:BC:BE:BC:87:1B X509v3 Authority Key Identifier: keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS140886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.31.28.0/22 121.31.40.0/22 IPv6: 2408:8001:40f0::/44 2408:875c::/36 Signature Algorithm: sha256WithRSAEncryption 7f:e2:e2:07:91:de:2a:f2:13:ef:c8:b9:6a:d1:96:f4:bb:98: 5e:18:df:af:fb:7e:2f:d0:5a:a2:2d:8a:65:b3:42:73:a9:a1: 64:fe:40:ef:f5:db:f4:54:8c:8b:d5:01:52:c7:7c:15:74:3d: 11:2c:70:cc:ca:28:e4:77:b1:89:fe:1f:f9:61:be:b4:c8:9b: 36:4f:3b:cd:37:a8:a1:27:78:73:7e:ea:86:2a:c7:78:c3:b7: 64:3a:b9:10:4a:3a:c0:94:36:3f:36:de:56:85:b3:cb:b7:82: 28:76:d9:07:07:25:97:ad:6c:68:ca:ce:85:14:3a:87:fe:bb: 73:66:3b:ed:4f:c1:78:19:69:96:3c:7b:5d:05:01:76:af:2f: c7:1e:13:cd:78:fc:4a:a4:1c:a9:6a:39:8a:fb:ab:12:c3:e4: 08:a6:e2:7f:0d:8b:36:0e:ab:ed:ef:ec:c1:c2:3e:df:55:57: 8b:ed:b5:ab:a6:95:8d:6e:30:db:55:cc:9a:f0:ff:d2:87:01: b0:ea:59:d5:b0:24:57:5c:1c:6d:49:3d:ef:17:10:c8:73:1e: 5f:77:37:40:3b:31:20:41:ce:b8:78:13:0a:9a:30:47:6e:af: 4a:38:14:9c:2e:a9:f0:34:51:77:73:35:81:97:34:9c:dc:26: f8:10:87:5f -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUeWM72ACyGfm6gLsKhiLRyZJ64qUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDkxMzA0NDUxNFoX DTI3MDkxMjA0NTAxNFowMzExMC8GA1UEAxMoMzQ4N0E0RTFDNEIwRDcyRjc4RkY3 RTFBQTQwMzBEQkNCRUJDODcxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM88+bI8YesZYMKUknT6yi42pArHOdIlhm5LJL3wwvpoTOjKu7ViRXwv2pOK wwWpo4PPp7wGFt0o1M5tGsW7MyeZQWOqKndD1G3TrS1tBRIe1FdjP2AQfRD/ydXb 6A9sfqAxxemO+YevfeliUH79rUcuYCPOkePbS2HqRObho1FDV/PfyAkYlixMcWXu ucUXpX8JF0UkRN5hdonxSwSaFo0oHpm+bnyr2kNzRKfb05Sdd8XZPAS01Sztlcgm /xp6MN3Kopde6o7XnQgxeMCWUt2bwMycUtwxuOaYRK8ouB55ywdpJRPEoCY0+pJ5 s2hjlN0fZ1rYM2m4Ju8KttcMFk8CAwEAAaOCAgMwggH/MB0GA1UdDgQWBBQ0h6Th xLDXL3j/fhqkAw28vryHGzAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5 NTM0MjU5My8xL0FTMTQwODg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQCeR8cAwQCeR8oMBcEAgACMBED BwQkCIABQPADBgQkCIdcADANBgkqhkiG9w0BAQsFAAOCAQEAf+LiB5HeKvIT78i5 atGW9LuYXhjfr/t+L9Baoi2KZbNCc6mhZP5A7/Xb9FSMi9UBUsd8FXQ9ESxwzMoo 5Hexif4f+WG+tMibNk87zTeooSd4c37qhirHeMO3ZDq5EEo6wJQ2PzbeVoWzy7eC KHbZBwcll61saMrOhRQ6h/67c2Y77U/BeBlpljx7XQUBdq8vxx4TzXj8SqQcqWo5 ivurEsPkCKbifw2LNg6r7e/swcI+31VXi+21q6aVjW4w21XMmvD/0ocBsOpZ1bAk V1wcbUk97xcQyHMeX3c3QDsxIEHOuHgTCpowR26vSjgUnC6p8DRRd3M1gZc0nNwm +BCHXw== -----END CERTIFICATE-----Generated at Tue Sep 29 11:10:09 2026 by rpki-client