$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140315.roa File: AS140315.roa (raw, json) Hash identifier: ErU7v6i/LpUhemLjc8qbK6g4ijbK+IXx9MkxK/u+4mo= Subject key identifier: 8E:26:A4:B2:27:30:03:89:88:FB:6F:AF:E4:92:3A:08:AF:31:32:A0 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 3AA0B87724408B3456543DAC7A139C1AD1611D74 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140315.roa Signing time: Thu 16 Jul 2026 16:02:00 +0000 ROA not before: Thu 16 Jul 2026 15:57:00 +0000 ROA not after: Thu 15 Jul 2027 16:02:00 +0000 asID: 140315 IP address blocks: 61.143.134.0/24 maxlen: 24 218.15.136.0/24 maxlen: 24 240e:108:4056::/48 maxlen: 48 240e:108:4856::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 09:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a0:b8:77:24:40:8b:34:56:54:3d:ac:7a:13:9c:1a:d1:61:1d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jul 16 15:57:00 2026 GMT Not After : Jul 15 16:02:00 2027 GMT Subject: CN=8E26A4B22730038988FB6FAFE4923A08AF3132A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:f7:8a:4e:34:78:8c:58:0a:2f:1a:4b:2e: 1f:17:1c:33:cf:cc:16:7f:e2:d3:4d:e1:d7:21:98: c2:79:88:c2:1d:c5:f4:ba:1f:a3:52:56:ba:76:fa: 41:26:a7:ae:61:38:76:d0:6a:36:91:26:af:2c:88: ec:d5:4b:fa:40:0d:4e:c2:63:7e:78:67:5a:d5:1c: 75:68:26:c7:1f:69:54:b0:74:bf:04:da:04:93:e9: 78:90:53:43:bb:90:7f:a4:c7:0f:74:f0:fd:68:7c: 48:1a:47:81:bf:e0:da:39:37:1f:9f:7a:e9:54:a2: d1:af:99:5c:b3:2b:79:57:c1:b3:a7:69:48:2e:d7: da:50:fa:d0:e3:70:d7:31:e3:6d:98:6b:5b:e6:7c: 57:bb:18:47:f3:b4:db:8d:ad:a1:76:91:d6:d3:34: 9f:bf:96:80:61:01:d4:3a:50:20:ce:6c:e3:91:b5: 65:40:09:4a:a6:a7:53:48:00:37:63:67:52:57:c3: 82:80:84:89:99:cc:61:0f:8b:9d:21:6b:7c:5e:fe: 8d:d1:ff:5b:19:b7:6d:df:e8:b7:7b:07:bb:c1:9c: 70:28:f0:20:cf:25:f1:7e:e7:dd:76:59:88:88:9f: 57:2c:b7:26:90:6f:f9:07:64:22:13:0a:0d:0e:70: 63:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:26:A4:B2:27:30:03:89:88:FB:6F:AF:E4:92:3A:08:AF:31:32:A0 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140315.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.143.134.0/24 218.15.136.0/24 IPv6: 240e:108:4056::/48 240e:108:4856::/48 Signature Algorithm: sha256WithRSAEncryption 16:85:e7:f1:06:70:39:6f:15:e9:f8:3f:e4:40:60:16:44:e3: 3a:42:c1:db:ad:5b:6a:7d:cf:41:69:86:6c:c1:7c:bc:10:6a: 66:83:18:18:78:60:55:73:0c:44:11:19:87:77:04:d1:01:7c: 0d:0b:4c:5e:ff:5e:2a:f0:e1:b8:71:7c:08:bc:0b:47:3b:05: 8d:c4:63:06:a2:f4:d2:23:71:e6:53:56:c0:d6:45:28:c5:dc: eb:e7:75:e0:6b:c0:09:41:2e:35:22:2e:32:a5:01:1d:ac:77: 9f:60:c2:7f:98:49:4d:02:b2:d5:e7:49:77:0e:b1:b3:56:44: 9a:dd:ec:4a:dc:0a:ed:97:ac:6f:50:a4:e0:a4:98:c3:e5:e7: 44:d5:67:75:56:22:aa:7a:9d:fa:6e:74:e6:a6:97:8b:97:b8: 58:2b:c2:8e:9b:96:dd:32:5b:1e:a1:3a:fa:b6:8d:d3:4b:a0: 46:51:d3:06:46:b5:77:e9:a5:af:9a:dc:d5:29:ce:ce:48:c7: 9b:d2:36:74:a1:5c:6b:d6:58:f0:35:02:b8:cf:1b:14:31:41: 4d:12:2f:31:c8:09:6e:4a:71:b1:77:26:77:64:db:04:f3:95: 07:57:b7:9c:80:2f:88:be:f6:ff:ae:65:ea:c5:bf:3c:fe:12: de:a3:de:39 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUOqC4dyRAizRWVD2sehOcGtFhHXQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDcxNjE1NTcwMFoX DTI3MDcxNTE2MDIwMFowMzExMC8GA1UEAxMoOEUyNkE0QjIyNzMwMDM4OTg4RkI2 RkFGRTQ5MjNBMDhBRjMxMzJBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSz94pONHiMWAovGksuHxccM8/MFn/i003h1yGYwnmIwh3F9Lofo1JWunb6 QSanrmE4dtBqNpEmryyI7NVL+kANTsJjfnhnWtUcdWgmxx9pVLB0vwTaBJPpeJBT Q7uQf6THD3Tw/Wh8SBpHgb/g2jk3H5966VSi0a+ZXLMreVfBs6dpSC7X2lD60ONw 1zHjbZhrW+Z8V7sYR/O0242toXaR1tM0n7+WgGEB1DpQIM5s45G1ZUAJSqanU0gA N2NnUlfDgoCEiZnMYQ+LnSFrfF7+jdH/Wxm3bd/ot3sHu8GccCjwIM8l8X7n3XZZ iIifVyy3JpBv+QdkIhMKDQ5wY3kCAwEAAaOCAgQwggIAMB0GA1UdDgQWBBSOJqSy JzADiYj7b6/kkjoIrzEyoDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAPY+GAwQA2g+IMBgEAgACMBID BwAkDgEIQFYDBwAkDgEISFYwDQYJKoZIhvcNAQELBQADggEBABaF5/EGcDlvFen4 P+RAYBZE4zpCwdutW2p9z0FphmzBfLwQamaDGBh4YFVzDEQRGYd3BNEBfA0LTF7/ Xirw4bhxfAi8C0c7BY3EYwai9NIjceZTVsDWRSjF3OvndeBrwAlBLjUiLjKlAR2s d59gwn+YSU0CstXnSXcOsbNWRJrd7ErcCu2XrG9QpOCkmMPl50TVZ3VWIqp6nfpu dOaml4uXuFgrwo6blt0yWx6hOvq2jdNLoEZR0wZGtXfppa+a3NUpzs5Ix5vSNnSh XGvWWPA1ArjPGxQxQU0SLzHICW5KcbF3Jndk2wTzlQdXt5yAL4i+9v+uZerFvzz+ Et6j3jk= -----END CERTIFICATE-----Generated at Fri Jul 24 14:51:18 2026 by rpki-client