$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140316.roa File: AS140316.roa (raw, json) Hash identifier: 8zy1DdDFISkHaU0O4EzdCfRSdanmsFY1RGn+lUAeBQ0= Subject key identifier: CE:6A:48:C0:43:F6:58:A8:33:11:BB:2F:AF:35:DB:A9:24:7D:60:59 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 49B33230DE8C8F5AD355E37E03EBBCD589151A96 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140316.roa Signing time: Thu 16 Jul 2026 16:02:00 +0000 ROA not before: Thu 16 Jul 2026 15:57:00 +0000 ROA not after: Thu 15 Jul 2027 16:02:00 +0000 asID: 140316 IP address blocks: 218.15.228.0/24 maxlen: 24 240e:108:404f::/48 maxlen: 48 240e:108:484f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 09:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b3:32:30:de:8c:8f:5a:d3:55:e3:7e:03:eb:bc:d5:89:15:1a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jul 16 15:57:00 2026 GMT Not After : Jul 15 16:02:00 2027 GMT Subject: CN=CE6A48C043F658A83311BB2FAF35DBA9247D6059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e3:11:9e:49:36:34:29:fc:ed:b9:bd:46:a8: 7b:7d:2d:75:8a:61:b3:e4:7f:fc:7c:cc:ac:c4:5d: cb:8d:ef:06:19:c5:92:55:57:08:32:5a:84:00:df: f8:08:fd:48:4b:8d:e3:53:7b:ab:68:3f:59:3e:be: a3:d3:24:dc:31:b1:90:5b:d8:07:e6:2d:18:e5:39: db:7b:b6:cf:c9:89:17:4b:ab:69:5c:0d:60:e0:e0: 96:22:92:6d:82:b3:7a:c4:43:5b:cc:d2:a8:86:9d: 1b:2d:5f:82:6a:f0:0d:75:cd:0f:2d:19:e0:26:f8: 38:37:b7:f7:61:bf:61:9d:8b:22:c8:f3:00:eb:8f: 7d:3a:ce:ee:5b:83:c9:0f:c5:a1:87:83:a4:58:1d: 00:fb:23:14:73:38:96:2b:6e:47:3f:9f:43:14:33: c5:e6:b4:f2:8d:19:1e:d2:94:1a:cd:f0:56:85:e7: 54:ab:5a:99:fb:4d:9b:02:de:30:2c:cb:59:82:a7: e2:a9:3a:df:53:b3:16:4b:78:11:93:47:23:31:ed: 50:9b:8b:d0:4f:82:7b:d4:a0:fe:04:0a:bf:e9:83: bf:eb:3d:6d:5a:77:bb:c1:1e:73:9e:a0:8c:1f:11: 6d:1b:60:ac:1e:40:62:40:9b:52:9a:d5:93:08:a2: c2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6A:48:C0:43:F6:58:A8:33:11:BB:2F:AF:35:DB:A9:24:7D:60:59 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140316.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.15.228.0/24 IPv6: 240e:108:404f::/48 240e:108:484f::/48 Signature Algorithm: sha256WithRSAEncryption 92:a5:86:db:84:dc:2c:f0:af:8f:bd:c4:54:55:fc:09:b9:8f: f0:e7:c3:0f:cf:16:8d:42:5e:a5:6e:d7:f0:0b:51:0f:e2:ea: ba:bc:e6:ac:d5:1d:f0:ca:77:c7:3b:4c:ea:74:69:cd:01:a7: 68:33:07:98:5e:60:75:08:f0:94:35:b6:aa:c8:12:c2:08:53: c7:fe:06:13:7b:cd:7d:a3:bb:07:95:3f:cc:f2:30:af:0a:b0: 97:85:b7:e5:31:55:d0:f4:89:02:b8:4f:d7:40:e0:c3:75:51: 16:44:0c:0e:c3:50:fb:ee:06:87:11:de:df:9f:c2:60:e7:d5: e6:fa:02:88:9e:6c:02:2c:8c:3f:d6:04:22:af:9f:40:e3:45: 53:e7:cd:c4:db:dc:e3:3d:ea:12:78:01:cc:d7:8c:df:a4:c7: 7a:f7:e2:38:38:8e:df:bc:64:62:16:da:09:40:0c:2d:50:2d: 4f:3c:e4:02:aa:cd:6a:c5:1f:b7:16:09:08:c8:fd:3c:97:e8: 27:17:5e:52:c1:7a:59:6c:14:7e:26:c5:4a:5e:5d:13:a7:6e: 71:b1:f1:de:a7:f8:f7:8e:0e:59:66:30:b2:c7:b0:32:ca:1c: 15:5f:ea:1e:58:a0:22:ec:5e:ff:a4:9e:b1:84:9e:b0:0c:8c: 56:fc:1c:6e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUSbMyMN6Mj1rTVeN+A+u81YkVGpYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDcxNjE1NTcwMFoX DTI3MDcxNTE2MDIwMFowMzExMC8GA1UEAxMoQ0U2QTQ4QzA0M0Y2NThBODMzMTFC QjJGQUYzNURCQTkyNDdENjA1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzjEZ5JNjQp/O25vUaoe30tdYphs+R//HzMrMRdy43vBhnFklVXCDJahADf +Aj9SEuN41N7q2g/WT6+o9Mk3DGxkFvYB+YtGOU523u2z8mJF0uraVwNYODgliKS bYKzesRDW8zSqIadGy1fgmrwDXXNDy0Z4Cb4ODe392G/YZ2LIsjzAOuPfTrO7luD yQ/FoYeDpFgdAPsjFHM4lituRz+fQxQzxea08o0ZHtKUGs3wVoXnVKtamftNmwLe MCzLWYKn4qk631OzFkt4EZNHIzHtUJuL0E+Ce9Sg/gQKv+mDv+s9bVp3u8Eec56g jB8RbRtgrB5AYkCbUprVkwiiwqcCAwEAAaOCAf4wggH6MB0GA1UdDgQWBBTOakjA Q/ZYqDMRuy+vNdupJH1gWTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwMzE2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQA2g/kMBgEAgACMBIDBwAkDgEI QE8DBwAkDgEISE8wDQYJKoZIhvcNAQELBQADggEBAJKlhtuE3Czwr4+9xFRV/Am5 j/Dnww/PFo1CXqVu1/ALUQ/i6rq85qzVHfDKd8c7TOp0ac0Bp2gzB5heYHUI8JQ1 tqrIEsIIU8f+BhN7zX2juweVP8zyMK8KsJeFt+UxVdD0iQK4T9dA4MN1URZEDA7D UPvuBocR3t+fwmDn1eb6AoiebAIsjD/WBCKvn0DjRVPnzcTb3OM96hJ4AczXjN+k x3r34jg4jt+8ZGIW2glADC1QLU885AKqzWrFH7cWCQjI/TyX6CcXXlLBellsFH4m xUpeXROnbnGx8d6n+PeODllmMLLHsDLKHBVf6h5YoCLsXv+knrGEnrAMjFb8HG4= -----END CERTIFICATE-----Generated at Fri Jul 24 14:51:25 2026 by rpki-client