
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140083.roa
File: AS140083.roa (raw, json)
Hash identifier: 8HGusnJ1lKq+o1Zg5e224JIowVcQOMNbZguV85bM+FI=
Subject key identifier: C5:EC:AA:BB:7D:27:02:54:7F:A4:72:DB:FE:A8:C6:A0:61:D8:C8:F0
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 4CE1B3C7F9527DAF459604CC9188F8BF80C98CD2
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140083.roa
Signing time: Wed 10 Jun 2026 16:04:47 +0000
ROA not before: Wed 10 Jun 2026 15:59:47 +0000
ROA not after: Wed 09 Jun 2027 16:04:47 +0000
asID: 140083
IP address blocks: 61.191.48.0/24 maxlen: 24
117.66.0.0/20 maxlen: 20
117.66.0.0/22 maxlen: 22
117.66.4.0/22 maxlen: 22
117.68.0.0/19 maxlen: 19
117.68.8.0/24 maxlen: 24
117.68.9.0/24 maxlen: 24
117.71.0.0/22 maxlen: 22
240e:6:d130::/44 maxlen: 44
240e:95a:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e1:b3:c7:f9:52:7d:af:45:96:04:cc:91:88:f8:bf:80:c9:8c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 10 15:59:47 2026 GMT
Not After : Jun 9 16:04:47 2027 GMT
Subject: CN=C5ECAABB7D2702547FA472DBFEA8C6A061D8C8F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:c0:24:38:f5:33:c3:89:75:ea:cb:76:c5:
34:55:6a:14:9f:d7:ed:63:02:8c:31:82:de:dc:a9:
4e:30:e0:ff:54:ad:56:c1:38:41:1f:16:ba:8b:53:
16:8c:09:70:88:71:b1:a7:a5:99:2e:26:fc:49:dd:
65:b0:02:58:a6:ad:81:27:3c:3c:93:fa:a4:13:16:
4e:9a:b1:e0:dc:93:e7:4c:c7:78:e0:be:70:58:b1:
46:70:c7:08:34:7e:de:7e:22:ac:e7:92:c3:dc:40:
17:ea:77:ac:d4:9d:73:06:80:cd:70:5a:c9:4a:6e:
ca:57:ec:7b:e6:d7:47:c3:37:b2:27:67:e9:7d:64:
b8:91:46:6b:b8:b7:d8:40:39:6f:80:25:06:9b:69:
5a:79:76:79:46:ff:3e:be:35:28:9c:64:78:4d:7f:
be:48:06:d8:ad:85:88:06:44:bd:86:6d:36:30:61:
77:5c:66:3d:f8:71:d6:05:c7:47:69:61:86:e0:68:
bc:aa:c4:7e:7c:31:32:33:e8:46:74:10:61:d7:0b:
87:cf:1c:72:79:24:a5:de:a2:15:95:22:63:a8:ef:
73:70:9f:2d:f1:58:ba:7f:5e:ef:f9:c6:04:47:fd:
8a:45:ae:41:96:1f:a7:c4:c5:24:74:93:f6:68:65:
63:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EC:AA:BB:7D:27:02:54:7F:A4:72:DB:FE:A8:C6:A0:61:D8:C8:F0
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.191.48.0/24
117.66.0.0/20
117.68.0.0/19
117.71.0.0/22
IPv6:
240e:6:d130::/44
240e:95a:3000::/36
Signature Algorithm: sha256WithRSAEncryption
7d:9e:75:2e:6d:20:d7:61:3d:ca:ad:26:20:08:26:f2:f7:d6:
c3:fb:b2:ad:80:1b:5e:d9:b2:1c:81:44:e8:bc:8b:9d:41:e2:
a1:ec:b3:1d:0e:29:79:cf:e9:44:eb:4f:dc:71:9f:c0:81:38:
20:70:f6:84:92:5f:ce:84:77:13:94:78:3a:7c:cb:44:6e:a7:
2b:fe:43:52:0e:e0:93:9a:cf:21:c2:4d:6a:e7:16:44:cf:2f:
2b:be:df:ad:c2:35:84:1d:27:29:e9:bb:86:35:cc:a1:fb:17:
b2:c1:ec:4d:81:d1:fe:23:c7:76:2f:a4:6f:b5:4b:7d:98:fc:
ea:b2:70:cb:bf:f4:2b:14:2e:5b:f9:dd:ca:a6:fc:98:f5:9d:
2d:74:ca:be:33:5f:be:72:0f:9b:4c:bf:4e:eb:36:b5:93:d0:
7c:6e:79:f0:d6:8e:0d:18:6d:c2:d0:30:70:fc:47:c8:c6:63:
5e:61:13:64:17:b6:a2:50:1d:e8:11:7f:25:38:7c:72:f0:55:
f5:e9:0e:dd:0c:bb:c9:ed:6b:43:0c:9d:f3:9d:51:b8:83:e9:
d5:20:c1:f1:93:41:58:4b:aa:fb:fb:b8:2e:d0:89:e8:fe:34:
77:a6:ea:eb:51:28:8c:59:0f:e5:e6:75:2e:9f:7d:b1:a0:c3:
f4:fa:06:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:39 2026 by rpki-client