
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140316.roa
File: AS140316.roa (raw, json)
Hash identifier: rnimLl0E/gkNUxUX6Zqlx6gxlQABqfdxfThtVYi891s=
Subject key identifier: E7:8D:35:24:82:2D:3B:D1:CF:36:5B:5D:07:B1:AB:8B:D1:1A:C3:C6
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 071B656A38410DB60F32309FEC70B9F4B9489110
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140316.roa
Signing time: Tue 02 Jun 2026 16:24:36 +0000
ROA not before: Tue 02 Jun 2026 16:19:36 +0000
ROA not after: Tue 01 Jun 2027 16:24:36 +0000
asID: 140316
IP address blocks: 240e:108:404f::/48 maxlen: 48
240e:108:484f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1b:65:6a:38:41:0d:b6:0f:32:30:9f:ec:70:b9:f4:b9:48:91:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 2 16:19:36 2026 GMT
Not After : Jun 1 16:24:36 2027 GMT
Subject: CN=E78D3524822D3BD1CF365B5D07B1AB8BD11AC3C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:ab:4e:64:7c:f8:b1:e8:dc:a8:e8:ca:8d:
d8:d4:24:b6:29:f5:0a:d8:64:ea:47:f1:2a:e6:7e:
a0:81:ff:39:11:2f:1b:f6:8e:d2:25:12:ac:28:51:
dd:5f:4b:b5:25:25:f2:97:37:9c:37:03:fd:0d:c2:
5a:24:e1:47:f3:9d:17:c4:84:81:19:07:38:7a:e6:
6c:b0:45:e2:5d:c9:68:14:9b:2d:ce:60:94:8a:8f:
53:70:b8:29:0a:0d:e5:2d:ee:9c:02:cf:13:fc:aa:
ea:2e:63:a9:d2:26:28:28:6a:70:35:7c:93:2c:36:
2c:ff:b6:e3:8a:a9:34:f1:61:87:b7:eb:98:07:de:
20:25:72:31:8e:da:60:a5:59:7e:76:20:0e:3c:72:
8e:e3:26:9c:99:ee:0c:64:21:33:98:32:21:98:a3:
e1:8f:10:8e:4c:8f:6a:a0:bd:b7:52:e4:46:5c:33:
0f:28:95:51:31:c4:12:e3:17:f0:14:1b:b5:a2:18:
3b:6a:d9:4c:fd:c0:0c:e9:b5:56:d8:36:59:72:82:
58:bf:08:c5:7d:dc:8a:07:8e:60:80:16:4a:5c:f7:
82:35:8b:ac:76:75:92:00:38:3d:d8:6c:82:ec:fb:
eb:d4:02:3d:d3:43:52:c7:ae:fa:74:b7:ef:22:9a:
aa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8D:35:24:82:2D:3B:D1:CF:36:5B:5D:07:B1:AB:8B:D1:1A:C3:C6
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140316.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:108:404f::/48
240e:108:484f::/48
Signature Algorithm: sha256WithRSAEncryption
27:e4:6e:d8:43:11:64:74:31:2a:55:72:ec:5d:ac:28:c1:96:
7a:ee:4b:dd:df:f7:66:91:8a:88:4d:b0:19:24:4b:5b:bc:52:
d2:ed:d9:25:6c:d4:8f:b3:47:2a:f1:af:ac:83:41:1a:28:fa:
c5:df:75:b7:81:9a:46:86:ae:46:a7:a2:82:7c:14:f3:48:be:
c5:60:b3:3d:7c:1c:b6:e2:91:bb:8d:5d:4e:64:d6:7d:c4:0d:
ec:18:9d:6e:ea:17:e5:dc:5e:03:94:ce:8e:70:c2:4a:61:b3:
4c:46:35:ad:61:d2:9f:a3:ab:71:e1:52:84:aa:cd:42:a6:46:
b6:1b:26:29:e8:38:4a:e4:12:f3:79:90:18:bc:29:50:cd:a0:
35:4c:18:de:ee:9d:49:62:7c:30:54:69:17:aa:cd:9a:c3:6c:
19:25:af:ff:0e:34:93:bd:bf:e0:e9:7c:69:37:f5:2a:fd:73:
16:01:d3:46:9c:ee:2f:4e:2e:3b:3a:b7:a6:3a:81:c2:d1:ee:
dd:b8:1a:5e:8b:e8:93:a0:8b:a0:80:21:21:e9:ee:da:15:af:
ba:74:66:e2:3f:84:59:17:32:89:f6:17:c8:aa:4c:e5:ef:7c:
d1:db:41:ef:4b:5d:d9:2a:d7:18:98:10:12:41:89:f3:b5:55:
78:af:c9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:36 2026 by rpki-client