
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140347.roa
File: AS140347.roa (raw, json)
Hash identifier: RTr4wZrwKzEdxrn2LIsBmGGEhdkKRvrWB8CklCYxNcI=
Subject key identifier: 7F:1B:BC:BF:AA:1A:ED:72:A5:61:CE:26:DC:76:06:26:D7:A2:81:A2
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 7C1B0F34E8D4C54572D402056484970A6A5218BB
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140347.roa
Signing time: Tue 26 May 2026 16:19:18 +0000
ROA not before: Tue 26 May 2026 16:14:18 +0000
ROA not after: Tue 25 May 2027 16:19:18 +0000
asID: 140347
IP address blocks: 240e:44d:5440::/42 maxlen: 42
240e:44d:5540::/42 maxlen: 42
240e:44d:5640::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:1b:0f:34:e8:d4:c5:45:72:d4:02:05:64:84:97:0a:6a:52:18:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 26 16:14:18 2026 GMT
Not After : May 25 16:19:18 2027 GMT
Subject: CN=7F1BBCBFAA1AED72A561CE26DC760626D7A281A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:60:7f:14:ab:fd:45:40:95:95:b1:6a:59:
a1:ae:74:88:6c:ac:69:12:f0:a1:20:c4:04:8b:d8:
60:77:80:36:19:8b:c4:8e:9a:9d:7a:ce:ed:d5:b3:
51:20:f3:22:18:56:2a:b2:c3:26:19:b3:09:52:70:
af:ad:5c:50:66:7e:31:89:62:40:45:e1:96:d3:aa:
e2:0a:5d:19:24:af:33:f1:3e:2a:06:4c:3b:9d:14:
a7:4b:45:43:04:9e:73:44:3e:97:cb:5c:aa:02:5f:
dc:03:07:b1:a8:4a:3d:4a:0d:2c:53:7d:c3:f6:78:
3a:6f:da:33:b4:07:f4:f5:66:79:89:f0:06:aa:8b:
47:68:5e:01:6a:ca:62:69:b3:53:81:ae:58:51:56:
3f:ca:f1:e1:b7:e0:cd:52:e7:8e:8e:fb:3c:c1:45:
48:1c:f4:dc:26:7a:6c:ac:72:8b:b9:3c:6f:a9:00:
82:61:e1:73:dc:bc:b2:85:b8:d7:0b:3d:4b:77:bd:
e7:eb:d5:4a:37:40:62:04:e7:11:25:d4:db:de:dc:
ab:4d:e4:b9:29:e7:41:a2:ec:8c:2e:2c:39:43:c7:
e9:49:12:93:a7:ce:5a:fd:cf:ee:76:63:c2:31:7c:
cc:e7:8b:e9:b2:b7:55:97:3a:4f:e2:f3:c9:1a:86:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1B:BC:BF:AA:1A:ED:72:A5:61:CE:26:DC:76:06:26:D7:A2:81:A2
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140347.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:44d:5440::/42
240e:44d:5540::/42
240e:44d:5640::/42
Signature Algorithm: sha256WithRSAEncryption
41:1e:9f:52:30:54:f1:a7:4c:26:23:ce:ee:f7:f0:5f:a0:e1:
67:6c:98:44:cb:6d:54:59:10:31:a1:90:68:bc:6e:68:35:95:
04:4f:96:6d:58:35:dc:2d:60:9d:6c:26:83:6f:7c:d5:01:28:
bb:12:7a:e8:8f:27:a3:b3:2a:54:6f:7e:30:48:08:26:90:2f:
fa:1a:d5:44:95:62:7d:75:35:56:e5:76:34:4a:fc:0e:26:6d:
42:b4:9b:38:f3:89:f7:2d:d1:12:bf:ee:8e:e0:d7:d3:b9:4b:
1e:91:90:58:8e:11:ab:85:dc:4c:79:1c:c7:08:91:2c:1b:64:
a8:68:f1:eb:d9:1d:66:0f:d8:e3:14:ff:51:79:5b:7d:b2:61:
b5:bc:7f:79:25:a7:ff:df:10:31:e4:86:eb:47:74:d3:91:92:
c9:aa:55:7a:6f:86:f5:04:22:81:27:92:d5:2d:8a:78:9d:05:
58:43:b5:34:6e:4c:41:82:25:f1:6a:0c:3e:ef:36:47:2b:2b:
fd:75:a3:d9:0c:06:6d:67:02:6a:73:ae:1d:d3:b4:38:f9:59:
8d:b8:78:1b:f7:a4:c2:f3:31:17:c7:b0:7a:c6:35:b2:b8:8b:
00:19:15:f9:6b:cb:3f:79:94:9a:41:2d:a6:a5:84:d1:ab:4f:
1b:cf:f5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:41 2026 by rpki-client