
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140360.roa
File: AS140360.roa (raw, json)
Hash identifier: led7CdmRdoKQIaNROt7stYQ5EdNuSZEyg9v1VCz6JhI=
Subject key identifier: 28:88:93:B1:2C:46:ED:40:55:D1:BB:4C:6C:72:72:82:F5:D8:6E:EB
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 5A7AF608B2E1C93016D4A47C21A483C46ABA30D0
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140360.roa
Signing time: Sun 24 May 2026 16:13:39 +0000
ROA not before: Sun 24 May 2026 16:08:39 +0000
ROA not after: Sun 23 May 2027 16:13:39 +0000
asID: 140360
IP address blocks: 240e:44d:1740::/42 maxlen: 42
240e:44d:1840::/42 maxlen: 42
240e:44d:1940::/42 maxlen: 42
240e:44d:1a40::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:7a:f6:08:b2:e1:c9:30:16:d4:a4:7c:21:a4:83:c4:6a:ba:30:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 24 16:08:39 2026 GMT
Not After : May 23 16:13:39 2027 GMT
Subject: CN=288893B12C46ED4055D1BB4C6C727282F5D86EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:e1:fb:3e:18:72:79:78:90:e8:31:c0:16:
cd:2b:af:59:03:17:c1:e4:a5:bb:21:f2:4a:f9:0a:
31:a3:06:52:3f:35:0a:5d:c0:6b:44:0f:9b:ad:a0:
7b:6c:e3:2b:f2:2c:3d:23:ab:be:7a:86:d2:7d:3e:
20:f6:a8:b3:07:8a:db:97:80:e0:87:a8:05:b2:4f:
66:65:2e:c6:cc:19:2d:a5:ff:56:9f:e2:88:47:11:
c7:88:cb:74:78:d0:2b:55:3a:38:71:81:95:c3:09:
db:a0:e9:19:dc:1a:d2:85:e2:e2:9d:92:d1:a4:d5:
39:e6:70:d5:d7:ac:2a:f6:56:52:48:09:d4:6a:b8:
b0:ad:bf:31:ba:e2:e5:4e:5d:a1:7c:8e:df:7d:ea:
cd:be:71:2f:f9:62:ae:6c:54:44:fd:5a:02:67:8b:
7c:74:4a:74:3d:38:18:c7:0f:28:14:79:d1:d6:ac:
49:1d:6c:56:ab:28:67:00:4e:83:a6:53:33:da:93:
16:55:7d:5f:f1:4e:82:63:71:9a:85:48:f0:64:e2:
b0:58:bc:34:bd:6b:5e:02:e3:d8:93:ab:73:9e:99:
9c:df:fd:6e:13:b4:02:dc:4b:89:b4:7c:6c:d5:2e:
32:dc:3d:d2:c9:92:af:89:49:df:77:a5:cc:a8:f6:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:88:93:B1:2C:46:ED:40:55:D1:BB:4C:6C:72:72:82:F5:D8:6E:EB
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140360.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:44d:1740::/42
240e:44d:1840::/42
240e:44d:1940::/42
240e:44d:1a40::/42
Signature Algorithm: sha256WithRSAEncryption
52:3d:69:99:45:24:c9:5b:de:01:9e:11:1f:cd:49:5e:b1:88:
24:ee:e9:74:94:1f:f8:ad:e9:e5:6b:a4:98:4f:3a:64:e8:c2:
02:07:73:92:d6:06:3e:7b:64:0e:9e:81:7e:97:45:6b:97:9d:
f3:e0:e1:22:97:03:d4:46:95:18:1b:a1:18:aa:a6:08:2e:2c:
7e:37:de:3f:d7:39:07:2b:69:33:95:20:00:30:c0:d7:94:01:
26:40:f7:f7:ac:a7:ae:59:22:0d:0a:8b:c2:5e:ec:d3:e5:98:
6d:f0:d0:ef:8b:8b:f9:ac:4f:d9:77:ff:5f:e1:32:de:4e:61:
a5:af:5a:b5:46:ae:66:03:2a:ca:29:14:ba:dc:d7:ff:91:7e:
6a:17:5d:41:ab:3e:be:43:04:be:61:f4:94:71:04:a9:57:56:
8a:05:d8:67:c1:a5:93:0f:2c:34:a5:11:62:98:e6:fe:1e:2b:
07:d1:e9:7a:d6:12:6e:b1:5d:b5:d4:37:81:7c:5e:1d:9e:cf:
01:94:4c:fd:a2:2e:84:d1:fe:02:01:d6:c9:c8:e4:c5:1b:4e:
e3:79:85:7b:af:6c:cc:b1:68:eb:ae:9c:50:9e:09:74:24:4a:
8c:11:cb:73:5c:9a:81:e4:ce:1f:5e:44:0a:ca:ad:4a:49:29:
bc:d0:95:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:42 2026 by rpki-client