
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140376.roa
File: AS140376.roa (raw, json)
Hash identifier: Gwvq4ohfOP3KuGkrcXnaZl73Ns79Tmo3ZjqSvub2ctA=
Subject key identifier: B0:E0:2C:34:C5:9F:7F:E6:45:30:72:F9:E1:A6:DD:C2:67:03:05:72
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 241D2D46570CC7EBC8BD9B3E77772DAFF3ED4FAC
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140376.roa
Signing time: Mon 01 Jun 2026 16:41:13 +0000
ROA not before: Mon 01 Jun 2026 16:36:13 +0000
ROA not after: Mon 31 May 2027 16:41:13 +0000
asID: 140376
IP address blocks: 240e:96b:6024::/48 maxlen: 48
240e:96b:6025::/48 maxlen: 48
240e:96b:6026::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:1d:2d:46:57:0c:c7:eb:c8:bd:9b:3e:77:77:2d:af:f3:ed:4f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 1 16:36:13 2026 GMT
Not After : May 31 16:41:13 2027 GMT
Subject: CN=B0E02C34C59F7FE6453072F9E1A6DDC267030572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:ad:c9:b0:ba:ab:a9:42:0b:aa:a2:9f:cb:
d7:fc:be:ca:7f:16:2f:59:50:5e:ee:fc:ee:77:39:
f5:05:48:3b:1b:f7:9c:5f:a5:22:0b:6a:1b:a6:cd:
91:db:ec:a5:8c:7e:82:ee:21:d9:79:32:c4:1f:e3:
18:06:8d:7b:41:9e:b3:1d:2c:e6:3c:03:91:93:e2:
4f:20:48:83:a4:68:2a:d2:b3:a6:6c:7e:a7:80:12:
e8:f9:1b:38:ed:9a:92:1a:2a:ae:3b:1f:3e:4c:87:
66:dc:ed:50:7a:89:40:cc:78:a1:e2:93:96:b5:15:
67:df:1b:79:39:99:cb:2c:d1:7f:e9:84:de:25:59:
a8:89:40:38:ee:24:36:0c:8e:56:a5:01:45:f7:59:
6f:5a:21:d7:28:7b:93:37:89:06:b4:47:d6:82:8b:
a9:ca:89:ed:c8:72:b3:0c:d9:34:bf:1f:f4:3e:63:
bb:59:ec:5b:9f:d8:83:6e:d6:98:fd:3e:80:00:0d:
32:90:a3:15:99:54:fa:b6:f9:76:ba:9d:2f:6e:30:
b1:f1:ab:f4:e0:52:8c:b1:19:f7:47:08:b4:a1:7d:
b0:28:a5:12:4d:fa:45:74:03:ad:f1:02:b7:b2:c1:
1b:30:b8:3a:67:d7:1a:71:35:14:ba:34:92:fd:19:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E0:2C:34:C5:9F:7F:E6:45:30:72:F9:E1:A6:DD:C2:67:03:05:72
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140376.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:96b:6024::-240e:96b:6026:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b4:8c:46:8c:ac:8f:fe:4c:e0:98:11:f9:ca:63:c0:28:58:16:
dd:01:93:0d:16:3b:16:ba:32:6a:10:1b:57:9d:14:8c:42:ba:
a1:ba:5b:64:6f:fd:a1:13:cb:20:25:7c:28:93:90:a3:e5:a1:
e3:b2:02:55:05:88:86:94:31:82:3a:76:77:64:ef:b7:df:8a:
32:b4:04:bb:46:7e:6c:f6:a6:97:17:8a:08:34:29:fe:b5:1a:
d9:04:8a:f2:7b:96:d7:98:7f:b4:f6:3e:23:6a:e6:71:37:79:
95:96:e1:9e:ad:32:d4:17:70:09:00:3a:81:8f:48:51:54:37:
77:4b:f3:8e:8e:dc:a0:f9:30:2e:51:bb:05:53:c2:a6:51:de:
42:4d:a8:b9:9e:c1:45:b9:70:7f:1a:ed:5d:41:bd:c6:75:40:
11:fe:e8:8c:76:6c:17:d8:d1:86:6c:1a:88:ba:05:39:98:c7:
e7:67:74:2b:60:d5:5a:7f:46:7a:4f:99:6e:58:47:49:68:00:
7e:c4:40:f4:7c:14:05:cb:00:80:44:65:03:29:0d:3b:78:01:
97:d2:42:92:32:2d:5d:3e:96:5c:32:8b:1f:05:c3:e3:a9:18:
b7:3a:18:e3:08:e4:3a:67:53:84:d2:f0:88:f3:00:3c:3b:ea:
73:bb:94:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:01 2026 by rpki-client