
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140377.roa
File: AS140377.roa (raw, json)
Hash identifier: 08dJnEuDL5nj5vnREP+6iGycxaTxoQQn5LbOdKDMNSk=
Subject key identifier: 94:E5:07:F3:74:10:43:59:5C:C3:00:8A:01:CA:C6:7B:54:A3:50:DB
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 1901F964F2E7EF578EC7CE8FEECA668D3842BF1B
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140377.roa
Signing time: Mon 01 Jun 2026 16:41:13 +0000
ROA not before: Mon 01 Jun 2026 16:36:13 +0000
ROA not after: Mon 31 May 2027 16:41:13 +0000
asID: 140377
IP address blocks: 240e:96b:6027::/48 maxlen: 48
240e:96b:6028::/48 maxlen: 48
240e:96b:6029::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:01:f9:64:f2:e7:ef:57:8e:c7:ce:8f:ee:ca:66:8d:38:42:bf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: Jun 1 16:36:13 2026 GMT
Not After : May 31 16:41:13 2027 GMT
Subject: CN=94E507F3741043595CC3008A01CAC67B54A350DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d9:39:eb:2d:3f:72:d5:0a:54:6e:d9:5f:66:
f8:ad:01:8d:92:6f:6a:bb:83:d9:18:5a:cb:a7:45:
72:31:f4:83:b7:f0:a3:cd:a5:8d:52:d9:be:bf:11:
b5:0a:02:ed:46:30:b8:77:79:1f:f0:34:3c:12:52:
89:2d:70:57:71:fd:41:da:9b:26:46:4e:46:ef:3f:
06:6a:f8:5b:3f:9b:58:d0:3d:ac:dc:fa:4d:f7:1e:
24:d6:c9:02:61:4d:70:e5:65:f5:f4:d9:c6:bb:15:
e3:59:6c:58:23:d1:b1:a8:c9:fa:96:a0:f0:ce:57:
f0:d7:ef:25:41:ce:75:45:7f:06:89:69:c5:40:86:
41:fc:89:bb:31:10:5b:67:09:43:cc:43:93:29:0e:
35:34:a5:96:19:c8:40:f4:d6:53:f7:21:c8:49:67:
e5:d9:80:89:25:07:6a:b3:43:13:0b:cc:60:4a:3f:
17:47:00:3b:85:9c:78:13:5c:93:da:2d:99:f7:c5:
04:8a:6d:db:62:d5:d7:da:d3:88:18:17:35:72:fe:
99:88:b0:17:b6:bd:cb:b1:8d:27:d9:8b:0a:4a:65:
1b:9f:99:76:50:c5:08:7b:0b:a3:24:da:50:5a:5a:
78:2a:b9:df:55:7d:2a:b7:02:46:9c:75:c3:71:5c:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E5:07:F3:74:10:43:59:5C:C3:00:8A:01:CA:C6:7B:54:A3:50:DB
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140377.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:96b:6027::-240e:96b:6029:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
11:7f:be:43:15:d2:f9:a4:69:38:fe:ae:5a:c9:05:4c:93:d2:
d4:92:40:03:95:40:13:3e:f0:5d:c0:5e:de:5c:25:9a:d1:e7:
8b:0a:2c:c3:d7:0b:6f:d0:6f:3c:4a:3d:e8:0d:0f:b4:36:59:
7a:75:ce:18:86:32:f5:ee:ca:9c:83:d7:f4:b9:24:7e:69:6e:
fe:61:d0:2e:7e:8f:49:68:65:18:47:ea:e4:06:f9:53:87:0e:
4a:12:80:42:fe:ab:c7:26:75:77:36:c9:8f:5b:b1:5b:c9:59:
33:f3:ad:57:94:aa:e2:73:ae:4e:dc:1a:bb:ff:fb:28:64:f8:
b6:a2:e1:22:1b:8b:3d:e0:98:f8:9b:0d:d2:21:89:46:37:db:
ac:88:8c:d1:e5:b8:4c:48:a1:29:2b:cb:d8:a1:90:22:23:83:
f7:01:a5:8b:35:7e:88:4b:3b:fe:8a:ca:da:f6:03:52:d7:fe:
6f:93:18:de:ce:9f:8b:44:09:c5:42:3a:5b:5a:e3:38:b9:bd:
4b:df:2f:7d:6d:e0:26:eb:56:b4:89:e9:c9:cc:17:ac:34:05:
70:bf:9b:c1:fc:39:b5:b7:26:36:64:31:c1:8b:c8:7d:5d:41:
c3:38:a8:df:15:3f:b3:78:8a:82:8a:67:bc:e4:5d:d8:94:93:
d3:80:cc:91
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUGQH5ZPLn71eOx86P7spmjThCvxswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwMTE2MzYxM1oX
DTI3MDUzMTE2NDExM1owMzExMC8GA1UEAxMoOTRFNTA3RjM3NDEwNDM1OTVDQzMw
MDhBMDFDQUM2N0I1NEEzNTBEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPfZOestP3LVClRu2V9m+K0BjZJvaruD2Rhay6dFcjH0g7fwo82ljVLZvr8R
tQoC7UYwuHd5H/A0PBJSiS1wV3H9QdqbJkZORu8/Bmr4Wz+bWNA9rNz6TfceJNbJ
AmFNcOVl9fTZxrsV41lsWCPRsajJ+pag8M5X8NfvJUHOdUV/BolpxUCGQfyJuzEQ
W2cJQ8xDkykONTSllhnIQPTWU/chyEln5dmAiSUHarNDEwvMYEo/F0cAO4WceBNc
k9otmffFBIpt22LV19rTiBgXNXL+mYiwF7a9y7GNJ9mLCkplG5+ZdlDFCHsLoyTa
UFpaeCq531V9KrcCRpx1w3FcttcCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBSU5Qfz
dBBDWVzDAIoBysZ7VKNQ2zAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTQwMzc3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAkDglrYCcDBwEkDglrYCgw
DQYJKoZIhvcNAQELBQADggEBABF/vkMV0vmkaTj+rlrJBUyT0tSSQAOVQBM+8F3A
Xt5cJZrR54sKLMPXC2/QbzxKPegND7Q2WXp1zhiGMvXuypyD1/S5JH5pbv5h0C5+
j0loZRhH6uQG+VOHDkoSgEL+q8cmdXc2yY9bsVvJWTPzrVeUquJzrk7cGrv/+yhk
+Lai4SIbiz3gmPibDdIhiUY326yIjNHluExIoSkry9ihkCIjg/cBpYs1fohLO/6K
ytr2A1LX/m+TGN7On4tECcVCOlta4zi5vUvfL31t4CbrVrSJ6cnMF6w0BXC/m8H8
ObW3JjZkMcGLyH1dQcM4qN8VP7N4ioKKZ7zkXdiUk9OAzJE=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:40 2026 by rpki-client