
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140533.roa
File: AS140533.roa (raw, json)
Hash identifier: uSIJ578LafE+VjNL1P3uc1h/oW5D4Bon8sbroAmUHIU=
Subject key identifier: 37:B0:94:73:3D:6F:8A:F7:FF:F7:FA:78:52:54:17:AE:8B:43:A1:1F
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 7A258A8862A68EF8FD9D69FF6E32E2112C421923
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140533.roa
Signing time: Thu 28 May 2026 16:02:33 +0000
ROA not before: Thu 28 May 2026 15:57:33 +0000
ROA not after: Thu 27 May 2027 16:02:33 +0000
asID: 140533
IP address blocks: 240e:45c:8100::/40 maxlen: 40
240e:45c:8300::/40 maxlen: 40
240e:45c:8500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:25:8a:88:62:a6:8e:f8:fd:9d:69:ff:6e:32:e2:11:2c:42:19:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 28 15:57:33 2026 GMT
Not After : May 27 16:02:33 2027 GMT
Subject: CN=37B094733D6F8AF7FFF7FA78525417AE8B43A11F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:60:2c:65:06:00:da:03:2f:9b:e9:2d:08:
7c:48:96:7d:88:32:e4:8d:cf:1f:43:c3:77:e5:d5:
10:87:33:5a:ae:d9:07:66:f6:21:d0:52:6f:e9:99:
a9:4d:17:37:33:18:48:64:72:65:52:bf:bc:06:49:
b9:bc:72:cb:d2:dc:49:a1:23:79:ca:d2:e6:75:42:
b9:ec:bb:f2:63:a9:da:18:b0:82:b8:90:a5:fb:4f:
e0:fd:69:a0:1f:f8:94:3c:33:d4:4e:ad:01:64:f7:
52:96:39:8b:0c:20:95:1d:e0:b1:02:77:b3:88:9a:
05:84:a8:f6:1b:ea:4f:1c:fe:96:29:2b:43:23:a9:
49:d1:23:54:8b:ac:6e:bd:ad:34:38:87:59:62:a5:
17:2b:e8:3d:d9:34:91:75:e4:27:15:5c:46:1f:ef:
bd:c8:64:bd:50:08:b0:91:11:93:8d:a9:8f:0c:7f:
7d:49:37:78:e4:22:0c:f9:2a:f8:8f:3e:6e:ed:cc:
51:bb:06:32:cf:c0:a8:9e:ca:18:e3:d7:57:2a:ac:
16:1d:e7:49:55:8d:14:44:f1:b5:9c:bd:10:31:b8:
4c:ab:22:41:b4:69:82:ec:f9:c9:52:33:7d:96:a3:
7a:0c:7b:46:13:2f:3a:87:f9:2b:1a:c2:f0:a7:3b:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B0:94:73:3D:6F:8A:F7:FF:F7:FA:78:52:54:17:AE:8B:43:A1:1F
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:45c:8100::/40
240e:45c:8300::/40
240e:45c:8500::/40
Signature Algorithm: sha256WithRSAEncryption
1a:16:86:03:d8:15:5f:33:2a:69:d4:53:66:ae:cb:5f:67:d5:
6f:7a:80:1e:13:83:e5:73:63:d7:fd:7c:fd:f5:4f:2d:4d:84:
89:9c:b5:29:f0:46:46:62:f2:26:c7:0b:e0:b9:6a:36:bc:7e:
38:e0:36:fe:a2:06:39:90:c1:f8:b4:be:a2:69:ba:48:fd:8e:
d4:45:6b:5b:06:99:28:dd:e7:07:d1:ad:62:3d:50:bd:65:d7:
de:54:98:46:51:62:11:96:b8:59:a0:1e:48:18:6a:6f:85:7a:
17:76:2b:13:88:b0:77:73:d7:65:da:77:2f:5d:8c:a3:44:b1:
6e:f7:37:73:03:67:74:72:f2:01:d4:16:dd:87:db:6c:43:b6:
d1:33:a4:96:27:85:af:a1:66:b7:02:bf:1e:c7:bd:f9:15:8d:
12:68:43:52:5f:55:96:16:23:b1:6e:f4:73:72:49:bf:25:d9:
4c:3a:cc:ee:72:76:35:fd:6e:8c:5d:98:74:63:3a:ac:f9:2e:
1e:d4:6c:36:82:e4:79:19:c5:fe:c4:8c:4c:2e:c3:64:6a:e2:
5a:03:1d:73:78:ed:db:71:73:56:06:99:1a:c7:c0:9f:31:cd:
0a:9e:7c:87:40:78:c1:92:8c:23:00:5b:f1:0f:fd:8c:a6:b1:
29:d3:ea:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:37 2026 by rpki-client