
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140653.roa
File: AS140653.roa (raw, json)
Hash identifier: oViJV3dqyNlZNTZbNaR3ea/j5ve0Zxjc2qFGBbL6IB0=
Subject key identifier: 62:96:34:0F:4F:2E:27:BE:AB:D5:25:38:C9:64:FD:69:1C:D8:A0:BF
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 0A1314A8745DA2C33104CBF2CBDADC645E11D185
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140653.roa
Signing time: Sat 30 May 2026 16:01:34 +0000
ROA not before: Sat 30 May 2026 15:56:34 +0000
ROA not after: Sat 29 May 2027 16:01:34 +0000
asID: 140653
IP address blocks: 240e:183:8214::/48 maxlen: 48
240e:183:8215::/48 maxlen: 48
240e:183:8216::/48 maxlen: 48
240e:183:8217::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:13:14:a8:74:5d:a2:c3:31:04:cb:f2:cb:da:dc:64:5e:11:d1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 30 15:56:34 2026 GMT
Not After : May 29 16:01:34 2027 GMT
Subject: CN=6296340F4F2E27BEABD52538C964FD691CD8A0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0e:c3:0b:5b:6a:1a:73:85:a5:68:37:9e:c8:
f9:90:23:2a:c3:92:8b:fd:45:70:03:63:ca:22:b8:
46:d5:29:7c:2b:88:fa:32:1f:15:ec:33:0d:40:39:
d3:04:71:4e:9b:97:85:52:6a:67:05:ff:c5:4d:57:
82:13:2c:2c:7d:b8:d3:75:08:e1:5d:59:cc:49:93:
ff:18:71:da:14:0d:3b:40:d9:6a:b9:47:c3:77:8e:
34:04:cf:5e:95:45:8c:2e:51:d5:a8:cf:ae:e3:15:
4d:6d:97:31:b0:96:26:76:91:4b:7f:e0:92:58:d0:
f9:68:ad:9b:a4:51:70:ff:38:13:8a:6e:df:ca:d3:
95:ce:50:0b:6d:f8:2c:cf:73:18:aa:2a:6d:1d:45:
25:cd:fb:13:7a:4a:59:00:3f:f9:c3:9f:2f:36:20:
73:3e:b9:76:89:be:b0:8a:56:5e:94:3d:ba:71:cf:
2b:0a:c6:1f:54:94:bd:c5:45:e8:e4:46:fe:53:bb:
d9:d4:18:aa:1a:8c:79:96:f7:bd:4b:94:12:22:6d:
ab:f7:e6:4a:50:8a:64:f0:5f:cc:a0:4d:d4:07:d6:
fc:df:69:19:c8:ef:17:f3:99:43:b3:da:52:22:31:
4e:87:e3:ae:19:72:3a:d8:ae:26:9b:90:fb:f0:82:
8f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:96:34:0F:4F:2E:27:BE:AB:D5:25:38:C9:64:FD:69:1C:D8:A0:BF
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140653.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:183:8214::/46
Signature Algorithm: sha256WithRSAEncryption
72:59:27:72:1b:af:64:62:02:f0:47:36:16:17:c6:73:6c:30:
64:ad:c5:b6:01:62:3a:68:15:2c:03:a0:a5:b6:50:3d:8a:f5:
72:46:57:98:4b:a7:a1:7e:d1:da:1b:a2:f2:89:45:28:e1:64:
c7:6e:8b:3a:12:52:c6:3a:29:32:d5:c5:02:9f:b4:fe:71:25:
15:7e:fc:40:15:c7:d0:29:bf:9e:c1:6d:de:cb:ef:18:09:10:
9d:8a:80:07:ad:09:8e:51:3a:1f:fb:7e:92:c5:33:6c:bd:d3:
2b:de:ef:59:39:70:08:18:30:62:f9:ab:cd:d3:e9:06:ea:34:
70:b9:86:ae:81:81:4d:67:31:19:35:5d:72:4d:4c:93:1c:dd:
77:83:23:e9:ba:25:f0:a1:e3:bb:ca:86:23:8d:3a:1e:3c:f2:
fe:e9:dc:74:49:d8:45:0e:a2:fc:42:2c:93:59:25:7e:71:ab:
ce:01:fa:18:92:a2:d2:80:f0:8c:37:6a:50:d6:7d:d3:9b:6d:
b9:ef:21:17:99:b8:7e:ab:4a:c6:0c:22:eb:71:dd:8f:75:08:
7c:e7:94:86:9b:1f:8d:88:00:a4:36:c9:ff:83:e4:5c:2e:4a:
9a:5c:58:6e:6a:3e:24:4a:a8:54:7a:ec:45:f5:79:6f:52:2f:
39:c9:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:44 2026 by rpki-client