
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140657.roa
File: AS140657.roa (raw, json)
Hash identifier: BFMQmvFB12x/ZYPKy7xMgVUTH/ScukjjfhNPBURF0KU=
Subject key identifier: 92:F3:06:36:4B:F7:17:5A:27:A7:59:A1:8B:D5:3D:A3:C5:E6:06:A6
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 41DE8ED9E36B2A6D6FB5B455B1BCCFE36A271CA8
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140657.roa
Signing time: Sat 30 May 2026 16:01:34 +0000
ROA not before: Sat 30 May 2026 15:56:34 +0000
ROA not after: Sat 29 May 2027 16:01:34 +0000
asID: 140657
IP address blocks: 240e:183:8224::/48 maxlen: 48
240e:183:8225::/48 maxlen: 48
240e:183:8226::/48 maxlen: 48
240e:183:8227::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:de:8e:d9:e3:6b:2a:6d:6f:b5:b4:55:b1:bc:cf:e3:6a:27:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 30 15:56:34 2026 GMT
Not After : May 29 16:01:34 2027 GMT
Subject: CN=92F306364BF7175A27A759A18BD53DA3C5E606A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:44:f2:fd:f3:8c:d0:0b:0d:bf:c6:4f:31:
e7:9c:78:e6:34:dc:e6:65:d5:82:19:ea:8d:f9:63:
19:ff:82:e6:f3:3c:c5:3a:da:16:a3:61:ec:18:30:
b4:72:c5:de:b7:6f:7c:95:07:70:e4:49:91:7c:68:
d7:2e:10:e3:44:3b:1f:3e:32:b6:55:81:c8:da:c2:
44:d6:d1:dd:b8:a9:1e:78:73:4d:33:3f:9e:3e:81:
b7:04:c2:6c:a2:bd:52:da:b7:ce:ec:4b:17:47:f3:
12:65:c0:e6:e1:0d:66:10:d7:8f:01:19:66:03:ce:
32:6b:92:d5:b3:00:41:f2:09:22:26:a1:7d:f5:3e:
fc:3a:8e:31:bd:1b:15:85:f9:02:c0:1b:f8:18:2f:
6b:f1:e6:7d:d0:74:15:fd:ee:03:dd:41:3a:b8:82:
5f:69:5f:15:47:db:a3:28:18:b9:58:8c:50:1a:42:
45:60:9d:61:3d:22:17:12:7f:5d:02:fb:8d:7d:20:
94:81:f5:ba:23:bf:fe:e9:6c:64:23:e5:d1:43:79:
ab:bc:2a:29:12:8c:c5:44:96:58:a5:01:2b:9c:ff:
91:06:f8:d2:0f:09:54:22:da:ae:26:74:d8:2b:69:
74:29:9b:65:15:a8:9b:70:5f:9f:8a:b1:d2:a5:a8:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F3:06:36:4B:F7:17:5A:27:A7:59:A1:8B:D5:3D:A3:C5:E6:06:A6
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140657.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:183:8224::/46
Signature Algorithm: sha256WithRSAEncryption
6f:1d:2a:72:32:4f:fb:9d:3f:93:f0:cc:8e:09:1c:54:62:2c:
d5:50:33:58:11:23:95:df:70:de:a3:84:aa:40:f1:56:e7:e0:
95:19:89:5d:9a:4d:6a:9d:97:11:6e:0f:bd:16:ac:99:8c:11:
42:f6:2e:01:ff:d6:d4:69:ad:a7:71:1a:72:ec:07:a4:ca:f8:
79:eb:2f:77:be:73:97:eb:41:7e:60:12:d8:08:fd:40:3d:7b:
e6:74:b5:cf:36:bd:33:3c:82:00:10:b9:16:64:2f:33:3e:98:
c6:98:42:1f:4d:a5:b4:fc:f1:4d:cf:7b:2b:b6:f4:8f:7c:99:
3a:6d:e3:5d:32:53:78:67:b6:d2:e3:0d:ae:46:24:e0:4c:6f:
84:69:e2:34:3e:89:df:b7:01:20:6c:82:06:f3:71:17:81:e0:
fd:16:7a:8b:22:24:28:1a:48:91:0e:3e:4a:a5:e7:c9:43:80:
32:40:a1:01:c1:11:a8:a7:b9:4f:c2:af:67:65:aa:36:2a:c9:
ad:cd:d6:98:b5:61:1a:45:69:8f:59:52:4d:84:74:b7:3a:04:
32:e6:4d:70:dc:c8:26:19:f6:c0:ef:01:e1:48:db:80:40:25:
03:c6:c8:38:eb:d3:82:42:3d:2d:bb:a9:cc:91:00:72:6e:71:
a3:b3:1a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:30:59 2026 by rpki-client