
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140336.roa
File: AS140336.roa (raw, json)
Hash identifier: Qq697X/0B2nM0qnnmn2N2IEYCIO1RVqJv6XuLtDhohs=
Subject key identifier: E6:CD:55:17:EB:6E:49:F4:64:7E:BD:A6:C3:A8:24:5A:A8:2D:1A:23
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 6422B74324A41C609671B350CF36C86E7D271DF9
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140336.roa
Signing time: Wed 20 May 2026 16:15:18 +0000
ROA not before: Wed 20 May 2026 16:10:18 +0000
ROA not after: Wed 19 May 2027 16:15:18 +0000
asID: 140336
IP address blocks: 240e:267:8000::/40 maxlen: 40
240e:267:8100::/40 maxlen: 40
240e:267:8200::/40 maxlen: 40
240e:267:8300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 06:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:22:b7:43:24:a4:1c:60:96:71:b3:50:cf:36:c8:6e:7d:27:1d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 20 16:10:18 2026 GMT
Not After : May 19 16:15:18 2027 GMT
Subject: CN=E6CD5517EB6E49F4647EBDA6C3A8245AA82D1A23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:5f:95:c4:9f:2c:bd:0c:19:50:21:19:8a:
70:54:c1:25:5d:a3:a8:a5:92:b6:d7:65:4d:74:50:
7b:2f:ae:f8:61:cd:c3:ad:72:2a:f4:33:00:d1:4b:
db:58:01:de:53:6b:04:72:89:2f:af:ad:1a:d5:12:
42:e7:43:73:d1:35:81:f2:db:4e:4d:ac:f7:f1:7c:
63:f6:d9:6a:da:62:0a:2a:a1:6b:80:aa:e9:a0:c0:
3f:4f:20:48:ea:d1:26:4e:16:be:b6:2b:14:1f:e1:
bf:81:d9:61:3e:ac:ae:f5:3e:38:ce:65:4c:e5:b8:
a0:7d:e7:d7:00:6b:d3:89:14:40:87:16:02:8f:0d:
f2:f4:53:0b:7c:76:d6:93:2e:e2:9b:64:d8:cb:cb:
99:9a:df:42:e7:37:bf:18:a8:0a:04:99:40:ba:a3:
10:d5:de:e1:f9:71:e5:c7:d5:c6:9a:2b:8a:15:40:
ad:61:7d:5a:40:ea:3e:8f:da:e4:5b:de:9a:19:ed:
48:e8:35:3a:d4:d6:19:d9:79:26:03:95:b1:af:d7:
15:5a:c0:19:1c:09:ce:e6:f5:cd:69:a1:bf:8f:7f:
08:8b:cf:56:d7:88:81:d7:27:a4:90:42:aa:a8:d4:
13:2d:10:07:88:f6:1f:26:a1:4d:5b:5d:88:aa:95:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CD:55:17:EB:6E:49:F4:64:7E:BD:A6:C3:A8:24:5A:A8:2D:1A:23
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:267:8000::/38
Signature Algorithm: sha256WithRSAEncryption
32:ae:e0:10:f7:53:d9:31:b6:a0:3a:35:6b:ee:be:d5:03:ea:
8b:e6:0f:40:00:6b:c9:a8:69:93:f2:50:e5:4f:04:30:2e:12:
cb:a4:a2:b7:2a:ec:b9:64:99:79:bb:db:b9:c5:c6:05:3d:6e:
d6:f8:5f:d3:89:a6:cd:09:d7:07:00:c4:8d:b4:51:eb:0a:8e:
03:9c:2c:a4:d3:8d:ee:41:4c:da:7d:f6:0d:77:24:97:35:c5:
51:fe:5b:a1:3c:98:e6:6d:e8:16:8e:ba:59:37:6c:c8:64:b9:
c0:08:a4:8f:f9:61:ac:ec:a8:5b:5b:15:3f:a9:a3:ce:e7:65:
c2:b3:f1:de:35:d0:b9:92:63:dc:5c:7d:1d:85:c9:78:7e:82:
79:a7:d6:dc:2f:91:92:f7:9b:7b:95:42:0e:91:27:95:cc:c9:
c4:f4:75:27:84:cd:c2:a9:02:53:48:a5:bb:d7:7c:cd:fa:e5:
29:ce:d4:15:0b:e9:90:ae:d0:f0:c0:87:ca:82:33:05:17:71:
f2:6b:0b:ef:b2:5c:db:9e:10:28:c7:d7:8e:e9:33:85:5f:c4:
8a:da:ad:a3:7e:0f:4d:29:c7:16:44:86:4a:fe:82:26:c5:36:
f4:b2:6a:4d:b6:bd:dd:59:03:69:ed:c3:0d:67:6d:a8:a4:18:
89:00:df:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:24 2026 by rpki-client