
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31392e302f32342d3234203d3e203633363538.roa
File: 3134302e3231302e31392e302f32342d3234203d3e203633363538.roa (raw, json)
Hash identifier: gLmlwVq6iYYoVGFTYhdoHiVcfLv6tDITrzEZ5MANNOs=
Subject key identifier: 78:2D:88:11:FA:CB:50:2E:1F:4E:F7:AD:E3:A1:84:40:61:35:F9:EB
Certificate issuer: /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial: 10E874EBD1EFD7E25329C281A31E50169BC3E5A5
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31392e302f32342d3234203d3e203633363538.roa
Signing time: Thu 22 Oct 2026 02:12:23 +0000
ROA not before: Thu 22 Oct 2026 02:07:23 +0000
ROA not after: Thu 21 Oct 2027 02:12:23 +0000
asID: 63658
IP address blocks: 140.210.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e8:74:eb:d1:ef:d7:e2:53:29:c2:81:a3:1e:50:16:9b:c3:e5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Validity
Not Before: Oct 22 02:07:23 2026 GMT
Not After : Oct 21 02:12:23 2027 GMT
Subject: CN=782D8811FACB502E1F4EF7ADE3A184406135F9EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:46:ce:64:7e:75:ca:e1:2e:5f:90:c7:2c:
28:3e:f7:23:6f:1f:19:0a:8f:ba:b1:25:ea:ee:19:
9d:47:77:dc:f5:5f:a7:01:b0:5a:d6:aa:62:cf:8b:
99:02:f8:0b:87:91:4b:e2:96:8f:54:2d:c9:8d:05:
d5:a8:de:c9:f4:a9:fe:c4:cf:86:06:d2:13:a8:c6:
79:ac:89:5d:42:3e:8b:85:56:27:64:88:73:94:f0:
de:3a:3c:0e:06:80:90:80:f4:78:5a:d8:54:79:9a:
fd:21:50:6a:62:fa:3b:c7:41:0f:da:a7:25:86:67:
9c:33:1b:3c:95:5c:a0:c4:ec:0f:96:01:9f:18:63:
c4:49:9d:74:5e:f3:ba:ac:c3:81:bf:8b:59:63:7f:
95:aa:ae:ce:48:c0:3d:2e:e7:1d:44:23:69:cf:18:
d1:a7:0e:9d:19:e4:80:1f:fb:fa:ed:58:91:93:08:
f6:59:0f:e7:02:4f:07:7e:07:13:1d:5c:6f:50:65:
09:a1:49:a1:ab:8f:0c:f9:a6:7e:5d:b9:3d:a9:7f:
8f:d8:95:6a:7b:68:c0:fd:7c:ae:cf:76:88:c8:83:
46:a4:fb:47:c6:ac:22:9d:07:5e:1f:b8:ee:e3:1b:
48:29:e0:63:ac:b3:23:ca:c4:5f:72:f8:bf:8e:34:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2D:88:11:FA:CB:50:2E:1F:4E:F7:AD:E3:A1:84:40:61:35:F9:EB
X509v3 Authority Key Identifier:
keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31392e302f32342d3234203d3e203633363538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.19.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:41:35:ff:d3:72:04:5e:cf:23:db:b4:50:25:a8:c9:4e:32:
be:aa:f8:d3:f2:74:02:e2:9e:22:58:1d:b9:77:00:bd:e7:1e:
61:68:75:ca:f3:bb:15:e0:92:2b:72:9c:ae:26:0c:88:91:b7:
8b:3b:d4:f4:f6:f4:4e:1c:75:e9:de:e6:87:a6:85:ae:44:e1:
52:80:1e:b5:ed:d3:0f:bb:11:b2:08:32:30:fe:6f:7e:b9:4a:
2b:15:cd:40:f4:77:c2:7f:62:1f:00:d8:e4:5a:9a:1a:a0:45:
38:e3:a1:08:65:ac:4d:fb:32:c6:cd:64:ec:52:16:9c:93:9c:
08:47:e4:a1:43:c6:da:96:c6:77:65:a9:5b:d3:db:e6:03:ed:
c5:9c:06:49:3a:68:60:48:da:98:4a:63:db:02:c9:cf:e9:7a:
0c:a9:b3:ce:5c:67:02:87:96:a8:20:92:a5:04:b7:5c:1b:5f:
d5:64:9e:fe:ff:a9:e5:b2:47:9f:ec:58:40:b0:27:ad:67:f6:
03:87:3f:bb:36:75:cd:cd:cd:cb:39:6e:ed:ec:de:48:13:b5:
bd:a8:92:3f:16:3b:bc:9a:5b:c6:21:30:95:1c:13:46:07:23:
0f:23:27:0f:e0:41:b6:b0:af:59:fb:df:40:80:99:22:dd:fe:
fd:3a:27:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 25 04:00:50 2026 by rpki-client