
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33312e302f32342d3234203d3e20313939373739.roa
File: 3134302e3231302e33312e302f32342d3234203d3e20313939373739.roa (raw, json)
Hash identifier: 0PHw+E3prlMBPe/thDOq+xuk87qH95Kumj7g/IEyP+k=
Subject key identifier: 89:40:E6:D9:9D:17:3B:F2:81:67:D4:FC:73:E3:AD:24:85:73:62:46
Certificate issuer: /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial: 5BC92487D810EDC1B942E9EF7A3A8E3DEA5B45B7
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33312e302f32342d3234203d3e20313939373739.roa
Signing time: Wed 19 Aug 2026 08:28:53 +0000
ROA not before: Wed 19 Aug 2026 08:23:53 +0000
ROA not after: Wed 18 Aug 2027 08:28:53 +0000
asID: 199779
IP address blocks: 140.210.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 15:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c9:24:87:d8:10:ed:c1:b9:42:e9:ef:7a:3a:8e:3d:ea:5b:45:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Validity
Not Before: Aug 19 08:23:53 2026 GMT
Not After : Aug 18 08:28:53 2027 GMT
Subject: CN=8940E6D99D173BF28167D4FC73E3AD2485736246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:ca:da:f8:45:aa:fc:56:4d:5c:9e:31:7d:
92:ab:0d:9c:05:2f:19:ec:28:84:bb:96:a0:50:62:
e4:0b:6b:7d:df:bc:fc:cb:cf:c0:90:53:d8:41:3f:
fc:5f:23:62:42:86:3a:f3:81:06:91:72:fe:cd:b1:
ba:6d:d9:f3:01:24:bd:f3:cd:f3:81:b1:fa:e3:cc:
6a:82:28:13:49:c2:12:e2:62:88:c3:a6:5f:2d:5c:
99:27:3d:c4:a3:77:5c:38:7c:5c:89:62:03:1e:24:
9e:ef:64:29:bd:fd:8e:66:c3:0f:53:39:e1:c4:3a:
59:f3:e8:ae:7a:18:4d:c4:d1:80:07:5c:b6:1d:7c:
da:22:73:52:ec:fb:44:4e:4b:d3:c3:1c:81:ee:8a:
71:c1:cc:42:a8:c5:81:10:d6:e2:50:6c:ce:77:fe:
93:78:72:96:59:ea:75:bb:5b:78:14:51:05:d7:2c:
99:fb:dd:7d:ed:ea:f7:af:f1:9a:11:df:c7:6b:1a:
95:6e:2d:54:d6:69:53:05:ab:a5:e8:57:02:3d:e1:
58:52:d2:93:6b:6e:b6:76:e4:c6:2c:b8:a9:79:b4:
37:fd:4a:a3:ab:f2:8c:fa:de:23:78:e8:a9:4c:4a:
5c:5d:1a:b2:db:9f:49:15:94:0f:7c:7b:97:57:e1:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:E6:D9:9D:17:3B:F2:81:67:D4:FC:73:E3:AD:24:85:73:62:46
X509v3 Authority Key Identifier:
keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33312e302f32342d3234203d3e20313939373739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.31.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:0f:05:72:6d:d0:cb:94:74:bd:f8:55:33:58:0a:b7:4d:06:
04:c4:04:c5:09:6c:fd:d0:a5:cc:2f:07:23:75:a8:c2:94:c1:
1e:f8:c8:e6:29:ba:dc:d7:ac:18:3d:01:53:d2:fc:8f:3a:11:
65:e0:25:8c:3e:5c:f4:3e:92:5b:b3:24:ba:53:b9:19:a9:97:
bf:1c:44:5e:b7:c1:b8:46:13:ca:90:32:cd:15:35:70:44:2a:
ff:fd:4a:96:ca:c8:37:33:38:a7:3b:4e:5c:65:6b:2e:97:e7:
85:da:d6:02:7c:37:21:ac:58:67:c3:c7:7a:08:9b:c9:b9:f9:
5b:87:e3:50:e7:a7:21:9c:d7:09:4b:b9:d2:7c:82:f4:92:bf:
ba:0a:ad:6f:42:78:6c:15:ea:7e:7f:55:84:ea:f1:ad:8a:78:
e4:6f:77:a5:d0:f0:db:40:0b:d0:ab:9b:6a:19:af:66:f6:cf:
78:7a:bd:1b:c8:7e:d1:ae:b2:4b:98:22:c8:f6:cc:a2:53:6c:
4b:f7:22:44:28:db:40:0a:84:59:b4:9d:fd:01:fe:38:75:0d:
46:28:90:99:fd:e3:28:f9:08:8c:db:ce:80:4e:c7:8b:b3:67:
d2:1c:ee:b2:26:2b:98:4c:12:4d:e1:cb:8e:a8:f0:62:07:83:
6e:40:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:49 2026 by rpki-client