
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/3134302e3134332e3137362e302f32322d3232203d3e203435303930.roa
File: 3134302e3134332e3137362e302f32322d3232203d3e203435303930.roa (raw, json)
Hash identifier: eq+lHmDOYu9eOa5PF89G3wbCTcmbuk/3SSPiHm+/jwg=
Subject key identifier: FB:3F:16:87:0D:B0:F1:CB:F3:11:39:E5:E1:5C:0F:96:42:A4:11:7E
Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
Certificate serial: 4E1A0A10BDC44C8C1AA18A8734C518444108B4
Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/3134302e3134332e3137362e302f32322d3232203d3e203435303930.roa
Signing time: Wed 03 Jun 2026 06:37:08 +0000
ROA not before: Wed 03 Jun 2026 06:32:08 +0000
ROA not after: Wed 02 Jun 2027 06:37:08 +0000
asID: 45090
IP address blocks: 140.143.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Jun 2026 11:28:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:1a:0a:10:bd:c4:4c:8c:1a:a1:8a:87:34:c5:18:44:41:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
Validity
Not Before: Jun 3 06:32:08 2026 GMT
Not After : Jun 2 06:37:08 2027 GMT
Subject: CN=FB3F16870DB0F1CBF31139E5E15C0F9642A4117E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:30:6c:ed:e0:ad:a3:d8:c6:9c:12:00:fd:
42:d4:bd:53:68:db:01:71:23:65:6d:1e:9d:70:d8:
51:50:50:f7:46:1b:15:b2:96:6e:77:e1:5c:cc:6d:
75:d4:a6:e4:7b:db:9c:6d:05:1b:e7:61:b8:dd:01:
7c:a4:4f:f8:5b:f7:a9:1b:88:82:12:c3:8d:fb:6b:
87:81:ba:eb:b8:f0:1a:ea:86:23:fa:9c:27:16:a4:
28:d2:a1:b5:3d:5d:2e:ab:4f:ff:7d:84:f0:bc:b5:
10:d7:94:e0:34:e3:89:d9:ee:e0:ef:fc:23:93:6f:
ff:a6:49:dd:42:c5:5b:88:74:46:47:40:3f:a7:de:
7a:72:b2:12:1a:e8:44:ac:79:6d:13:68:92:18:ab:
29:61:43:04:cc:99:2d:fd:1a:83:41:89:dc:ec:6b:
42:a9:39:2d:f4:ef:d7:7c:42:94:9c:47:8d:03:7c:
36:8c:d3:d2:b0:53:c7:2c:41:9e:80:d8:24:24:15:
2f:e3:be:47:cc:c1:ff:ea:b3:db:eb:ef:f4:87:80:
3d:a0:79:af:78:44:08:cc:f0:4e:f5:cc:90:01:64:
45:c6:a6:cc:ff:fa:d0:18:a6:b5:85:31:a4:28:a1:
53:de:d3:dd:4b:2b:eb:04:46:a4:f2:b9:2b:ff:7e:
78:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3F:16:87:0D:B0:F1:CB:F3:11:39:E5:E1:5C:0F:96:42:A4:11:7E
X509v3 Authority Key Identifier:
keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/3134302e3134332e3137362e302f32322d3232203d3e203435303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.143.176.0/22
Signature Algorithm: sha256WithRSAEncryption
af:34:bf:80:bf:d2:9a:3e:9c:d7:97:dc:77:7c:58:57:3b:04:
49:99:9e:69:f5:19:55:0c:9f:3d:47:89:71:59:db:aa:41:cd:
09:29:e2:94:76:43:4d:b6:85:16:55:e3:f2:10:93:d2:27:b1:
da:53:d5:96:10:59:1e:44:3c:4a:68:94:72:05:29:a6:6a:da:
74:3a:d3:03:b5:fb:bf:eb:31:89:10:4f:2e:c7:f2:e0:a4:d4:
36:7d:30:5c:b7:56:37:88:33:54:6b:f7:d9:8c:c1:2c:ec:69:
1f:46:8f:17:4a:c6:06:75:0f:d1:ea:3d:75:49:cf:eb:8d:77:
66:84:b8:6c:cd:59:50:1f:10:15:16:7b:52:06:5c:8c:4a:c9:
f4:21:99:c1:e7:46:24:a9:c7:e7:ce:ab:3d:b5:c6:0c:db:ab:
5a:bb:77:fb:be:c3:e5:78:55:b4:ad:c9:84:97:7b:36:33:8c:
37:34:22:93:34:dc:aa:dc:1c:b5:f1:c4:97:1a:51:16:83:5b:
01:fc:73:7f:ab:51:93:19:37:80:9c:14:80:12:6b:43:28:af:
e5:e0:ee:55:7a:4a:a1:3d:d7:d1:e1:bf:41:3c:a2:59:52:82:
b3:4c:ed:f2:65:33:e8:e9:21:ae:8d:79:05:c0:6f:7f:88:1e:
3f:49:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 17:08:13 2026 by rpki-client