
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e20313334353432.roa
File: 3134302e3231302e3139322e302f31392d3139203d3e20313334353432.roa (raw, json)
Hash identifier: rlX15qzFvU60+ZZUfps3VZHuenrjIhvsbwypGw1jG28=
Subject key identifier: 67:48:3D:35:40:0B:10:99:81:6B:11:FD:34:5F:46:44:7D:92:C7:39
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 5407A2036E2CB04ECF6A7AF10764CC936EFEFD36
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e20313334353432.roa
Signing time: Thu 11 Jun 2026 16:02:06 +0000
ROA not before: Thu 11 Jun 2026 15:57:06 +0000
ROA not after: Thu 10 Jun 2027 16:02:06 +0000
asID: 134542
IP address blocks: 140.210.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:07:a2:03:6e:2c:b0:4e:cf:6a:7a:f1:07:64:cc:93:6e:fe:fd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 11 15:57:06 2026 GMT
Not After : Jun 10 16:02:06 2027 GMT
Subject: CN=67483D35400B1099816B11FD345F46447D92C739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:d2:b4:91:71:7b:bc:b8:9b:b9:fb:69:53:
d1:c3:f2:4c:90:e9:fe:e1:da:ab:0b:22:0e:53:42:
65:1b:87:4a:c5:78:3b:f6:e4:4a:da:e6:00:94:15:
11:87:76:73:ed:bf:66:0f:d5:e7:95:2e:5d:a9:40:
3a:55:ea:b7:c0:b4:8b:31:e6:d1:76:cd:1b:34:27:
20:fe:8e:6a:74:fa:ea:f5:21:b2:47:98:66:83:96:
23:73:84:8c:12:1d:10:65:48:82:76:03:cc:10:ba:
18:ae:ea:db:62:ec:8e:75:c4:27:db:77:8d:6c:aa:
ea:91:dc:45:94:77:07:95:ed:34:44:cd:fc:77:2a:
ee:eb:fd:0a:79:67:02:02:6d:21:65:99:75:17:87:
b4:17:5c:ab:b6:62:7c:af:a3:13:be:ac:81:cc:b2:
8d:a0:70:00:41:91:66:a0:76:34:5d:f5:de:ec:42:
2c:0c:19:b1:01:28:35:ca:21:dc:b8:b8:da:94:4e:
a3:60:51:0e:4e:82:c8:1b:1d:64:b1:aa:b6:d4:68:
48:d1:0a:f1:99:9a:72:3f:2a:43:f8:d6:7d:f2:77:
a7:42:dd:1e:a8:5e:d4:c8:e2:ae:7c:b2:fa:3c:38:
5e:be:45:ef:18:ec:d4:83:d0:42:dd:82:8f:26:90:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:48:3D:35:40:0B:10:99:81:6B:11:FD:34:5F:46:44:7D:92:C7:39
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e20313334353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.192.0/19
Signature Algorithm: sha256WithRSAEncryption
90:c5:a5:59:92:db:51:61:da:84:69:a2:9e:0f:76:5d:5c:41:
0d:38:2a:52:d3:fb:9b:8d:26:4e:a9:c1:03:b3:1c:0b:d8:56:
ec:f5:f7:9f:ea:b5:9c:69:e5:69:62:5a:a2:a0:ef:3f:11:ff:
94:75:55:34:29:e8:13:85:88:92:06:a6:1c:dd:28:7d:6c:7a:
c9:d7:5e:b3:c7:c7:07:cd:ed:c3:e4:9d:d6:9c:fe:39:f3:99:
a3:fd:b5:da:b7:c8:b2:81:e9:01:07:88:fc:7e:db:98:d9:6a:
d7:84:bd:e0:8c:7d:66:49:b5:59:0c:c3:a4:31:b9:29:7c:77:
bf:79:b9:78:70:b1:d6:73:5c:04:82:c9:46:c7:bd:24:5b:8a:
3f:9e:6f:74:ca:e8:1b:b1:ac:41:ba:24:d5:a9:a2:fd:d8:f7:
d9:b7:c5:24:07:9c:f2:10:2b:c2:9f:d2:c4:97:19:a1:35:cb:
07:d0:88:fa:c5:a2:f0:ae:c2:4f:ab:4b:4b:71:42:97:10:da:
2a:1e:8c:1a:19:ff:df:1d:a2:82:16:b9:1c:e6:5c:21:bf:ca:
d9:d8:72:cb:56:c8:82:51:4c:c2:7d:f3:4a:32:fa:8a:9c:a6:
41:9d:80:d8:22:25:3c:ff:5c:2c:9e:f5:05:46:1b:f7:27:98:
09:e3:ad:ec
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUVAeiA24ssE7PanrxB2TMk27+/TYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5
NjFENzkzRDAeFw0yNjA2MTExNTU3MDZaFw0yNzA2MTAxNjAyMDZaMDMxMTAvBgNV
BAMTKDY3NDgzRDM1NDAwQjEwOTk4MTZCMTFGRDM0NUY0NjQ0N0Q5MkM3MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZhdK0kXF7vLibuftpU9HD8kyQ
6f7h2qsLIg5TQmUbh0rFeDv25Era5gCUFRGHdnPtv2YP1eeVLl2pQDpV6rfAtIsx
5tF2zRs0JyD+jmp0+ur1IbJHmGaDliNzhIwSHRBlSIJ2A8wQuhiu6tti7I51xCfb
d41squqR3EWUdweV7TREzfx3Ku7r/Qp5ZwICbSFlmXUXh7QXXKu2YnyvoxO+rIHM
so2gcABBkWagdjRd9d7sQiwMGbEBKDXKIdy4uNqUTqNgUQ5OgsgbHWSxqrbUaEjR
CvGZmnI/KkP41n3yd6dC3R6oXtTI4q58svo8OF6+Re8Y7NSD0ELdgo8mkCdfAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUZ0g9NUALEJmBaxH9NF9GRH2SxzkwHwYDVR0j
BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF
RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1MjIzNjgxLzEvMzEzNDMwMmUz
MjMxMzAyZTMxMzkzMjJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDMxMzMzNDM1MzQz
Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBYzSwDANBgkqhkiG9w0BAQsFAAOCAQEAkMWlWZLbUWHahGmi
ng92XVxBDTgqUtP7m40mTqnBA7McC9hW7PX3n+q1nGnlaWJaoqDvPxH/lHVVNCno
E4WIkgamHN0ofWx6yddes8fHB83tw+Sd1pz+OfOZo/212rfIsoHpAQeI/H7bmNlq
14S94Ix9Zkm1WQzDpDG5KXx3v3m5eHCx1nNcBILJRse9JFuKP55vdMroG7GsQbok
1ami/dj32bfFJAec8hArwp/SxJcZoTXLB9CI+sWi8K7CT6tLS3FClxDaKh6MGhn/
3x2igha5HOZcIb/K2dhyy1bIglFMwn3zSjL6ipymQZ2A2CIlPP9cLJ71BUYb9yeY
CeOt7A==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:48 2026 by rpki-client