
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e20313338343037.roa
File: 3134302e3231302e3139322e302f31392d3139203d3e20313338343037.roa (raw, json)
Hash identifier: 9FDATEDTu3b4lmf+Ad0akcVQ3xn5oZnFj6yCQhJ9ksc=
Subject key identifier: 73:4E:F5:03:40:7B:A0:80:8F:34:B4:E7:4A:3D:DF:2E:38:3F:E8:48
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 5E868342F16317106369016B12C5C656BCEFC314
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e20313338343037.roa
Signing time: Thu 11 Jun 2026 16:02:06 +0000
ROA not before: Thu 11 Jun 2026 15:57:06 +0000
ROA not after: Thu 10 Jun 2027 16:02:06 +0000
asID: 138407
IP address blocks: 140.210.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:86:83:42:f1:63:17:10:63:69:01:6b:12:c5:c6:56:bc:ef:c3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 11 15:57:06 2026 GMT
Not After : Jun 10 16:02:06 2027 GMT
Subject: CN=734EF503407BA0808F34B4E74A3DDF2E383FE848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:90:47:dd:b5:a5:90:35:ff:3a:f8:72:cf:
2f:d0:89:bb:ca:3f:5d:87:b9:0a:6f:6a:9f:83:f5:
5d:64:a1:c7:46:90:23:12:4d:d6:bc:dd:1a:ed:01:
4e:ea:ef:d1:32:02:db:dd:cb:8e:7d:7d:fd:1d:9e:
b0:fe:8e:03:ea:34:83:ec:67:88:17:af:ed:00:22:
04:f1:09:99:e9:6f:35:3a:20:4a:eb:9a:69:0b:e6:
a0:17:61:cb:a7:b5:d9:9a:c5:73:91:24:51:d3:71:
da:cc:5b:84:7b:50:cc:2e:9b:5f:5e:5f:a5:85:62:
9b:90:f8:c5:7c:05:20:98:5e:64:76:6c:df:16:8d:
0d:99:06:bb:c5:35:e7:77:58:5b:7d:bd:f5:08:de:
5e:ad:5d:75:cf:53:c1:20:ac:c2:6c:7f:98:a1:93:
eb:e3:95:a0:74:0e:d8:a9:35:08:46:67:99:9f:e0:
c1:fe:bc:7f:73:9b:54:bb:7c:78:3a:00:41:89:31:
4c:70:74:e0:96:77:3d:74:80:ee:cc:5b:9f:d8:d3:
3f:6a:17:c1:19:28:5c:e0:e9:06:20:b7:77:c9:ac:
82:1b:27:50:67:61:b7:6d:cf:b9:2c:7d:e8:26:75:
03:43:32:73:61:12:4c:67:ed:ae:b9:f1:1e:66:d8:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4E:F5:03:40:7B:A0:80:8F:34:B4:E7:4A:3D:DF:2E:38:3F:E8:48
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e20313338343037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.192.0/19
Signature Algorithm: sha256WithRSAEncryption
37:8e:d5:15:07:82:e8:61:dc:67:4d:c4:7e:4a:cd:b4:d1:11:
09:e9:de:8e:2d:78:0d:e4:b0:50:6d:6f:87:19:3d:cb:87:71:
bb:0c:89:f2:b0:b6:80:38:47:a2:f2:be:cb:04:3c:e7:da:21:
6a:da:c9:33:1a:17:7e:f2:3a:ff:bd:69:e3:86:59:9c:ee:bf:
f6:ec:d8:19:48:00:dd:b1:96:38:66:b9:e5:e3:08:f2:20:bf:
01:f5:7d:c9:17:60:83:6d:3e:54:2c:d7:76:9f:68:0d:a1:69:
d5:70:aa:8e:59:96:3f:f3:4d:b4:07:42:37:05:2f:74:17:78:
9b:48:24:94:de:c3:3a:d5:d8:ad:af:7d:d7:71:58:57:cc:cd:
89:41:fc:fe:47:c6:c2:da:8f:ac:96:ac:86:fb:b9:fd:c4:41:
f7:97:ca:65:33:85:1a:a1:27:b3:54:3d:3b:9c:ab:cb:92:12:
af:99:95:7e:cd:27:4b:be:5f:71:fb:67:bd:73:47:45:10:d2:
94:c4:ce:8c:f3:fb:63:27:70:9e:d2:48:4c:e9:fd:10:13:7e:
7a:5c:99:20:8c:c3:6b:5a:cf:9e:af:69:9d:6c:5d:55:8b:b5:
ee:f0:81:b0:75:3e:0e:f4:8e:b5:b3:6e:04:5f:eb:d4:e6:c1:
3f:9c:21:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:47 2026 by rpki-client