
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e203538353139.roa
File: 3134302e3231302e3139322e302f31392d3139203d3e203538353139.roa (raw, json)
Hash identifier: s9c157Fy1LcE4DUzprDdwJaa875vimC8P4+GyGfcqtE=
Subject key identifier: 67:2D:FF:98:D5:F6:BD:2B:06:04:FC:25:4D:3E:95:5D:F9:39:89:20
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 2233D69E8C8826475F31BC8725106987D5C99365
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e203538353139.roa
Signing time: Thu 11 Jun 2026 16:02:07 +0000
ROA not before: Thu 11 Jun 2026 15:57:07 +0000
ROA not after: Thu 10 Jun 2027 16:02:07 +0000
asID: 58519
IP address blocks: 140.210.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:53:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:33:d6:9e:8c:88:26:47:5f:31:bc:87:25:10:69:87:d5:c9:93:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 11 15:57:07 2026 GMT
Not After : Jun 10 16:02:07 2027 GMT
Subject: CN=672DFF98D5F6BD2B0604FC254D3E955DF9398920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:db:c7:97:c0:11:2c:69:9a:c4:52:45:b0:
60:86:07:71:52:2b:61:b5:e3:5a:15:82:23:9c:0e:
e5:1a:9b:cc:41:b0:12:61:45:e2:b3:fa:22:f3:fd:
68:b7:52:1b:f9:d2:ab:73:7d:f1:c7:cb:44:8c:be:
e5:40:49:61:62:2e:ec:37:de:81:41:1b:5c:ad:94:
64:a2:de:07:64:45:7e:9e:9a:d1:da:d3:5d:1f:30:
88:17:33:73:2e:80:03:49:19:82:6e:76:ea:0e:10:
4d:ea:17:89:03:31:1d:dc:cd:4b:18:e2:93:ac:dc:
4e:b8:ef:10:87:b3:0b:e7:5c:d9:95:2d:45:a9:70:
9f:4a:86:35:e3:d1:18:bd:a3:d4:33:2c:af:7c:8e:
67:55:35:8f:b5:53:3e:aa:cc:8b:22:1f:83:2d:27:
9d:e8:85:10:52:29:be:a4:29:80:08:80:7a:6b:12:
76:70:45:a5:b0:72:c6:b1:55:ef:70:17:7b:76:11:
ae:72:be:b2:5c:3e:78:7d:93:80:c0:27:95:e8:4d:
4c:cf:dc:03:9f:3e:2e:1f:d8:48:a6:97:bf:3a:0d:
d5:11:5b:51:78:4c:4c:f3:5c:23:94:19:55:4f:a9:
df:f5:33:74:6c:6c:75:e0:d2:d9:06:52:c5:18:1c:
b4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2D:FF:98:D5:F6:BD:2B:06:04:FC:25:4D:3E:95:5D:F9:39:89:20
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3139322e302f31392d3139203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b7:8b:b9:0e:56:ed:6a:01:0f:31:9d:55:ce:f5:82:84:b3:07:
cc:92:8a:b0:95:a9:dc:48:81:0c:87:ca:8d:ed:31:87:e8:3e:
3e:bc:16:73:cb:ff:e0:67:2f:8f:f0:b3:a5:fb:ea:ed:f2:55:
0d:18:60:74:01:b2:1b:41:44:7e:5d:b3:4f:b5:6e:b5:c6:60:
76:e0:62:af:ec:2c:5d:12:04:e2:15:95:64:fd:35:ec:47:b2:
05:55:1b:82:b7:b5:c7:e2:14:ae:ed:94:c7:b1:3e:ed:ee:e3:
8a:ad:1d:c9:81:a5:45:74:be:a2:c1:26:4f:3f:0a:b8:0b:fe:
5d:e6:02:96:13:c3:3b:d9:09:65:d4:51:52:bc:b8:93:a5:16:
72:16:e2:24:ef:94:c0:42:33:a1:47:34:36:59:5c:47:27:89:
55:de:7c:c8:43:1c:f7:38:db:d5:f7:4d:39:7c:7e:d9:3a:52:
9b:df:1d:0f:8d:dd:01:f8:2f:72:99:5c:85:64:5c:8c:c7:22:
73:54:b5:95:05:c5:c1:2d:23:21:08:13:62:e4:80:5c:69:bf:
7a:19:57:ab:74:a7:18:b0:e9:d2:cb:f9:aa:30:00:5e:1d:1a:
41:ac:a5:6e:a2:a9:5c:85:2b:0f:0c:ec:c9:fb:af:e3:7c:97:
f5:50:00:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:06 2026 by rpki-client