
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3232342e302f32302d3230203d3e20313334353432.roa
File: 3134302e3231302e3232342e302f32302d3230203d3e20313334353432.roa (raw, json)
Hash identifier: h5XYXzmx9wpest7x9FTZa7CfJIaMRioSgnjFcVcfkKw=
Subject key identifier: 36:76:44:06:F0:61:A2:64:D9:54:4B:AD:3D:8E:9B:BD:C3:AE:80:43
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 3AAEF2F2FF6A1E19C3A22A93D01888DA8E2D9772
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3232342e302f32302d3230203d3e20313334353432.roa
Signing time: Thu 11 Jun 2026 16:02:06 +0000
ROA not before: Thu 11 Jun 2026 15:57:06 +0000
ROA not after: Thu 10 Jun 2027 16:02:06 +0000
asID: 134542
IP address blocks: 140.210.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ae:f2:f2:ff:6a:1e:19:c3:a2:2a:93:d0:18:88:da:8e:2d:97:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 11 15:57:06 2026 GMT
Not After : Jun 10 16:02:06 2027 GMT
Subject: CN=36764406F061A264D9544BAD3D8E9BBDC3AE8043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d4:b7:23:47:3d:94:03:d9:01:ea:f3:cd:0e:
9f:c3:8f:4a:36:db:62:0f:b1:33:b0:83:71:96:a0:
6a:25:ac:93:3c:ec:3a:e3:a2:6c:d1:6e:97:db:f8:
d3:61:26:0c:ea:fc:77:e2:dd:f6:78:50:c8:8b:29:
b9:2b:a9:cf:94:2b:56:7d:17:f2:f0:42:e8:53:7c:
ed:31:39:f0:9c:d7:02:2c:58:33:3f:0d:89:5e:b1:
4a:60:d0:6d:a7:78:3b:ea:f3:7f:44:b6:8b:27:5c:
3e:4e:e2:1e:ed:78:15:c4:8c:a8:39:b1:a8:0d:09:
70:e5:42:c4:60:93:42:44:62:e6:bd:29:c1:b3:a9:
a3:6f:92:69:e9:41:d7:34:92:35:51:5b:45:85:b1:
e3:5b:bd:4e:1f:02:1a:98:b4:31:94:e8:9f:e8:ad:
8f:07:9d:21:10:e0:76:de:6a:99:e1:83:9d:85:dc:
1f:08:32:ca:4a:d3:5d:7d:e5:13:61:7b:83:07:ec:
a8:9a:b4:d4:c7:cb:93:0e:51:2d:48:f7:5e:c5:e1:
f5:54:93:a0:0c:0a:b4:e4:57:fc:c9:ca:08:51:58:
eb:83:6a:cf:9e:07:83:48:c5:e8:8a:d1:35:3e:e0:
71:78:48:c3:a1:c6:18:45:db:ef:b0:8c:9f:1b:6c:
26:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:76:44:06:F0:61:A2:64:D9:54:4B:AD:3D:8E:9B:BD:C3:AE:80:43
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3134302e3231302e3232342e302f32302d3230203d3e20313334353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.224.0/20
Signature Algorithm: sha256WithRSAEncryption
56:27:65:4b:fb:68:16:70:5b:6a:b3:8e:97:c5:60:b5:50:f3:
cd:6e:d3:b1:09:24:a2:11:0a:01:38:7f:ba:e5:b3:bb:aa:6b:
3d:e5:b0:c5:ee:0e:57:8a:04:4a:38:86:a1:19:f7:36:95:ab:
77:4f:85:f5:72:d1:49:cf:5e:b4:fd:66:6f:27:02:19:ca:bc:
b4:b9:be:68:8e:86:8d:73:63:a6:b2:02:b5:1d:07:1c:ef:82:
99:74:9a:6d:f6:f3:ef:70:f4:be:28:55:3a:34:18:13:a3:38:
fb:ef:65:02:d0:67:e5:90:7d:5f:1f:4d:96:4a:9e:e8:f9:c4:
af:56:52:85:20:d1:65:fe:6d:e8:27:33:15:17:af:35:9d:ee:
6a:75:d6:f5:60:bf:f3:bf:e2:fc:9a:cf:3a:ce:bd:e6:0d:9a:
14:c7:95:ee:5f:1a:24:12:73:05:e4:72:8a:2e:5f:4b:83:96:
ea:55:4e:a5:dc:09:b8:0c:1b:16:ae:a3:83:4e:dc:e9:8e:bb:
2c:d2:d5:b9:58:e0:64:f4:70:0e:bf:2b:d0:d9:ed:84:de:d7:
43:63:57:ab:f9:8e:5d:2e:0a:cb:c8:0f:10:f8:08:5c:c0:d9:
29:11:88:ab:68:8c:d3:15:ac:01:2c:a8:be:50:91:80:de:a1:
3f:fb:93:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:02 2026 by rpki-client