
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36372e302f32342d3234203d3e203536303438.roa
File: 3134302e3231302e36372e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier: E0Jln1jTtw6gSVZ19hbu32cXo/+44TWb2ZtdPVK5rQ4=
Subject key identifier: 97:82:A9:1B:3B:CE:32:F6:70:35:8A:A5:A7:F7:20:47:07:D1:5B:4D
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 596F18332800D18FFBEAAC3EBED4F295F06F48B6
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36372e302f32342d3234203d3e203536303438.roa
Signing time: Wed 10 Jun 2026 17:49:27 +0000
ROA not before: Wed 10 Jun 2026 17:44:27 +0000
ROA not after: Wed 09 Jun 2027 17:49:27 +0000
asID: 56048
IP address blocks: 140.210.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6f:18:33:28:00:d1:8f:fb:ea:ac:3e:be:d4:f2:95:f0:6f:48:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 10 17:44:27 2026 GMT
Not After : Jun 9 17:49:27 2027 GMT
Subject: CN=9782A91B3BCE32F670358AA5A7F7204707D15B4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:10:e9:71:61:ce:58:e6:31:27:69:8b:94:76:
c2:69:86:5d:4d:c3:d1:19:51:e6:52:85:95:df:e8:
c7:f3:23:29:96:59:46:e7:29:63:99:74:fe:50:32:
8f:d2:85:80:2b:b3:56:e1:84:5d:30:45:38:6a:9f:
e7:24:0a:ba:f4:dd:c0:4d:c5:9b:60:ba:1e:dd:24:
19:2f:a8:b1:82:7f:56:c8:00:bc:53:b8:a7:d9:a3:
21:4e:8f:94:bd:c0:0a:d8:e5:9d:13:dc:7c:c5:ea:
01:0d:49:53:95:94:7a:d9:59:8b:a0:97:45:1d:0a:
d2:f1:a2:76:a7:d2:87:38:31:79:5d:45:ab:04:4a:
62:f8:bc:4b:93:ff:2a:26:b6:59:87:66:87:b1:af:
e7:d6:f6:f6:1f:e0:2c:54:79:bd:ab:90:69:df:dc:
b3:4e:71:ea:a7:84:4a:30:96:12:68:08:97:5b:ee:
81:1c:b4:6d:60:44:20:fa:0f:e6:b0:ae:b1:42:38:
ff:9d:24:db:bc:d5:19:cd:ec:20:65:f3:3c:a0:d4:
f3:29:e5:1c:02:42:d6:5f:72:f3:45:de:a9:14:ad:
ec:ad:08:93:72:dd:37:db:22:7f:a5:09:82:44:58:
f3:74:fc:cd:f5:a9:f5:fa:bf:67:bd:e0:6c:a0:e4:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:82:A9:1B:3B:CE:32:F6:70:35:8A:A5:A7:F7:20:47:07:D1:5B:4D
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36372e302f32342d3234203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:1e:66:0c:94:24:57:c2:e8:19:0d:b0:36:54:32:6b:6b:fc:
5c:02:b5:71:65:03:1d:95:fb:9c:97:e5:82:57:5f:f1:2f:af:
ff:c7:4b:d0:6e:b1:86:57:b7:74:d8:77:da:d4:6a:72:8c:b1:
3c:c3:43:5e:2d:4b:f4:15:9e:d5:8a:29:36:b4:a2:14:45:2d:
1f:43:a7:41:e8:11:9f:a5:4c:98:ca:52:5e:29:70:60:48:07:
1a:26:2d:49:63:43:8b:ed:be:c6:b2:af:fe:cf:eb:24:c6:bf:
58:07:86:a2:45:98:9a:6c:60:d8:80:38:cf:e0:55:e2:35:7d:
5c:70:4e:51:72:f8:16:63:19:b3:0a:64:33:b8:ca:a8:5e:0f:
c7:0c:64:a8:22:8b:ad:28:39:c2:ae:11:43:3b:24:fd:72:2c:
d1:cf:86:f4:67:5f:a0:21:d0:03:3b:b6:29:a3:40:72:9d:dd:
f5:e3:c2:34:22:7c:4f:99:81:67:52:92:be:d5:fd:53:d1:8b:
d0:b4:07:52:c7:7b:18:3e:bb:a4:ca:d0:af:0b:e2:bb:a8:fb:
94:ca:84:a5:db:a1:de:ef:ea:18:7c:d8:00:5e:b9:fd:0a:7f:
55:38:d3:07:ef:27:0c:4e:92:2b:60:47:a1:ef:3f:5a:74:85:
55:09:2e:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:34 2026 by rpki-client