
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36392e302f32342d3234203d3e2034383038.roa
File: 3134302e3231302e36392e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: mPTh+HSzCGYcVpWm8+BERsSJtxfszy4JbIOle48tKUQ=
Subject key identifier: B4:3E:75:AD:C5:80:FE:44:9F:28:28:04:2B:AF:0D:95:4D:9B:14:E7
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 27C2E576333AB6B83605F0BE08DF91895053322C
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36392e302f32342d3234203d3e2034383038.roa
Signing time: Wed 10 Jun 2026 17:49:28 +0000
ROA not before: Wed 10 Jun 2026 17:44:28 +0000
ROA not after: Wed 09 Jun 2027 17:49:28 +0000
asID: 4808
IP address blocks: 140.210.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c2:e5:76:33:3a:b6:b8:36:05:f0:be:08:df:91:89:50:53:32:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 10 17:44:28 2026 GMT
Not After : Jun 9 17:49:28 2027 GMT
Subject: CN=B43E75ADC580FE449F2828042BAF0D954D9B14E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:f7:cb:1c:50:a3:bc:f8:88:8a:8b:4c:62:
a6:a5:89:cd:fb:c2:5f:99:b1:2f:e4:b7:22:71:1d:
c6:e8:7a:17:f6:f5:ec:de:a5:31:dd:ba:32:2a:5c:
67:b9:08:55:fb:fe:a0:2c:ca:4a:d4:4a:1f:0a:28:
1d:bc:3a:1f:6a:c0:54:b0:ab:11:27:b0:4c:58:96:
8f:02:03:41:e5:cb:2d:e8:2d:30:8b:c7:b9:c7:1e:
c7:04:74:b9:ff:f3:dd:9b:aa:9d:ae:fd:19:6e:5d:
2f:41:9f:c8:fc:57:a1:58:73:ca:90:f3:75:77:ed:
a4:73:8f:60:eb:d6:24:bf:be:73:be:84:3a:f1:5c:
32:bb:09:ff:d0:3f:0c:18:21:86:11:08:3b:2f:18:
7b:08:cf:af:ba:f0:44:3a:3e:80:4c:81:59:d4:c4:
ca:3f:e4:d6:be:43:99:11:3d:bf:2b:b6:0a:84:d6:
81:b9:fc:18:68:9c:f7:22:fc:b1:fc:d0:53:fc:72:
04:53:18:51:ab:96:78:4c:20:05:01:af:1c:f7:e3:
57:d7:ed:92:ec:12:6f:3e:3e:70:05:98:a0:41:52:
2d:9e:96:e4:1c:90:40:12:96:47:70:d4:f6:10:df:
ab:62:08:ce:5a:6e:63:a3:7b:17:a0:40:77:5e:65:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3E:75:AD:C5:80:FE:44:9F:28:28:04:2B:AF:0D:95:4D:9B:14:E7
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36392e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.69.0/24
Signature Algorithm: sha256WithRSAEncryption
89:2d:4b:79:9e:cc:8e:f6:f0:5d:a6:60:97:8d:4c:92:d4:6b:
e2:57:02:40:ec:98:38:f9:49:46:c5:0e:85:00:78:83:37:1f:
31:81:a1:46:d2:ba:d1:4b:11:23:f9:d3:1d:41:6e:82:5c:1d:
15:80:90:e3:82:ed:00:c7:c2:96:17:35:87:6d:80:f5:7f:54:
68:5e:88:74:fd:79:a1:45:7f:18:10:0d:fd:89:4d:11:c9:ea:
05:11:4c:16:5e:47:e7:8f:5b:46:fb:94:f7:e4:56:0b:0f:25:
33:12:1f:d1:17:2d:85:30:f1:d8:d5:a9:71:27:db:7c:18:5b:
2f:09:b0:fa:f5:7f:39:3c:6e:6f:04:14:4d:f6:0e:5a:8e:d9:
cc:f7:ba:5b:a1:9d:30:7f:b7:9a:0c:f2:17:38:47:1c:61:48:
20:a3:28:f2:fb:bb:c6:2b:76:b4:26:33:c2:e7:d5:7c:13:e1:
2c:b7:8a:c2:30:83:44:a3:0e:9e:9e:3e:0a:75:72:5f:21:f2:
15:72:9f:de:be:36:9f:5d:70:1a:d3:df:0f:ca:37:0e:89:9a:
e0:7a:f5:c6:c0:20:f1:d9:43:a0:5d:7e:e0:d0:ef:bc:ca:a2:
d0:bb:f2:72:4b:03:30:96:ce:fb:cc:2c:d0:46:61:4b:e4:e0:
c5:92:3c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:51 2026 by rpki-client