
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37302e302f32342d3234203d3e203536303438.roa
File: 3134302e3231302e37302e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier: sA0XVEn+ZwsJsJZxhI+b0EZK9bL4iKpJKQGhV4qFDYA=
Subject key identifier: 16:E3:31:6B:F1:AE:71:E4:6F:5E:8D:51:89:06:3D:07:15:9C:45:C4
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 340ADFEFCEB1ED9838C09C004F7EA2FCCD9DF1A0
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37302e302f32342d3234203d3e203536303438.roa
Signing time: Wed 10 Jun 2026 17:49:28 +0000
ROA not before: Wed 10 Jun 2026 17:44:28 +0000
ROA not after: Wed 09 Jun 2027 17:49:28 +0000
asID: 56048
IP address blocks: 140.210.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0a:df:ef:ce:b1:ed:98:38:c0:9c:00:4f:7e:a2:fc:cd:9d:f1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 10 17:44:28 2026 GMT
Not After : Jun 9 17:49:28 2027 GMT
Subject: CN=16E3316BF1AE71E46F5E8D5189063D07159C45C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:8e:9d:f7:69:74:ca:a5:66:dc:d9:55:53:
2b:02:47:64:ea:ca:ca:ba:dd:8b:18:ca:14:26:00:
74:8c:ad:24:b4:6c:bf:68:ad:6e:9b:fe:a4:bf:9a:
a4:ae:26:97:65:dd:34:0b:29:f2:c3:c8:9d:93:59:
89:74:5a:d0:aa:39:fc:cc:c5:85:fa:85:ee:51:21:
ec:65:93:2d:fa:37:e5:b2:b3:00:80:67:be:f8:06:
5f:7e:e9:bc:0c:d4:46:81:04:cf:4f:09:ec:37:5d:
23:6b:47:9a:3c:7e:83:93:95:0c:fd:f1:bb:cd:ec:
4f:98:4d:9a:e7:20:48:5b:3a:e7:68:62:bd:2a:64:
60:22:f3:66:2a:c9:dd:1b:eb:4a:26:fc:de:21:b8:
ae:18:c0:4e:8c:9a:8f:13:9a:fc:6e:a0:22:03:1f:
8c:9d:26:86:75:2e:cd:55:1d:af:1b:af:17:17:75:
5d:b0:96:9c:b1:73:52:83:fa:3a:48:94:4d:f6:b1:
9f:53:0b:8b:42:57:f8:66:07:fc:eb:9b:45:a6:07:
34:0f:2f:a0:6f:36:ad:6c:c2:c4:8f:13:ca:bf:5e:
62:f5:ef:d8:9e:4b:7f:10:4c:d3:1b:b6:dd:94:88:
0d:f7:1f:da:51:f0:f3:4e:48:b0:19:87:95:fd:18:
03:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E3:31:6B:F1:AE:71:E4:6F:5E:8D:51:89:06:3D:07:15:9C:45:C4
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37302e302f32342d3234203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.70.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:eb:4d:9e:9f:5a:76:bc:97:dc:80:72:eb:72:79:b6:3f:75:
33:50:ab:f9:69:c8:8d:78:55:d6:c0:b5:1a:b9:d2:4b:5e:c9:
51:14:c5:de:86:2b:d0:69:8b:cb:3a:d2:b2:4c:56:39:6f:fd:
6e:04:97:25:68:c4:bb:da:95:46:eb:66:16:62:a6:97:3a:d6:
79:37:e7:12:e8:99:9b:f2:00:0d:42:7c:e3:4b:3d:dc:ca:a6:
44:af:90:6b:35:6d:24:0a:cf:eb:1a:31:2e:19:3a:c4:60:2b:
00:c5:73:4a:84:1e:85:28:37:ee:12:3e:a7:12:80:50:da:f7:
3c:68:c6:90:b6:66:76:46:da:5a:7c:dc:cb:63:97:76:fc:f6:
71:cf:30:21:d9:89:c4:b0:36:64:86:31:72:5e:ae:12:1b:7a:
50:89:f7:51:da:30:8a:e8:08:39:37:c3:5a:b7:bf:06:f3:93:
db:ac:0a:df:05:30:2d:39:2d:33:36:13:f3:69:c8:40:1c:30:
24:6d:b4:ba:52:0c:8d:23:ab:d0:86:09:28:22:d1:00:8c:49:
ae:b8:f2:66:8b:0b:b5:d4:d4:b7:c9:23:22:70:a9:5b:12:a8:
7d:51:4c:12:0c:ff:a9:d6:e3:ab:92:a3:b4:73:60:a4:00:04:
09:22:03:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:34 2026 by rpki-client