
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37352e302f32342d3234203d3e203536303438.roa
File: 3134302e3231302e37352e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier: 69aQ/wnzNtb8eFLOVvY/H5rOdKNWrUxq/mtHmaUG6PQ=
Subject key identifier: 5D:4F:8C:20:94:91:5C:0B:B7:3C:B8:C0:BB:85:8F:FA:9F:10:F6:A2
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 77BAE169087608EF07C3A6BE0D53A8728271A9F7
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37352e302f32342d3234203d3e203536303438.roa
Signing time: Wed 10 Jun 2026 17:49:27 +0000
ROA not before: Wed 10 Jun 2026 17:44:27 +0000
ROA not after: Wed 09 Jun 2027 17:49:27 +0000
asID: 56048
IP address blocks: 140.210.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ba:e1:69:08:76:08:ef:07:c3:a6:be:0d:53:a8:72:82:71:a9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 10 17:44:27 2026 GMT
Not After : Jun 9 17:49:27 2027 GMT
Subject: CN=5D4F8C2094915C0BB73CB8C0BB858FFA9F10F6A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:06:b5:6d:e2:5f:f4:77:2a:35:29:80:eb:
70:8b:33:d3:9f:b8:6a:88:51:de:7a:fe:04:da:c0:
68:03:b9:36:00:13:31:93:72:6b:c6:de:28:23:ec:
c3:35:5e:f8:ad:7b:c2:a5:a5:37:fe:3d:d9:4d:f2:
98:33:03:64:23:d5:4b:24:d5:f4:41:cc:b3:98:4c:
09:bd:4f:bb:c0:92:20:26:a1:76:68:97:5a:5f:58:
11:9d:56:4e:06:49:0b:12:71:89:f6:3e:6d:67:f6:
02:d9:49:67:d6:85:8e:2b:31:8f:fd:b7:59:e7:d7:
11:03:1e:b7:f4:ca:56:d7:1a:95:ef:6d:12:21:11:
79:3a:5f:fc:ab:dd:f0:f7:37:65:69:6b:e7:82:9d:
94:bc:40:1e:7e:09:2b:b6:5c:6f:c7:79:fa:4b:e0:
c7:0d:83:39:93:a9:b2:76:27:81:a2:f3:4b:aa:f3:
66:9b:0c:27:0e:53:1a:57:ea:e2:db:a0:63:8c:63:
f7:04:f5:d3:d5:42:6e:7c:48:d5:3a:5d:70:e3:0b:
43:70:ca:cf:51:ac:90:e4:58:e8:c4:6d:ef:34:54:
1d:e8:7f:dd:75:06:70:20:41:76:37:76:34:02:35:
bb:74:ad:19:ba:01:73:f2:70:84:c6:57:8b:0a:f3:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4F:8C:20:94:91:5C:0B:B7:3C:B8:C0:BB:85:8F:FA:9F:10:F6:A2
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37352e302f32342d3234203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.75.0/24
Signature Algorithm: sha256WithRSAEncryption
33:37:c8:86:d9:54:44:9b:9e:a0:f5:c8:13:32:19:81:15:3e:
e4:56:ee:06:40:9a:8c:b1:78:e7:03:69:fd:08:96:bb:95:b1:
82:30:cb:08:72:61:14:50:b0:c4:fb:47:65:1b:4f:a5:e0:8a:
f0:43:4c:77:d0:e5:f7:e8:38:d1:b4:40:55:08:1f:0b:c4:91:
18:38:32:64:f8:7c:69:eb:49:a5:e0:d3:5d:e0:f2:f7:b8:90:
6e:10:87:49:a3:7e:7a:b8:a3:8f:1d:54:31:77:fe:c6:8e:e6:
83:30:b6:b2:95:e4:39:34:48:da:9e:83:4a:06:00:8c:42:e8:
a8:bd:27:1c:ca:ec:22:d0:91:7b:9b:3e:0e:c5:a9:21:4b:0d:
2c:cc:1f:6e:2d:64:b1:86:65:b2:53:8d:79:0c:c5:5c:4c:64:
e1:94:bf:aa:d6:4a:05:92:06:1b:52:ff:45:6e:cf:92:ef:9c:
03:fe:8b:74:ba:48:35:96:b8:01:d4:8f:56:97:bd:81:20:75:
f0:a9:08:92:c5:75:ec:a0:5a:06:30:3c:55:ee:11:f9:65:96:
a0:62:5d:df:0b:9d:dd:14:7e:6e:39:55:4e:6e:30:58:6b:c1:
72:24:90:c3:ef:50:9d:02:b3:f5:02:80:c6:04:81:28:b9:e4:
32:29:41:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:33 2026 by rpki-client