
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37372e302f32342d3234203d3e203536303438.roa
File: 3134302e3231302e37372e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier: nnBSjW74jAVCTs6eIA2KC6G3Goft9AXfhDgtr3x0HPg=
Subject key identifier: 43:A3:88:A2:ED:23:50:BB:4B:56:30:68:B7:E0:17:F9:F0:05:DB:EC
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 49C01CBA42681C8D319D7FF0BE6CF8E195E4328D
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37372e302f32342d3234203d3e203536303438.roa
Signing time: Wed 10 Jun 2026 17:54:19 +0000
ROA not before: Wed 10 Jun 2026 17:49:19 +0000
ROA not after: Wed 09 Jun 2027 17:54:19 +0000
asID: 56048
IP address blocks: 140.210.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c0:1c:ba:42:68:1c:8d:31:9d:7f:f0:be:6c:f8:e1:95:e4:32:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 10 17:49:19 2026 GMT
Not After : Jun 9 17:54:19 2027 GMT
Subject: CN=43A388A2ED2350BB4B563068B7E017F9F005DBEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ed:d2:1c:76:3e:5c:3d:24:b9:cd:88:b4:96:
a9:f1:d8:dc:29:7d:bb:f8:31:ad:67:a0:95:ce:e1:
08:77:7e:36:d6:ee:bf:34:f6:e9:67:fa:b4:7b:ce:
e6:2b:c7:f4:75:73:a9:d6:20:a9:d1:d5:c3:b6:5f:
08:d4:32:86:32:d5:e6:80:4e:32:bb:3a:a4:67:30:
61:7f:5a:54:dc:72:60:87:6d:20:20:79:d1:31:db:
59:fd:20:6d:80:6c:39:58:56:ab:6f:1d:69:28:13:
3c:6b:c7:6b:cb:3b:70:cb:a7:47:69:2b:56:37:a0:
d8:1c:9a:d1:b6:a1:81:65:d1:b3:86:d2:bb:7b:89:
76:f6:4d:ba:a6:41:6c:cc:3f:50:41:22:a3:9c:b8:
38:16:22:76:ba:75:99:be:0b:12:1a:62:29:c2:4e:
b0:78:c7:51:30:75:b2:17:2f:89:82:43:45:27:3a:
81:c8:b3:63:67:8c:c8:95:e7:ab:f8:e0:4c:83:0b:
41:3e:c0:02:fb:79:22:fb:c8:d5:5d:06:a0:d9:da:
e0:d3:33:3c:b0:4b:23:5f:d8:24:32:2f:04:70:6b:
1f:49:72:7a:88:28:a0:1e:9f:7a:09:0e:7c:91:3c:
7a:2e:5b:c4:cf:f3:35:f2:1c:8e:32:34:97:46:77:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A3:88:A2:ED:23:50:BB:4B:56:30:68:B7:E0:17:F9:F0:05:DB:EC
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e37372e302f32342d3234203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.77.0/24
Signature Algorithm: sha256WithRSAEncryption
25:21:be:28:f4:06:b2:ce:ab:fa:b9:a6:2e:ca:09:53:43:bc:
ed:42:c2:ef:ae:cf:b0:59:2a:66:ec:b1:11:6b:60:0b:cc:b9:
85:ce:98:af:78:4e:dc:02:fd:f7:18:99:14:0f:a9:4e:7a:53:
37:10:93:28:e8:4d:4f:d3:55:d6:ab:78:cc:af:70:bb:36:94:
18:a0:f6:55:9d:2a:5b:c0:41:de:6b:52:b1:f0:2f:36:22:a3:
17:94:e7:44:39:bb:bc:0c:79:b6:aa:6f:fa:4c:56:45:09:b3:
be:35:cd:88:f7:e1:40:f4:6c:4d:9a:f2:eb:78:e3:ae:de:5a:
4f:af:ae:47:79:b2:f0:3c:50:ff:2b:b2:ad:e4:3b:d5:76:fb:
5b:e8:e9:71:a2:40:c7:67:3c:63:5a:42:7f:7a:da:fb:75:f8:
d7:9a:67:64:c2:70:88:43:c1:89:4e:b2:4d:74:c2:dc:19:4f:
a1:b6:55:a6:85:3e:bf:8e:3b:94:74:79:fe:cd:b8:13:cf:73:
87:ba:5c:b0:03:72:ba:fa:05:69:27:d7:99:df:78:41:4e:d9:
39:35:4a:43:87:62:18:8d:85:ed:dd:57:2a:5d:77:49:00:cb:
69:c0:cd:2a:e8:d4:28:cd:7f:e1:49:23:1c:12:61:e3:fd:de:
e2:99:7e:de
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:34 2026 by rpki-client