
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38302e302f32342d3234203d3e203536303438.roa
File: 3134302e3231302e38302e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier: GCk1pbP0KR5dMn5CQQKu1EaIWHqeHM0NrSc0adkx+EE=
Subject key identifier: B1:E0:67:C0:C6:2C:0D:27:74:0A:A0:A9:4F:CF:EA:59:4B:E1:91:91
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 0ACA815CB6EFFE58B645BCBAF2B4A20B0DEB1794
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38302e302f32342d3234203d3e203536303438.roa
Signing time: Wed 10 Jun 2026 17:54:19 +0000
ROA not before: Wed 10 Jun 2026 17:49:19 +0000
ROA not after: Wed 09 Jun 2027 17:54:19 +0000
asID: 56048
IP address blocks: 140.210.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ca:81:5c:b6:ef:fe:58:b6:45:bc:ba:f2:b4:a2:0b:0d:eb:17:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 10 17:49:19 2026 GMT
Not After : Jun 9 17:54:19 2027 GMT
Subject: CN=B1E067C0C62C0D27740AA0A94FCFEA594BE19191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:ea:ee:66:83:6a:80:0d:d7:48:8a:a4:d1:
ac:52:8d:98:09:90:21:3d:ed:9d:75:b4:a3:31:61:
d1:ba:92:9f:d0:fa:d0:b6:fb:04:49:0d:87:73:a9:
78:47:6b:85:f2:67:95:9c:6a:87:76:47:26:2d:06:
b8:fd:36:84:f5:3d:f9:13:11:da:51:e7:15:72:33:
7a:bd:ac:41:75:a3:4e:63:5f:78:ef:12:ea:2e:08:
34:3e:ee:a8:1c:d1:06:f1:6c:af:c0:1b:58:b5:93:
19:ef:0b:c7:e6:47:16:1e:bf:b8:80:67:a4:ab:58:
fa:5d:1b:02:8e:ea:4c:cd:96:b7:3f:6e:de:1c:36:
c9:0e:f0:6e:c0:0c:5d:5d:ee:ad:e7:9c:c5:95:bb:
e9:c2:74:6d:c9:8f:8b:be:94:ec:0a:fd:33:eb:29:
f1:93:58:db:08:0a:38:fb:eb:09:5f:0a:64:cb:fd:
60:85:48:97:b2:c8:b0:c7:17:5a:56:4d:fe:06:ff:
ba:78:09:43:2b:6b:71:11:ef:28:07:74:8e:9e:6c:
e6:9e:13:aa:04:1f:ed:44:dc:82:7b:83:9f:69:7d:
d0:b2:ab:db:70:a0:72:f2:07:1b:25:ac:b2:a4:ad:
74:4f:66:24:ca:0c:e0:ab:a1:b6:7b:17:f1:25:aa:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E0:67:C0:C6:2C:0D:27:74:0A:A0:A9:4F:CF:EA:59:4B:E1:91:91
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38302e302f32342d3234203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.80.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c2:72:39:86:42:2b:da:df:08:63:d0:2a:75:25:74:4c:d3:
07:d8:cd:e3:89:44:3a:a6:4b:b5:71:0b:0c:c6:77:21:d2:de:
89:4d:00:f8:1e:81:0f:e9:ef:8e:1d:11:0d:7e:e2:b8:b7:4e:
e7:1c:a8:3b:e7:1a:63:04:57:78:79:aa:cf:e0:7b:5a:66:fe:
7b:66:60:d6:12:c7:cf:7f:5e:c8:99:6e:72:9a:40:c8:c4:a3:
ac:38:1b:f8:35:78:bc:8f:88:74:1c:d3:93:e3:1a:e4:19:7e:
48:8c:d2:9b:fd:ee:54:2a:70:eb:09:86:71:9b:5a:fa:09:f2:
11:fe:b0:03:3b:2b:1f:dd:82:40:3e:00:a4:af:dc:1a:02:8b:
29:ff:3c:21:d2:f2:10:6e:96:3b:b7:a3:35:fb:e6:4e:b2:c3:
dc:4d:02:fb:3f:25:ce:d6:cd:48:b3:64:97:1e:4e:56:d5:9e:
36:d5:77:5a:2b:a8:14:ef:c5:a4:87:40:ab:25:1d:84:4a:5f:
f6:56:72:04:b2:0e:76:a0:2a:51:7d:db:32:60:38:ca:8e:3b:
90:4d:b0:b4:30:19:64:66:87:b9:ef:ad:cb:ff:40:5a:4c:32:
ec:d2:10:f6:ab:e8:de:74:a7:56:c0:45:7a:b9:c0:64:50:46:
2e:85:b3:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:53 2026 by rpki-client