
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38342e302f32342d3234203d3e2034383038.roa
File: 3134302e3231302e38342e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: 2iiIZWzoio8JbC5ca4CDp/C3+CUJl1uYVtzo4tEJUeg=
Subject key identifier: CB:64:F9:7D:EC:1D:61:66:70:22:D0:69:66:49:39:6D:5F:44:C6:3E
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 665430450A861F19A2653D03838B6CB72AFF82DA
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38342e302f32342d3234203d3e2034383038.roa
Signing time: Wed 10 Jun 2026 17:54:20 +0000
ROA not before: Wed 10 Jun 2026 17:49:20 +0000
ROA not after: Wed 09 Jun 2027 17:54:20 +0000
asID: 4808
IP address blocks: 140.210.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:54:30:45:0a:86:1f:19:a2:65:3d:03:83:8b:6c:b7:2a:ff:82:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 10 17:49:20 2026 GMT
Not After : Jun 9 17:54:20 2027 GMT
Subject: CN=CB64F97DEC1D61667022D0696649396D5F44C63E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:41:2d:d0:3a:e5:6a:11:37:72:e7:00:e3:
cb:f7:78:54:8a:7c:39:71:c9:db:ad:54:7d:98:80:
ec:fc:6d:d4:21:a7:71:a7:80:ae:32:67:32:21:e3:
27:b5:e1:42:85:63:b2:44:a0:06:0a:76:90:54:59:
7a:a5:dc:63:9c:11:df:62:c8:bc:bb:2e:2f:56:77:
1f:36:48:a2:f0:cd:b4:5d:4e:19:aa:18:d2:a5:61:
1a:c0:a8:e0:d1:fd:bc:0c:b4:45:49:4c:c7:01:4d:
ad:dc:d4:1b:9c:15:8f:57:c1:85:aa:ae:26:43:9c:
dc:0c:3b:bc:3d:80:ca:51:24:b3:0d:68:07:cc:9c:
44:29:13:ae:2d:02:22:b3:45:e1:26:09:5b:f9:33:
5b:9b:fe:4a:75:1a:0d:d8:0b:5a:f0:2b:ee:e6:16:
83:da:f2:91:c3:3e:cd:6f:cc:c5:ed:42:9e:5b:75:
dc:3d:c4:56:b9:a9:22:f9:a7:16:c9:12:2c:82:0b:
51:9c:bf:aa:c6:f9:35:bb:fb:6b:f3:b7:0e:f7:1e:
d7:43:91:88:7d:77:70:f0:7b:42:fc:dd:de:b6:36:
d8:7b:5c:ae:fd:7d:47:48:d4:75:36:87:dd:f2:f6:
ae:43:56:fe:cf:00:1f:96:61:70:35:b5:72:82:2a:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:64:F9:7D:EC:1D:61:66:70:22:D0:69:66:49:39:6D:5F:44:C6:3E
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38342e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.84.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f9:94:78:59:9f:6a:1d:75:66:51:91:fe:53:5a:d3:af:09:
8a:67:f7:be:c8:b6:33:fa:4c:f0:fc:19:95:42:c0:e4:64:f9:
a5:39:82:9b:77:36:74:36:33:3a:98:74:46:cf:45:f6:fb:81:
d3:c7:2c:38:3d:93:af:14:94:bb:00:fc:06:2d:8b:41:d6:2d:
47:20:f6:78:ed:3f:0a:dc:47:73:34:f1:c6:39:37:f5:61:03:
f9:a4:39:86:af:c6:4e:a9:d5:59:ea:71:1d:59:4b:81:bc:3c:
dc:cf:40:22:ee:b6:f1:6f:ae:70:b9:86:dd:1b:e0:55:1d:1e:
47:65:45:54:01:57:bb:b9:7e:ec:80:6f:7c:d5:86:f2:66:4d:
7a:33:70:cc:86:7f:7c:0d:40:0b:30:ea:9a:9a:16:77:d3:b7:
b1:d5:7d:cb:2d:2c:72:eb:e6:cf:a2:2f:12:8e:72:6e:59:a1:
82:1b:99:6a:8b:0b:16:53:28:42:33:4c:47:06:20:f7:33:58:
3f:48:87:f2:eb:85:c1:d8:60:06:47:55:af:40:09:ce:ba:9c:
86:39:a2:d9:de:91:53:67:d6:32:19:e6:7e:d1:ca:b6:59:f5:
23:77:0a:b0:e2:66:15:78:9d:ad:c0:b3:61:f7:72:9c:d9:5a:
a9:5c:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:53 2026 by rpki-client