
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234302e302e302f31372d3137203d3e20313531303538.roa
File: 3134302e3234302e302e302f31372d3137203d3e20313531303538.roa (raw, json)
Hash identifier: 2Am2gfuQLHUN7wkypc5YSVzG0e9vHkv3Tz87ui8eZrA=
Subject key identifier: 6D:20:6B:BC:C6:2A:B1:BF:2B:F5:44:13:5C:46:79:8B:43:40:42:A1
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 07BDB79EB6B6128E0C0A2ACF2A729B5603E61D04
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234302e302e302f31372d3137203d3e20313531303538.roa
Signing time: Wed 03 Jun 2026 16:45:37 +0000
ROA not before: Wed 03 Jun 2026 16:40:37 +0000
ROA not after: Wed 02 Jun 2027 16:45:37 +0000
asID: 151058
IP address blocks: 140.240.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:bd:b7:9e:b6:b6:12:8e:0c:0a:2a:cf:2a:72:9b:56:03:e6:1d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:40:37 2026 GMT
Not After : Jun 2 16:45:37 2027 GMT
Subject: CN=6D206BBCC62AB1BF2BF544135C46798B434042A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:b6:d1:61:3b:72:d1:99:04:fb:30:a3:9c:
41:4e:e0:12:c2:1a:a5:a7:7d:7d:06:09:52:77:c5:
70:73:9c:f6:66:62:df:51:fa:49:83:8c:34:db:84:
7d:ec:d8:30:63:46:a9:5c:e8:bc:0d:c9:0c:94:3e:
7b:58:c3:b7:fc:94:83:1b:ae:4a:7a:6f:45:b4:8a:
3e:84:74:10:5e:5a:a3:d9:86:56:5d:9f:da:48:cd:
2d:be:52:56:33:0d:a7:66:fe:d0:1b:9d:3a:5a:6c:
4e:ee:f4:9f:1e:06:72:bf:b5:a7:b4:97:34:82:c6:
cc:02:4e:a5:26:19:a6:b2:72:ec:1d:bf:b7:d2:44:
70:cd:28:c5:90:c3:8a:cd:54:08:42:f8:25:11:97:
eb:fe:06:0c:6b:c9:08:c8:82:ff:5a:fd:6c:b9:73:
03:d7:2a:f0:13:aa:c1:ac:a8:e8:6c:7e:d8:10:06:
2c:b9:62:ea:fb:be:96:fd:d3:98:b1:b7:18:15:a2:
79:78:a4:98:f6:e2:73:2b:1c:2e:f5:56:e0:d4:12:
db:94:93:87:26:83:da:2d:88:3a:90:29:75:e7:c8:
37:34:6f:e3:aa:26:24:2a:4e:4f:2c:57:3d:9d:cb:
e6:45:6a:54:b8:15:28:f4:ab:9c:d6:55:43:6f:8f:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:20:6B:BC:C6:2A:B1:BF:2B:F5:44:13:5C:46:79:8B:43:40:42:A1
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234302e302e302f31372d3137203d3e20313531303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.240.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6c:6f:50:c7:7b:1c:4f:76:2e:a0:41:6a:43:97:08:72:4e:f7:
95:b5:f4:dd:a4:43:3d:db:06:66:d7:54:e8:75:9c:a9:86:b8:
76:45:e5:46:1c:f1:a6:d5:96:1b:85:45:d1:62:e7:b3:a4:ba:
c4:91:7c:2a:b4:cb:01:f5:ea:fd:d9:69:28:85:d6:51:90:d4:
a1:dc:c3:31:8f:1b:32:76:0e:2b:ce:8d:3f:c4:af:b1:bd:44:
92:22:54:e5:2c:1e:40:90:59:fc:ac:af:85:f0:af:cd:02:54:
70:8d:ba:82:d2:4d:b8:28:55:ba:bc:c9:9f:c1:e8:e5:51:ed:
87:c4:e4:67:7b:ec:16:c5:bd:4d:39:02:45:54:98:01:c0:a6:
58:d5:f2:80:e4:6e:3c:72:4a:a4:ac:45:b7:0e:0c:da:fc:bc:
60:d3:0c:e7:a9:76:73:51:96:7c:a3:70:04:f8:f4:7b:c8:3c:
0d:2a:3f:6e:cb:05:e0:36:59:79:d5:22:68:61:85:10:9e:43:
85:46:b9:52:4d:18:78:d2:a8:ea:f4:67:2f:f8:c4:fe:c7:a5:
15:f5:1e:db:17:70:cc:75:11:a6:17:03:6e:18:74:e6:f2:87:
7f:16:ee:fa:8c:b7:43:81:2c:73:34:d7:a9:24:11:6a:5b:fd:
25:28:9d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:12 2026 by rpki-client