
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e302e302f31362d3136203d3e203538353139.roa
File: 3134302e3234362e302e302f31362d3136203d3e203538353139.roa (raw, json)
Hash identifier: 5DKz9ttqLrK323mF8kNthJ2F7O4SNrFUucDxeUFtfP4=
Subject key identifier: 0C:7B:12:1B:38:BD:53:15:36:64:44:FC:EE:0B:EE:D2:7C:87:FA:8E
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 24FB3F7CDAA9A184DB5B53091F50D5A4B91E27CB
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e302e302f31362d3136203d3e203538353139.roa
Signing time: Wed 10 Jun 2026 16:48:06 +0000
ROA not before: Wed 10 Jun 2026 16:43:06 +0000
ROA not after: Wed 09 Jun 2027 16:48:06 +0000
asID: 58519
IP address blocks: 140.246.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:fb:3f:7c:da:a9:a1:84:db:5b:53:09:1f:50:d5:a4:b9:1e:27:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 10 16:43:06 2026 GMT
Not After : Jun 9 16:48:06 2027 GMT
Subject: CN=0C7B121B38BD5315366444FCEE0BEED27C87FA8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:fd:c9:68:87:33:c9:a2:a1:77:16:a1:23:
72:11:ce:b0:b7:c6:00:0f:5d:1e:3c:6c:78:51:c1:
7b:5c:3c:6f:4a:6b:a5:f8:6c:26:3d:98:dd:a6:5f:
6c:a2:7d:ff:da:8e:ed:0e:dd:36:0f:17:5a:1b:37:
dc:b3:31:df:6b:3f:b5:11:46:c6:b6:9f:cf:3a:9a:
e2:4b:d7:06:8e:e3:dc:69:9a:5e:27:1f:69:b1:8a:
37:59:fa:c9:47:b2:41:6e:46:a9:51:74:a4:39:b4:
b6:bc:25:e6:a2:f2:0f:bd:fd:2f:55:1a:13:37:b0:
72:4b:ec:72:ae:d8:2e:bb:1a:8d:89:14:0e:ee:93:
ab:7a:40:6b:40:83:92:91:32:07:21:65:3f:80:4f:
ec:00:71:78:63:ac:92:09:d3:ac:64:39:0d:c3:7e:
54:eb:0a:d8:62:fc:f3:0f:f3:df:ab:21:d7:e4:fb:
31:2c:2c:88:fd:4b:cb:11:54:3f:82:a1:e7:b2:e7:
8c:a5:c4:dd:8e:05:88:23:21:4f:f8:23:b5:36:8c:
49:83:ef:a5:f2:d6:28:4b:a0:a0:7b:fa:08:8c:4d:
10:fe:ec:9c:92:8a:e5:99:52:25:10:90:92:82:f0:
fc:e1:6d:9f:5e:7c:89:86:9f:fb:07:44:6e:72:63:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7B:12:1B:38:BD:53:15:36:64:44:FC:EE:0B:EE:D2:7C:87:FA:8E
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e302e302f31362d3136203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c6:fb:c4:7c:43:64:2d:36:f2:33:e1:c7:1e:1c:37:d6:9a:6b:
5b:26:50:b9:4a:75:1d:0a:57:51:06:c7:55:52:ef:2b:3c:d7:
25:53:10:89:b3:73:29:4d:7d:bc:dd:ff:ee:be:c5:0a:6a:af:
1d:33:f1:f7:2a:3a:d3:40:38:d0:67:68:cc:03:4f:04:88:c2:
56:03:d1:fb:84:07:70:0e:6a:98:2b:e7:81:5c:cd:7e:c8:74:
98:61:e6:10:03:71:ea:e4:df:58:cb:82:26:60:d0:20:2f:45:
4e:24:5e:58:75:24:fd:64:09:1b:36:97:96:97:f9:12:1d:6d:
c5:a1:24:3a:ad:53:21:22:ad:5d:a4:ee:1d:0a:3d:b8:ed:63:
2f:94:ab:c5:ae:71:58:d7:87:97:0f:ea:cc:1e:26:95:bb:83:
dc:e7:38:9a:0e:77:89:50:e0:c0:53:df:ff:3e:ee:b8:63:ea:
a3:f8:98:1c:17:3f:88:a8:60:cc:94:d2:89:2a:b0:53:f4:c7:
4f:21:b9:e0:81:c1:11:d3:fe:b8:93:0e:db:04:04:06:97:cc:
5f:1c:df:0b:bd:f3:ce:0b:4b:8d:d1:4e:6c:2c:c6:58:1f:d4:
34:f2:4b:e9:6b:e8:e1:55:09:7d:e9:62:ca:7e:dd:c4:5f:92:
fa:03:42:b6
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUJPs/fNqpoYTbW1MJH1DVpLkeJ8swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1
M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYxMDE2NDMwNloX
DTI3MDYwOTE2NDgwNlowMzExMC8GA1UEAxMoMEM3QjEyMUIzOEJENTMxNTM2NjQ0
NEZDRUUwQkVFRDI3Qzg3RkE4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMjD/clohzPJoqF3FqEjchHOsLfGAA9dHjxseFHBe1w8b0prpfhsJj2Y3aZf
bKJ9/9qO7Q7dNg8XWhs33LMx32s/tRFGxrafzzqa4kvXBo7j3GmaXicfabGKN1n6
yUeyQW5GqVF0pDm0trwl5qLyD739L1UaEzewckvscq7YLrsajYkUDu6Tq3pAa0CD
kpEyByFlP4BP7ABxeGOskgnTrGQ5DcN+VOsK2GL88w/z36sh1+T7MSwsiP1LyxFU
P4Kh57LnjKXE3Y4FiCMhT/gjtTaMSYPvpfLWKEugoHv6CIxNEP7snJKK5ZlSJRCQ
koLw/OFtn158iYaf+wdEbnJjVgsCAwEAAaOCAhAwggIMMB0GA1UdDgQWBBQMexIb
OL1TFTZkRPzuC+7SfIf6jjAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf
sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1
RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v
c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF
BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0MDI5
MDU5NzY4MzUvMC8zMTM0MzAyZTMyMzQzNjJlMzAyZTMwMmYzMTM2MmQzMTM2MjAz
ZDNlMjAzNTM4MzUzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4G
CCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjPYwDQYJKoZIhvcNAQELBQADggEB
AMb7xHxDZC028jPhxx4cN9aaa1smULlKdR0KV1EGx1VS7ys81yVTEImzcylNfbzd
/+6+xQpqrx0z8fcqOtNAONBnaMwDTwSIwlYD0fuEB3AOapgr54FczX7IdJhh5hAD
cerk31jLgiZg0CAvRU4kXlh1JP1kCRs2l5aX+RIdbcWhJDqtUyEirV2k7h0KPbjt
Yy+Uq8WucVjXh5cP6sweJpW7g9znOJoOd4lQ4MBT3/8+7rhj6qP4mBwXP4ioYMyU
0okqsFP0x08hueCBwRHT/riTDtsEBAaXzF8c3wu9884LS43RTmwsxlgf1DTyS+lr
6OFVCX3pYsp+3cRfkvoDQrY=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:08 2026 by rpki-client