
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3130312e302f32342d3234203d3e203538353139.roa
File: 3134302e3234362e3130312e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: xLTBP0ru/mnOQYdmAbH0iq4FruUbgThfGho0Sjp+dxs=
Subject key identifier: E0:47:E9:F0:61:9E:4A:26:93:0A:AA:21:C8:D5:9D:63:27:B8:03:95
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 430B192B4B4C460B2603B62046AB4FC83D42B7E9
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3130312e302f32342d3234203d3e203538353139.roa
Signing time: Wed 03 Jun 2026 16:53:19 +0000
ROA not before: Wed 03 Jun 2026 16:48:19 +0000
ROA not after: Wed 02 Jun 2027 16:53:19 +0000
asID: 58519
IP address blocks: 140.246.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0b:19:2b:4b:4c:46:0b:26:03:b6:20:46:ab:4f:c8:3d:42:b7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:48:19 2026 GMT
Not After : Jun 2 16:53:19 2027 GMT
Subject: CN=E047E9F0619E4A26930AAA21C8D59D6327B80395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:98:d3:8d:58:4d:3c:9b:84:74:d8:fb:73:
60:81:4c:cd:49:4d:9a:b2:77:fd:04:be:15:eb:c8:
f8:da:41:64:ff:50:22:ee:0c:af:60:b1:ba:e8:b1:
f2:6d:b2:98:fd:e4:93:a7:67:05:b0:be:cb:e8:fc:
be:98:17:b4:f2:b7:3d:4e:74:d6:62:12:0c:2d:be:
de:9d:59:d7:48:3d:2c:6f:61:75:7a:fe:0a:6f:44:
81:8d:05:2b:36:d4:26:4f:0b:e2:d3:7b:37:cc:c5:
0b:1d:df:da:52:89:76:99:2c:ed:57:0d:b0:16:75:
46:52:49:a7:de:77:7d:ea:a4:b1:8a:aa:b5:c1:93:
76:9b:5b:c7:ad:3d:fe:d5:e9:4d:32:08:76:cd:ad:
73:ec:3e:2b:10:af:f7:80:c9:0a:38:8d:e5:82:66:
7f:3a:02:f3:ab:7c:01:68:45:06:c5:13:ae:fc:3d:
4a:0a:72:7f:9c:b2:6f:63:0c:ba:59:44:a5:8a:9c:
1e:d2:0f:0b:91:3d:0c:aa:91:34:c2:fa:a4:d8:e9:
8e:dc:6d:c3:95:38:db:80:08:18:a3:10:9b:b7:69:
80:43:f0:13:28:e2:1f:21:e3:c6:65:37:4f:66:84:
1a:a8:10:bd:42:c1:63:4e:cf:a5:75:0e:ee:98:70:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:47:E9:F0:61:9E:4A:26:93:0A:AA:21:C8:D5:9D:63:27:B8:03:95
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3130312e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.101.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4b:01:aa:9a:12:2c:c6:6c:f2:a2:36:03:ca:f9:9b:11:cc:
c1:80:50:c5:6f:18:ac:f9:86:fd:0d:9f:bc:72:69:d4:55:b4:
45:f6:05:d2:51:50:4f:0e:a5:b2:e1:78:de:d9:07:05:4f:12:
6c:1c:c8:ec:ec:05:c8:86:e4:d0:84:e6:65:65:76:4d:72:98:
95:5c:4a:a9:f5:d8:f5:3d:3e:48:8d:bc:cc:9b:53:94:05:6d:
39:4c:b6:3e:a9:4d:a2:53:92:96:f0:c7:5d:c6:94:46:4e:0e:
38:3b:e0:25:11:55:7e:1b:50:6e:89:d7:c8:13:d4:3b:8f:e3:
2e:e1:ae:97:cd:ea:17:9a:fc:61:5d:32:e3:4d:d7:b9:d7:b9:
e0:17:5a:be:72:73:75:5d:60:d4:65:7d:81:e0:9d:6c:e1:d3:
59:24:ca:f5:1e:fa:be:f0:d0:77:a4:3e:3f:b6:cf:18:92:71:
b3:51:e2:08:4d:99:a4:0e:5a:8c:8a:be:88:01:b9:75:97:57:
ac:66:39:ec:0c:59:02:c7:37:0e:15:33:ab:61:e3:68:ce:88:
75:72:7d:f0:da:ec:5c:fc:9b:81:7d:9d:3c:7e:a0:5e:5d:24:
d9:15:f9:35:58:03:f3:bd:12:82:25:c1:8b:cf:0a:2f:0b:bf:
31:06:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:44 2026 by rpki-client