
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3130332e302f32342d3234203d3e203538353139.roa
File: 3134302e3234362e3130332e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: 932UxnPLWZJ1jgkMPkRx/4U92d9DQ39Hl/jLO5RSrLo=
Subject key identifier: 5C:4C:5C:BF:F8:7D:20:FE:FA:F2:FE:10:89:E9:89:CC:77:33:6E:BF
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 27E007517740E20CCEBF82899CAA0810DF4D74DC
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3130332e302f32342d3234203d3e203538353139.roa
Signing time: Wed 03 Jun 2026 16:53:20 +0000
ROA not before: Wed 03 Jun 2026 16:48:20 +0000
ROA not after: Wed 02 Jun 2027 16:53:20 +0000
asID: 58519
IP address blocks: 140.246.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e0:07:51:77:40:e2:0c:ce:bf:82:89:9c:aa:08:10:df:4d:74:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:48:20 2026 GMT
Not After : Jun 2 16:53:20 2027 GMT
Subject: CN=5C4C5CBFF87D20FEFAF2FE1089E989CC77336EBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:b1:73:a0:c6:15:0b:d1:8f:37:4b:fb:39:
dd:14:8d:cc:19:a4:45:42:ab:c0:02:dc:16:3b:51:
65:07:5c:ff:0d:5c:d1:63:01:de:4b:69:d6:ab:0e:
15:a2:1b:1b:48:05:83:c9:1c:7a:fa:41:0e:a4:53:
28:6b:f3:4c:9a:70:b6:42:a4:35:aa:18:e1:a9:1f:
dd:43:4d:68:69:36:1b:e5:44:aa:ff:db:86:39:a1:
3c:cd:29:a6:44:6d:ce:72:40:07:ea:c6:96:c1:6a:
b0:b1:9a:cb:90:08:40:21:19:a2:a4:78:db:81:16:
68:4d:a9:8c:25:67:a4:c6:51:75:f7:0c:27:a8:0b:
e8:97:57:15:f6:6c:2c:67:25:af:9f:1e:73:1e:a9:
d7:97:c1:17:25:d6:e4:01:c3:21:b5:0e:62:4d:01:
5c:6b:68:fe:81:06:fb:5f:d5:0d:94:25:54:c4:68:
bb:d9:7f:b7:17:45:29:6e:89:f3:3e:be:13:0a:cc:
f8:39:7b:fc:08:3f:18:08:54:ed:ca:00:42:51:8f:
1c:60:fa:65:e7:60:85:a5:e2:cf:55:fb:27:a2:78:
80:63:5f:5a:4c:d7:b4:7b:b7:cf:ed:82:6f:7d:a3:
54:64:84:f5:26:0b:aa:44:b2:51:d3:15:7c:b5:4a:
73:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4C:5C:BF:F8:7D:20:FE:FA:F2:FE:10:89:E9:89:CC:77:33:6E:BF
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3130332e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.103.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:c2:9a:a2:6b:cc:c1:09:b4:94:7f:72:29:a8:72:1d:9c:33:
9b:e7:30:65:9a:16:bd:c5:49:d2:c2:39:1a:bd:12:2d:5d:f9:
06:c0:dc:fe:52:fe:b7:43:e7:90:2a:70:f1:79:59:74:8e:62:
63:d5:79:6a:ff:3f:7e:d7:0c:a0:7a:2d:d6:38:92:cf:65:a5:
ec:2d:89:84:8a:c0:c0:44:bb:5b:d9:d9:de:7d:d7:de:39:48:
42:ae:3d:68:4b:ff:03:51:4d:d0:32:79:cf:d8:27:71:13:13:
05:63:8e:c5:36:8d:9e:c0:84:3d:5d:53:58:0b:9c:86:6b:41:
00:dd:82:21:b3:63:db:e8:da:f0:0e:8c:8d:1c:82:a4:bc:81:
eb:2c:2a:f0:ee:bc:9e:44:81:02:5d:93:c9:98:de:a4:03:53:
b2:9e:7b:cb:0a:87:4a:09:7d:5b:23:20:1f:74:cf:e9:f6:ce:
07:f1:44:2c:79:7b:3c:61:ca:1d:c1:c9:21:66:3b:4c:bc:89:
20:75:0e:44:1e:db:ba:f5:04:bd:2f:1d:f9:68:1d:75:bc:fe:
ac:66:3d:00:13:54:50:ea:a0:ce:7a:8e:ed:2b:7a:5b:0a:a5:
2b:08:72:62:e4:5b:24:04:7c:52:2b:c0:f2:06:4c:71:3a:61:
0e:5c:05:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:04 2026 by rpki-client