
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3130362e302f32342d3234203d3e203538353139.roa
File: 3134302e3234362e3130362e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: rOAaG7ilcou4FqJd999larI9U2GBedlC4Lnt/4fEwf0=
Subject key identifier: A3:AF:CF:B6:0E:E3:FF:44:AC:1B:51:01:8F:C5:B8:34:C8:FF:12:FC
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 634F778DF2DE01F17817FE49962BB663E9437D77
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3130362e302f32342d3234203d3e203538353139.roa
Signing time: Wed 03 Jun 2026 16:53:20 +0000
ROA not before: Wed 03 Jun 2026 16:48:20 +0000
ROA not after: Wed 02 Jun 2027 16:53:20 +0000
asID: 58519
IP address blocks: 140.246.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:4f:77:8d:f2:de:01:f1:78:17:fe:49:96:2b:b6:63:e9:43:7d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:48:20 2026 GMT
Not After : Jun 2 16:53:20 2027 GMT
Subject: CN=A3AFCFB60EE3FF44AC1B51018FC5B834C8FF12FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:96:05:12:86:32:e4:70:f7:54:52:66:cb:
a0:e9:11:3e:34:df:30:47:f0:96:96:95:b7:1f:1c:
2d:3d:ec:55:60:65:de:9b:e4:a9:1d:9d:c0:64:eb:
e3:c8:2e:76:b9:d4:50:7e:91:28:cd:3c:be:ca:60:
b3:3b:57:d1:cb:e0:0e:91:fc:85:ed:11:23:81:54:
9c:df:ed:ee:0d:b0:65:93:72:8b:e4:8a:cb:b3:8a:
09:48:6a:94:41:85:b1:9d:4b:fa:df:f7:4a:cb:fd:
e8:d1:eb:9c:c8:b6:0a:58:06:b3:17:53:22:98:7a:
89:6e:bf:f1:7e:1a:65:a0:f6:c8:c3:1a:04:08:05:
6e:03:70:40:51:00:17:04:81:ef:12:40:3e:15:ad:
4b:4a:6e:ed:73:3c:18:ff:f8:7f:2b:37:ca:f1:a1:
9e:ce:9b:01:29:d6:1b:cd:84:50:d0:f2:5b:25:ea:
0e:f6:a9:02:77:6a:c9:44:2c:6d:98:47:e9:58:b4:
c0:6c:24:50:5b:6c:a8:72:2c:d3:88:b1:5f:10:3b:
74:dc:00:a4:66:c0:78:c1:cb:07:03:c9:6a:e9:63:
c2:35:b8:db:be:34:2b:5f:1e:44:86:5c:61:c7:cd:
59:1f:94:83:71:89:c8:55:26:2b:50:4a:ae:58:61:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AF:CF:B6:0E:E3:FF:44:AC:1B:51:01:8F:C5:B8:34:C8:FF:12:FC
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3130362e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.106.0/24
Signature Algorithm: sha256WithRSAEncryption
45:97:4d:f1:1f:23:d5:91:ed:ca:bb:e1:b2:cb:fa:a5:3c:80:
0d:95:7d:f2:c9:aa:8d:b2:1e:9e:6f:32:dc:cc:03:18:0a:22:
47:24:0c:52:84:b3:60:ec:de:50:0d:9f:78:31:cb:a9:35:85:
64:7a:ed:7e:a0:91:b8:e5:f9:08:eb:1a:71:b3:50:85:7c:d0:
60:66:d8:91:6f:2a:cf:f9:fd:ae:6e:1b:03:4e:41:97:7e:04:
83:42:4e:d8:72:8c:fa:78:73:b6:56:fc:4d:b5:ae:b6:28:fa:
f2:dc:ee:9c:f9:11:22:d5:80:68:dc:ea:93:03:36:0d:eb:81:
81:84:a1:3d:b7:f5:da:cd:ee:71:1c:83:6c:82:87:cc:26:de:
3e:84:f4:d7:2e:58:6d:85:07:70:a2:44:2b:9c:29:21:43:f1:
13:49:2b:e6:78:0e:34:d2:64:4b:7a:f7:37:51:67:39:60:86:
ec:0f:f5:4e:23:c8:ed:32:c5:9b:24:42:07:55:b8:0f:a7:64:
3b:d9:89:1c:71:42:0c:08:0e:ae:25:f7:91:80:54:a9:45:2e:
07:fa:89:1d:9e:8e:c8:2d:b9:7a:66:6f:36:9c:5e:2a:45:e6:
04:99:66:a2:d2:b5:19:88:2e:dd:bb:5d:2b:f6:21:67:44:c4:
7f:8d:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:04 2026 by rpki-client