
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e31332e302f32342d3234203d3e203538353139.roa
File: 3134302e3234362e31332e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: 5y12Wce9fklbj0afXd8g6CzAxFWcul0pB5amq76xMhc=
Subject key identifier: AA:EE:60:4B:67:7C:78:30:1B:44:F9:96:45:15:39:7A:B8:46:BE:E9
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 2591AE54E2215C52E125A49D8D46922168DE1CFC
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e31332e302f32342d3234203d3e203538353139.roa
Signing time: Wed 03 Jun 2026 16:53:21 +0000
ROA not before: Wed 03 Jun 2026 16:48:21 +0000
ROA not after: Wed 02 Jun 2027 16:53:21 +0000
asID: 58519
IP address blocks: 140.246.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:91:ae:54:e2:21:5c:52:e1:25:a4:9d:8d:46:92:21:68:de:1c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:48:21 2026 GMT
Not After : Jun 2 16:53:21 2027 GMT
Subject: CN=AAEE604B677C78301B44F9964515397AB846BEE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:f7:76:73:aa:c4:35:26:21:3e:4d:3b:bb:
8d:4a:da:08:f2:53:27:75:ab:1d:24:15:86:10:ab:
a2:cf:1f:89:bc:58:01:5b:c0:88:46:7f:49:3f:eb:
ab:fe:cb:ea:e6:c4:63:b4:87:3f:b6:97:bd:58:07:
97:33:3e:f0:23:bd:22:bb:df:eb:53:0c:28:05:7f:
75:a1:b1:bb:7d:f7:58:02:68:40:99:82:06:8a:ce:
f1:dc:a8:e6:57:73:48:a2:91:7e:89:d1:b7:31:71:
be:a8:94:47:96:ac:36:ab:f1:b1:d7:70:0a:d3:3e:
fe:b5:04:fe:27:81:6d:b6:1a:62:43:1c:71:95:71:
92:51:18:b9:9b:0c:4c:e2:65:4f:94:b6:51:64:11:
4a:9f:3c:77:d3:21:ec:f1:35:c8:67:d0:02:7a:42:
86:97:b7:24:02:0e:3c:96:2a:35:3f:bf:a4:ee:89:
bc:3b:9a:ac:30:7e:ed:12:31:0b:2d:8f:b8:d8:4c:
f2:5d:e3:4e:61:49:a8:56:e2:de:99:fe:c2:2f:d8:
5d:60:75:a7:3a:f0:10:d8:5f:23:5b:87:1e:75:16:
8a:b3:de:e6:74:21:eb:f3:ff:24:6b:13:e3:45:8a:
f4:84:13:5d:8e:0e:03:97:2d:ae:17:27:71:e7:40:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EE:60:4B:67:7C:78:30:1B:44:F9:96:45:15:39:7A:B8:46:BE:E9
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e31332e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.13.0/24
Signature Algorithm: sha256WithRSAEncryption
82:20:87:93:f5:08:44:75:15:87:39:18:0b:a6:c2:ee:c8:db:
ea:c2:a9:29:cf:23:7a:36:07:15:fb:72:1d:33:25:16:80:b9:
4a:81:08:b6:8a:17:f2:1d:54:44:8c:c5:e0:d1:cd:7d:0b:61:
1d:2d:fb:d3:42:15:5f:a3:22:72:c0:28:00:80:8b:6e:e1:69:
e3:32:5b:ff:fb:71:82:bc:b4:ee:fc:80:0b:2f:38:55:6c:66:
4c:c1:5f:4b:9c:fb:c7:e5:23:a6:de:65:04:6a:b4:f4:3d:48:
bc:6f:f6:67:38:59:5d:6c:a1:e4:82:3b:b4:42:1b:12:8e:8e:
a0:11:f4:d5:d5:86:09:23:55:70:8d:42:47:fc:9e:0f:1d:a2:
b4:0b:35:a4:1f:d4:ef:cb:1c:a5:bf:90:77:70:9e:c3:a8:f6:
50:1b:6a:61:74:db:c5:95:98:09:15:c0:4f:39:87:9c:b6:e3:
af:ed:4c:04:72:73:31:41:4f:e5:d9:bb:52:a4:45:2e:b7:57:
02:7d:c0:31:81:86:60:df:ad:5a:02:38:e4:87:de:8a:2f:d4:
3f:fc:a0:48:dc:f2:2a:87:e8:c1:a5:e2:8b:82:9f:ac:b1:08:
d2:c0:65:13:82:0c:82:8b:cd:ed:b2:72:f1:19:67:b0:60:b5:
51:d0:1d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:06 2026 by rpki-client