
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3135302e302f32342d3234203d3e203538353139.roa
File: 3134302e3234362e3135302e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: PZoNUAbYHIPtxK3Zb6ZzMKFQqIE6GPslsej9eV8EgyQ=
Subject key identifier: 02:C3:33:FD:1A:DE:A5:CF:FB:B1:94:6B:85:7C:96:DB:6B:DF:D2:80
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 45DF67C771E288F439CDD3CF6A3795CEA0558C18
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3135302e302f32342d3234203d3e203538353139.roa
Signing time: Wed 03 Jun 2026 16:53:19 +0000
ROA not before: Wed 03 Jun 2026 16:48:19 +0000
ROA not after: Wed 02 Jun 2027 16:53:19 +0000
asID: 58519
IP address blocks: 140.246.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:df:67:c7:71:e2:88:f4:39:cd:d3:cf:6a:37:95:ce:a0:55:8c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:48:19 2026 GMT
Not After : Jun 2 16:53:19 2027 GMT
Subject: CN=02C333FD1ADEA5CFFBB1946B857C96DB6BDFD280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:ad:2a:43:88:9d:cd:b2:d2:c5:e6:00:34:
70:31:a2:94:c4:41:1c:bd:95:fb:44:91:bd:2c:ae:
53:f1:6f:43:ef:33:1c:a1:c1:6a:0a:12:d5:d0:6a:
4c:44:82:b7:15:05:a6:10:c6:2a:dd:90:28:7b:87:
67:44:3e:61:39:2f:d8:0f:46:81:70:70:80:40:41:
4c:22:06:d3:d4:8a:54:04:d6:3e:41:9a:88:2a:f0:
7c:8f:fa:1f:22:be:25:27:37:85:e7:90:8f:3d:23:
b0:ff:3f:2e:43:d9:e5:86:76:10:23:bd:62:67:5e:
0f:e3:bd:7e:16:16:bd:96:ac:ed:e2:04:ff:9b:72:
b9:fb:da:43:72:88:e7:72:47:7c:7f:d8:f0:ff:45:
fb:1b:48:3b:8b:6b:c8:22:1b:52:a3:0a:c6:46:be:
9a:fc:f9:a0:dd:a2:33:16:ed:a1:b1:c8:43:83:90:
8d:8f:bc:2f:4f:4e:a2:d0:7f:a1:04:a5:7e:f3:04:
74:ad:c6:0e:d9:1d:0d:01:b5:a0:10:9b:ad:81:b5:
7a:97:ef:e4:f4:b1:e4:d1:eb:5e:0b:8d:d1:70:ca:
e0:3b:a3:83:bf:e8:98:01:6e:72:89:14:56:1d:ab:
ce:59:28:9e:d5:27:a7:5a:5d:e6:6f:e8:59:5e:f9:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C3:33:FD:1A:DE:A5:CF:FB:B1:94:6B:85:7C:96:DB:6B:DF:D2:80
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3135302e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:48:19:4d:76:a6:4f:c3:3b:a8:af:f5:f4:e8:ab:3c:fd:92:
71:64:b7:a6:33:b8:e5:a0:41:7a:c6:de:14:30:f0:84:22:c6:
ae:ae:18:80:b7:cc:98:64:06:95:dc:97:07:87:79:da:7d:a5:
84:a2:96:47:b7:a8:70:66:e9:c3:71:30:64:d3:3a:c9:5d:ae:
ce:0e:a7:7a:76:4d:cb:1b:05:92:8a:62:e3:dc:f7:5d:fc:7d:
77:14:ab:8a:79:fc:84:6e:96:4e:52:32:43:00:0d:3c:0f:9c:
2d:35:72:fe:2d:e0:6e:7e:8d:f3:e8:b1:e4:9c:89:90:3b:f5:
b0:c0:c6:0d:7f:e6:83:01:78:3a:34:84:57:6d:0d:2d:d1:4a:
42:2a:c9:e6:55:57:b7:63:bc:6e:c5:ba:f7:79:42:cf:ea:df:
3a:6e:bd:de:3e:4d:31:23:96:e9:12:d0:21:22:c1:2c:da:03:
92:0e:ac:50:38:e6:5a:18:a8:f9:5e:0f:1a:f0:2f:d9:46:5b:
27:00:6c:9a:82:db:46:4d:ba:b2:2b:72:41:7d:2a:b3:cb:ad:
71:1c:04:e4:69:d0:9b:26:62:e7:e3:1d:70:29:8c:11:90:46:
52:59:b2:3f:5a:80:bb:0a:c5:6a:52:74:ee:d1:94:3d:6b:50:
97:7a:09:e5
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIURd9nx3HiiPQ5zdPPajeVzqBVjBgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1
M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYwMzE2NDgxOVoX
DTI3MDYwMjE2NTMxOVowMzExMC8GA1UEAxMoMDJDMzMzRkQxQURFQTVDRkZCQjE5
NDZCODU3Qzk2REI2QkRGRDI4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN5zrSpDiJ3NstLF5gA0cDGilMRBHL2V+0SRvSyuU/FvQ+8zHKHBagoS1dBq
TESCtxUFphDGKt2QKHuHZ0Q+YTkv2A9GgXBwgEBBTCIG09SKVATWPkGaiCrwfI/6
HyK+JSc3heeQjz0jsP8/LkPZ5YZ2ECO9YmdeD+O9fhYWvZas7eIE/5tyufvaQ3KI
53JHfH/Y8P9F+xtIO4tryCIbUqMKxka+mvz5oN2iMxbtobHIQ4OQjY+8L09OotB/
oQSlfvMEdK3GDtkdDQG1oBCbrYG1epfv5PSx5NHrXguN0XDK4Dujg7/omAFucokU
Vh2rzlkontUnp1pd5m/oWV75svcCAwEAAaOCAhcwggITMB0GA1UdDgQWBBQCwzP9
Gt6lz/uxlGuFfJbba9/SgDAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf
sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1
RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v
c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB
BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw
MjkwNTk3NjgzNS8wLzMxMzQzMDJlMzIzNDM2MmUzMTM1MzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTM4MzUzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPaWMA0GCSqGSIb3DQEB
CwUAA4IBAQCpSBlNdqZPwzuor/X06Ks8/ZJxZLemM7jloEF6xt4UMPCEIsaurhiA
t8yYZAaV3JcHh3nafaWEopZHt6hwZunDcTBk0zrJXa7ODqd6dk3LGwWSimLj3Pdd
/H13FKuKefyEbpZOUjJDAA08D5wtNXL+LeBufo3z6LHknImQO/WwwMYNf+aDAXg6
NIRXbQ0t0UpCKsnmVVe3Y7xuxbr3eULP6t86br3ePk0xI5bpEtAhIsEs2gOSDqxQ
OOZaGKj5Xg8a8C/ZRlsnAGyagttGTbqyK3JBfSqzy61xHATkadCbJmLn4x1wKYwR
kEZSWbI/WoC7CsVqUnTu0ZQ9a1CXegnl
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:43 2026 by rpki-client