
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3136362e302f32342d3234203d3e203538353139.roa
File: 3134302e3234362e3136362e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: ORtT44jmARltzQlF0ZFtYlr5EbmHwr/e1sCG64XWmIw=
Subject key identifier: AC:63:CD:BE:3C:BE:53:63:B7:DC:54:3B:B2:7D:9C:8B:07:F0:8D:17
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 3B038BC99C288AF6978CE8E112E8EBA8E24EDD46
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3136362e302f32342d3234203d3e203538353139.roa
Signing time: Wed 03 Jun 2026 16:53:21 +0000
ROA not before: Wed 03 Jun 2026 16:48:21 +0000
ROA not after: Wed 02 Jun 2027 16:53:21 +0000
asID: 58519
IP address blocks: 140.246.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:03:8b:c9:9c:28:8a:f6:97:8c:e8:e1:12:e8:eb:a8:e2:4e:dd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:48:21 2026 GMT
Not After : Jun 2 16:53:21 2027 GMT
Subject: CN=AC63CDBE3CBE5363B7DC543BB27D9C8B07F08D17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:74:b7:75:17:1a:a5:a3:c4:4b:8e:11:14:
3d:1f:1d:38:3d:1c:0f:a7:5f:b3:ed:38:68:06:fd:
15:8c:1d:cf:9e:14:0d:2e:c9:2e:65:87:0f:08:ae:
c1:ab:f8:26:ec:ec:04:bb:ab:1d:5c:41:d0:74:07:
77:23:5e:2b:6a:88:27:ab:83:83:39:9e:fc:00:bf:
b3:26:1c:70:57:f6:5d:80:92:3f:c1:50:d4:54:df:
45:17:c2:e8:4c:83:33:46:38:49:b0:6c:fb:61:50:
68:b8:ac:4b:87:da:b1:1f:16:e7:c4:21:8c:a7:4b:
96:35:26:9b:41:9a:c6:14:85:cb:bb:13:2b:2b:6c:
ed:f6:da:d2:0e:40:2e:a4:47:4b:87:bf:99:a8:84:
84:be:b9:63:4b:b1:d1:14:6c:b1:9b:70:d3:76:92:
c9:56:e8:90:2d:cc:85:c1:6f:ad:b8:99:f8:c5:db:
48:82:10:5a:5a:c3:42:1c:6f:b2:c4:94:26:c1:8f:
6f:3f:4a:ed:33:ef:99:d4:e7:02:b3:5a:5b:f8:5a:
35:39:95:bb:b6:03:8b:98:2a:2d:68:d9:a4:7a:b9:
30:1e:f1:ba:7e:66:6d:f8:24:8d:86:97:e9:a3:a0:
ca:c7:b3:4a:dd:78:f2:6e:e9:40:c8:98:4f:1f:7e:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:63:CD:BE:3C:BE:53:63:B7:DC:54:3B:B2:7D:9C:8B:07:F0:8D:17
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3136362e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.166.0/24
Signature Algorithm: sha256WithRSAEncryption
69:2d:1d:97:82:82:4c:4b:c5:8d:1a:1e:c0:6d:bb:5a:7f:6c:
5e:97:bb:d5:25:e7:b7:09:79:61:e0:c9:e2:5d:c7:9e:15:77:
f5:7d:47:f7:79:6f:1c:5a:ce:e9:d2:da:0e:8a:89:c2:bc:bf:
f0:aa:1b:71:ff:32:e7:2c:1a:d2:bf:f3:27:f5:1e:41:7a:5d:
6a:9b:d0:11:68:3d:f9:5a:42:5e:af:cb:f5:29:62:06:19:59:
fe:ec:01:d9:f9:09:b5:10:f2:9d:20:e4:38:2b:f8:96:a8:b4:
4b:5d:22:ee:93:d4:9d:56:84:8e:04:e8:3d:57:5a:a0:a1:d2:
2e:0f:05:62:e6:ed:a5:58:ee:dc:5b:36:dc:3b:7d:6e:57:6b:
b5:71:e6:40:d5:79:7b:7d:02:ce:86:71:1f:c3:7d:c6:22:1b:
14:de:e5:5b:d6:47:de:05:05:6c:67:17:14:ad:cf:4d:27:39:
cc:7c:09:e2:9d:cb:01:93:d2:dd:19:11:dc:6b:cc:ea:57:39:
1f:c3:92:a9:4f:5b:c0:1e:26:a2:9e:33:2f:11:df:39:7f:ac:
4e:f0:bc:78:2d:65:55:e9:a9:54:c3:1d:44:53:ce:0b:a7:c4:
38:4d:26:70:14:03:28:82:92:3a:a2:2e:43:e6:70:e0:58:43:
10:26:f5:e9
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUOwOLyZwoivaXjOjhEujrqOJO3UYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1
M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYwMzE2NDgyMVoX
DTI3MDYwMjE2NTMyMVowMzExMC8GA1UEAxMoQUM2M0NEQkUzQ0JFNTM2M0I3REM1
NDNCQjI3RDlDOEIwN0YwOEQxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALmCdLd1Fxqlo8RLjhEUPR8dOD0cD6dfs+04aAb9FYwdz54UDS7JLmWHDwiu
wav4JuzsBLurHVxB0HQHdyNeK2qIJ6uDgzme/AC/syYccFf2XYCSP8FQ1FTfRRfC
6EyDM0Y4SbBs+2FQaLisS4fasR8W58QhjKdLljUmm0GaxhSFy7sTKyts7fba0g5A
LqRHS4e/maiEhL65Y0ux0RRssZtw03aSyVbokC3MhcFvrbiZ+MXbSIIQWlrDQhxv
ssSUJsGPbz9K7TPvmdTnArNaW/haNTmVu7YDi5gqLWjZpHq5MB7xun5mbfgkjYaX
6aOgysezSt148m7pQMiYTx9+M8sCAwEAAaOCAhcwggITMB0GA1UdDgQWBBSsY82+
PL5TY7fcVDuyfZyLB/CNFzAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf
sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1
RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v
c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB
BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw
MjkwNTk3NjgzNS8wLzMxMzQzMDJlMzIzNDM2MmUzMTM2MzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTM4MzUzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPamMA0GCSqGSIb3DQEB
CwUAA4IBAQBpLR2XgoJMS8WNGh7Abbtaf2xel7vVJee3CXlh4MniXceeFXf1fUf3
eW8cWs7p0toOionCvL/wqhtx/zLnLBrSv/Mn9R5Bel1qm9ARaD35WkJer8v1KWIG
GVn+7AHZ+Qm1EPKdIOQ4K/iWqLRLXSLuk9SdVoSOBOg9V1qgodIuDwVi5u2lWO7c
WzbcO31uV2u1ceZA1Xl7fQLOhnEfw33GIhsU3uVb1kfeBQVsZxcUrc9NJznMfAni
ncsBk9LdGRHca8zqVzkfw5KpT1vAHiainjMvEd85f6xO8Lx4LWVV6alUwx1EU84L
p8Q4TSZwFAMogpI6oi5D5nDgWEMQJvXp
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:44 2026 by rpki-client