
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3231332e302f32342d3234203d3e203538353139.roa
File: 3134302e3234362e3231332e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: MBG0O6dqaBPLseexLcdy4qRM70OE5hNOT0m+d+wzzGs=
Subject key identifier: 24:E4:63:15:48:5C:C8:00:76:EC:8F:4B:69:D1:E8:64:16:26:FE:FD
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 58FE15FBD5BCA44EA5A8366D45DADCB277DD351F
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3231332e302f32342d3234203d3e203538353139.roa
Signing time: Wed 03 Jun 2026 16:53:19 +0000
ROA not before: Wed 03 Jun 2026 16:48:19 +0000
ROA not after: Wed 02 Jun 2027 16:53:19 +0000
asID: 58519
IP address blocks: 140.246.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:fe:15:fb:d5:bc:a4:4e:a5:a8:36:6d:45:da:dc:b2:77:dd:35:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:48:19 2026 GMT
Not After : Jun 2 16:53:19 2027 GMT
Subject: CN=24E46315485CC80076EC8F4B69D1E8641626FEFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:c6:68:c7:7b:d0:2a:f4:34:1c:fa:8f:33:
3a:80:29:b6:e2:82:e8:c3:eb:a1:1e:9c:1d:15:81:
b9:8f:a7:75:52:13:e9:51:b2:97:e6:81:18:2a:87:
d4:c3:7a:75:7b:40:10:7e:e8:62:c6:21:01:0c:d7:
30:e8:34:36:76:3a:44:25:2a:49:34:17:ce:76:0a:
35:cc:f1:c9:53:69:0d:44:8f:d3:26:26:26:09:25:
c3:a3:9b:c7:83:01:7c:a6:b0:08:aa:2d:b3:b0:e7:
f6:e8:f9:69:82:dc:97:8d:9b:25:27:79:a4:cc:5c:
98:78:37:8b:cc:ef:d2:84:ff:7b:5e:4f:8b:f9:a8:
94:b8:18:ce:30:92:7d:7d:ad:b6:48:31:f6:45:95:
38:59:14:42:87:3f:5e:77:55:95:7f:11:37:43:9d:
f0:c8:17:b1:c1:c6:4d:9e:ee:02:ec:00:17:00:6a:
0f:fe:7f:cd:23:f0:31:6c:fd:1d:58:92:89:ff:2f:
31:83:96:e6:0a:6e:64:25:75:f5:16:5b:93:c3:78:
cb:c0:42:b7:c0:22:4f:32:a8:3a:7f:c7:b4:f3:64:
56:a0:f5:cb:51:c6:e9:a2:64:71:8a:eb:7c:0e:38:
27:04:ed:e6:f1:1b:41:2c:50:23:66:a2:21:37:6d:
b0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E4:63:15:48:5C:C8:00:76:EC:8F:4B:69:D1:E8:64:16:26:FE:FD
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3231332e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.213.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e0:a0:92:98:47:5f:01:a7:b1:f2:ab:65:fc:c4:08:65:02:
e6:83:f3:6a:d3:91:dc:dc:60:45:1b:95:bb:68:cf:29:5b:af:
1b:4e:92:6a:a4:40:20:b2:2e:4b:fa:41:11:68:f9:c7:40:a1:
30:bc:c0:b7:12:1f:27:59:14:7d:a0:58:ae:01:ca:a2:ed:95:
d8:0d:14:de:2a:8b:97:ff:e2:98:ac:b3:6c:5f:83:c9:e4:a5:
4d:b9:a7:d1:d4:26:78:95:94:33:9f:bc:70:24:95:43:ad:bd:
0e:5e:26:62:05:b7:8d:f1:fb:4a:ca:78:40:1c:37:4d:15:2b:
b3:cd:1c:ae:79:f9:d0:6c:68:e4:77:de:a1:c5:f2:37:c6:86:
a6:c6:e0:1a:1f:84:43:3b:d6:65:5c:be:bc:45:0c:9a:0d:02:
55:03:65:3d:9b:79:2f:96:ea:0c:fe:d4:04:8f:ae:08:73:48:
68:70:86:09:ec:97:d7:2d:c0:ea:46:ba:66:1b:d8:dc:c2:5f:
9f:6e:50:ca:9e:9f:7f:08:57:5f:e1:92:57:6a:cb:6b:ea:b2:
d4:b5:22:3e:47:f3:93:b3:f3:6a:97:1a:ed:75:5f:70:26:1f:
0f:56:78:52:7d:93:10:20:e9:43:f2:43:82:94:cb:cf:7b:b9:
7d:df:20:3e
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUWP4V+9W8pE6lqDZtRdrcsnfdNR8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1
M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYwMzE2NDgxOVoX
DTI3MDYwMjE2NTMxOVowMzExMC8GA1UEAxMoMjRFNDYzMTU0ODVDQzgwMDc2RUM4
RjRCNjlEMUU4NjQxNjI2RkVGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK+oxmjHe9Aq9DQc+o8zOoAptuKC6MProR6cHRWBuY+ndVIT6VGyl+aBGCqH
1MN6dXtAEH7oYsYhAQzXMOg0NnY6RCUqSTQXznYKNczxyVNpDUSP0yYmJgklw6Ob
x4MBfKawCKots7Dn9uj5aYLcl42bJSd5pMxcmHg3i8zv0oT/e15Pi/molLgYzjCS
fX2ttkgx9kWVOFkUQoc/XndVlX8RN0Od8MgXscHGTZ7uAuwAFwBqD/5/zSPwMWz9
HViSif8vMYOW5gpuZCV19RZbk8N4y8BCt8AiTzKoOn/HtPNkVqD1y1HG6aJkcYrr
fA44JwTt5vEbQSxQI2aiITdtsOkCAwEAAaOCAhcwggITMB0GA1UdDgQWBBQk5GMV
SFzIAHbsj0tp0ehkFib+/TAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf
sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1
RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v
c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBkAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYB
BQUHMAuGcnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQw
MjkwNTk3NjgzNS8wLzMxMzQzMDJlMzIzNDM2MmUzMjMxMzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTM4MzUzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPbVMA0GCSqGSIb3DQEB
CwUAA4IBAQCq4KCSmEdfAaex8qtl/MQIZQLmg/Nq05Hc3GBFG5W7aM8pW68bTpJq
pEAgsi5L+kERaPnHQKEwvMC3Eh8nWRR9oFiuAcqi7ZXYDRTeKouX/+KYrLNsX4PJ
5KVNuafR1CZ4lZQzn7xwJJVDrb0OXiZiBbeN8ftKynhAHDdNFSuzzRyuefnQbGjk
d96hxfI3xoamxuAaH4RDO9ZlXL68RQyaDQJVA2U9m3kvluoM/tQEj64Ic0hocIYJ
7JfXLcDqRrpmG9jcwl+fblDKnp9/CFdf4ZJXastr6rLUtSI+R/OTs/NqlxrtdV9w
Jh8PVnhSfZMQIOlD8kOClMvPe7l93yA+
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:03 2026 by rpki-client