
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3231382e302f32342d3234203d3e203538353139.roa
File: 3134302e3234362e3231382e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: vk9soiGUSlG9DBZaFFd/d+g0CKrSUtaiEx3QNGiesV4=
Subject key identifier: E5:E7:95:44:60:F3:1B:9B:A3:9C:83:2E:C4:48:87:68:93:C6:F4:D4
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 7AD0427A749798262F244C1E9DAA97D21B3043C3
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3231382e302f32342d3234203d3e203538353139.roa
Signing time: Wed 03 Jun 2026 16:53:19 +0000
ROA not before: Wed 03 Jun 2026 16:48:19 +0000
ROA not after: Wed 02 Jun 2027 16:53:19 +0000
asID: 58519
IP address blocks: 140.246.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d0:42:7a:74:97:98:26:2f:24:4c:1e:9d:aa:97:d2:1b:30:43:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:48:19 2026 GMT
Not After : Jun 2 16:53:19 2027 GMT
Subject: CN=E5E7954460F31B9BA39C832EC448876893C6F4D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:dc:90:31:ae:a5:bc:ee:32:ed:90:4a:e3:
89:50:99:0b:ae:07:1b:91:5f:79:ae:e5:85:61:09:
91:4d:42:5e:b8:b6:a8:a8:01:f0:f0:e2:28:d3:be:
c8:f2:33:e2:29:84:17:7e:21:0a:d5:a1:0c:52:f4:
8e:04:49:ba:c3:0b:39:9e:79:9b:71:87:55:d3:82:
02:63:5e:54:1c:b2:9a:cc:81:df:d0:ea:69:10:5a:
8a:19:31:d1:16:bb:e7:52:4d:24:6d:a8:7c:26:8b:
1e:94:22:74:63:d9:be:1b:1b:db:8d:eb:a0:b1:84:
8a:73:4c:ac:df:5d:d9:17:6a:98:b2:5e:50:7a:d9:
10:27:33:bf:cc:e4:be:a3:23:58:b1:d7:5a:24:21:
5a:8f:bc:08:b2:6b:72:25:c2:bd:93:33:46:ab:6a:
70:bd:08:ce:c9:1f:41:14:24:d4:85:c5:fd:fb:cb:
f1:3f:fa:f1:ee:17:ad:b3:fb:99:58:6f:3a:2f:6f:
0e:cc:c8:ef:84:41:b9:11:a3:d8:d1:c8:a8:19:21:
84:5f:d2:dc:11:38:ba:bc:a5:ac:28:26:dd:b2:7f:
fc:ff:d7:50:39:7c:b4:6a:28:cc:be:e6:f6:53:ac:
ea:3d:90:30:a3:11:62:a1:21:c1:ba:ec:8b:bb:23:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E7:95:44:60:F3:1B:9B:A3:9C:83:2E:C4:48:87:68:93:C6:F4:D4
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e3231382e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.218.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:9a:15:8a:85:6a:09:ef:80:d4:df:ce:10:28:c2:23:58:a0:
ba:c5:55:c4:0d:04:28:e2:65:ec:3a:b8:e8:5a:8a:87:22:c2:
59:88:a8:12:77:d7:25:6a:ca:d3:fa:88:35:bc:69:c1:a9:b1:
4c:2a:6c:0e:76:71:97:d0:1f:18:22:21:69:a6:64:58:64:dc:
25:ff:35:e9:b4:80:36:95:72:c5:03:d5:3c:26:9e:43:ab:c3:
03:bc:56:47:55:36:59:ca:4f:40:6f:86:d7:4a:a8:7f:a2:52:
66:8f:59:ed:49:39:33:f7:28:80:92:2e:67:c0:6b:d7:cd:5d:
bf:a1:54:8a:a9:cf:56:c6:a0:54:28:13:05:12:0c:4c:be:a1:
69:7f:23:05:6b:9b:01:f2:6c:a4:13:2a:49:e0:84:7d:cc:74:
ac:39:f2:2e:66:ef:d9:e1:5d:e8:3d:bd:70:f8:53:1b:d5:7e:
01:18:30:5b:99:a4:49:c5:cf:65:90:c4:06:26:8a:42:fb:7c:
b4:f2:05:a3:db:35:66:f2:5b:bc:9c:31:53:40:47:bf:c7:61:
a2:05:de:e4:7f:32:bc:0e:a2:4e:c2:76:3c:86:df:0f:03:74:
35:f2:d3:2f:be:85:11:69:c4:1c:28:60:48:5a:0d:c4:8b:b2:
6a:ac:f3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:02 2026 by rpki-client