
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e33362e302f32342d3234203d3e203538353139.roa
File: 3134302e3234362e33362e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: 7icqccZgAGPJ3D9y5tj6WCo7xKP0XszDOramzx9JO9M=
Subject key identifier: D4:F1:34:2D:EA:98:52:91:85:9E:F3:C3:67:47:8D:D2:5E:F7:20:36
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 421D53182559472A52D5D92C72FC6B8B574F4291
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e33362e302f32342d3234203d3e203538353139.roa
Signing time: Wed 03 Jun 2026 16:53:19 +0000
ROA not before: Wed 03 Jun 2026 16:48:19 +0000
ROA not after: Wed 02 Jun 2027 16:53:19 +0000
asID: 58519
IP address blocks: 140.246.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:1d:53:18:25:59:47:2a:52:d5:d9:2c:72:fc:6b:8b:57:4f:42:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:48:19 2026 GMT
Not After : Jun 2 16:53:19 2027 GMT
Subject: CN=D4F1342DEA985291859EF3C367478DD25EF72036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:15:e4:4e:cc:8c:21:cc:3f:6b:f1:6a:8c:
97:04:44:8c:aa:b0:a1:20:57:b7:a3:ca:41:22:cb:
05:4d:8c:ee:3e:97:d4:5d:06:1a:67:62:0e:eb:e5:
f9:1d:7e:5a:50:21:1b:83:0b:44:c5:48:f6:69:68:
44:63:80:67:65:75:5a:5f:fa:00:f7:e8:b3:47:ed:
e4:d3:42:77:38:e4:4f:30:4b:aa:dc:4e:80:b9:c7:
4c:57:28:70:39:90:1b:35:c5:bd:ae:68:0a:c4:ea:
39:2d:4b:b7:67:2a:a1:d9:36:1a:7d:2c:4c:59:a7:
98:bf:6b:e6:ad:0d:7b:8f:cd:ba:78:8c:7f:80:b0:
19:21:56:f9:85:02:3d:e0:18:55:12:5e:75:06:21:
f4:52:40:30:62:92:5b:e5:d0:f7:10:a3:f3:49:1d:
62:ae:24:7b:2d:d0:bf:1d:e2:d3:c4:c5:6b:99:98:
8e:85:39:e4:eb:5e:2e:7c:4a:1c:f5:3c:a6:f0:58:
1a:75:06:b4:63:b0:a4:02:cb:88:55:96:3f:da:9e:
12:9c:47:a7:8f:1e:ba:08:ee:03:5c:95:09:5d:39:
e4:f9:91:a5:df:10:00:42:7b:35:78:78:08:6d:1a:
38:7a:e1:cc:b3:99:8d:d1:80:e0:13:a5:35:66:48:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F1:34:2D:EA:98:52:91:85:9E:F3:C3:67:47:8D:D2:5E:F7:20:36
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e33362e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ca:40:f8:42:88:1d:df:fd:8a:a3:ba:4d:05:84:c8:c0:f5:
3e:88:6c:a0:4b:c8:29:0e:41:a5:8b:3d:c1:b8:2d:b9:27:c4:
52:10:72:46:24:2f:8a:d3:c6:a8:52:ae:0a:fc:fb:26:8e:df:
ff:99:cc:a0:1c:c5:54:c7:77:e1:9e:29:3e:33:cb:e5:6c:30:
fd:c7:0c:d5:a7:36:6b:7a:74:a8:b0:35:54:c8:a6:4f:ab:fe:
bd:9b:80:23:eb:9b:e9:49:7b:0e:f1:2a:3b:e0:1b:04:80:15:
26:25:ce:70:76:c2:0f:4b:45:9f:f7:15:9b:81:70:d2:62:37:
a1:7a:af:09:a8:b5:18:d7:11:cc:cc:8c:68:09:8b:d9:47:f6:
bc:1b:76:62:84:94:5c:ef:a4:89:c9:4a:a5:66:c0:c7:d2:2e:
dc:15:05:0a:35:3b:28:11:94:75:e3:91:47:78:b7:3a:08:b9:
82:9c:27:7a:d7:2e:bc:d1:55:15:63:20:7d:a6:3e:f4:78:83:
d5:55:af:37:de:77:c7:ea:f9:da:b2:a7:53:53:0c:ab:3e:d5:
3c:80:5f:eb:5e:4c:0a:f5:fd:e7:c8:85:0f:db:93:84:29:8b:
3e:cc:09:43:fd:e1:7c:80:9f:4e:88:46:9e:1d:56:0f:39:52:
15:e6:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:07 2026 by rpki-client