
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e34362e302f32342d3234203d3e203538353139.roa
File: 3134302e3234362e34362e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: p28EAly5Zak1HFW/iDdJZkE97We7g1tmgWYub8l5/Vg=
Subject key identifier: 5F:67:BC:88:85:C8:CE:7B:E4:5C:7E:79:80:DD:CA:A3:DD:C0:F7:60
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 0DD893A89A66B662A8B3158CD406E2EBAE889452
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e34362e302f32342d3234203d3e203538353139.roa
Signing time: Wed 03 Jun 2026 16:53:21 +0000
ROA not before: Wed 03 Jun 2026 16:48:21 +0000
ROA not after: Wed 02 Jun 2027 16:53:21 +0000
asID: 58519
IP address blocks: 140.246.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d8:93:a8:9a:66:b6:62:a8:b3:15:8c:d4:06:e2:eb:ae:88:94:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:48:21 2026 GMT
Not After : Jun 2 16:53:21 2027 GMT
Subject: CN=5F67BC8885C8CE7BE45C7E7980DDCAA3DDC0F760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:e0:ef:52:be:5c:fb:25:b4:e7:26:43:b7:
10:a9:76:ec:f6:44:be:10:cb:39:89:44:0d:e4:1e:
dd:3f:fb:ab:69:af:f8:ad:ea:74:3a:d2:b1:41:8a:
f7:3c:4e:4a:1c:16:04:68:f2:c4:fe:78:dd:20:3e:
f4:f2:25:03:0c:26:e2:94:13:c4:7a:98:8c:a1:2c:
5a:2b:76:3c:93:20:ee:3d:9d:8c:0c:d8:e0:43:fb:
c6:ce:b5:02:2b:9d:12:2f:ba:55:ff:e8:07:d9:e4:
73:f0:db:77:5b:3d:2a:c5:a4:2b:94:96:57:0b:84:
e3:d2:fe:78:57:95:50:f5:6d:96:18:46:08:0f:4c:
0b:3c:96:9b:08:bf:df:7d:74:31:f0:51:9f:f5:b5:
a4:91:19:6e:ec:3b:13:d9:0d:da:b8:b7:d8:c6:1a:
77:e9:9e:41:0b:d6:06:0e:f7:44:05:ee:1a:0d:09:
0b:1a:10:44:07:43:b5:70:66:d3:49:4d:2a:9b:2b:
a8:5f:5b:3a:06:2c:c4:96:37:87:0a:0a:a4:ae:98:
6c:11:0b:0e:b8:62:c7:38:16:51:6f:e1:6f:00:88:
73:b5:43:68:eb:a6:b2:a0:f2:45:c1:9f:3a:6c:08:
72:8e:01:94:d9:86:48:8c:d9:7b:74:63:8b:91:85:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:67:BC:88:85:C8:CE:7B:E4:5C:7E:79:80:DD:CA:A3:DD:C0:F7:60
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e34362e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.46.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ea:8b:a0:0b:7b:3f:95:91:1c:2b:70:3c:29:13:c3:45:0c:
0c:47:76:73:ad:ea:de:4c:5c:ff:55:bd:46:e6:8f:4d:7a:0b:
83:4b:c0:5c:1b:27:1c:b6:bd:6a:0c:36:a8:0e:41:da:f3:38:
9e:26:a0:aa:e5:c8:ce:4b:42:10:30:4c:5b:41:2e:a7:39:70:
ec:a9:e5:fd:e5:cc:1b:d4:89:e9:25:4a:2e:49:9b:cb:65:79:
52:be:1c:e5:c3:e6:10:0b:3f:02:da:2e:76:a4:0f:94:59:6a:
9c:7c:b9:81:d8:e3:75:39:7a:22:3b:43:1e:5e:d9:b3:de:67:
8a:3f:51:2b:65:55:ff:e0:5d:84:80:de:3a:e4:67:0b:93:f0:
4c:45:d5:1d:04:9f:6e:a2:87:d4:2e:56:8f:83:46:9e:60:ed:
c0:d1:1f:6d:2f:71:d7:b4:1d:c3:49:a2:c1:52:d4:3b:93:67:
67:ec:5c:a3:4e:69:f2:5d:12:1f:09:89:4d:5f:61:26:fe:92:
cf:ad:f0:32:f2:1b:9d:03:fa:92:21:19:e9:93:3d:30:3c:5e:
77:df:98:65:01:4b:14:51:45:ec:22:53:4c:19:27:97:cf:e1:
4e:e4:5a:5a:49:38:02:da:3f:ab:7a:e8:35:a1:88:d3:d7:41:
6d:db:a0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:05 2026 by rpki-client