
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e35392e302f32342d3234203d3e203538353139.roa
File: 3134302e3234362e35392e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: fhg0GoO5aEz88nJh/egOJWCgfx8Ue8VLOsEzTB8PU3E=
Subject key identifier: E7:5B:F0:3D:32:2B:44:71:8D:53:E1:9E:8A:57:42:70:F8:ED:47:37
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 6223537610AB22D3B23AD35680892E2B16B7DD05
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e35392e302f32342d3234203d3e203538353139.roa
Signing time: Wed 03 Jun 2026 16:53:21 +0000
ROA not before: Wed 03 Jun 2026 16:48:21 +0000
ROA not after: Wed 02 Jun 2027 16:53:21 +0000
asID: 58519
IP address blocks: 140.246.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:23:53:76:10:ab:22:d3:b2:3a:d3:56:80:89:2e:2b:16:b7:dd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:48:21 2026 GMT
Not After : Jun 2 16:53:21 2027 GMT
Subject: CN=E75BF03D322B44718D53E19E8A574270F8ED4737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:1c:a1:15:2e:1c:0d:13:ee:80:4e:5b:39:
84:0d:b7:34:21:1d:a4:b6:0e:4a:99:98:48:cd:1a:
a8:9d:53:28:b3:1e:1c:d1:18:e9:a0:50:14:fa:64:
15:24:d7:06:d7:f7:32:2b:74:8c:d1:44:f0:eb:8d:
f3:e2:3f:5f:e6:c3:1a:00:2b:e0:a3:42:d5:6c:1b:
06:e4:2f:61:ae:48:c1:85:a9:9a:6b:29:80:aa:41:
e1:f8:c7:a8:a1:56:f6:6b:bb:59:02:86:24:23:d6:
f0:36:1e:3e:3e:ce:ed:3d:4f:e5:a9:5a:be:5d:ad:
d0:39:a3:13:d3:90:7b:b0:dc:2c:8e:07:9c:26:a1:
f3:90:b3:ae:6d:18:e4:08:9c:a4:a4:22:4d:72:db:
94:17:64:56:35:35:f4:10:df:82:2b:5f:f0:4c:6d:
67:9c:66:7f:96:b6:4e:b2:55:8d:f0:5f:63:ad:ea:
b4:5b:7c:54:61:db:a1:b6:e1:3f:b0:f3:ad:0b:3a:
32:c2:e0:e2:11:1c:16:6b:2b:f5:d2:9a:47:85:4a:
32:b8:11:6a:a9:f9:60:86:41:da:3d:d1:cc:e2:58:
51:81:17:4f:cd:86:e6:78:dc:45:a0:a5:4f:c1:eb:
1e:66:bb:92:3a:0d:66:57:36:f7:2a:61:0f:94:51:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:F0:3D:32:2B:44:71:8D:53:E1:9E:8A:57:42:70:F8:ED:47:37
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e35392e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.59.0/24
Signature Algorithm: sha256WithRSAEncryption
39:fb:fb:b1:48:bd:54:9d:c7:c8:b2:34:39:39:cd:55:fe:ee:
8b:3c:25:79:58:54:ac:f9:3e:5d:f8:30:d9:7d:14:95:7d:d4:
65:25:5c:1e:f7:47:c8:54:42:33:f7:7e:12:c0:76:0c:eb:65:
a5:e4:81:62:dc:20:df:27:78:6f:29:b4:38:2a:45:32:61:57:
f7:46:9f:62:9c:f0:07:99:61:ff:20:c5:5a:fe:82:68:9c:cf:
68:09:08:bc:9b:7f:fe:97:05:75:2d:87:7f:f0:34:84:00:77:
04:0a:45:a9:3c:9e:d2:aa:a5:5c:7c:db:eb:8b:1e:bb:77:0f:
a9:d8:60:c4:fe:e9:20:ea:13:98:e5:4a:00:66:db:e1:c1:03:
2a:35:9c:16:e8:60:12:11:c3:7c:e2:30:ba:63:0b:7c:dc:ec:
75:a8:14:9b:82:72:17:ee:ad:db:06:1d:e3:87:89:8c:11:de:
0d:22:3a:c4:55:6f:55:58:94:56:a3:f0:11:2d:00:df:03:0b:
6d:02:bc:a0:f6:84:3c:1a:79:9e:1c:44:a0:d2:cf:70:ce:ae:
e3:99:cd:ff:74:18:be:c4:cd:96:c6:58:c4:af:c0:d1:15:62:
2a:2e:84:6d:1e:07:74:dc:81:b4:da:d0:95:46:32:4f:99:39:
b9:3e:e5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:04 2026 by rpki-client