
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e38372e302f32342d3234203d3e203538353139.roa
File: 3134302e3234362e38372e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: o/YMQf2txXnEnJg6Ds7kJqt+p6gZNtPfSllqQMzVy+c=
Subject key identifier: 67:8D:97:90:FF:BE:38:2F:60:8A:A1:6C:54:81:C1:64:C0:C6:9B:1C
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 3C82E8F97FC34461A50B5FCB4D4081801BAAC948
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e38372e302f32342d3234203d3e203538353139.roa
Signing time: Wed 03 Jun 2026 16:53:20 +0000
ROA not before: Wed 03 Jun 2026 16:48:20 +0000
ROA not after: Wed 02 Jun 2027 16:53:20 +0000
asID: 58519
IP address blocks: 140.246.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:82:e8:f9:7f:c3:44:61:a5:0b:5f:cb:4d:40:81:80:1b:aa:c9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:48:20 2026 GMT
Not After : Jun 2 16:53:20 2027 GMT
Subject: CN=678D9790FFBE382F608AA16C5481C164C0C69B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:ad:91:97:76:1d:9d:6e:f3:f6:55:c1:72:
8e:e5:05:43:3f:c2:94:95:96:aa:1a:47:6c:07:fb:
38:fb:c6:02:c7:46:9a:09:5e:c6:cc:cc:4a:ba:8f:
3d:3d:ca:2d:b0:9f:e9:98:15:34:b5:a5:40:ea:91:
7a:26:c4:19:dd:c8:33:6b:d4:e5:c3:8f:41:15:ed:
2a:06:47:cb:02:4c:0e:14:f6:3f:47:46:00:33:cf:
70:94:2a:f0:b1:39:0b:b6:16:1a:03:1b:c7:7d:c6:
52:1a:94:3d:55:6a:da:7c:7b:c9:84:6e:44:9d:d7:
dd:7b:9b:d8:87:39:be:1d:ec:73:0e:49:07:94:35:
24:4a:6a:cd:2f:b4:1e:d1:ff:99:6e:fa:ee:fd:a5:
bc:c9:7c:9e:e8:a3:f4:b2:ab:7c:01:0b:10:5a:86:
ad:5d:7e:ff:a7:2d:f0:4c:57:b1:91:52:b9:f1:e5:
3c:4f:89:75:51:0f:d5:10:a6:a7:7d:6e:74:15:e7:
9e:f4:cc:4e:50:c5:e9:72:05:70:d3:9f:35:42:e2:
34:8a:cd:24:27:bd:0b:a0:03:fc:72:30:15:36:89:
f4:10:74:fd:8e:ba:4b:8b:4a:11:1e:fc:8b:98:27:
18:fa:79:88:b0:d5:ad:36:42:ff:64:70:ef:1b:de:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8D:97:90:FF:BE:38:2F:60:8A:A1:6C:54:81:C1:64:C0:C6:9B:1C
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e38372e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.87.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:69:1b:e4:ae:41:af:a7:c6:4f:f1:7e:42:93:f5:78:29:f9:
49:b1:b2:49:81:c5:00:61:2b:50:f9:30:68:b5:3a:e2:d0:58:
fa:1e:49:87:d7:07:3c:9f:15:31:b9:bc:83:41:52:61:90:83:
ba:81:6b:82:52:5f:2c:43:60:6a:35:61:de:f6:ff:a1:f2:99:
6c:16:fc:b8:37:4b:6a:ed:7e:12:7b:14:8b:db:d7:c1:18:05:
17:af:7e:5f:ad:61:a6:dd:64:cb:9c:e4:b5:48:5a:a2:3b:76:
4d:18:c8:da:de:55:b1:2a:40:3f:fe:f7:b8:8a:e7:27:9e:33:
1d:96:62:45:a8:ad:e7:64:04:a2:7c:18:e8:ab:ab:92:bd:11:
6b:af:d1:2d:64:b5:a0:f2:f0:ba:00:ac:c2:17:e0:78:08:fe:
c7:b9:2e:aa:6a:c2:79:b0:c2:8a:48:2d:ae:7e:c7:a6:86:5f:
67:9d:ef:a0:6f:d3:e3:0a:8b:c2:7a:ba:06:dc:83:7b:ba:39:
1b:8b:4e:a3:94:ae:5c:63:49:98:cf:1d:a6:38:a6:f5:48:4e:
17:40:21:37:4c:46:20:79:e5:0a:aa:06:86:8b:e2:48:71:ca:
bc:a7:40:8a:8e:3c:9e:15:ec:3c:c3:00:42:d4:29:8c:a1:d5:
e1:d4:50:c2
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUPILo+X/DRGGlC1/LTUCBgBuqyUgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1
M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDYwMzE2NDgyMFoX
DTI3MDYwMjE2NTMyMFowMzExMC8GA1UEAxMoNjc4RDk3OTBGRkJFMzgyRjYwOEFB
MTZDNTQ4MUMxNjRDMEM2OUIxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJsorZGXdh2dbvP2VcFyjuUFQz/ClJWWqhpHbAf7OPvGAsdGmglexszMSrqP
PT3KLbCf6ZgVNLWlQOqReibEGd3IM2vU5cOPQRXtKgZHywJMDhT2P0dGADPPcJQq
8LE5C7YWGgMbx33GUhqUPVVq2nx7yYRuRJ3X3Xub2Ic5vh3scw5JB5Q1JEpqzS+0
HtH/mW767v2lvMl8nuij9LKrfAELEFqGrV1+/6ct8ExXsZFSufHlPE+JdVEP1RCm
p31udBXnnvTMTlDF6XIFcNOfNULiNIrNJCe9C6AD/HIwFTaJ9BB0/Y66S4tKER78
i5gnGPp5iLDVrTZC/2Rw7xveTU8CAwEAAaOCAhQwggIQMB0GA1UdDgQWBBRnjZeQ
/744L2CKoWxUgcFkwMabHDAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf
sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1
RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v
c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEF
BQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAy
OTA1OTc2ODM1LzAvMzEzNDMwMmUzMjM0MzYyZTM4MzcyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzNTM4MzUzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPZXMA0GCSqGSIb3DQEBCwUA
A4IBAQCyaRvkrkGvp8ZP8X5Ck/V4KflJsbJJgcUAYStQ+TBotTri0Fj6HkmH1wc8
nxUxubyDQVJhkIO6gWuCUl8sQ2BqNWHe9v+h8plsFvy4N0tq7X4SexSL29fBGAUX
r35frWGm3WTLnOS1SFqiO3ZNGMja3lWxKkA//ve4iucnnjMdlmJFqK3nZASifBjo
q6uSvRFrr9EtZLWg8vC6AKzCF+B4CP7HuS6qasJ5sMKKSC2ufsemhl9nne+gb9Pj
CovCeroG3IN7ujkbi06jlK5cY0mYzx2mOKb1SE4XQCE3TEYgeeUKqgaGi+JIccq8
p0CKjjyeFew8wwBC1CmModXh1FDC
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:05 2026 by rpki-client