
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e38392e302f32342d3234203d3e203538353139.roa
File: 3134302e3234362e38392e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: 8VgUf6Z5NXT5gWon/ppawkRyljBdelGEf1HC9h8/4EI=
Subject key identifier: 1C:9D:1E:D7:2C:30:6A:EC:19:CA:62:4C:53:CA:44:A0:F0:41:6F:24
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 7AB45E2F6EC8BE7B80909F3988A2DD05209C43FD
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e38392e302f32342d3234203d3e203538353139.roa
Signing time: Wed 03 Jun 2026 16:53:20 +0000
ROA not before: Wed 03 Jun 2026 16:48:20 +0000
ROA not after: Wed 02 Jun 2027 16:53:20 +0000
asID: 58519
IP address blocks: 140.246.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b4:5e:2f:6e:c8:be:7b:80:90:9f:39:88:a2:dd:05:20:9c:43:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:48:20 2026 GMT
Not After : Jun 2 16:53:20 2027 GMT
Subject: CN=1C9D1ED72C306AEC19CA624C53CA44A0F0416F24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:de:15:c3:a0:bf:65:44:54:45:13:5e:99:
aa:3d:35:a5:d6:18:53:af:0a:5e:5d:bb:6a:15:87:
0e:c3:82:ff:83:10:42:44:4e:f8:e3:d0:cc:56:05:
60:2c:40:a8:8a:3d:cf:d3:36:09:8d:d6:6c:5b:01:
2a:43:51:04:67:e1:ef:44:95:0e:e5:eb:4c:be:b4:
54:8d:fa:f5:67:01:5c:f8:00:e2:64:fd:9b:78:03:
c0:52:8e:c4:73:85:95:63:8c:05:b1:a8:22:03:67:
a9:16:ac:07:7e:85:b3:a3:d9:ee:68:78:91:c5:f3:
32:ff:c2:66:39:46:0d:ee:72:66:a1:dc:11:af:35:
e9:ec:98:61:d1:8c:bb:d4:02:2e:13:57:52:de:55:
e5:35:ba:57:d2:2d:7b:10:9a:e8:53:38:e6:08:9b:
6f:de:e3:e7:c6:42:da:2c:6c:eb:5d:c4:9e:f1:19:
c8:e7:85:f7:28:a2:28:85:48:00:c4:b7:2f:cc:9e:
d3:c1:dd:15:df:16:9f:c1:74:24:cb:39:87:69:e0:
a0:ec:c9:eb:6c:10:8b:d4:14:a6:c6:37:19:fc:f3:
8b:8b:33:df:70:b7:77:0e:1d:6a:f8:35:d3:f8:87:
b5:05:34:a3:c4:74:42:60:88:a3:33:43:09:4f:ee:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9D:1E:D7:2C:30:6A:EC:19:CA:62:4C:53:CA:44:A0:F0:41:6F:24
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e38392e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.89.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7f:08:97:8a:eb:12:b6:f6:3a:be:a9:52:9b:ae:39:09:c1:
c2:1e:2b:b6:01:aa:36:fe:8c:30:ad:79:4f:7a:cb:9b:d8:ef:
b9:27:66:e2:95:4c:e2:31:c2:03:72:1a:d8:99:f9:4f:b4:b4:
3b:43:0c:1c:a2:92:c3:67:34:9a:4c:e6:2e:83:28:45:4f:d2:
02:6d:76:f3:24:32:69:47:ef:80:11:11:f1:a0:f3:47:3c:15:
3a:d6:8b:50:26:aa:05:0c:96:af:7f:c1:09:a7:67:3a:99:92:
9b:5b:6a:a4:c4:c6:12:f2:9d:b6:5a:ae:01:60:4b:1e:0d:92:
2c:89:a7:41:4e:91:df:3e:04:82:8f:c7:fe:fb:c1:12:1f:9d:
6d:ae:a4:0c:13:4e:05:db:d3:29:86:7d:ab:f0:3b:99:29:f7:
ff:ca:15:d4:ea:bd:c9:6e:6d:78:ad:82:7b:1d:64:2a:84:b4:
0d:8d:6b:8c:4e:ff:26:fc:7e:df:50:ec:6e:18:44:ad:60:05:
cd:6b:57:8c:22:26:69:45:99:af:b0:f9:0e:7d:f1:3a:57:da:
61:39:1c:85:f2:94:be:b3:c5:d3:e8:ed:52:6d:0d:9f:27:1b:
7d:23:49:20:91:c9:35:93:db:20:c8:62:4b:64:71:3b:7a:f5:
23:3a:4f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:04 2026 by rpki-client