
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e39382e302f32342d3234203d3e203538353139.roa
File: 3134302e3234362e39382e302f32342d3234203d3e203538353139.roa (raw, json)
Hash identifier: 4fxWRJqpPP36scnv5KDmQhzj8lwnT/zQOC+3oRXa8yA=
Subject key identifier: D7:E6:95:4C:B1:60:E8:A7:0E:98:FF:45:42:56:07:D3:19:D2:8D:F5
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 5109C9A5C32BDED3A61BF3B89334B27CD2DE104C
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e39382e302f32342d3234203d3e203538353139.roa
Signing time: Wed 03 Jun 2026 16:53:21 +0000
ROA not before: Wed 03 Jun 2026 16:48:21 +0000
ROA not after: Wed 02 Jun 2027 16:53:21 +0000
asID: 58519
IP address blocks: 140.246.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:09:c9:a5:c3:2b:de:d3:a6:1b:f3:b8:93:34:b2:7c:d2:de:10:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 16:48:21 2026 GMT
Not After : Jun 2 16:53:21 2027 GMT
Subject: CN=D7E6954CB160E8A70E98FF45425607D319D28DF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:ab:50:a5:2e:3d:e8:81:f6:12:9d:fb:e1:
50:1b:e6:98:77:d3:b2:8b:dc:5f:c8:28:73:25:25:
6e:1f:33:2b:e6:f9:96:52:f4:d3:ed:ca:b9:31:78:
d1:51:25:1b:aa:f0:9a:a7:1b:16:cc:27:5d:75:18:
27:83:a4:24:71:f4:93:bd:94:52:d1:a3:8a:c1:83:
5a:32:6c:00:ed:da:32:d0:cd:b3:69:5d:e8:dd:55:
b4:4f:df:59:fe:21:77:ba:e6:9e:59:be:91:68:8d:
eb:2a:75:6a:ba:8a:f9:56:dc:d5:11:45:4b:cf:ee:
5b:6e:ea:80:bf:56:51:e1:43:3b:53:28:4a:57:29:
26:83:41:cd:0d:db:05:85:5c:7c:3a:2a:a4:e0:58:
ef:63:a3:96:ac:8a:a8:3b:19:e9:3d:aa:83:91:33:
c0:00:0c:57:f2:5e:70:0f:d1:a7:29:4e:26:01:05:
f5:4d:df:49:01:16:c2:19:ea:02:c4:b9:1e:ff:26:
5e:e8:14:69:27:d7:7a:2d:1f:2d:83:46:93:2e:e4:
4a:4f:99:88:ac:ba:83:45:8e:50:1a:46:7e:f4:ac:
c8:24:fb:20:2a:8f:c2:14:8a:a0:60:0e:2f:1f:3a:
cb:1d:38:e3:2c:5a:fa:29:32:92:6b:f8:e5:be:c6:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E6:95:4C:B1:60:E8:A7:0E:98:FF:45:42:56:07:D3:19:D2:8D:F5
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234362e39382e302f32342d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.246.98.0/24
Signature Algorithm: sha256WithRSAEncryption
68:10:ec:39:17:f7:a4:bf:b3:7d:f3:41:f4:06:d4:c9:51:ee:
e7:ac:23:3f:2a:91:4e:d0:a5:de:b0:7a:a0:4e:29:fb:3c:8e:
3d:d1:5a:12:bb:9a:88:85:be:ef:52:79:df:6d:4d:e7:08:f4:
55:d8:57:58:80:cc:c1:8d:aa:0e:69:26:bc:ea:14:c5:60:20:
e5:2f:e1:77:84:d7:dc:9d:06:47:a9:f3:54:f0:dd:1f:b2:bc:
f3:15:76:c8:a7:51:05:bf:be:0a:56:e2:2a:f8:1a:74:dc:d8:
4b:f6:99:54:3b:50:5d:1a:a8:48:fb:c7:53:56:f3:9a:63:75:
89:d9:d5:74:24:5c:2a:22:29:1b:1e:bc:11:92:a1:1b:3a:f9:
1d:be:c7:17:b3:bd:07:0e:b5:67:86:2e:15:61:82:6f:be:36:
d1:4b:70:a9:41:3f:02:71:f5:16:5a:e3:af:5c:cd:a8:bf:6a:
c0:77:8d:13:a6:69:f3:38:6d:0f:ae:6d:51:8c:da:26:d7:53:
cf:e0:d2:78:1a:c1:2b:9f:48:d3:d3:88:7f:14:a9:7b:b1:20:
4c:ee:11:0d:3b:d8:9d:04:5b:5f:e5:51:af:01:63:4d:d1:01:
24:58:16:05:f1:64:fd:38:d6:bb:9c:d4:91:51:76:1d:63:82:
7f:bc:60:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:05 2026 by rpki-client