
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e31382e302f32332d3233203d3e20313336313935.roa
File: 3134302e3234392e31382e302f32332d3233203d3e20313336313935.roa (raw, json)
Hash identifier: YqRRaLOctDfQ64q5aNzbVRHXnq7q/9Vi58b4sdivuo0=
Subject key identifier: 75:C7:34:1D:B9:86:E5:C7:93:0F:53:05:03:06:EB:74:3D:28:B5:D5
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 4C42CE596A2FF7CC68E8A8FE5E2A3EB204F42E2C
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e31382e302f32332d3233203d3e20313336313935.roa
Signing time: Thu 28 May 2026 16:07:19 +0000
ROA not before: Thu 28 May 2026 16:02:19 +0000
ROA not after: Thu 27 May 2027 16:07:19 +0000
asID: 136195
IP address blocks: 140.249.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 19:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:42:ce:59:6a:2f:f7:cc:68:e8:a8:fe:5e:2a:3e:b2:04:f4:2e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: May 28 16:02:19 2026 GMT
Not After : May 27 16:07:19 2027 GMT
Subject: CN=75C7341DB986E5C7930F53050306EB743D28B5D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:df:a3:7c:dc:15:30:6d:9f:51:02:bc:10:
e3:eb:39:77:3e:d9:fa:b2:0a:04:53:1a:43:dd:00:
02:53:18:8e:20:f2:b7:30:a6:ed:0b:c9:ea:1a:e9:
87:de:50:bd:83:ff:9b:1a:9b:7e:d1:17:2e:0d:f0:
e3:80:54:94:8d:1b:ed:0f:05:b4:59:bb:db:11:81:
5c:3a:7d:aa:dd:0e:e3:c0:7e:dd:8e:8e:67:0c:3e:
69:6d:f5:65:4c:ee:af:49:42:5d:04:b5:4e:cc:88:
aa:be:26:76:04:79:e4:f3:d4:89:40:9b:a5:91:37:
b8:ec:9f:10:9e:4e:f8:55:14:b6:78:a1:67:1e:5f:
3d:ad:ac:bb:aa:08:79:b3:36:eb:aa:0b:bb:b0:c9:
40:41:8c:e2:c5:33:72:31:9c:ee:1b:f2:32:1d:1a:
f0:a5:c8:4f:be:a5:48:7f:7e:d8:8f:4a:a6:5b:8a:
d2:a9:3b:aa:36:75:f5:cd:03:bb:bb:30:66:36:52:
de:3b:3f:0f:21:39:a2:c4:96:e6:1a:25:82:75:92:
0b:fa:6b:d0:8d:87:81:34:c7:f9:7d:e8:c1:91:d9:
6c:09:a0:52:70:83:4d:57:0e:97:df:bc:59:6b:53:
8e:a9:3f:1c:bd:2f:a0:1d:ee:c8:e6:b4:fb:8b:a9:
af:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C7:34:1D:B9:86:E5:C7:93:0F:53:05:03:06:EB:74:3D:28:B5:D5
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e31382e302f32332d3233203d3e20313336313935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.249.18.0/23
Signature Algorithm: sha256WithRSAEncryption
10:f6:0e:01:9c:5f:36:96:f6:ef:77:82:67:f9:52:ea:2e:e1:
10:eb:d9:95:83:e8:c3:a0:a2:c4:ce:d8:72:21:f7:be:fb:28:
24:a8:e5:4f:18:cc:e4:d3:95:03:87:06:07:32:e7:9a:a4:bd:
88:3e:21:28:35:9d:35:eb:89:16:35:07:f1:39:f8:ae:fd:8f:
77:9a:a3:c4:63:af:40:1b:f0:47:d2:9d:e0:fd:d4:53:4c:48:
75:6c:55:d6:28:10:38:e3:1b:31:b8:c3:75:7b:fb:ac:29:0b:
49:8f:07:df:cc:31:34:c6:73:28:58:28:81:48:1d:7b:06:2a:
b4:ec:44:ca:6a:27:9c:f6:3e:8f:07:cd:1c:d8:cb:34:dd:53:
65:d5:f3:d4:03:af:69:06:62:4f:0b:f8:c1:92:be:7a:26:ff:
d3:56:8b:5a:98:63:45:0e:40:12:2e:45:88:02:fb:3e:51:02:
98:84:0b:e6:c8:85:1e:81:3f:d4:0f:6b:59:14:1a:3f:15:82:
7e:8b:89:3a:12:61:ab:c1:a0:22:d5:7d:18:cb:bf:23:6b:af:
08:3f:99:26:04:4b:c8:cd:91:3a:02:40:fe:26:df:99:76:5a:
92:bf:d6:8a:8a:30:c8:ff:fb:1d:06:9b:aa:9b:1b:ae:1a:d3:
60:01:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 02:40:38 2026 by rpki-client