
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e372e302f32342d3234203d3e20313336313935.roa
File: 3134302e3234392e372e302f32342d3234203d3e20313336313935.roa (raw, json)
Hash identifier: opCZLqQpkWbEK3nQ31F06v8azgjjcA9mcU0ZMnq0I2I=
Subject key identifier: 6C:A7:6C:0F:D4:79:96:13:3F:F2:23:45:8A:4D:3C:45:CC:88:87:E8
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 429561F7A9746E2AAEEDE767765F98AD3B295086
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e372e302f32342d3234203d3e20313336313935.roa
Signing time: Thu 28 May 2026 16:07:19 +0000
ROA not before: Thu 28 May 2026 16:02:19 +0000
ROA not after: Thu 27 May 2027 16:07:19 +0000
asID: 136195
IP address blocks: 140.249.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 19:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:95:61:f7:a9:74:6e:2a:ae:ed:e7:67:76:5f:98:ad:3b:29:50:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: May 28 16:02:19 2026 GMT
Not After : May 27 16:07:19 2027 GMT
Subject: CN=6CA76C0FD47996133FF223458A4D3C45CC8887E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:48:df:5b:f0:cd:df:80:fa:ad:dd:33:ec:b5:
4b:ee:55:a2:5c:1b:ad:2d:48:40:43:ad:bb:14:c7:
78:c6:7d:de:12:f8:31:6d:2c:fa:ff:f0:d7:75:5f:
fc:c0:ec:3b:02:f1:6a:12:ec:9d:a8:49:f0:9e:6d:
1a:26:57:d3:03:97:50:76:62:f3:21:5e:ad:d1:06:
ab:39:14:68:9a:33:5d:80:04:83:e3:3c:a7:73:c7:
c6:a1:dc:d7:ff:ef:77:f8:8a:44:6e:b2:e6:9d:ca:
1c:e6:9b:74:8d:9f:da:e6:97:4c:dc:7e:1f:af:fb:
cf:2d:7a:31:72:dd:6c:de:e1:19:15:14:1d:87:02:
ab:d1:26:38:c2:03:08:ad:d6:2e:b0:67:5f:69:04:
ad:c5:67:93:2e:da:84:94:27:ef:5b:26:f5:de:39:
b9:18:f4:ac:0f:bf:06:7d:38:8b:52:3d:62:57:af:
cf:a1:96:6d:db:3e:82:0e:5a:ea:09:99:72:9d:b6:
40:3d:0f:50:f4:c5:11:fb:d4:6f:a5:a6:f4:28:af:
8a:bf:c6:17:f0:b4:38:43:20:40:19:3d:87:12:99:
49:c7:62:fc:f4:a8:16:18:d2:d2:c6:50:83:31:f5:
4e:0a:df:7d:6b:12:84:18:b5:3b:8e:93:79:1a:0f:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A7:6C:0F:D4:79:96:13:3F:F2:23:45:8A:4D:3C:45:CC:88:87:E8
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e372e302f32342d3234203d3e20313336313935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.249.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:bb:4c:a8:5a:fa:7e:e0:58:79:20:73:64:0c:bf:e1:97:6b:
07:21:2a:f8:d3:5d:ca:1e:43:8c:c3:47:a0:50:00:48:55:a6:
ad:c4:67:bc:22:10:a1:4e:45:4f:6f:3a:1c:bc:06:bd:b8:44:
06:37:c3:81:f2:46:1d:44:b5:42:64:e7:ff:4b:0a:eb:b0:1f:
7c:7e:09:93:7b:3c:4b:85:3d:17:f9:08:e6:51:ef:8f:ca:75:
14:3c:4f:61:34:cc:04:36:d8:74:08:34:ef:f6:60:ba:52:a5:
26:d4:be:a8:b0:6f:95:d3:e4:0d:4a:24:5f:d4:65:9b:57:ff:
c0:55:14:42:f2:23:0e:19:62:ce:7e:04:ab:ea:1e:9c:c9:11:
93:b7:75:62:c1:13:1a:8d:d9:89:26:f7:35:05:7c:2c:94:24:
24:88:c6:76:3d:ec:d1:cd:aa:aa:ce:21:ca:39:0b:32:70:ec:
85:da:fb:ba:f7:7e:f9:72:33:01:45:6b:93:ae:0f:52:5a:00:
39:74:5a:4a:58:9d:fc:de:0f:a9:9f:0a:9c:53:52:72:18:f3:
93:1b:55:07:bd:fc:23:4a:41:21:28:8f:04:53:9f:09:a9:66:
52:78:3d:fc:d0:31:20:66:6b:40:e7:dc:a8:f8:72:23:7b:37:
0f:62:fe:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 02:40:51 2026 by rpki-client