
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e3132332e33312e302f32342d3234203d3e20313339383837.roa
File: 3134342e3132332e33312e302f32342d3234203d3e20313339383837.roa (raw, json)
Hash identifier: 7x3gGB4w8qrw4Fc1OYB6Vr0Pv3++7N8HYsy8SIlXYSg=
Subject key identifier: 17:8B:18:9F:F0:4F:AF:E4:07:A5:02:60:71:95:DE:95:C5:65:B1:63
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 25878659FA58B9390E7AF803F885CE75C3845930
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e3132332e33312e302f32342d3234203d3e20313339383837.roa
Signing time: Thu 28 May 2026 16:07:19 +0000
ROA not before: Thu 28 May 2026 16:02:19 +0000
ROA not after: Thu 27 May 2027 16:07:19 +0000
asID: 139887
IP address blocks: 144.123.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 19:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:87:86:59:fa:58:b9:39:0e:7a:f8:03:f8:85:ce:75:c3:84:59:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: May 28 16:02:19 2026 GMT
Not After : May 27 16:07:19 2027 GMT
Subject: CN=178B189FF04FAFE407A502607195DE95C565B163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:77:14:be:48:70:52:0f:5d:d0:3c:69:81:
48:6f:82:17:4a:88:66:38:03:2b:24:a7:4e:7f:1d:
b7:8c:d8:ab:b6:90:3b:84:38:fa:52:81:d9:5a:9a:
13:ef:8d:38:6d:82:84:90:61:91:3f:49:3a:34:a9:
87:0a:2f:55:58:13:23:fa:65:94:aa:d6:97:65:3b:
bc:90:82:07:7c:70:41:15:50:af:01:8c:d2:3a:9a:
89:2d:df:54:45:a2:d1:db:ae:15:5d:9c:e7:d8:84:
ad:f9:48:41:f3:b0:0b:2b:53:7b:35:0d:9e:1a:01:
85:98:9a:c5:e4:57:ea:49:d8:bb:3d:f8:f3:2e:55:
62:9d:c5:d0:44:b2:03:61:72:73:5b:e9:54:45:b2:
06:ee:5f:24:3b:fa:6a:fb:46:26:54:da:44:66:de:
74:45:aa:c5:15:21:cc:98:1e:ac:78:d5:0c:15:6c:
19:4a:77:f5:da:6e:8c:d5:7b:9c:5d:10:69:cb:ac:
87:31:7c:f2:00:5c:45:17:21:4e:7f:94:cd:0a:0f:
34:c2:92:35:01:e2:50:c5:e9:d6:0d:9a:73:49:00:
67:8c:d1:b9:e3:fd:d5:d8:2e:8a:e5:9c:a2:d1:43:
9c:95:82:b8:d1:43:79:74:dc:7b:30:01:bb:c4:05:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8B:18:9F:F0:4F:AF:E4:07:A5:02:60:71:95:DE:95:C5:65:B1:63
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e3132332e33312e302f32342d3234203d3e20313339383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.123.31.0/24
Signature Algorithm: sha256WithRSAEncryption
69:3f:44:87:ad:4f:fa:45:7c:a3:82:ca:8c:4b:42:ba:51:03:
d6:42:0c:7a:56:a7:3d:3f:2f:bd:bd:d2:e4:97:51:b4:da:5e:
a6:e8:a4:5b:8b:26:28:c3:e7:e7:a1:8f:c2:e0:92:df:13:09:
f1:7b:f3:6e:fb:4f:87:0f:cd:ac:90:1f:fa:5c:a0:11:f1:a1:
29:59:93:2f:cb:85:26:a8:d8:a2:5b:cf:f1:15:4d:d9:5d:a0:
b9:a0:92:e5:30:a5:1b:75:65:79:40:59:24:86:9b:1f:35:4f:
5f:0d:86:df:fd:64:ca:f1:93:5c:85:e5:cd:ae:16:9a:ac:1a:
b9:89:d2:bf:4d:72:31:86:e9:34:9e:a6:5a:2c:6d:4c:53:c6:
c5:22:50:41:2f:8b:cc:2f:93:a5:80:43:ed:6d:30:09:ab:44:
7b:34:62:f2:2c:5c:b2:75:34:eb:da:c0:ae:c0:74:79:08:b9:
7c:23:4c:73:88:d3:29:87:36:8c:23:65:75:97:75:fa:c7:93:
b9:43:d2:11:e4:5d:dc:5f:07:1b:47:bc:c9:38:db:02:d7:54:
1d:fb:3c:c5:4f:d9:99:24:54:a5:a8:de:54:ee:bd:5f:2f:81:
03:27:35:5b:b6:03:23:16:b0:f5:97:34:8a:ec:51:fe:25:f3:
e8:bc:6d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 02:41:25 2026 by rpki-client