
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e3131302e302f32342d3234203d3e20313336313937.roa
File: 3134342e372e3131302e302f32342d3234203d3e20313336313937.roa (raw, json)
Hash identifier: DLsQvd0nr4pABDgo1vSvorRGEvjmvoZL3TPT026H2cM=
Subject key identifier: C6:8D:06:C0:45:EF:FE:8F:55:9A:DF:ED:0F:A0:03:AA:52:37:4D:70
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 0E948C53A03F3674B39F599265C531A135F50E1C
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e3131302e302f32342d3234203d3e20313336313937.roa
Signing time: Mon 25 May 2026 16:05:49 +0000
ROA not before: Mon 25 May 2026 16:00:49 +0000
ROA not after: Mon 24 May 2027 16:05:49 +0000
asID: 136197
IP address blocks: 144.7.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 19:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:94:8c:53:a0:3f:36:74:b3:9f:59:92:65:c5:31:a1:35:f5:0e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: May 25 16:00:49 2026 GMT
Not After : May 24 16:05:49 2027 GMT
Subject: CN=C68D06C045EFFE8F559ADFED0FA003AA52374D70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:26:6f:6f:d2:5b:c4:19:a8:c4:17:92:26:
48:b7:be:f8:e4:13:17:a5:7f:b8:73:02:e0:99:9e:
2d:0d:ad:12:cf:a8:39:13:4c:7c:fe:59:81:f7:53:
69:08:74:8d:89:3e:da:bc:f8:b2:c9:96:21:10:76:
5c:37:65:65:11:ea:72:2f:c8:36:a3:38:3c:de:7a:
87:dd:f9:c9:5c:f6:35:79:fc:0c:1f:94:40:a8:cc:
48:bd:d4:ab:86:fb:e0:38:9d:87:85:45:94:02:9e:
c7:e9:36:e8:fa:eb:57:1d:d4:d9:c1:ae:f3:e2:95:
71:f3:70:e1:57:46:8f:de:10:58:8f:15:f6:fc:9f:
46:b8:01:dd:77:65:e4:b3:1b:7e:d1:60:76:5d:3c:
d3:36:f8:62:2a:9c:d8:f3:6e:01:28:73:57:94:51:
f6:c6:51:03:09:8f:1f:c2:a1:24:e4:a9:9f:9d:1e:
86:f9:6f:8e:14:20:5e:ba:34:ba:55:2c:e7:3e:cc:
c0:01:42:7a:d3:6c:6c:50:34:11:81:50:80:60:bb:
da:72:27:21:dd:4d:a4:c2:77:4b:ad:cb:16:6c:42:
76:53:74:06:69:9e:d5:61:53:66:d3:ba:b3:90:7c:
18:de:2b:0e:b1:01:50:0c:9f:03:ad:82:56:d0:26:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8D:06:C0:45:EF:FE:8F:55:9A:DF:ED:0F:A0:03:AA:52:37:4D:70
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e3131302e302f32342d3234203d3e20313336313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.7.110.0/24
Signature Algorithm: sha256WithRSAEncryption
01:3c:07:b3:fe:fe:b9:00:c7:9d:82:e7:4f:e0:da:1e:ba:d4:
be:38:14:1f:52:13:f6:94:0a:b9:ad:f5:01:ef:14:a7:1f:ad:
20:0e:02:34:34:6c:75:7f:15:c2:27:8e:01:d5:e9:0f:83:47:
6f:d0:36:6b:61:0b:5e:25:3b:4d:ee:c9:02:be:63:6a:43:87:
36:49:53:af:ba:59:44:7e:02:ae:84:7b:d4:8a:36:54:1f:c5:
91:d6:0a:09:59:a7:db:75:a2:7b:a6:f7:f6:99:5d:ac:d4:df:
62:a6:19:63:81:66:21:d5:cf:0d:05:35:a2:de:8d:ca:24:8a:
5e:46:4f:9f:3a:f9:36:8b:d1:b9:64:47:36:4e:67:be:55:d2:
1c:0d:5a:f9:d4:28:52:dc:fe:b2:8a:fe:17:fa:79:59:19:5e:
f6:4f:b5:fc:fa:57:09:e9:df:fc:da:10:6c:68:1e:ac:f2:cb:
ee:ae:51:bc:b2:90:7c:bd:cb:83:de:83:f6:89:cb:85:36:e4:
32:f6:4b:d0:88:37:41:24:49:3b:27:81:ad:ee:af:b9:af:72:
d2:ab:3a:c7:4e:1c:9c:e7:ab:16:ca:45:e7:a4:f5:29:83:21:
de:43:aa:b6:09:d7:4b:4f:2e:9f:41:95:76:73:9e:eb:48:cf:
13:e5:b5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 02:40:08 2026 by rpki-client