
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e38382e302f32342d3234203d3e20313336313937.roa
File: 3134342e372e38382e302f32342d3234203d3e20313336313937.roa (raw, json)
Hash identifier: 0EWXm1SfUkJigpLD4nhbw1EqlY6r333VXvOCKO8qN70=
Subject key identifier: 13:08:46:CE:AB:F7:01:2D:43:68:78:29:2C:DF:5B:93:2E:16:B8:EE
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 7761CE299304483620D6B19D4F3AEF3A25B56048
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e38382e302f32342d3234203d3e20313336313937.roa
Signing time: Mon 25 May 2026 16:05:49 +0000
ROA not before: Mon 25 May 2026 16:00:49 +0000
ROA not after: Mon 24 May 2027 16:05:49 +0000
asID: 136197
IP address blocks: 144.7.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 19:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:61:ce:29:93:04:48:36:20:d6:b1:9d:4f:3a:ef:3a:25:b5:60:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: May 25 16:00:49 2026 GMT
Not After : May 24 16:05:49 2027 GMT
Subject: CN=130846CEABF7012D436878292CDF5B932E16B8EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:c5:da:89:8e:16:10:fa:70:f5:4f:a0:0f:
9f:a3:f1:b7:04:f2:fa:e5:5b:d8:b5:45:13:5e:f8:
d1:01:92:5c:3c:92:a9:82:6e:3e:94:5f:78:f0:72:
c5:73:66:87:31:ff:64:4e:cf:65:65:4a:e8:9f:2d:
c0:df:a6:8f:cd:4e:e4:90:27:48:fc:92:24:e2:be:
7b:76:27:f6:17:ed:1a:b7:7c:09:90:78:fb:ba:0c:
57:f5:0d:76:10:f8:e5:68:f6:9e:53:c8:e5:12:ab:
50:13:85:76:51:09:26:5e:1b:b9:84:b1:e9:33:6e:
17:6d:de:99:2d:51:e6:0d:36:5a:a8:0d:44:2a:9d:
63:17:73:de:29:fd:12:c6:6f:2a:9b:ad:0c:35:ef:
70:01:c3:ae:de:9d:15:34:a4:90:8d:51:20:b6:91:
81:e2:b0:1a:7d:f0:73:30:74:7d:19:da:5c:e2:5c:
f4:64:ee:3a:93:56:7f:01:af:5d:72:56:ad:c2:1e:
3b:7e:9e:8a:5e:e4:b8:15:8e:55:4d:2e:73:75:0b:
b8:76:f0:1d:4b:6c:94:77:a1:01:c3:37:bf:7a:ef:
7e:de:d2:37:e1:e5:be:f8:59:5e:b6:33:42:4f:06:
29:f4:32:c2:6a:0d:5f:1d:f2:b8:3f:fb:93:fb:ff:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:08:46:CE:AB:F7:01:2D:43:68:78:29:2C:DF:5B:93:2E:16:B8:EE
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e38382e302f32342d3234203d3e20313336313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.7.88.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:04:d4:e2:de:2b:3d:11:52:51:d1:9a:13:37:59:00:3a:b3:
c5:a4:e0:4e:7a:62:8c:97:ff:1a:84:c3:45:d8:cf:d2:ec:00:
83:24:f3:a1:f5:20:5e:c3:37:ef:ae:38:1f:d4:b3:44:91:4b:
d2:71:d8:ed:b5:d4:cb:af:fe:a0:3e:05:e6:21:e0:fd:0f:4e:
38:90:9d:64:2c:fa:12:ee:2f:50:f6:2f:f5:22:b5:24:98:53:
14:0b:4a:e2:67:8c:dd:04:f7:41:82:d1:ac:c1:26:8a:e9:82:
56:ab:88:fe:7c:bf:46:a2:b5:0f:83:e2:15:58:96:9a:1a:59:
73:ef:bf:74:8c:9f:bf:7a:a0:21:3d:cc:7c:d9:25:ec:d5:0e:
8c:1b:a1:20:ee:7a:63:8e:ce:9b:a8:72:74:c1:3a:85:87:e2:
3d:36:18:cf:fb:0e:c3:af:e6:ef:6a:e1:1b:99:29:e3:68:67:
55:a4:b0:fa:61:94:25:bc:4f:20:21:7c:02:04:d4:34:30:c1:
17:b0:49:25:8d:aa:a9:3a:a9:5f:3c:89:3a:f7:7a:4b:15:28:
5e:2f:1e:aa:fa:b1:d2:29:38:7b:56:ae:3d:7f:8a:ed:91:55:
e6:d6:97:15:64:ac:a4:73:0d:7b:90:10:fe:56:92:60:68:b7:
62:a2:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 02:40:08 2026 by rpki-client