
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e39382e302f32342d3234203d3e20313336313937.roa
File: 3134342e372e39382e302f32342d3234203d3e20313336313937.roa (raw, json)
Hash identifier: quu6SEOZSlPhrnxPnF/xb/IVh4oW6G1CgKrE3/FLmwk=
Subject key identifier: 06:A1:CA:13:90:36:19:94:7A:72:C3:50:02:32:7F:81:63:4F:2B:80
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 0E10366B062D3ABD968CEBF1D278E62410C7FFB1
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e39382e302f32342d3234203d3e20313336313937.roa
Signing time: Mon 25 May 2026 16:05:49 +0000
ROA not before: Mon 25 May 2026 16:00:49 +0000
ROA not after: Mon 24 May 2027 16:05:49 +0000
asID: 136197
IP address blocks: 144.7.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 19:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:10:36:6b:06:2d:3a:bd:96:8c:eb:f1:d2:78:e6:24:10:c7:ff:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: May 25 16:00:49 2026 GMT
Not After : May 24 16:05:49 2027 GMT
Subject: CN=06A1CA13903619947A72C35002327F81634F2B80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:16:16:6c:c5:5f:92:7c:2a:36:e0:02:76:37:
c2:4f:30:20:ce:4f:88:42:7f:3e:10:6c:22:19:9d:
03:05:e7:b9:fc:49:f5:f0:46:fb:75:40:e6:b1:41:
ae:d2:88:0a:ed:40:73:54:94:d2:1f:03:2d:97:0f:
d6:76:c1:8a:20:18:af:1f:77:19:05:c3:e6:65:3f:
cf:a8:fa:f0:f2:ab:98:7a:af:8b:2e:f0:60:04:64:
ac:68:d5:72:ce:a7:49:b2:f5:ab:87:73:a5:1e:04:
5f:b1:e9:12:8c:39:fd:fa:04:44:ec:c6:95:aa:29:
11:02:a8:4d:61:e0:03:3f:60:5d:44:3e:b2:42:5e:
9c:97:b6:b9:fc:0e:db:a1:f3:82:1d:9b:f9:d0:c9:
ac:9c:83:a8:d3:1e:e3:46:62:6d:bb:99:4b:af:34:
6e:4e:bc:22:63:b7:a4:a6:e3:77:1b:68:68:5f:5e:
e4:35:bb:8a:0a:18:cb:93:97:30:b6:b1:f9:dc:02:
fd:a3:b5:a2:03:0b:f0:a0:5f:3a:25:72:37:1b:5e:
a5:b5:2e:0f:a4:62:db:bc:69:2a:a8:db:da:7a:0b:
ee:c1:19:d7:cc:3e:2c:a2:d6:ab:77:44:74:51:24:
90:97:68:ba:7a:57:10:a2:d7:6e:e4:1c:85:5c:62:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A1:CA:13:90:36:19:94:7A:72:C3:50:02:32:7F:81:63:4F:2B:80
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134342e372e39382e302f32342d3234203d3e20313336313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.7.98.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b4:87:16:98:07:f5:93:85:d9:50:ad:2d:45:49:12:82:e5:
28:f5:06:97:ca:f0:83:a5:cb:f4:f9:54:ad:7b:59:0c:d8:9f:
87:c6:d5:f7:87:68:03:9c:59:39:5f:ed:af:31:a0:6f:16:25:
47:0f:6f:92:28:18:88:f8:06:9a:d3:33:e2:15:60:1a:11:5c:
71:33:f8:0e:fe:14:c0:6e:82:ef:75:10:77:87:71:b3:e2:84:
f2:e4:b3:85:ce:96:8b:1f:81:01:68:49:76:aa:95:2b:9a:e4:
61:c2:f7:7a:1b:e0:93:ac:07:0e:98:53:18:e6:6c:b6:40:2c:
3d:98:30:38:4c:f5:9e:a3:18:c9:43:72:6a:78:5f:a3:92:36:
e2:7f:2f:68:75:71:3a:65:85:24:54:6b:df:c6:00:ad:99:c7:
3e:00:bc:bf:17:aa:a0:90:8f:f2:27:82:78:0e:93:d3:5f:b3:
8c:20:ce:97:4d:ca:93:33:3e:da:2d:00:3f:4c:8e:82:61:3a:
3a:9b:51:aa:5b:0a:f2:da:08:ba:68:5c:96:43:22:17:fc:55:
b0:6d:18:ba:ed:19:0f:cd:d9:6a:89:b7:cf:a9:41:81:0b:5c:
3d:ae:cf:31:aa:70:70:2c:6f:70:e0:ad:c1:b3:0e:00:3f:11:
da:3d:fd:b4
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUDhA2awYtOr2WjOvx0njmJBDH/7EwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1
M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDUyNTE2MDA0OVoX
DTI3MDUyNDE2MDU0OVowMzExMC8GA1UEAxMoMDZBMUNBMTM5MDM2MTk5NDdBNzJD
MzUwMDIzMjdGODE2MzRGMkI4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOgWFmzFX5J8KjbgAnY3wk8wIM5PiEJ/PhBsIhmdAwXnufxJ9fBG+3VA5rFB
rtKICu1Ac1SU0h8DLZcP1nbBiiAYrx93GQXD5mU/z6j68PKrmHqviy7wYARkrGjV
cs6nSbL1q4dzpR4EX7HpEow5/foEROzGlaopEQKoTWHgAz9gXUQ+skJenJe2ufwO
26Hzgh2b+dDJrJyDqNMe40ZibbuZS680bk68ImO3pKbjdxtoaF9e5DW7igoYy5OX
MLax+dwC/aO1ogML8KBfOiVyNxtepbUuD6Ri27xpKqjb2noL7sEZ18w+LKLWq3dE
dFEkkJdounpXEKLXbuQchVxi7U8CAwEAAaOCAhEwggINMB0GA1UdDgQWBBQGocoT
kDYZlHpyw1ACMn+BY08rgDAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf
sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1
RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v
c21lcjJOcFlWOWJ3SERNWDdJLmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF
BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0MDI5
MDU5NzY4MzUvMC8zMTM0MzQyZTM3MmUzOTM4MmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzEzMzM2MzEzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkAdiMA0GCSqGSIb3DQEBCwUAA4IB
AQCDtIcWmAf1k4XZUK0tRUkSguUo9QaXyvCDpcv0+VSte1kM2J+HxtX3h2gDnFk5
X+2vMaBvFiVHD2+SKBiI+Aaa0zPiFWAaEVxxM/gO/hTAboLvdRB3h3Gz4oTy5LOF
zpaLH4EBaEl2qpUrmuRhwvd6G+CTrAcOmFMY5my2QCw9mDA4TPWeoxjJQ3JqeF+j
kjbify9odXE6ZYUkVGvfxgCtmcc+ALy/F6qgkI/yJ4J4DpPTX7OMIM6XTcqTMz7a
LQA/TI6CYTo6m1GqWwry2gi6aFyWQyIX/FWwbRi67RkPzdlqibfPqUGBC1w9rs8x
qnBwLG9w4K3Bsw4APxHaPf20
-----END CERTIFICATE-----
Generated at Sat May 30 02:40:08 2026 by rpki-client