
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134764.roa
File: AS134764.roa (raw, json)
Hash identifier: Y8qsvOM+5MvCihE5xjineTX39yRQ/LOzrF5Nf2zx//c=
Subject key identifier: 66:80:1A:3F:BB:21:09:17:9E:52:88:4D:13:59:C8:90:CA:97:9D:33
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 7E4EDC47BF9C9DE24F8F8BFAD4691F41E80801AE
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134764.roa
Signing time: Tue 26 May 2026 17:07:59 +0000
ROA not before: Tue 26 May 2026 17:02:59 +0000
ROA not after: Tue 25 May 2027 17:07:59 +0000
asID: 134764
IP address blocks: 240e:1f:d000::/36 maxlen: 36
240e:ff:a000::/36 maxlen: 36
240e:108:11e1::/48 maxlen: 48
240e:97d:2000::/36 maxlen: 36
240e:982:e100::/40 maxlen: 40
240e:983:1e01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4e:dc:47:bf:9c:9d:e2:4f:8f:8b:fa:d4:69:1f:41:e8:08:01:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 26 17:02:59 2026 GMT
Not After : May 25 17:07:59 2027 GMT
Subject: CN=66801A3FBB2109179E52884D1359C890CA979D33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:da:3c:6f:f0:b8:5b:36:75:fb:f4:a3:1c:
3e:94:7c:ce:96:01:ca:a7:24:72:30:eb:2e:de:39:
28:54:11:14:06:5d:dd:0d:03:65:a0:4f:12:39:54:
ad:53:16:eb:1a:ef:72:32:57:7a:c8:21:94:01:1f:
5a:3b:bf:8d:02:63:f1:9f:7a:83:9e:d1:a4:ec:19:
ec:1a:fb:a0:ec:28:02:2c:70:7b:25:20:12:15:36:
6a:1e:44:a9:ed:1c:74:cd:98:19:70:96:fb:40:51:
0d:fc:f4:90:44:5d:23:e3:b3:76:60:3d:7a:c6:46:
80:a2:40:f4:5d:e6:03:7f:2d:16:4d:7c:b9:9e:3b:
8e:12:a7:a2:91:03:cc:ff:b8:3a:95:cb:41:34:81:
ee:51:33:52:8b:3b:f6:34:34:84:ed:7f:66:9b:76:
c0:a1:32:6e:3e:a9:00:4f:16:5e:e2:df:09:8e:55:
dc:10:aa:fd:a6:18:85:ce:8f:93:3d:f3:39:00:8c:
13:81:2d:83:71:24:f0:ff:4b:27:01:27:56:f2:98:
0e:c8:74:2a:b8:49:ce:22:3f:c4:0a:8d:91:13:e9:
a3:10:e5:55:e7:ed:e4:eb:bc:0b:62:22:11:17:38:
d1:36:4b:6d:80:ff:73:40:e5:58:50:07:31:48:1a:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:80:1A:3F:BB:21:09:17:9E:52:88:4D:13:59:C8:90:CA:97:9D:33
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS134764.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240e:1f:d000::/36
240e:ff:a000::/36
240e:108:11e1::/48
240e:97d:2000::/36
240e:982:e100::/40
240e:983:1e01::/48
Signature Algorithm: sha256WithRSAEncryption
b1:99:38:20:03:b6:27:5d:4c:4f:17:5c:19:6a:5a:b6:b8:a7:
3f:5e:b5:ea:85:ce:ea:75:d5:b3:19:37:15:df:97:2d:d6:b1:
e9:f0:86:9d:57:97:97:cd:65:af:31:8a:61:d0:06:f2:07:8b:
ec:a7:c4:4e:b4:64:ac:9c:c9:81:06:14:85:5d:94:0a:da:97:
d5:f0:16:ac:89:98:09:93:14:ff:e6:04:0d:d1:5e:2d:1b:83:
1d:9b:d4:62:e4:09:47:12:ac:93:6a:85:06:ee:0a:a8:b8:be:
96:cd:1d:9f:65:0a:7f:a4:f6:ce:a1:4f:9c:cf:a7:d2:72:bc:
3f:02:b0:3b:6b:0e:3d:6b:5e:6e:0d:bb:ba:ec:26:71:f9:4c:
84:78:5b:54:d7:5f:59:b2:5a:5f:7e:31:8a:4c:fa:08:23:1e:
0f:68:a3:72:53:a6:75:16:96:d2:e2:a1:e3:b4:32:40:a5:a8:
02:4f:28:53:11:11:19:d7:56:95:a0:5e:b9:31:69:7d:92:a6:
30:d1:f3:17:e6:d8:05:ab:69:f6:62:f7:b8:44:1f:ed:36:6f:
bf:2e:24:69:46:1c:5a:c2:eb:46:90:f3:17:a4:38:b3:81:a7:
46:f8:f8:f4:60:48:e8:88:ee:b9:22:30:c5:b0:8d:4c:e8:96:
d3:43:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:43 2026 by rpki-client