
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36342e302f31392d3139203d3e203233373234.roa
File: 3134302e3231302e36342e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier: uGmP70VNQ8Tiaqi5nJvybBlA09lHGjWejpFBkn7K5sg=
Subject key identifier: A8:FA:B7:53:07:7A:AE:C6:69:E0:9D:50:77:BD:33:A7:B1:63:80:DE
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 254D3F82E77B0FFBE308A13E046246F8F84DF27B
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36342e302f31392d3139203d3e203233373234.roa
Signing time: Wed 10 Jun 2026 17:56:04 +0000
ROA not before: Wed 10 Jun 2026 17:51:04 +0000
ROA not after: Wed 09 Jun 2027 17:56:04 +0000
asID: 23724
IP address blocks: 140.210.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4d:3f:82:e7:7b:0f:fb:e3:08:a1:3e:04:62:46:f8:f8:4d:f2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 10 17:51:04 2026 GMT
Not After : Jun 9 17:56:04 2027 GMT
Subject: CN=A8FAB753077AAEC669E09D5077BD33A7B16380DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:6a:a9:a3:b5:f6:fd:00:fe:ff:57:b7:c9:
19:7e:3c:63:e0:cc:bf:21:69:51:97:94:68:c1:b3:
a7:59:42:ca:01:96:1c:dd:fe:91:df:ea:f1:c1:7d:
4e:c6:ce:dd:50:9b:0f:f5:00:46:c9:b4:37:fd:db:
fb:7b:a3:84:74:18:23:7d:6a:27:32:5a:c9:2d:99:
15:ab:89:65:b7:be:c9:58:63:b0:b1:ca:af:84:74:
7b:48:5b:eb:41:ca:d6:ee:00:0a:62:d9:86:44:17:
33:35:e3:4e:a2:0c:06:aa:15:6f:f0:d4:87:2e:4a:
5d:04:36:f3:59:fe:41:3c:ea:86:bd:7c:4f:91:8f:
1b:97:01:0e:da:9c:7e:bc:f2:52:b5:c0:6c:b9:bc:
36:8c:0e:27:10:52:2b:ae:06:86:3e:a7:3c:94:9c:
1d:8d:cc:be:99:b4:7b:5e:2d:4f:43:1f:02:f8:8c:
58:3c:d1:5b:5f:5b:a4:a7:b8:9f:ca:db:d2:40:8c:
44:25:62:e6:53:f7:e2:5a:d9:22:16:2e:81:d2:42:
64:15:3b:95:a6:c1:02:9d:e0:04:5c:37:c7:e0:52:
c2:38:3b:e5:9e:bf:e3:45:a9:17:6f:9a:2e:8d:a8:
fb:9f:e7:be:44:87:ec:47:7d:a3:a9:5d:8d:3a:71:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FA:B7:53:07:7A:AE:C6:69:E0:9D:50:77:BD:33:A7:B1:63:80:DE
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36342e302f31392d3139203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.64.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:c0:35:16:6f:e1:f7:5b:0e:fa:e6:fb:2f:eb:47:af:ad:96:
0e:31:ec:5f:17:10:38:ab:50:29:b7:ec:74:b0:c8:e7:d0:4a:
0c:63:a4:be:9b:ea:34:3e:3b:59:83:1a:74:86:f1:be:ed:a0:
5d:91:68:6e:ab:f8:00:32:53:fa:fb:ff:93:29:03:99:ae:24:
6b:99:14:a7:bc:45:8c:c5:31:8b:29:dc:46:85:34:81:41:43:
c3:d2:ca:0b:54:3f:c5:bc:37:fa:fe:6d:7b:2d:e6:da:d7:0c:
f2:a2:59:6f:db:fd:72:f5:cd:ba:6e:a4:78:c1:62:9b:f7:e2:
5a:ca:14:bf:3d:84:d2:77:b0:47:a5:c4:9e:bc:88:75:62:4b:
bc:ce:c3:89:93:90:f2:2c:cb:e9:20:9e:83:b8:37:f1:bf:23:
66:9b:fa:22:a9:b3:41:ad:d8:13:3c:a2:87:e6:17:be:54:29:
13:a5:4b:47:9b:8f:e7:b9:22:74:b4:cc:fe:d9:c8:dd:82:fd:
5b:ee:6e:f9:7c:ae:10:f2:4d:a5:99:fe:5e:ed:92:ab:c3:f2:
22:01:98:86:df:6a:d9:31:78:bd:85:e0:26:7c:8c:4b:15:cc:
a4:cb:6f:e7:97:d0:a0:6d:7f:ab:f7:9f:76:15:77:d7:04:dd:
c0:80:01:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:38:43 2026 by rpki-client