
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36362e302f32342d3234203d3e203233373234.roa
File: 3134302e3231302e36362e302f32342d3234203d3e203233373234.roa (raw, json)
Hash identifier: EPQitFqiSOuTFVg7JciDSy/KOCcsm+yQd47IupO2M6o=
Subject key identifier: 58:77:76:AF:61:C7:53:0E:E4:59:03:FA:30:E9:6E:48:D7:51:B9:27
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 60F5B275157ECCA5CFF19E6F47A377BCB874E886
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36362e302f32342d3234203d3e203233373234.roa
Signing time: Wed 10 Jun 2026 17:49:28 +0000
ROA not before: Wed 10 Jun 2026 17:44:28 +0000
ROA not after: Wed 09 Jun 2027 17:49:28 +0000
asID: 23724
IP address blocks: 140.210.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f5:b2:75:15:7e:cc:a5:cf:f1:9e:6f:47:a3:77:bc:b8:74:e8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 10 17:44:28 2026 GMT
Not After : Jun 9 17:49:28 2027 GMT
Subject: CN=587776AF61C7530EE45903FA30E96E48D751B927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:53:54:78:e3:75:e5:83:3f:2e:70:f9:f2:
e6:3e:37:e1:0a:9d:d8:b0:d3:67:af:5b:a0:5b:f3:
82:6a:42:9a:24:3f:b0:6a:33:2c:67:d9:1e:e7:ed:
1b:f1:61:b2:b1:77:4f:fb:23:a7:e7:4d:2d:6e:24:
6f:96:b3:cf:fb:4d:2a:c4:64:8b:9d:6a:14:bb:1f:
cb:63:11:bf:a3:53:bc:dd:f3:90:e6:66:29:a7:ea:
68:81:3f:34:43:d8:4e:e6:49:4e:7e:d4:43:90:31:
27:7b:be:6a:9c:49:d5:13:f7:3f:32:79:bf:ee:60:
94:b4:f6:50:b9:df:9a:69:d8:4a:bd:d4:91:d0:98:
c8:4b:c0:55:1c:ce:32:29:25:18:02:df:4f:56:1f:
e5:40:00:34:4d:83:05:50:b5:4c:b6:d6:28:a4:b8:
6f:2e:2f:f5:25:62:d4:61:10:5f:76:fb:dc:2d:da:
5b:10:e7:dc:36:4e:19:1e:ed:56:06:cd:b0:ad:fe:
16:ca:52:cb:0f:05:26:81:89:a9:1e:10:1f:0f:5c:
df:78:d3:68:f8:1c:62:9f:df:af:dd:4e:ea:2f:7a:
03:db:f6:87:cd:c7:15:82:17:82:9d:5d:79:d2:92:
a0:ef:97:c6:0a:88:0d:7f:81:23:9f:e6:90:e9:44:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:77:76:AF:61:C7:53:0E:E4:59:03:FA:30:E9:6E:48:D7:51:B9:27
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e36362e302f32342d3234203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.66.0/24
Signature Algorithm: sha256WithRSAEncryption
89:55:83:fe:5a:90:e3:15:3b:a4:67:8f:d1:13:7a:8d:3d:9b:
fd:58:7d:d8:eb:8b:68:23:d9:37:89:e1:44:64:6b:c9:11:be:
3b:74:4b:6e:25:ca:c9:7d:89:c5:5e:ee:e5:e3:b2:79:01:89:
cc:4f:5a:2b:f0:9a:32:84:31:89:c8:72:c0:ac:ae:65:a3:77:
8f:c0:1e:81:c1:ba:3a:0b:b6:7c:87:fc:dd:df:a8:0a:76:5e:
41:fe:36:ea:3e:76:4b:86:03:d0:36:69:15:20:25:8d:89:2e:
9c:88:93:24:50:ac:6e:fb:35:4d:af:b9:ad:b4:04:71:7d:e7:
42:72:91:32:98:41:f3:80:f5:cd:da:5d:e9:73:88:8e:fa:2b:
e1:e3:32:5a:2a:72:08:ed:b7:82:3f:d0:48:b4:ff:45:6b:63:
b1:7d:ee:4b:2c:c2:66:ee:f0:62:1c:fa:54:fe:ba:b0:b6:7a:
9b:e9:5b:a6:64:e6:47:7f:91:99:93:2d:c3:d9:53:51:48:6a:
60:79:fb:f1:59:b2:4c:13:5b:22:bf:13:e4:4b:be:63:ec:93:
92:2c:c6:45:19:ac:ae:80:05:8f:af:35:5c:f5:86:47:be:6a:
80:c9:3f:ed:68:fd:df:68:17:d2:40:4c:90:03:81:2a:be:f5:
6f:8b:27:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:24:38 2026 by rpki-client