
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e39362e302f31392d3139203d3e203233373234.roa
File: 3134302e3231302e39362e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier: CwR8WDusd3JddrqzwJU3TjNzdUa7HLGRQUKigT9ZZpM=
Subject key identifier: B5:BF:32:15:38:97:D9:DC:2F:0D:4A:A8:9D:5B:F7:65:70:BB:47:BB
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 3FC01BAB2E904414A8BFD3E21E4CD0F10E844CB7
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e39362e302f31392d3139203d3e203233373234.roa
Signing time: Wed 10 Jun 2026 17:56:04 +0000
ROA not before: Wed 10 Jun 2026 17:51:04 +0000
ROA not after: Wed 09 Jun 2027 17:56:04 +0000
asID: 23724
IP address blocks: 140.210.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c0:1b:ab:2e:90:44:14:a8:bf:d3:e2:1e:4c:d0:f1:0e:84:4c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 10 17:51:04 2026 GMT
Not After : Jun 9 17:56:04 2027 GMT
Subject: CN=B5BF32153897D9DC2F0D4AA89D5BF76570BB47BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:12:4a:10:83:1f:f2:ef:14:bb:a1:91:99:
80:78:65:27:f9:e6:88:4e:21:90:87:b4:dd:27:98:
dd:a0:bc:2b:e1:1a:99:53:5c:6b:94:bc:28:b4:ff:
80:de:03:b2:ff:93:a5:a4:f0:90:0a:86:3d:86:3f:
e4:63:7c:b5:51:d9:ba:26:8a:c0:4f:10:0b:54:0f:
c6:04:56:df:74:c0:17:74:7c:fc:be:3c:ad:23:70:
b6:94:88:5b:f0:95:2f:ec:37:8c:20:2e:05:44:83:
27:3e:cc:8f:98:66:18:00:cb:cf:94:55:e4:34:bb:
e8:27:c9:65:b5:29:dc:94:b5:58:21:9c:e2:cc:14:
3a:00:35:df:90:40:88:0e:13:b5:91:27:09:f6:d6:
77:c8:2d:15:dc:c0:cb:46:9a:98:70:7f:d7:7b:7d:
9e:41:83:5c:bb:54:53:57:1b:68:f6:b0:03:cc:72:
53:34:05:5e:fb:3e:c6:9f:0f:38:18:56:ce:57:a0:
f5:de:e6:4c:17:a9:5e:5a:cb:ee:3a:d9:09:94:5a:
83:93:e6:b7:5d:b6:1a:7f:13:c9:f5:31:69:0c:a8:
db:9a:78:3d:a2:2e:a0:0d:32:bc:f2:a7:7d:af:96:
f5:33:f8:ca:24:e7:ab:8d:0d:4d:04:f5:8c:d2:97:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BF:32:15:38:97:D9:DC:2F:0D:4A:A8:9D:5B:F7:65:70:BB:47:BB
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e39362e302f31392d3139203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.96.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:02:c0:bf:00:a8:e5:4f:b0:97:bf:46:af:56:69:9e:a3:45:
b4:3c:f0:47:f4:dd:c8:f6:8e:e5:1a:19:67:20:f4:a0:c0:ce:
0a:4e:f9:47:e8:0d:8e:a7:3f:11:50:56:64:af:84:9b:06:8f:
85:63:fa:85:93:b1:4e:a9:d3:b7:3a:b0:ba:ea:5f:2d:f8:1d:
7f:dd:63:9a:64:aa:03:29:c8:3e:5e:56:d8:f4:4f:2b:46:61:
ec:86:e0:16:83:e0:ea:55:08:cd:68:c9:de:e6:55:47:b3:70:
a7:88:9c:da:76:33:97:05:3c:2c:45:32:e9:79:09:19:d0:4d:
c2:81:0a:ec:a0:6c:4f:7b:75:51:07:db:94:5e:e0:8e:99:f2:
17:3b:1b:20:62:a9:48:cc:06:14:b4:4f:e0:00:65:37:50:b8:
13:de:da:9e:68:f2:61:ce:8b:bf:b4:7c:43:30:82:cb:00:1e:
8c:05:63:39:a0:a4:a4:d6:1e:6f:bd:05:e7:b3:64:42:85:70:
29:37:80:00:a9:2b:22:e4:67:61:37:06:53:f1:78:59:f9:bd:
46:07:f1:9f:d1:1f:5f:09:3e:bd:fc:e0:c2:d7:a8:11:cd:3d:
26:c2:f5:61:61:87:3d:cd:63:7b:4d:73:e8:01:a5:de:9f:4d:
8e:56:56:9c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUP8Abqy6QRBSov9PiHkzQ8Q6ETLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE
RUYwMERCQTAeFw0yNjA2MTAxNzUxMDRaFw0yNzA2MDkxNzU2MDRaMDMxMTAvBgNV
BAMTKEI1QkYzMjE1Mzg5N0Q5REMyRjBENEFBODlENUJGNzY1NzBCQjQ3QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3lxJKEIMf8u8Uu6GRmYB4ZSf5
5ohOIZCHtN0nmN2gvCvhGplTXGuUvCi0/4DeA7L/k6Wk8JAKhj2GP+RjfLVR2bom
isBPEAtUD8YEVt90wBd0fPy+PK0jcLaUiFvwlS/sN4wgLgVEgyc+zI+YZhgAy8+U
VeQ0u+gnyWW1KdyUtVghnOLMFDoANd+QQIgOE7WRJwn21nfILRXcwMtGmphwf9d7
fZ5Bg1y7VFNXG2j2sAPMclM0BV77PsafDzgYVs5XoPXe5kwXqV5ay+462QmUWoOT
5rddthp/E8n1MWkMqNuaeD2iLqANMrzyp32vlvUz+Mok56uNDU0E9YzSl+3nAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUtb8yFTiX2dwvDUqonVv3ZXC7R7swHwYDVR0j
BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx
ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODE1NjkzMC8xLzMxMzQzMDJlMzIz
MTMwMmUzOTM2MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBYzSYDANBgkqhkiG9w0BAQsFAAOCAQEAuQLAvwCo5U+wl79Gr1ZpnqNF
tDzwR/TdyPaO5RoZZyD0oMDOCk75R+gNjqc/EVBWZK+EmwaPhWP6hZOxTqnTtzqw
uupfLfgdf91jmmSqAynIPl5W2PRPK0Zh7IbgFoPg6lUIzWjJ3uZVR7Nwp4ic2nYz
lwU8LEUy6XkJGdBNwoEK7KBsT3t1UQfblF7gjpnyFzsbIGKpSMwGFLRP4ABlN1C4
E97anmjyYc6Lv7R8QzCCywAejAVjOaCkpNYeb70F57NkQoVwKTeAAKkrIuRnYTcG
U/F4Wfm9Rgfxn9EfXwk+vfzgwteoEc09JsL1YWGHPc1je01z6AGl3p9NjlZWnA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:11:45 2026 by rpki-client