
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/3134302e3231302e382e302f32312d3231203d3e20313334373635.roa
File: 3134302e3231302e382e302f32312d3231203d3e20313334373635.roa (raw, json)
Hash identifier: HSDYPYoIaTEjvOoXhrjV5CgDXDpaC41EK5sRdfygvnk=
Subject key identifier: 59:CC:C6:DC:0D:46:82:10:10:7A:2E:E5:99:2B:9B:83:92:6E:43:0C
Certificate issuer: /CN=97B5B7009501E4718F06B9B36D215369C958203F
Certificate serial: 64CB2DBFC5C30E1186D6F681FDDB71A19BB71F4A
Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/3134302e3231302e382e302f32312d3231203d3e20313334373635.roa
Signing time: Wed 08 Apr 2026 05:29:35 +0000
ROA not before: Wed 08 Apr 2026 05:24:35 +0000
ROA not after: Wed 07 Apr 2027 05:29:35 +0000
asID: 134765
IP address blocks: 140.210.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:cb:2d:bf:c5:c3:0e:11:86:d6:f6:81:fd:db:71:a1:9b:b7:1f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F
Validity
Not Before: Apr 8 05:24:35 2026 GMT
Not After : Apr 7 05:29:35 2027 GMT
Subject: CN=59CCC6DC0D468210107A2EE5992B9B83926E430C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:95:cd:1a:c7:81:b8:e4:8b:35:f8:d3:5e:0c:
50:e2:5e:3c:07:06:93:ca:d6:5b:16:ab:13:3c:bc:
5e:49:f4:2e:cd:65:55:77:42:78:92:8b:fe:02:6a:
85:64:a5:2c:12:b4:56:6c:66:cf:fb:2d:de:43:37:
c0:49:ba:c0:21:ce:fc:81:a4:79:ef:c2:6e:7c:66:
6b:1e:75:c7:4a:d6:34:1c:96:f9:cd:ab:48:87:8e:
ac:8e:7d:6a:74:64:a6:b3:5e:31:f0:cb:11:14:55:
e7:00:03:11:5f:69:e3:cc:de:f2:1f:cd:96:ba:19:
3f:f7:c0:c8:7b:e9:64:54:dd:c4:cf:11:9d:92:ef:
e1:be:e4:0d:0f:b4:c9:2b:6d:39:e5:72:79:cc:c0:
b8:69:8d:8b:d3:5f:2f:7d:58:77:24:73:5d:80:1d:
69:88:c9:a2:34:e7:75:d3:e5:22:a9:90:79:84:a7:
9a:9e:84:f4:92:55:4a:bd:62:54:1d:95:af:16:46:
8e:07:45:53:5d:fe:96:8c:ae:aa:42:4c:9e:f5:72:
a2:e6:6c:ee:1f:a0:34:50:2a:df:54:cf:f4:d4:bd:
f0:bb:e0:ec:38:b7:6b:d8:cc:f4:dd:eb:b6:fa:c0:
7a:bb:cd:ec:db:2e:e8:36:b8:f2:6c:40:4a:cd:e4:
31:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CC:C6:DC:0D:46:82:10:10:7A:2E:E5:99:2B:9B:83:92:6E:43:0C
X509v3 Authority Key Identifier:
keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/3134302e3231302e382e302f32312d3231203d3e20313334373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.8.0/21
Signature Algorithm: sha256WithRSAEncryption
98:5b:ec:5e:7b:7a:7f:16:7d:02:72:95:7a:81:29:01:b1:03:
3e:24:40:7f:f2:28:f5:bf:e9:0b:49:4c:21:be:a0:27:61:c2:
cd:7b:60:57:ff:90:7b:54:87:24:ed:e0:e2:16:a4:49:6c:7a:
01:ab:08:cb:da:e1:26:83:a9:14:ff:51:c2:b4:da:ba:c4:03:
c1:d0:9c:4c:e4:58:4b:3e:0e:36:d5:54:65:82:da:35:53:29:
b3:82:f6:05:fd:fc:bd:79:c1:37:9a:4d:41:26:e0:c3:e3:2c:
0a:3b:74:20:04:c6:51:28:f3:e9:4c:2b:58:b5:71:ed:6a:fa:
b7:29:6e:06:df:bf:b8:68:93:d0:d7:28:28:3a:7e:7c:cf:81:
8f:46:22:0e:97:b6:83:5a:ee:a8:a0:1d:31:9a:63:93:81:59:
ac:ca:27:38:34:26:c5:84:13:e3:ae:93:65:a0:66:25:f6:57:
3d:b4:6c:5c:10:8e:cd:75:d6:74:e9:84:74:aa:cf:d1:e0:cc:
28:10:1f:ee:e2:0b:0f:e8:fa:eb:cd:f8:cd:a7:7e:32:fa:00:
f2:4b:7d:b4:3b:67:3a:74:ae:8b:5b:0c:1e:50:c6:9f:61:cc:
a8:00:3a:80:3b:fd:2e:0d:94:37:d8:20:83:53:9b:f2:5d:0b:
a3:a1:78:9e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUZMstv8XDDhGG1vaB/dtxoZu3H0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlD
OTU4MjAzRjAeFw0yNjA0MDgwNTI0MzVaFw0yNzA0MDcwNTI5MzVaMDMxMTAvBgNV
BAMTKDU5Q0NDNkRDMEQ0NjgyMTAxMDdBMkVFNTk5MkI5QjgzOTI2RTQzMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDulc0ax4G45Is1+NNeDFDiXjwH
BpPK1lsWqxM8vF5J9C7NZVV3QniSi/4CaoVkpSwStFZsZs/7Ld5DN8BJusAhzvyB
pHnvwm58ZmsedcdK1jQclvnNq0iHjqyOfWp0ZKazXjHwyxEUVecAAxFfaePM3vIf
zZa6GT/3wMh76WRU3cTPEZ2S7+G+5A0PtMkrbTnlcnnMwLhpjYvTXy99WHckc12A
HWmIyaI053XT5SKpkHmEp5qehPSSVUq9YlQdla8WRo4HRVNd/paMrqpCTJ71cqLm
bO4foDRQKt9Uz/TUvfC74Ow4t2vYzPTd67b6wHq7zezbLug2uPJsQErN5DERAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUWczG3A1GghAQei7lmSubg5JuQwwwHwYDVR0j
BBgwFoAUl7W3AJUB5HGPBrmzbSFTaclYID8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTExNzc1NzYxMjAzNS8xLzk3QjVCNzAwOTUwMUU0NzE4RjA2QjlCMzZEMjE1
MzY5Qzk1ODIwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlDOTU4MjAzRi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU5MTExNzc1NzYxMjAzNS8xLzMxMzQzMDJlMzIz
MTMwMmUzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzMzNDM3MzYzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEA4zSCDANBgkqhkiG9w0BAQsFAAOCAQEAmFvsXnt6fxZ9AnKVeoEpAbED
PiRAf/Io9b/pC0lMIb6gJ2HCzXtgV/+Qe1SHJO3g4hakSWx6AasIy9rhJoOpFP9R
wrTausQDwdCcTORYSz4ONtVUZYLaNVMps4L2Bf38vXnBN5pNQSbgw+MsCjt0IATG
USjz6UwrWLVx7Wr6tyluBt+/uGiT0NcoKDp+fM+Bj0YiDpe2g1ruqKAdMZpjk4FZ
rMonODQmxYQT466TZaBmJfZXPbRsXBCOzXXWdOmEdKrP0eDMKBAf7uILD+j66834
zad+MvoA8kt9tDtnOnSui1sMHlDGn2HMqAA6gDv9Lg2UN9ggg1Ob8l0Lo6F4ng==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:33:34 2026 by rpki-client