
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS146838.roa
File: AS146838.roa (raw, json)
Hash identifier: MTCngMPNWmRnisx5hTizNPX+K8oCQs2lVT5mdlPUUpI=
Subject key identifier: F6:08:95:8A:32:3E:67:44:1F:D3:7E:82:59:12:A8:05:9F:E9:6E:92
Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial: 07CDD091444FEA998C3007030500AA544DE825F1
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS146838.roa
Signing time: Thu 04 Jun 2026 02:16:25 +0000
ROA not before: Thu 04 Jun 2026 02:11:25 +0000
ROA not after: Thu 03 Jun 2027 02:16:25 +0000
asID: 146838
IP address blocks: 240a:4093::/35 maxlen: 35
240a:41d6::/31 maxlen: 31
240a:4230::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:cd:d0:91:44:4f:ea:99:8c:30:07:03:05:00:aa:54:4d:e8:25:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Validity
Not Before: Jun 4 02:11:25 2026 GMT
Not After : Jun 3 02:16:25 2027 GMT
Subject: CN=F608958A323E67441FD37E825912A8059FE96E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:4d:12:38:8f:a7:dc:c6:24:60:d7:0c:ea:
76:51:6d:2a:e0:3e:03:d0:8d:3d:e7:e9:07:fd:8d:
2d:cd:90:c2:7d:0c:88:8d:de:da:f0:19:d4:5a:42:
1e:aa:9a:d7:20:2a:df:d2:18:27:bb:5a:09:31:0a:
2b:35:3e:bc:4a:53:1e:fc:9a:1d:90:e7:d1:8a:95:
de:10:58:f8:01:30:d4:ca:7f:88:31:bf:1c:85:f5:
8e:59:f4:9d:6b:9d:6b:9a:50:3c:d3:8d:25:ed:71:
45:a3:30:43:a4:52:43:11:9f:dc:7a:db:e3:9b:c8:
6d:5d:0f:b3:00:00:23:70:70:4d:89:ce:e3:eb:9b:
b2:93:a7:ab:b5:ef:dd:79:15:59:84:de:14:2b:f0:
0c:64:c9:f0:cc:de:8e:a2:74:b4:e5:e7:80:2f:4c:
6f:6c:45:0b:05:82:c7:42:17:9a:83:84:6c:b3:e1:
e7:ad:7d:fc:a6:c9:ce:c3:44:3f:c2:81:b5:ed:82:
53:fd:6a:77:9e:ae:93:78:dc:c4:e0:d2:d3:5e:4a:
86:25:82:60:48:16:37:83:8f:24:5f:af:ba:af:e6:
dc:f7:5a:5a:46:2b:a7:d4:7d:db:22:64:b7:07:c3:
0b:24:f0:6d:0e:ce:7d:c3:7f:b4:94:15:63:4c:17:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:08:95:8A:32:3E:67:44:1F:D3:7E:82:59:12:A8:05:9F:E9:6E:92
X509v3 Authority Key Identifier:
keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS146838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:4093::/35
240a:41d6::/31
240a:4230::/31
Signature Algorithm: sha256WithRSAEncryption
60:2d:10:9e:bc:db:9c:78:26:a2:3f:7a:ad:e0:d9:a8:fd:b8:
39:cb:a1:ff:0c:ba:bf:92:46:7a:33:36:09:e7:26:f9:c1:e9:
4a:79:e2:6a:d3:97:33:8d:85:4d:30:7c:22:60:1d:a4:66:26:
bf:7a:55:e5:d2:50:82:0b:58:5c:72:28:ec:03:d9:ff:43:16:
b4:52:65:fd:ad:c6:cf:4b:54:44:32:8e:60:de:27:1e:f4:f4:
77:70:bf:0f:61:45:3c:2a:a0:af:36:f0:64:b0:9f:28:53:b5:
3a:be:ac:bd:ca:6f:33:fd:9d:3c:24:6b:1b:61:3c:5e:8d:5f:
5d:19:33:2b:d3:ec:66:51:1e:01:fd:c1:2c:e1:ea:8e:23:d7:
4a:3d:63:90:7b:31:ec:41:68:15:0d:6a:87:d4:3d:64:c5:06:
be:2e:e1:92:10:00:ab:e1:bf:ca:02:1a:d9:33:e3:43:a1:76:
3a:c4:7a:d9:dd:9d:5f:0c:8a:46:c8:9f:d3:2c:c1:0d:6c:84:
12:5b:8a:6b:90:54:d9:26:32:f0:63:b7:3d:41:0a:ac:ef:0e:
8a:3b:7a:bf:cb:53:c9:3e:5f:bc:bb:1e:ba:33:b2:9e:2c:cc:
69:27:6a:58:6c:e6:13:8e:11:46:17:b4:7e:4c:d1:2d:d6:38:
ef:6d:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:22:59 2026 by rpki-client