
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e36342e302f31392d3139203d3e203538353430.roa
File: 3134302e3234392e36342e302f31392d3139203d3e203538353430.roa (raw, json)
Hash identifier: o1yN+M6wBwIqoQaz6Hs1lV5gtDWEDKrGK3EQoyNuXqs=
Subject key identifier: 02:1A:2F:F8:4C:0F:99:ED:43:87:C7:9D:DC:2C:57:98:59:CE:25:77
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 6190C81EA673F4E91C426CB4F05C29E31E885B1E
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e36342e302f31392d3139203d3e203538353430.roa
Signing time: Wed 03 Jun 2026 17:39:02 +0000
ROA not before: Wed 03 Jun 2026 17:34:02 +0000
ROA not after: Wed 02 Jun 2027 17:39:02 +0000
asID: 58540
IP address blocks: 140.249.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:90:c8:1e:a6:73:f4:e9:1c:42:6c:b4:f0:5c:29:e3:1e:88:5b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: Jun 3 17:34:02 2026 GMT
Not After : Jun 2 17:39:02 2027 GMT
Subject: CN=021A2FF84C0F99ED4387C79DDC2C579859CE2577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:4c:41:5c:59:e0:5c:b6:ec:dd:b2:32:67:
76:af:3d:e5:6a:3e:da:71:09:15:d5:64:b1:ac:6b:
95:31:08:5f:68:5b:aa:b6:9e:7f:a9:05:8b:c4:84:
bb:12:0c:31:87:a7:13:ef:00:5f:3d:40:e5:e5:a7:
c5:8a:1f:a4:d5:47:a2:7d:1d:67:3b:03:a0:34:de:
fd:5b:22:a6:80:96:98:39:1d:9f:d6:e5:0b:ab:29:
39:fa:d2:a9:25:a2:99:39:45:6b:0d:fe:49:5f:1d:
51:50:65:9a:c0:54:19:70:d7:2a:1d:5c:54:8a:e1:
80:7a:e2:37:1c:7f:bc:2b:8d:f4:32:53:7d:50:b9:
28:c3:2c:56:17:9c:4d:e0:c7:78:ff:47:f2:29:e3:
55:89:71:1e:44:05:8c:7c:fe:b3:51:d1:a6:10:bf:
cc:dc:53:46:a8:ba:38:c9:a0:62:e2:bb:6e:34:64:
6e:25:d6:69:51:99:67:b4:1d:57:bb:9b:af:00:55:
68:1a:e7:84:00:00:b6:a3:3f:ca:d7:06:92:21:77:
14:fe:c0:55:21:a7:ef:c4:ea:06:35:33:80:5e:2f:
be:64:55:4a:06:02:33:bf:bd:dc:e1:0e:d4:da:84:
5f:cb:0d:8d:82:f0:53:6e:de:c8:ca:53:45:bd:d4:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1A:2F:F8:4C:0F:99:ED:43:87:C7:9D:DC:2C:57:98:59:CE:25:77
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/3134302e3234392e36342e302f31392d3139203d3e203538353430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.249.64.0/19
Signature Algorithm: sha256WithRSAEncryption
99:4c:9e:df:1b:fe:39:a4:f2:4c:57:a0:67:30:79:38:75:0a:
4f:53:0a:ed:54:d9:07:38:c7:99:f6:1b:5c:de:ad:af:65:65:
29:05:0b:4a:97:6f:1b:74:a4:3d:e2:c3:0d:7f:85:91:2f:53:
81:a3:19:fb:04:78:3c:47:2a:c3:af:a5:b6:71:55:bb:14:56:
43:3b:4c:78:70:0f:b8:86:2b:28:65:4c:8a:23:37:ba:98:df:
6d:b3:a4:2c:16:cc:1a:1d:2b:24:3f:31:60:6e:70:1e:2b:1c:
19:2d:ca:da:ca:96:6b:1f:6d:c7:09:b2:fa:22:fc:c0:d2:14:
87:95:9e:1d:92:da:6a:96:6f:f9:51:6b:44:df:d0:b0:4a:7f:
21:72:7d:53:c8:d6:a9:ee:3b:73:7d:22:f0:67:4d:f1:7e:df:
cc:bd:37:10:57:12:b3:75:2a:c4:c1:c9:23:5b:d8:0a:3f:b1:
71:af:9a:d7:27:e0:d4:16:da:51:55:84:05:fb:7e:44:b2:1a:
c6:59:32:79:39:3d:65:83:4b:3d:dc:e7:12:bd:b2:91:de:f8:
8d:85:ea:9c:63:2b:be:e1:53:fb:5a:eb:fc:35:ea:c0:36:15:
5b:43:fa:41:27:68:b3:84:94:63:bc:df:ba:38:25:f1:a1:b4:
15:ac:c7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:26:44 2026 by rpki-client