
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3139322e3134302e3230392e302f32342d3234203d3e203536303436.roa
File: 3139322e3134302e3230392e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: o/jbDRDFpiMDh+cvxnXwa06On/ThcB7PeTWskezAMCY=
Subject key identifier: 58:1B:76:CC:76:FE:E2:BB:F5:B7:67:FD:F9:24:61:E3:44:0C:98:33
Certificate issuer: /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial: 4B688AD28305E2CC525422C9872223B0616BFAB5
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3139322e3134302e3230392e302f32342d3234203d3e203536303436.roa
Signing time: Fri 12 Jun 2026 06:31:20 +0000
ROA not before: Fri 12 Jun 2026 06:26:20 +0000
ROA not after: Fri 11 Jun 2027 06:31:20 +0000
asID: 56046
IP address blocks: 192.140.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:68:8a:d2:83:05:e2:cc:52:54:22:c9:87:22:23:b0:61:6b:fa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Validity
Not Before: Jun 12 06:26:20 2026 GMT
Not After : Jun 11 06:31:20 2027 GMT
Subject: CN=581B76CC76FEE2BBF5B767FDF92461E3440C9833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:44:47:e9:c0:7c:ed:2d:52:b0:3a:da:bc:
ce:fa:da:c2:6c:2c:e1:ae:3f:bd:d8:68:c7:2c:31:
0a:42:bf:e9:01:1c:34:e0:24:a0:2b:7b:a8:75:5c:
45:52:07:07:b0:4b:ca:b8:32:c4:f8:66:74:c3:78:
a5:35:e3:e7:30:93:47:e0:a6:a3:0e:dd:ee:12:0f:
52:b0:18:18:25:8d:9e:d9:c7:b0:00:26:77:66:bc:
53:8d:f9:c9:a5:2e:e2:d7:2a:60:e1:0b:02:84:27:
75:70:8c:3b:df:fd:c6:cc:c1:77:02:a2:cb:ef:73:
b2:c8:3d:e0:e9:f1:78:7d:b2:04:43:58:b0:7c:d4:
c1:f1:f6:53:f7:60:20:3f:04:4f:8d:92:d1:79:3d:
fe:3c:85:18:95:9a:34:d7:96:37:e3:b7:ea:65:48:
2c:b1:b5:d8:c7:63:95:4f:a1:5b:96:a8:81:d7:0d:
c2:fd:c3:7f:0a:30:fd:3c:c3:39:a2:53:7d:9f:02:
53:8c:af:9f:01:27:d4:6a:e5:af:14:ab:0e:a4:45:
3f:53:20:3e:4d:74:27:e0:53:e6:20:1d:6e:36:4f:
0e:85:0b:d7:cd:9f:d1:43:64:e9:ad:a7:b3:34:e0:
ea:31:ac:38:4f:9c:39:92:f3:52:43:18:ef:84:b6:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1B:76:CC:76:FE:E2:BB:F5:B7:67:FD:F9:24:61:E3:44:0C:98:33
X509v3 Authority Key Identifier:
keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3139322e3134302e3230392e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:3b:5b:16:78:5a:b3:ce:e5:fa:9e:d7:5b:70:1b:53:38:59:
fe:1f:25:bb:ed:fa:b8:50:26:a5:3f:7f:b3:58:a9:01:d4:69:
42:2b:2c:21:69:e0:89:e2:12:94:80:5f:e5:9b:0d:9f:ec:e0:
a2:f3:80:fe:01:ea:5b:2e:b7:1c:67:19:dc:83:65:28:86:0e:
98:bc:54:1c:a7:d8:49:82:0e:7a:ac:89:27:75:30:3e:29:66:
98:85:41:60:fb:20:09:46:c7:d0:81:c6:4c:e2:ba:33:8f:3f:
93:28:7e:97:44:a2:4e:6e:57:a5:2f:01:b1:32:18:dd:93:1a:
7b:a6:2c:47:9d:49:98:fe:75:d1:0b:cd:3c:6a:2d:d9:3a:9d:
af:aa:2f:13:33:27:40:88:17:88:50:ab:a4:dd:f3:3b:9a:3e:
dc:55:c5:a1:e6:3a:ed:94:36:8b:10:1d:cb:c7:aa:78:df:d7:
06:12:a6:bb:6e:7a:02:56:6a:a4:ee:31:c6:4f:b2:79:1a:3a:
2b:d3:4a:9a:8e:4a:54:32:c7:7d:13:0a:0c:3a:41:cc:aa:78:
89:8b:bc:01:8e:a2:07:07:47:21:14:2c:e0:3a:fb:42:83:ad:
36:5f:85:67:18:53:ae:f3:b3:45:27:d7:f0:0e:24:e9:a6:4a:
98:9e:12:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:26:04 2026 by rpki-client