
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3139322e3134302e3231312e302f32342d3234203d3e203536303436.roa
File: 3139322e3134302e3231312e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: mW9vnbVClbVSRDBCo3XNSd06ox9tgxipNHwNv57P+KI=
Subject key identifier: B5:14:F3:82:B1:94:59:D8:E7:E4:97:6C:5F:8B:8F:78:B0:37:B7:C9
Certificate issuer: /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial: 037AA2F196AA7EFB6C8749FD1A713D4DC8707733
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3139322e3134302e3231312e302f32342d3234203d3e203536303436.roa
Signing time: Fri 12 Jun 2026 06:31:20 +0000
ROA not before: Fri 12 Jun 2026 06:26:20 +0000
ROA not after: Fri 11 Jun 2027 06:31:20 +0000
asID: 56046
IP address blocks: 192.140.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:7a:a2:f1:96:aa:7e:fb:6c:87:49:fd:1a:71:3d:4d:c8:70:77:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Validity
Not Before: Jun 12 06:26:20 2026 GMT
Not After : Jun 11 06:31:20 2027 GMT
Subject: CN=B514F382B19459D8E7E4976C5F8B8F78B037B7C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:75:bf:eb:36:f4:43:1d:22:78:eb:73:b6:
6f:be:78:11:56:d8:1c:b4:78:f4:31:7f:d8:a2:3b:
8d:9b:e5:d1:f0:2e:be:e1:1a:ca:d3:ae:29:7e:73:
a0:f2:6c:f5:80:14:ec:71:c4:41:09:29:15:56:38:
1a:59:69:7a:a4:64:f4:da:5a:6f:bb:9b:a1:fb:82:
d0:c4:74:40:8a:02:b9:92:9e:8c:d1:6b:86:b1:61:
47:64:c1:ae:76:9f:69:ab:a4:bb:86:16:b2:f1:ac:
73:c5:13:f7:e7:77:0a:17:a3:4b:81:1b:fd:d3:24:
b6:6d:d3:1e:26:4f:58:4a:cf:da:4f:67:4e:db:ac:
52:c4:c7:2a:e3:cc:c6:4c:a1:0d:f8:e6:cc:a2:5d:
ae:87:6d:f8:ca:f1:c7:65:c5:1c:0d:fc:0b:8e:4f:
2b:e5:47:cc:1b:62:41:65:84:c8:84:48:b4:d6:75:
43:3a:46:33:46:53:9c:5e:75:d8:0c:77:ce:b1:9e:
78:61:0a:5f:31:78:1a:af:10:15:0e:3a:77:91:e8:
46:74:ba:8a:22:b0:5b:71:27:09:8f:90:ab:c6:74:
6c:c0:ed:26:60:f1:df:7a:aa:1e:5d:81:44:af:bd:
e5:df:a5:db:da:55:05:d6:82:b6:a6:46:e3:52:13:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:14:F3:82:B1:94:59:D8:E7:E4:97:6C:5F:8B:8F:78:B0:37:B7:C9
X509v3 Authority Key Identifier:
keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3139322e3134302e3231312e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.211.0/24
Signature Algorithm: sha256WithRSAEncryption
29:03:65:37:14:e1:b6:df:c1:fa:29:99:00:4f:87:dd:65:df:
7f:28:7f:3f:ee:f4:ee:59:6d:93:83:26:7f:d9:69:bc:d2:dc:
4b:eb:73:bd:dd:f0:7a:90:ef:aa:a6:e9:b1:c4:3c:80:f2:00:
32:9e:f2:d4:81:cd:20:97:06:df:72:c0:da:52:f0:aa:65:0b:
16:3b:58:73:e3:e2:3b:35:fd:87:f0:f7:5a:24:80:0a:ea:d3:
a7:2b:15:6a:bb:32:16:e0:22:97:dc:37:2d:94:f9:dc:a8:a7:
df:7c:27:be:9f:18:4d:96:30:38:c5:2f:1f:ba:64:29:42:7b:
06:4c:4a:0d:a0:38:2e:1b:27:85:f9:60:03:8d:75:f8:6d:62:
2c:86:31:e6:4f:c0:c3:62:9a:bd:b7:6c:63:06:82:d8:a9:c9:
de:28:48:7f:01:47:4d:c4:23:80:a0:ca:ff:f6:2d:2e:30:97:
a6:32:bf:2e:0f:ed:9e:00:85:ff:07:27:c4:5a:02:2a:b3:fb:
6c:09:a4:0d:f6:cc:62:f7:78:1f:ba:52:a9:bc:7b:de:f7:7c:
e7:60:ef:d2:33:29:bb:1e:54:0c:d4:47:9b:da:e0:50:c1:32:
90:86:dd:99:97:15:35:60:d8:a7:c7:7e:2f:2c:33:b3:cd:c4:
d3:95:30:9e
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUA3qi8Zaqfvtsh0n9GnE9TchwdzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI4MDY3MkFENDJBMjc5NkFGREI2Qzk5RjdGRkI2MjlF
NkEwQTRFRTAeFw0yNjA2MTIwNjI2MjBaFw0yNzA2MTEwNjMxMjBaMDMxMTAvBgNV
BAMTKEI1MTRGMzgyQjE5NDU5RDhFN0U0OTc2QzVGOEI4Rjc4QjAzN0I3QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUHW/6zb0Qx0ieOtztm++eBFW
2By0ePQxf9iiO42b5dHwLr7hGsrTril+c6DybPWAFOxxxEEJKRVWOBpZaXqkZPTa
Wm+7m6H7gtDEdECKArmSnozRa4axYUdkwa52n2mrpLuGFrLxrHPFE/fndwoXo0uB
G/3TJLZt0x4mT1hKz9pPZ07brFLExyrjzMZMoQ345syiXa6HbfjK8cdlxRwN/AuO
TyvlR8wbYkFlhMiESLTWdUM6RjNGU5xeddgMd86xnnhhCl8xeBqvEBUOOneR6EZ0
uooisFtxJwmPkKvGdGzA7SZg8d96qh5dgUSvveXfpdvaVQXWgramRuNSE1kbAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUtRTzgrGUWdjn5JdsX4uPeLA3t8kwHwYDVR0j
BBgwFoAU64BnKtQqJ5av22yZ9/+2KeagpO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODUyNjYwNzY3MDI0NzQyNS8wL0VCODA2NzJBRDQyQTI3OTZBRkRCNkM5OUY3RkZC
NjI5RTZBMEE0RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUI4MDY3MkFENDJBMjc5NkFGREI2Qzk5RjdGRkI2MjlFNkEwQTRFRS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTg1MjY2MDc2NzAyNDc0MjUvMC8zMTM5MzIyZTMx
MzQzMDJlMzIzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMCM0zANBgkqhkiG9w0BAQsFAAOCAQEAKQNlNxThtt/B+imZAE+H
3WXffyh/P+707lltk4Mmf9lpvNLcS+tzvd3wepDvqqbpscQ8gPIAMp7y1IHNIJcG
33LA2lLwqmULFjtYc+PiOzX9h/D3WiSACurTpysVarsyFuAil9w3LZT53Kin33wn
vp8YTZYwOMUvH7pkKUJ7BkxKDaA4LhsnhflgA411+G1iLIYx5k/Aw2KavbdsYwaC
2KnJ3ihIfwFHTcQjgKDK//YtLjCXpjK/Lg/tngCF/wcnxFoCKrP7bAmkDfbMYvd4
H7pSqbx73vd852Dv0jMpux5UDNRHm9rgUMEykIbdmZcVNWDYp8d+Lywzs83E05Uw
ng==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:27:16 2026 by rpki-client