
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3139322e3134302e3231332e302f32342d3234203d3e203536303436.roa
File: 3139322e3134302e3231332e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: T/EeZUw2ORDaEjKaP3Xnl7oy7wqFHjiw0cOqDrXUfu8=
Subject key identifier: 3D:94:30:F7:A0:8B:41:E4:43:B3:D6:63:54:F1:39:9D:4A:76:84:74
Certificate issuer: /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial: 7B8550ED2C8391BDF05F8EA8B81B2F35E6A3A893
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3139322e3134302e3231332e302f32342d3234203d3e203536303436.roa
Signing time: Fri 12 Jun 2026 06:31:21 +0000
ROA not before: Fri 12 Jun 2026 06:26:21 +0000
ROA not after: Fri 11 Jun 2027 06:31:21 +0000
asID: 56046
IP address blocks: 192.140.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:85:50:ed:2c:83:91:bd:f0:5f:8e:a8:b8:1b:2f:35:e6:a3:a8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Validity
Not Before: Jun 12 06:26:21 2026 GMT
Not After : Jun 11 06:31:21 2027 GMT
Subject: CN=3D9430F7A08B41E443B3D66354F1399D4A768474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e7:8a:95:52:5e:57:a2:95:24:95:72:e5:7c:
d9:bb:d8:68:4d:ea:4a:bc:28:42:b0:85:36:c2:90:
c4:31:99:78:da:1a:e1:86:ae:04:a3:d4:e0:0e:52:
b7:21:58:67:42:61:85:2e:1a:8b:df:17:f5:21:86:
04:60:0b:05:46:23:2b:6e:22:c7:88:c3:0b:ab:7e:
96:ce:49:2b:28:dc:f2:f6:ce:af:58:bb:c2:1f:c9:
ad:42:e4:96:36:f3:2d:01:6e:8e:8a:15:9b:90:a9:
5f:bb:ea:48:7c:ec:00:47:34:be:45:80:69:b5:63:
82:91:c0:a6:6a:74:a0:e4:70:34:84:24:b2:6d:10:
7a:ad:a5:ac:91:ab:70:04:46:ca:98:50:a9:e2:b7:
54:74:ec:fc:79:08:a1:dc:a9:96:27:2a:5b:4e:b6:
6f:f1:86:46:de:c1:d2:b9:0a:71:59:62:97:3a:ca:
86:95:03:3e:d5:28:ab:c3:71:03:e3:f0:0b:b4:61:
c0:69:6f:98:27:4e:17:ef:03:4d:6d:31:5b:3a:e9:
9e:70:86:5b:12:a7:77:87:86:6d:a3:7d:f7:61:f1:
05:02:fe:9c:dc:d0:09:ce:ef:67:57:ac:c0:df:e5:
ed:e5:5b:b7:d2:78:f5:f1:44:8f:e5:90:90:83:38:
b8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:94:30:F7:A0:8B:41:E4:43:B3:D6:63:54:F1:39:9D:4A:76:84:74
X509v3 Authority Key Identifier:
keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3139322e3134302e3231332e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.213.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:26:7d:ea:81:6b:9d:f4:72:45:fb:a5:72:1f:26:82:b3:3d:
de:e1:10:ab:99:73:71:26:f6:e9:04:24:e0:05:ec:e5:1c:df:
64:16:38:24:9d:2d:dc:ec:d4:62:58:95:e1:1b:1e:68:b1:4b:
99:29:94:e8:3c:a1:f8:ab:d3:92:dc:56:90:20:d3:81:3f:dc:
29:da:89:06:d5:a3:b0:3f:07:13:eb:e7:c2:8b:41:11:b0:4a:
51:e7:81:7f:13:02:75:2b:1a:73:13:85:b0:a2:2a:ca:6d:ee:
0b:de:b8:31:bc:68:60:36:f5:54:c7:15:e1:4f:cb:bc:fc:79:
9b:47:5e:32:b0:a7:83:22:c4:cb:e2:99:b3:eb:a8:33:5e:bb:
98:02:1a:85:4d:a6:65:ad:f7:26:38:23:16:d1:3e:8a:b5:0f:
0b:8a:ad:67:79:7b:f8:8a:21:03:66:d9:7b:cd:20:37:69:e8:
15:f6:ce:4e:bb:25:0b:45:05:63:26:11:56:97:30:dc:2f:0c:
21:dc:0e:f6:7d:34:41:a8:e3:7d:91:40:d8:6b:ac:c5:aa:df:
10:cf:e4:ef:0e:0e:02:d7:32:4d:be:53:d2:7e:e4:db:1c:64:
5b:24:c3:a6:6c:9c:33:b3:51:d3:48:ac:cc:dc:db:dc:e6:b2:
8b:67:e5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:26:33 2026 by rpki-client