
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/3134302e3230352e302e302f31362d3234203d3e203337393633.roa
File: 3134302e3230352e302e302f31362d3234203d3e203337393633.roa (raw, json)
Hash identifier: 4T+Ny17GQGa7oMvo1y349IVyjaqe3SnHiVL4XvhRzI8=
Subject key identifier: F4:D4:27:9A:6C:31:39:11:89:FE:C5:7E:9A:CB:E7:2D:7E:9C:5F:44
Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B
Certificate serial: 10BE1D7013DF67463D3978D4B501DB9FC02239B3
Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/3134302e3230352e302e302f31362d3234203d3e203337393633.roa
Signing time: Mon 11 May 2026 15:31:27 +0000
ROA not before: Mon 11 May 2026 15:26:27 +0000
ROA not after: Mon 10 May 2027 15:31:27 +0000
asID: 37963
IP address blocks: 140.205.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:be:1d:70:13:df:67:46:3d:39:78:d4:b5:01:db:9f:c0:22:39:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B
Validity
Not Before: May 11 15:26:27 2026 GMT
Not After : May 10 15:31:27 2027 GMT
Subject: CN=F4D4279A6C31391189FEC57E9ACBE72D7E9C5F44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:9d:af:0d:70:b1:14:31:5a:cf:ee:a0:7e:
be:1c:8f:f9:e1:d1:7c:6e:f4:3b:b4:df:c6:49:9a:
41:5f:bb:8a:24:4c:61:bd:79:a6:ff:d0:58:e8:5c:
a4:7e:b2:98:d3:ac:e8:2f:c1:90:2a:f7:16:ac:b9:
3a:ec:43:4c:c0:c5:5f:52:7b:07:01:a2:6b:08:c6:
f8:a6:44:08:08:c0:36:28:81:79:be:d3:6f:c7:5d:
ce:50:f1:62:48:d8:43:1b:98:4e:b0:1a:10:a8:0e:
c0:eb:11:69:04:fd:83:6f:48:c6:a6:35:4b:c6:07:
c6:19:8a:be:c4:01:f5:ad:a5:b0:f0:02:1e:e6:2d:
8c:88:25:72:cc:f1:b6:76:fe:5b:31:f9:db:85:17:
9c:03:9b:02:b0:b3:c8:b2:85:39:a4:ce:65:2f:15:
1f:a2:02:d6:a0:b7:b1:5d:6f:23:d2:e9:ac:65:ac:
67:29:da:46:64:df:e7:92:ca:a1:6e:50:86:ce:9d:
43:29:19:06:2f:a4:f8:ad:09:a3:66:9b:19:73:c0:
f0:76:d9:5e:d2:5a:c6:df:7d:25:a2:41:9f:9f:af:
75:8d:21:10:53:13:9f:6f:70:86:09:1e:dd:b1:69:
e9:97:ae:b3:23:5b:01:24:12:7d:2e:81:51:cb:dd:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:27:9A:6C:31:39:11:89:FE:C5:7E:9A:CB:E7:2D:7E:9C:5F:44
X509v3 Authority Key Identifier:
keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/3134302e3230352e302e302f31362d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:a5:59:d1:24:29:d2:9a:94:7d:07:9e:cc:67:bd:02:a6:e6:
e9:bd:c5:15:36:03:2b:a6:e5:78:89:1b:61:f2:d5:65:fa:91:
1c:44:18:be:3e:71:e2:ec:9d:2e:33:93:46:ec:e3:95:b4:6c:
35:90:2d:62:0f:12:ba:2a:90:3a:a8:b8:4f:7b:5f:f0:22:14:
56:45:e0:4f:92:68:77:39:ca:59:c8:98:ca:8f:bc:94:34:4e:
0f:ca:bd:ed:c5:75:9f:64:ba:49:50:28:3d:84:b7:82:8f:08:
52:ed:06:1b:40:3c:7d:02:fd:12:ab:92:18:9a:97:54:fd:67:
bc:b6:a6:13:15:87:c4:db:a6:cc:50:2d:78:9b:ca:81:e3:f0:
57:f2:97:06:ab:c3:e5:89:48:e4:39:62:85:a1:23:82:ef:f2:
a0:53:e2:57:da:54:48:dd:c1:3c:a0:cf:fb:27:b8:2f:bd:b3:
7c:21:67:16:ff:42:37:82:2e:e4:d3:e9:8f:d1:00:17:18:ac:
48:3f:5d:3b:03:19:a5:21:d9:73:5f:23:1d:69:7b:5e:67:00:
43:e0:51:52:b4:e5:29:63:2a:20:87:15:d0:85:06:b0:33:db:
d1:24:91:55:ff:cb:72:bf:35:be:76:2c:a8:5f:54:04:d8:ce:
a6:71:8d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:08 2026 by rpki-client