
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32302e302f32342d3234203d3e203536303436.roa
File: 3134302e3231302e32302e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: fu5OX6AN2arGw+lToKsCYM0Zyg2PehN3eBycuZTpTzA=
Subject key identifier: D1:A8:60:3C:4F:46:00:12:AA:CC:19:86:04:F9:E5:C6:80:A0:CD:4E
Certificate issuer: /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial: 19F284606AE6370EA9983E7A9BF5EC88DF2770E4
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32302e302f32342d3234203d3e203536303436.roa
Signing time: Fri 08 May 2026 01:31:07 +0000
ROA not before: Fri 08 May 2026 01:26:07 +0000
ROA not after: Fri 07 May 2027 01:31:07 +0000
asID: 56046
IP address blocks: 140.210.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f2:84:60:6a:e6:37:0e:a9:98:3e:7a:9b:f5:ec:88:df:27:70:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Validity
Not Before: May 8 01:26:07 2026 GMT
Not After : May 7 01:31:07 2027 GMT
Subject: CN=D1A8603C4F460012AACC198604F9E5C680A0CD4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:1b:81:7a:6e:e2:52:2f:08:43:3a:b7:aa:
41:fa:06:a6:2a:c5:1f:1a:d8:d2:71:62:1e:34:cc:
f0:19:86:6d:59:6d:40:ed:ff:8d:1d:08:bd:64:e3:
37:8e:5c:d6:27:a9:5b:48:59:ca:f1:e0:9f:d7:a6:
1b:1e:85:81:89:0a:1d:0e:21:51:67:38:41:27:ad:
df:04:53:7e:74:bd:51:94:5a:57:e2:85:f8:fa:ae:
db:8d:2e:f4:c5:6a:1f:17:a1:d1:95:49:d0:dd:4c:
67:5f:04:9d:59:23:26:32:21:cc:a3:39:02:b0:ac:
25:57:61:22:c0:a2:85:ce:43:66:1d:11:e3:e8:47:
a4:a2:2e:d8:16:24:05:23:f1:af:e2:e7:f9:ae:52:
0c:88:3f:e4:a8:1d:a5:20:89:28:63:9a:17:35:f2:
da:6d:3e:8e:f8:d6:81:4e:56:06:7e:25:fc:76:be:
e5:d9:ee:c0:a3:73:91:d6:c3:89:76:57:e3:3b:c4:
54:71:2a:85:de:62:ac:fa:a3:d7:76:c7:56:86:88:
62:29:80:41:c3:90:df:cf:4b:8f:48:b9:05:20:58:
12:ec:c4:58:04:b9:fd:43:df:04:56:2d:1c:14:26:
01:a0:6f:1c:27:3a:cf:db:6f:37:7c:2e:bb:2c:24:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A8:60:3C:4F:46:00:12:AA:CC:19:86:04:F9:E5:C6:80:A0:CD:4E
X509v3 Authority Key Identifier:
keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32302e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:fe:c7:6a:8d:87:fb:49:8c:d2:31:2a:81:1d:b7:91:ba:7d:
35:aa:fb:85:51:e4:4d:8d:d0:fa:a5:0e:6f:49:a4:8e:96:06:
ef:db:88:10:2e:a8:13:6f:9f:4e:60:95:34:38:d1:81:c4:ed:
21:a1:0e:91:31:10:ca:65:57:95:e4:ff:26:99:9e:0c:3d:7a:
a7:d8:5f:5d:4a:95:90:ce:d2:f7:09:86:1a:22:a3:3d:c6:24:
af:87:35:94:55:dc:7d:cf:9f:dd:8e:7c:02:6f:4c:ff:63:16:
20:b2:6a:4c:88:ed:3a:35:ff:5f:6f:0d:00:17:c2:3f:89:65:
70:66:23:b6:f6:ac:75:ad:51:c8:9e:11:fd:07:0c:61:fd:03:
47:47:89:61:cc:41:80:0c:c8:aa:28:d1:9b:ef:11:f9:7a:dc:
de:66:9d:bf:b6:76:2d:72:c2:cc:f5:c9:d4:5a:90:5d:13:05:
b2:04:b9:0a:43:35:f9:26:56:ac:6f:f6:44:96:7e:59:54:1e:
04:51:21:ed:a7:05:84:94:a0:ed:f1:30:87:07:c4:05:01:11:
36:8c:d9:9d:b8:76:dd:0d:d5:b4:83:8c:cc:a2:61:fd:01:e8:
61:dd:c9:0d:9b:e8:43:59:a4:c1:f5:f7:57:7d:26:63:af:ba:
54:de:e4:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:58:34 2026 by rpki-client