
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32312e302f32342d3234203d3e203536303436.roa
File: 3134302e3231302e32312e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: l0hPko2ZXCOeA/311IA+OFAcQs7DgsvtABbBhm7khis=
Subject key identifier: A3:44:53:95:F2:89:9F:B3:68:A2:D2:03:B3:D0:22:9C:8E:C8:75:9B
Certificate issuer: /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial: 1BBD47C04F3A2C1B9EA26CA3A31770995C89DA06
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32312e302f32342d3234203d3e203536303436.roa
Signing time: Fri 08 May 2026 01:38:52 +0000
ROA not before: Fri 08 May 2026 01:33:52 +0000
ROA not after: Fri 07 May 2027 01:38:52 +0000
asID: 56046
IP address blocks: 140.210.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:bd:47:c0:4f:3a:2c:1b:9e:a2:6c:a3:a3:17:70:99:5c:89:da:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Validity
Not Before: May 8 01:33:52 2026 GMT
Not After : May 7 01:38:52 2027 GMT
Subject: CN=A3445395F2899FB368A2D203B3D0229C8EC8759B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:eb:82:88:63:bb:a4:17:a6:e8:f3:e3:ab:
cc:fd:95:28:53:3a:09:19:f2:44:13:35:00:1a:ed:
ce:7c:ec:4a:f9:9c:41:90:45:5c:fd:2f:8b:53:c1:
ce:73:69:03:08:2c:fb:68:76:2d:da:8c:99:d9:e3:
eb:a0:a0:4d:e6:0e:da:f0:ba:a0:92:ed:2f:41:f5:
ee:c9:f4:ba:75:fd:d4:05:13:f9:fc:37:50:24:68:
62:25:d7:2c:63:4d:d1:67:ff:b2:e3:bc:a6:e1:10:
17:d8:b4:d6:fc:f9:23:47:ce:02:c5:35:32:57:dd:
1c:21:0e:1f:16:9e:5f:b6:c8:2a:ef:71:7e:03:03:
d2:4f:5f:51:56:60:27:c0:fe:a9:e2:7d:c8:d2:e1:
d0:a4:96:1c:57:a3:fb:4c:06:28:e6:bc:43:2f:57:
b0:cd:35:2e:35:5e:eb:74:9f:b7:2f:13:69:68:32:
88:ef:4e:82:8d:47:72:1e:be:99:77:23:e6:b2:9a:
d1:7b:79:46:12:5f:aa:c7:d0:2a:df:8d:4a:4a:6e:
25:4d:82:52:fe:01:0d:73:85:14:54:f6:84:0d:97:
e7:50:69:15:58:32:e7:d5:eb:96:d3:7c:73:54:e5:
87:aa:bd:02:69:2b:c0:93:01:40:f2:c6:f9:9a:9a:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:44:53:95:F2:89:9F:B3:68:A2:D2:03:B3:D0:22:9C:8E:C8:75:9B
X509v3 Authority Key Identifier:
keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32312e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5e:9a:eb:2b:a0:59:2c:96:27:5b:2e:d9:dd:7a:80:5f:23:
e9:46:3f:33:c0:56:88:35:03:a7:82:11:5f:ea:c6:08:94:2d:
ee:71:fa:81:c1:c0:f5:f2:d2:a3:b6:f8:78:9c:27:d7:df:31:
d2:c6:0e:af:15:d4:ab:0c:a2:ca:92:52:b1:e0:71:85:ce:98:
40:c4:61:03:52:c1:bf:60:cc:d2:9e:66:9a:1f:cd:a9:9d:01:
e8:df:d0:1e:8f:57:26:eb:c8:03:ed:be:b6:ad:e4:b3:05:cc:
0e:27:07:63:67:67:7a:52:0d:0d:57:bd:ad:8c:b1:bf:44:4b:
ab:a6:29:ca:9f:be:b2:5f:85:28:2c:19:15:e2:37:a0:c2:57:
d5:78:f3:02:22:87:c2:0a:a7:2e:55:61:b7:e6:52:3f:f1:b7:
33:b4:40:4f:5b:4f:29:9b:fb:dc:66:59:5b:ce:5b:6a:05:b2:
9f:50:31:84:cd:c8:09:7e:e6:36:76:36:16:7d:3a:3f:bd:40:
bc:fe:97:be:88:85:15:ba:3f:e5:9e:27:fd:08:48:e3:c9:9f:
78:51:5f:1d:35:fc:a9:2b:1e:24:01:58:fd:12:24:20:b1:53:
e2:e8:36:1d:2d:3d:77:b4:f4:de:8e:ec:98:c1:d4:89:6c:e9:
b2:de:d2:e5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:13:39 2026 by rpki-client