
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32342e302f32342d3234203d3e203536303436.roa
File: 3134302e3231302e32342e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: 6J4cWkIKyL6J/8jYbqzVFC7+9rZoe2tTz1LY59VYxLU=
Subject key identifier: B1:2D:5E:C1:46:A0:1D:2C:1B:78:63:AA:92:2A:05:F3:97:2F:E2:98
Certificate issuer: /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial: 64DAB3785AB3D8DA7FD6E7C5954CBF761CB4E7B7
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32342e302f32342d3234203d3e203536303436.roa
Signing time: Wed 22 Apr 2026 05:16:28 +0000
ROA not before: Wed 22 Apr 2026 05:11:28 +0000
ROA not after: Wed 21 Apr 2027 05:16:28 +0000
asID: 56046
IP address blocks: 140.210.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:da:b3:78:5a:b3:d8:da:7f:d6:e7:c5:95:4c:bf:76:1c:b4:e7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Validity
Not Before: Apr 22 05:11:28 2026 GMT
Not After : Apr 21 05:16:28 2027 GMT
Subject: CN=B12D5EC146A01D2C1B7863AA922A05F3972FE298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:5f:da:f6:7f:16:e2:61:f3:76:c3:66:63:
ed:a0:ae:29:21:60:db:95:a2:cb:77:5a:90:df:b0:
b3:5d:01:6b:99:ca:95:93:80:48:e0:c2:0a:d2:4c:
70:89:4b:20:f1:4a:81:e7:97:28:9e:f0:63:c6:80:
d1:2b:92:e5:46:f3:57:95:bc:03:67:f3:fb:27:86:
ab:60:a0:c4:aa:eb:dd:59:ae:32:21:3b:0d:f4:71:
2d:b7:03:57:19:64:7a:1a:8b:4d:89:c5:14:9a:6a:
d8:94:61:b3:10:d7:53:0b:a8:1c:27:75:b0:4a:f9:
a4:a9:11:c3:84:5b:ac:3b:fb:0b:8f:1d:1a:d7:d6:
35:26:2c:16:60:77:ca:1e:e1:9e:e3:05:6d:97:d0:
6f:2e:db:85:14:ad:b4:66:43:5c:f3:f3:18:b2:c7:
31:15:0e:c8:7f:fd:c4:b0:65:4e:3a:4b:23:e2:43:
ed:fb:ef:6b:ac:e5:d8:16:af:56:7f:fe:a2:87:8b:
a0:14:bc:2d:90:81:d9:9d:7c:32:fd:2d:24:a4:b3:
41:6a:c7:48:ac:de:08:c4:a3:e4:e4:f9:d8:f5:99:
da:79:64:c7:2f:0d:b2:39:db:68:d3:04:8d:1b:6b:
5d:56:07:bb:e3:f7:6d:1e:7f:69:d2:93:4d:0c:65:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2D:5E:C1:46:A0:1D:2C:1B:78:63:AA:92:2A:05:F3:97:2F:E2:98
X509v3 Authority Key Identifier:
keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32342e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.24.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8c:df:d3:ea:51:b3:7c:1b:be:f4:4b:24:ce:dc:1d:99:00:
4c:de:e6:62:4b:38:28:ef:5a:1d:6e:78:f0:e3:de:8d:ee:81:
e6:5c:fc:df:cf:91:f9:14:9e:d8:44:95:83:fb:c5:25:c4:13:
9f:fb:0d:c2:35:03:b2:39:d0:33:a2:36:06:5c:fc:ca:ea:e3:
17:39:6e:8f:40:35:b0:61:25:32:f2:95:7c:b4:e8:2d:15:f1:
10:7c:70:aa:9d:f2:57:6c:4a:e1:b6:13:c2:f9:37:54:f8:eb:
a6:d6:b9:54:3d:cc:3d:21:68:1c:4b:a6:c8:e2:1f:55:92:0f:
ef:ec:d9:6c:05:36:e2:5d:14:6a:1e:9d:ea:ba:ab:e0:97:d8:
23:fa:95:fc:0c:d0:b2:84:bd:3a:ff:ea:2b:54:79:12:16:81:
42:72:fe:81:84:38:49:fa:5a:58:44:b2:e1:66:ed:f4:c6:83:
2c:d2:83:97:cd:47:12:e0:ac:27:26:4d:96:9f:30:af:73:d7:
2b:09:03:aa:92:13:1b:a2:a2:28:41:b9:94:b9:30:e8:26:87:
1e:56:a1:bf:f7:24:5a:b1:be:bb:25:73:79:91:77:39:1b:1c:
4f:77:cf:44:e2:86:7e:9c:36:84:b2:63:b6:9f:e6:ca:4e:d1:
29:67:4d:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 06:58:20 2026 by rpki-client