
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32392e302f32342d3234203d3e203536303436.roa
File: 3134302e3231302e32392e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: zbdC+xnhB3/Ixpwx2Mv6RIWN0NGFCnvAFUX89ZgJF5w=
Subject key identifier: DF:2E:4C:B4:27:37:39:8C:58:F8:91:0F:98:F9:30:25:8B:06:36:DF
Certificate issuer: /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial: 1C081F2B5A584CDE92D6EF9AF181475ACA111A1A
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32392e302f32342d3234203d3e203536303436.roa
Signing time: Fri 08 May 2026 01:31:07 +0000
ROA not before: Fri 08 May 2026 01:26:07 +0000
ROA not after: Fri 07 May 2027 01:31:07 +0000
asID: 56046
IP address blocks: 140.210.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:08:1f:2b:5a:58:4c:de:92:d6:ef:9a:f1:81:47:5a:ca:11:1a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Validity
Not Before: May 8 01:26:07 2026 GMT
Not After : May 7 01:31:07 2027 GMT
Subject: CN=DF2E4CB42737398C58F8910F98F930258B0636DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:95:ea:c5:e3:b9:06:7b:22:a2:47:cf:68:70:
e1:b2:b2:7f:b2:bb:df:92:9e:42:3c:e6:ef:87:58:
14:39:94:24:6d:05:88:65:c2:c3:ae:c0:d8:c0:1b:
e2:7f:cb:6a:dc:50:81:13:91:1b:cd:fe:12:20:01:
e3:32:0b:27:e8:2b:9c:cb:19:c4:22:01:af:be:8c:
6f:77:54:10:15:be:45:56:fe:19:10:f9:d2:dc:67:
11:1e:5b:0d:57:2d:c8:9b:85:23:13:dd:eb:25:f5:
f7:f2:85:fe:0a:d6:fb:f4:00:da:fb:8b:c9:86:83:
32:9e:0f:06:af:58:5c:ce:e9:f9:04:35:9d:ab:4a:
e6:9f:b0:cb:f4:2c:4b:16:00:46:66:bc:88:3b:71:
51:67:ad:84:62:86:6d:da:3e:e8:d3:95:36:86:31:
34:af:b4:a2:f1:c1:3d:c6:7a:88:72:ff:e2:65:de:
5f:65:8d:95:b3:32:fa:49:77:d7:95:75:6c:39:cf:
09:e8:c4:75:09:e9:ec:3d:df:03:1a:49:b9:da:ba:
d1:b5:e1:01:51:05:c1:84:87:61:31:fe:4e:e2:50:
e4:24:02:9f:5b:a3:a2:55:15:cf:43:15:dc:1e:4f:
b6:ba:7f:56:ec:fa:89:a7:e6:f7:bb:9f:76:2f:03:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2E:4C:B4:27:37:39:8C:58:F8:91:0F:98:F9:30:25:8B:06:36:DF
X509v3 Authority Key Identifier:
keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e32392e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.29.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:98:29:4f:64:35:6b:f9:f4:58:16:4b:e8:58:48:a4:b0:f1:
51:a0:44:62:7b:06:74:0f:70:d0:e7:49:b8:c9:40:69:e1:8d:
6c:a0:18:0f:f0:9e:36:f7:8e:23:5e:26:d0:5a:f8:48:97:a8:
d3:65:77:bc:06:2f:84:a6:cd:f3:20:98:6e:af:db:c2:df:81:
6c:0c:b1:5e:f7:78:2f:ba:6c:79:03:40:f2:3d:48:44:29:76:
65:76:e9:c0:15:c9:93:3f:14:40:7b:de:ca:d5:91:7c:0d:bf:
0e:d8:13:6f:35:33:09:8c:c5:46:e6:3e:32:07:9e:cd:92:2b:
b9:87:45:c9:61:a2:95:0b:e1:ce:7c:15:ea:01:d6:9a:d9:fb:
be:83:7b:d3:de:58:65:e6:2d:02:45:a6:f0:a4:f3:7d:98:87:
f9:f4:d4:04:c3:35:d9:91:4c:f4:24:77:27:23:11:a1:69:63:
4d:fc:63:dd:37:57:15:a8:4a:8a:e2:48:f9:0a:0f:d4:10:3a:
84:3b:c7:b7:98:64:b1:df:21:0c:03:fb:b2:64:3e:ea:4c:4f:
ef:fe:fd:80:ff:36:cb:a8:5e:b4:c0:c1:79:e8:fc:8e:bf:0d:
dc:ea:06:18:62:e8:a9:7d:4f:23:93:fd:d3:25:ac:93:af:e8:
eb:d7:47:4e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUHAgfK1pYTN6S1u+a8YFHWsoRGhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1
MUM2RjA3NzAeFw0yNjA1MDgwMTI2MDdaFw0yNzA1MDcwMTMxMDdaMDMxMTAvBgNV
BAMTKERGMkU0Q0I0MjczNzM5OEM1OEY4OTEwRjk4RjkzMDI1OEIwNjM2REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDflerF47kGeyKiR89ocOGysn+y
u9+SnkI85u+HWBQ5lCRtBYhlwsOuwNjAG+J/y2rcUIETkRvN/hIgAeMyCyfoK5zL
GcQiAa++jG93VBAVvkVW/hkQ+dLcZxEeWw1XLcibhSMT3esl9ffyhf4K1vv0ANr7
i8mGgzKeDwavWFzO6fkENZ2rSuafsMv0LEsWAEZmvIg7cVFnrYRihm3aPujTlTaG
MTSvtKLxwT3Geohy/+Jl3l9ljZWzMvpJd9eVdWw5zwnoxHUJ6ew93wMaSbnautG1
4QFRBcGEh2Ex/k7iUOQkAp9bo6JVFc9DFdweT7a6f1bs+omn5ve7n3YvAzhBAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU3y5MtCc3OYxY+JEPmPkwJYsGNt8wHwYDVR0j
BBgwFoAUHgxtQLhrLMXe/t+OQva6hFHG8HcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8xLzFFMEM2RDQwQjg2QjJDQzVERUZFREY4RTQyRjZC
QTg0NTFDNkYwNzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1MUM2RjA3Ny5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDgxNTQ4OS8xLzMxMzQzMDJlMzIz
MTMwMmUzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAIzSHTANBgkqhkiG9w0BAQsFAAOCAQEAL5gpT2Q1a/n0WBZL6FhIpLDx
UaBEYnsGdA9w0OdJuMlAaeGNbKAYD/CeNveOI14m0Fr4SJeo02V3vAYvhKbN8yCY
bq/bwt+BbAyxXvd4L7pseQNA8j1IRCl2ZXbpwBXJkz8UQHveytWRfA2/DtgTbzUz
CYzFRuY+MgeezZIruYdFyWGilQvhznwV6gHWmtn7voN7095YZeYtAkWm8KTzfZiH
+fTUBMM12ZFM9CR3JyMRoWljTfxj3TdXFahKiuJI+QoP1BA6hDvHt5hksd8hDAP7
smQ+6kxP7/79gP82y6hetMDBeej8jr8N3OoGGGLoqX1PI5P90yWsk6/o69dHTg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:36:18 2026 by rpki-client