
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33312e302f32342d3234203d3e20313333303333.roa
File: 3134302e3231302e33312e302f32342d3234203d3e20313333303333.roa (raw, json)
Hash identifier: MwmL0UXWsvkdJ0tocuTmINNcisjTXaQWpCcLTUNVxf0=
Subject key identifier: 51:31:60:04:03:F5:5A:98:D6:64:A8:AD:8B:9B:CE:F5:56:DD:D2:DE
Certificate issuer: /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial: 579CCD669E2C439213B19E1DB7CB27F6185CF906
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33312e302f32342d3234203d3e20313333303333.roa
Signing time: Mon 07 Sep 2026 06:22:42 +0000
ROA not before: Mon 07 Sep 2026 06:17:42 +0000
ROA not after: Mon 06 Sep 2027 06:22:42 +0000
asID: 133033
IP address blocks: 140.210.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 11:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:9c:cd:66:9e:2c:43:92:13:b1:9e:1d:b7:cb:27:f6:18:5c:f9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Validity
Not Before: Sep 7 06:17:42 2026 GMT
Not After : Sep 6 06:22:42 2027 GMT
Subject: CN=5131600403F55A98D664A8AD8B9BCEF556DDD2DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:d1:85:39:8c:f3:ba:f2:38:28:e9:d9:f6:
2f:5b:29:f3:fd:4c:88:d1:3e:16:22:1d:10:0b:52:
c4:f7:09:d0:f6:b4:19:7a:0e:79:a2:f7:92:ca:9c:
dc:a8:9d:92:87:1f:e8:79:96:21:1b:d0:91:10:b5:
0f:56:16:d1:98:34:48:6f:72:8a:e8:a6:ba:c9:94:
c7:4c:89:e3:14:1f:a7:5e:7b:c9:82:48:41:9b:53:
ee:a0:95:3c:dc:42:6a:c0:1b:4c:ae:7b:74:0a:ca:
09:b0:16:fe:b0:85:a7:82:dc:1b:8f:0e:99:a4:ca:
74:f6:46:c6:a4:47:10:57:27:0f:1e:0a:f9:19:6e:
92:1c:d8:91:0c:9b:8b:d5:73:da:03:8d:a1:08:6a:
c4:63:42:80:4d:08:2c:2f:ab:16:82:46:e3:e8:96:
07:53:e4:5f:99:ac:35:c9:71:7e:21:9b:39:1a:46:
46:2b:ee:f2:c1:a6:f4:96:e0:84:5b:48:db:ad:9f:
49:dd:29:b1:85:e5:90:4c:ea:8a:9a:ba:31:1d:b0:
68:ec:83:3c:af:13:1b:aa:11:4a:d1:b6:65:ab:bc:
e9:a8:48:b3:09:3d:ed:cd:3f:f5:56:01:d0:d1:5d:
48:49:91:1f:13:a3:a5:0d:08:d3:3d:09:5d:4f:3c:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:31:60:04:03:F5:5A:98:D6:64:A8:AD:8B:9B:CE:F5:56:DD:D2:DE
X509v3 Authority Key Identifier:
keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e33312e302f32342d3234203d3e20313333303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.210.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:20:1d:d2:40:12:21:5f:ae:26:8a:53:77:52:82:f4:1f:b2:
1a:02:92:e7:2a:6a:56:75:f2:c7:71:62:fe:6f:08:53:cb:1c:
85:e7:7d:97:b8:86:3d:5b:32:33:df:4b:89:3f:9b:90:fb:42:
56:6f:c3:5e:1c:45:f0:e8:3c:c7:d7:f7:ea:4e:b8:a6:6f:2b:
5e:3a:73:b7:74:b1:c6:88:fd:9f:54:b7:be:17:5e:ac:39:9d:
7d:d2:23:f2:85:0e:69:73:31:d1:95:92:2d:94:b6:3e:68:d8:
ce:4e:4b:73:3b:c6:54:eb:c9:e8:d6:4e:5e:66:e0:a8:97:3d:
07:46:86:8c:30:aa:63:fb:2c:72:4e:31:5a:97:dd:2d:26:bc:
e3:37:90:49:d3:46:60:97:0a:8b:1d:db:d6:0b:55:92:d5:52:
df:fc:be:4a:0e:c2:9e:13:37:26:46:73:cf:0c:a0:10:d1:03:
5a:5c:9f:10:29:ea:91:b6:6c:66:cc:e4:c6:a7:e4:b5:18:3f:
80:df:49:a9:7f:38:aa:07:f7:d2:77:ab:f6:0e:8f:ca:2a:36:
af:75:a6:5a:2f:02:42:9e:b5:38:dc:72:e1:50:ce:6b:78:25:
df:37:48:7b:93:3c:6f:a8:ca:0b:65:bc:f0:d7:59:3d:53:5c:
d2:92:df:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:49:45 2026 by rpki-client