
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e36342e302e302f31362d3136203d3e203233373234.roa
File: 3131342e36342e302e302f31362d3136203d3e203233373234.roa (raw, json)
Hash identifier: ZANRnKBXlDyTXKmcoo7rSWafTmCXGIiPdWf73iTpIJo=
Subject key identifier: FD:CC:38:2E:AF:C4:00:7A:E5:FC:4D:05:4B:BA:E3:D1:DA:04:36:05
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 21ABA9B14CEBAA85B3928F7AD3A7FCFC977B05BD
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e36342e302e302f31362d3136203d3e203233373234.roa
Signing time: Thu 14 May 2026 08:26:32 +0000
ROA not before: Thu 14 May 2026 08:21:32 +0000
ROA not after: Thu 13 May 2027 08:26:32 +0000
asID: 23724
IP address blocks: 114.64.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ab:a9:b1:4c:eb:aa:85:b3:92:8f:7a:d3:a7:fc:fc:97:7b:05:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 14 08:21:32 2026 GMT
Not After : May 13 08:26:32 2027 GMT
Subject: CN=FDCC382EAFC4007AE5FC4D054BBAE3D1DA043605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:9d:3e:5b:7f:75:35:33:8f:68:5c:a3:81:
7d:96:5a:29:6a:a0:68:f6:9e:38:84:1d:fa:55:42:
9a:4b:9e:cd:d7:0b:42:60:4b:34:15:5c:10:89:3b:
79:ec:99:17:66:67:b1:ee:1b:bf:84:c6:f0:40:b9:
5c:55:d4:6d:6b:fa:35:4e:19:f1:5b:b6:32:94:e6:
84:44:c2:e1:07:6a:04:1f:ad:c2:c9:a1:bb:87:27:
0c:bd:7b:63:d5:eb:ea:a3:7d:43:f8:b4:f9:0f:92:
a6:f0:7d:89:39:1f:dd:ed:bd:7f:af:34:73:cd:a8:
24:eb:a5:d0:1d:b5:a6:6d:95:00:f4:17:bb:fb:7f:
e3:ce:f3:eb:ce:57:04:df:06:82:6e:e5:c4:79:57:
f9:14:35:42:0f:f9:fc:2b:59:41:d8:df:3a:6e:07:
5b:7a:c5:70:20:fe:24:d1:86:be:84:24:89:e0:da:
2f:87:f4:8c:7a:a5:a0:f7:2d:fc:a9:1b:2a:55:54:
1c:87:11:c9:03:02:36:32:41:70:b9:a5:ad:26:f5:
0b:f2:30:9c:82:d6:3e:55:28:ad:98:cd:d4:92:2e:
c5:12:a6:8c:9e:92:87:3e:81:6d:1f:2e:84:8d:2d:
6b:ef:9b:ae:31:51:c0:2d:c2:44:b7:e8:54:f1:73:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CC:38:2E:AF:C4:00:7A:E5:FC:4D:05:4B:BA:E3:D1:DA:04:36:05
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e36342e302e302f31362d3136203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:18:d0:4f:f6:75:70:1d:2f:b1:7a:ed:5d:b1:55:2b:d1:7d:
e7:c5:b8:a3:8f:6c:df:a2:0a:07:52:97:2c:a4:44:87:ee:ab:
10:31:f0:9e:9f:96:fa:42:77:b6:63:7e:3f:9c:6c:45:f1:59:
14:f0:c2:3b:08:82:4c:78:28:36:fd:15:cf:17:68:68:74:92:
c8:06:fb:f0:e4:c8:7a:4a:4e:9e:6a:e6:56:5f:5c:56:c7:ec:
5d:51:fe:e2:1f:c6:50:b6:ba:b9:9b:10:a5:5d:1a:6c:09:f4:
42:c1:36:43:dd:c0:fc:48:4c:52:15:a9:22:51:c7:85:e0:6f:
1e:4d:b0:ac:59:a2:52:e3:e4:28:02:3e:30:44:17:77:86:e9:
b4:fc:dd:a8:79:2c:ff:6f:c9:a1:9c:50:64:bd:21:d8:66:4d:
e9:77:ee:37:1a:25:56:0d:7e:75:96:b4:e4:a5:6e:df:c3:ae:
f6:41:7f:eb:0c:30:d1:04:07:24:e4:23:56:74:00:f2:f3:e1:
0d:a9:bf:2e:99:d3:df:e6:5b:83:b4:2e:c3:0e:3c:69:d1:39:
c0:74:ba:c5:a5:dd:5b:bc:e4:8c:72:b4:0b:d9:29:c1:67:7e:
e2:52:42:06:b5:8b:ef:36:2c:90:95:a7:a9:a8:d6:c7:d7:37:
96:dd:36:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:55:53 2026 by rpki-client