
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e36362e33322e302f31392d3139203d3e20313336313838.roa
File: 3131342e36362e33322e302f31392d3139203d3e20313336313838.roa (raw, json)
Hash identifier: X8tfx6VvzuOMYA/kUsa6wy/hmJbSO3jUFUy5DPO0MCs=
Subject key identifier: 76:D9:4A:10:5E:47:97:9D:D2:12:52:78:3C:69:D8:D1:6A:4D:1B:03
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 24A27F77C71E5C170F5B6219B93BC7E083AB1B4C
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e36362e33322e302f31392d3139203d3e20313336313838.roa
Signing time: Mon 13 Apr 2026 06:23:29 +0000
ROA not before: Mon 13 Apr 2026 06:18:29 +0000
ROA not after: Mon 12 Apr 2027 06:23:29 +0000
asID: 136188
IP address blocks: 114.66.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:a2:7f:77:c7:1e:5c:17:0f:5b:62:19:b9:3b:c7:e0:83:ab:1b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: Apr 13 06:18:29 2026 GMT
Not After : Apr 12 06:23:29 2027 GMT
Subject: CN=76D94A105E47979DD21252783C69D8D16A4D1B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:a6:83:01:50:b8:20:d1:dc:a6:d2:1a:24:
15:5d:60:db:d7:77:2a:fc:d0:42:3a:d9:7e:e6:cd:
6f:d1:78:89:f8:9d:50:30:9c:c9:67:cf:63:f5:cd:
f9:90:88:6e:39:75:3c:d3:f7:48:ab:3a:b4:d7:4f:
e4:c1:84:3f:b3:c2:d9:3c:88:cb:ec:4a:17:1c:5c:
74:6d:15:f4:4a:c7:e6:41:a4:bc:e1:ff:9f:29:dc:
ae:32:3e:d7:87:34:78:27:26:07:0c:32:58:20:51:
f8:cb:bf:92:56:71:a3:1d:33:d4:0e:b9:b4:36:a1:
2a:08:e9:fa:16:dd:0a:a0:e7:a5:e3:c7:d3:34:d1:
42:3a:67:bb:34:71:6f:4c:ad:2c:70:cb:47:c3:ee:
c9:9b:d8:28:b4:e6:a8:03:b7:e2:96:b7:92:5c:0a:
85:5f:3e:db:2b:b4:21:8e:42:cd:9f:e9:95:2c:b2:
33:aa:ad:86:a4:da:0a:e1:72:3e:80:17:17:18:69:
5f:57:ef:90:40:d1:10:24:79:3a:0d:17:f5:30:10:
12:f2:bd:89:7b:82:49:fc:c4:99:78:ae:72:e3:f1:
13:d7:fb:3f:06:6e:58:8a:9d:c2:d4:90:70:51:b1:
08:29:04:e1:c7:d5:3b:b1:33:2e:33:24:6c:8b:37:
1f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D9:4A:10:5E:47:97:9D:D2:12:52:78:3C:69:D8:D1:6A:4D:1B:03
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e36362e33322e302f31392d3139203d3e20313336313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.66.32.0/19
Signature Algorithm: sha256WithRSAEncryption
08:74:37:a4:c3:b1:b2:92:5b:8b:05:38:69:d0:87:35:de:40:
a3:63:2e:45:ad:c6:8c:9c:73:02:14:16:76:b6:ef:17:e9:21:
5b:22:f2:ac:86:b6:91:74:64:ac:94:8d:3b:5c:fc:68:2a:c0:
29:87:05:5a:cb:6b:70:be:1f:a5:8d:f5:5e:f2:c0:1c:61:7b:
d4:89:ff:e7:f7:0a:de:e8:21:0f:9e:f8:b4:d2:75:4b:0e:0d:
50:df:0a:84:cf:e9:86:5f:dc:14:38:9b:75:5e:45:6a:e0:bf:
09:09:94:7d:9c:f1:fb:64:89:5c:71:e9:c7:0e:9c:30:1b:15:
cf:8c:47:24:14:b3:68:f9:ec:82:4c:7c:b0:ed:c8:42:f5:3e:
e0:ad:6f:1a:a0:1c:91:3b:23:25:62:16:95:19:ad:3a:32:3f:
4a:c3:f5:93:8d:24:82:61:ad:26:c6:c2:d0:ab:0e:fc:d8:17:
d6:4e:fc:60:a0:17:4c:5e:e1:bc:fa:25:9e:34:0f:ba:ba:67:
b2:b6:7a:5b:3b:e7:80:cd:57:30:8e:87:d1:3e:24:03:e1:69:
61:6c:bd:4f:f9:66:dd:27:06:a8:42:f3:bc:b7:6e:4c:2a:68:
cd:5b:42:08:6c:fa:3c:18:38:c6:1a:9b:2c:40:ce:2a:30:08:
fd:3c:90:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:15 2026 by rpki-client