
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131362e3235352e3132382e302f31372d3137203d3e2034383337.roa
File: 3131362e3235352e3132382e302f31372d3137203d3e2034383337.roa (raw, json)
Hash identifier: OIQNHYoSLKIBpe7rvo4tbhbbjhiqeDEZ0gkKtToT+JM=
Subject key identifier: D5:14:27:6D:83:B8:C3:86:B4:5E:B6:6C:6F:84:10:6D:7F:35:86:C0
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 1585DA4A3345E69BB5182273378F23B544C1E5FA
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131362e3235352e3132382e302f31372d3137203d3e2034383337.roa
Signing time: Mon 13 Apr 2026 02:00:55 +0000
ROA not before: Mon 13 Apr 2026 01:55:55 +0000
ROA not after: Mon 12 Apr 2027 02:00:55 +0000
asID: 4837
IP address blocks: 116.255.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:85:da:4a:33:45:e6:9b:b5:18:22:73:37:8f:23:b5:44:c1:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: Apr 13 01:55:55 2026 GMT
Not After : Apr 12 02:00:55 2027 GMT
Subject: CN=D514276D83B8C386B45EB66C6F84106D7F3586C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5d:c4:f7:53:17:ff:82:bd:77:60:d5:9d:2b:
1d:68:0f:12:e9:3a:31:56:e6:65:5a:76:e2:5a:de:
e4:a9:3a:d4:87:cf:ad:57:a4:58:fa:b0:e0:1d:77:
39:da:5c:94:30:2b:5e:76:83:ba:3b:87:21:33:09:
ff:38:6c:e6:0d:cf:19:47:5d:35:94:5c:5b:3c:57:
3e:cb:ea:fe:d3:e3:a9:e2:f0:e5:ce:e6:a2:8b:d7:
c2:27:d5:44:f8:dd:b1:a8:f9:00:d4:79:c7:30:3f:
b3:b4:77:98:57:01:e6:92:61:71:92:a1:05:52:f8:
07:34:bf:b8:37:b3:6a:ea:5d:26:f6:11:c7:c5:c0:
e2:b8:64:68:6c:54:c1:b3:f7:af:c8:ba:f9:0d:ef:
90:a6:3a:5a:a7:69:e7:da:f5:0a:fe:3b:2b:bf:49:
1c:f9:63:5e:d0:0a:b7:61:75:f5:ba:ac:13:a2:3b:
1b:89:a0:30:6e:58:81:9d:67:d2:2e:cc:87:9e:ea:
cf:81:7c:90:78:f1:00:d7:90:53:1c:f8:65:45:53:
ab:4f:aa:1e:6b:20:2b:fe:78:ea:7f:6f:44:7f:47:
b3:56:b8:8c:b9:3a:8c:b3:df:f1:ae:b0:5a:e3:c5:
9c:45:f2:67:28:93:fe:62:77:0b:1a:21:89:18:98:
de:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:14:27:6D:83:B8:C3:86:B4:5E:B6:6C:6F:84:10:6D:7F:35:86:C0
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131362e3235352e3132382e302f31372d3137203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.255.128.0/17
Signature Algorithm: sha256WithRSAEncryption
54:5e:99:a6:28:4a:18:4c:10:99:82:fe:99:a9:83:1a:be:5f:
12:cb:59:c5:10:8b:5e:18:3f:29:70:15:70:51:87:35:72:03:
7f:d3:db:e9:fc:7a:33:20:50:1b:3b:8b:a4:e5:26:83:c6:96:
4b:f0:29:99:06:d1:87:3d:0d:a3:42:18:a7:c6:3a:f3:a6:b6:
e4:5d:b9:49:f3:e7:8d:08:08:56:48:f2:16:82:6a:92:e6:3a:
a7:1c:5b:04:90:e3:3a:a0:f2:55:71:c3:b8:41:45:39:de:71:
51:d5:ad:35:f3:d2:ac:52:01:c4:31:2c:20:5e:f2:c7:69:2c:
0c:d5:82:01:f0:97:97:ce:5e:56:da:be:11:53:02:29:c5:0e:
15:b1:d2:f5:69:8a:76:9f:7c:86:c3:ee:35:4a:61:87:ce:67:
e9:a7:bb:1c:fd:89:f8:ba:c3:80:7f:dc:94:32:86:fe:85:a1:
81:d8:3a:9f:33:c6:98:75:73:4b:97:88:bb:04:d9:aa:d3:24:
ab:a6:de:36:91:01:81:c5:91:c8:90:9a:ee:54:f1:d8:57:d1:
8b:5b:d0:d4:6d:96:b8:8f:4d:bb:0f:86:96:1f:2f:b4:f0:c7:
a7:1f:c1:5e:4a:d9:13:b1:eb:b0:73:3d:0d:eb:11:9e:53:63:
b0:f0:02:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:34 2026 by rpki-client