
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3130302e302f32332d3233203d3e2034383437.roa
File: 3131392e35372e3130302e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier: Orfkkw48SSeSwjyaGj3QNBFsYJHeA1ZXh5iWXzJsxXM=
Subject key identifier: 14:4B:D8:C7:3F:51:C1:8B:90:16:FE:E1:A6:59:33:83:1D:8F:30:C2
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 22038A8B56442D82DFE09A1A6BFEA45CCEC09990
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3130302e302f32332d3233203d3e2034383437.roa
Signing time: Fri 22 May 2026 08:46:40 +0000
ROA not before: Fri 22 May 2026 08:41:40 +0000
ROA not after: Fri 21 May 2027 08:46:40 +0000
asID: 4847
IP address blocks: 119.57.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:03:8a:8b:56:44:2d:82:df:e0:9a:1a:6b:fe:a4:5c:ce:c0:99:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 22 08:41:40 2026 GMT
Not After : May 21 08:46:40 2027 GMT
Subject: CN=144BD8C73F51C18B9016FEE1A65933831D8F30C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:8f:65:4b:33:41:eb:da:36:ac:8c:2d:86:
51:40:c8:d2:5a:07:3d:21:82:70:11:ae:c9:56:fe:
f2:63:cc:dc:a9:9a:4e:63:b8:f0:dc:01:54:44:c8:
fe:f2:81:31:17:71:a5:71:d2:ed:a3:a0:66:c4:2d:
94:ce:70:cd:3b:ae:60:ac:ee:e4:69:09:8d:f5:91:
f6:86:96:49:2a:31:36:e8:3c:02:31:9f:b9:ab:fa:
16:36:8c:19:3d:17:42:d4:e7:0d:87:dd:13:75:6b:
26:2a:71:02:24:86:73:ba:8c:bf:10:1a:2a:6c:0a:
8e:61:74:65:02:09:17:dd:48:07:46:ae:d1:c3:81:
70:81:e4:00:af:df:f9:0f:3b:22:fd:12:db:98:09:
a6:f7:59:c5:96:c4:9e:ca:27:90:8b:fe:39:e3:74:
b9:54:f0:bd:17:03:6a:43:9a:09:a5:4e:ec:0d:c0:
84:37:cc:d3:4a:11:7a:d2:93:e9:2c:1f:c9:2a:b0:
41:6b:ad:f5:1b:27:6e:9a:cc:56:be:e8:b6:b7:0c:
d2:4b:5c:c7:33:95:c8:21:02:08:a8:70:90:6b:dd:
7d:19:0b:b5:21:6a:01:92:08:08:12:96:35:ff:a1:
ce:b6:cc:92:57:c4:c4:a7:2a:40:03:6c:b5:96:4c:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4B:D8:C7:3F:51:C1:8B:90:16:FE:E1:A6:59:33:83:1D:8F:30:C2
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3130302e302f32332d3233203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.57.100.0/23
Signature Algorithm: sha256WithRSAEncryption
43:17:3d:4d:f8:c8:38:05:35:b5:13:b5:cf:12:6a:ec:18:4d:
9a:46:25:4c:c7:bf:f0:20:4b:51:04:60:58:93:4c:91:cd:91:
af:f5:a7:0b:7c:41:12:16:61:9d:4c:f1:b9:a6:27:d9:63:68:
07:1c:7b:a8:f9:27:f7:08:e0:dd:bc:73:49:7b:15:34:bd:62:
a7:23:a2:2b:2a:4f:2b:60:f3:8b:18:20:ef:3c:d9:c3:68:68:
41:68:97:d6:96:aa:3a:73:99:e6:cd:e5:f3:18:b0:17:05:8e:
7e:c6:76:f9:44:99:10:5d:42:28:0e:39:df:9e:e5:4f:05:6a:
3a:8d:94:a7:71:38:e1:97:a0:b4:8e:a2:66:2f:d0:cc:43:54:
f5:b1:8b:54:78:5a:b5:e5:90:cc:a0:08:20:af:0d:76:55:69:
05:61:20:43:28:4d:bd:9f:14:ee:49:9e:e3:34:2a:a4:e2:d2:
28:e0:df:0d:9a:0f:55:4e:9a:09:dd:22:a9:9d:f8:34:50:77:
0c:c8:7e:05:42:e9:71:a7:e3:f7:9b:cd:7d:55:79:1d:0b:d0:
ba:97:db:80:c9:ff:3b:f6:ae:7b:41:2a:1f:75:5b:28:57:bb:
c3:0a:d2:fd:38:a4:d4:cd:4e:bc:17:5f:ca:28:26:d6:53:0c:
b7:17:2a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:38 2026 by rpki-client