
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3134302e302f32322d3232203d3e2034383437.roa
File: 3131392e35372e3134302e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier: y9il5G0PtDDKbm72iqJGRgFJ40Gwc3bfq8AN+aQvfug=
Subject key identifier: 1B:FE:94:EA:83:08:85:73:67:DA:D5:3D:AA:E5:D7:86:3A:7C:B1:12
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 6551A4D430496C2050801E7559952BC5D11717BC
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3134302e302f32322d3232203d3e2034383437.roa
Signing time: Fri 22 May 2026 08:49:44 +0000
ROA not before: Fri 22 May 2026 08:44:44 +0000
ROA not after: Fri 21 May 2027 08:49:44 +0000
asID: 4847
IP address blocks: 119.57.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:51:a4:d4:30:49:6c:20:50:80:1e:75:59:95:2b:c5:d1:17:17:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 22 08:44:44 2026 GMT
Not After : May 21 08:49:44 2027 GMT
Subject: CN=1BFE94EA8308857367DAD53DAAE5D7863A7CB112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:23:ea:66:3c:5e:9a:3c:f6:90:e7:16:2b:
6b:14:7d:f4:9b:39:6a:39:aa:ee:c9:c0:c1:81:52:
ab:42:b4:6e:74:34:cb:3b:14:41:8d:79:f3:0e:96:
89:f7:dd:db:35:c4:71:18:a1:8d:0c:ec:42:d7:da:
bf:15:3d:8e:78:83:a6:b4:5f:fd:b3:ef:5c:3f:b2:
56:e9:19:76:02:6f:c1:e6:ea:3d:24:ef:28:9d:53:
ea:21:ab:64:71:15:8d:4e:8a:60:bb:5f:62:60:dd:
7a:76:3a:9f:77:c8:c9:ce:82:5b:27:d1:5c:1b:b3:
e9:31:51:d4:93:6a:46:e5:ff:e1:0d:d4:c9:c6:c7:
52:21:fc:bf:5b:31:20:d3:e5:0e:7e:3f:c3:7a:80:
fa:6f:b7:0e:10:49:53:2d:cc:62:1b:90:9c:43:fb:
b1:cd:40:b3:c2:b4:ce:5c:6a:8e:3b:64:68:7d:cd:
22:fc:e8:2d:8c:3c:b9:7e:a1:24:5b:6f:5c:6c:5e:
1a:57:a3:e4:da:a0:b9:12:98:96:3b:0d:3c:d8:a7:
0b:35:9c:f1:5a:fd:05:f9:1a:85:ff:82:ce:68:dc:
c9:67:5b:d7:9f:6e:c3:9d:c7:52:7b:1e:79:ca:fd:
0e:95:bd:a2:53:41:e9:d5:af:af:d0:60:8f:d5:fe:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FE:94:EA:83:08:85:73:67:DA:D5:3D:AA:E5:D7:86:3A:7C:B1:12
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3134302e302f32322d3232203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.57.140.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:f9:c7:b7:14:ec:2d:c2:bb:be:33:40:44:46:f2:29:ec:78:
61:dd:92:48:84:96:ca:cd:a0:d8:dd:8b:7d:23:99:59:5e:f7:
33:0e:87:1b:b3:88:83:5e:49:4c:db:75:8b:d4:f0:42:b2:2d:
65:dd:40:86:d1:87:b3:27:1f:a6:2d:e5:c2:e1:30:a6:3d:bb:
af:8f:ea:06:77:9e:3d:2e:92:20:2a:d2:59:18:b3:88:23:5c:
bb:51:e4:7d:03:92:4c:a2:75:e0:d0:95:20:32:b1:03:10:95:
a7:e1:bb:6d:61:a9:0a:30:d8:ea:90:c5:eb:d1:3b:24:f9:9b:
5c:93:5b:eb:f6:4d:2c:5a:35:86:ea:79:dc:42:67:23:46:fe:
58:12:82:a7:cf:49:df:53:36:fc:ac:40:5c:12:1a:54:a5:b5:
7a:d9:31:c2:a0:ee:c5:b1:15:7a:10:52:66:e9:91:a0:57:c4:
52:15:66:e6:45:ec:04:8e:0b:83:e4:c0:9e:e7:81:61:30:b6:
46:95:f2:ef:21:cc:7f:74:04:a9:04:24:08:7e:5b:36:47:27:
ca:63:2f:13:22:d1:0a:c6:92:e9:02:28:17:52:ea:55:a8:8c:
eb:dd:58:93:83:68:b7:3a:07:71:9a:95:47:c8:6a:9a:46:4e:
64:41:be:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:47 2026 by rpki-client