
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3139302e302f32332d3233203d3e2034383437.roa
File: 3131392e35372e3139302e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier: U1MW5/T5KuG42l2clzKimPaClk5enn92c4N41yJmMSc=
Subject key identifier: 53:FB:1C:B7:D8:4F:42:DB:BB:34:AE:2B:59:4B:D5:FC:3A:8D:87:C6
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 3DB6FE4CE1822712D6193ACB4A73A305364726B6
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3139302e302f32332d3233203d3e2034383437.roa
Signing time: Fri 22 May 2026 08:49:44 +0000
ROA not before: Fri 22 May 2026 08:44:44 +0000
ROA not after: Fri 21 May 2027 08:49:44 +0000
asID: 4847
IP address blocks: 119.57.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:b6:fe:4c:e1:82:27:12:d6:19:3a:cb:4a:73:a3:05:36:47:26:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 22 08:44:44 2026 GMT
Not After : May 21 08:49:44 2027 GMT
Subject: CN=53FB1CB7D84F42DBBB34AE2B594BD5FC3A8D87C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:b0:88:8d:a9:ed:97:8e:f2:c7:d4:60:5e:
46:34:4d:d5:73:e0:43:7f:98:b4:99:dd:25:1e:f7:
76:93:1d:e6:15:5c:d9:91:1a:43:7f:be:f7:42:55:
1c:61:49:f7:22:94:4b:0d:49:01:73:d5:2a:78:44:
e9:7e:2b:b0:0b:c4:0e:c7:84:40:83:70:a4:6d:81:
c9:85:a6:54:f3:40:c5:6c:10:bf:87:aa:04:3d:01:
cb:b8:40:95:38:2b:40:ef:cc:21:ab:e7:58:8d:cb:
86:f5:6e:fd:96:15:42:a9:cb:d1:29:55:15:1e:b9:
d7:b2:30:11:c8:04:1f:36:73:0c:b9:cb:fd:e1:3a:
2e:2b:d6:ec:d0:42:f0:1f:ef:82:4c:63:ff:b9:c9:
0e:7a:17:9c:46:7b:53:fa:94:25:f2:7b:0a:08:82:
f0:8d:47:f7:e0:4c:12:c9:83:8d:f0:37:ca:00:42:
fa:32:1b:05:25:b7:a5:8a:bc:eb:b0:85:17:81:86:
fe:28:30:5b:97:b5:4d:6e:ce:02:e0:69:2b:78:25:
dc:75:30:f8:22:76:4f:f8:83:7d:87:33:ec:55:da:
98:0e:23:e0:74:da:99:47:06:d4:cf:9f:35:9f:e1:
4c:4d:c5:9e:53:4e:ab:6d:d6:e1:e8:5d:a1:fb:2c:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FB:1C:B7:D8:4F:42:DB:BB:34:AE:2B:59:4B:D5:FC:3A:8D:87:C6
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3139302e302f32332d3233203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.57.190.0/23
Signature Algorithm: sha256WithRSAEncryption
63:e4:cd:6e:ab:d9:56:87:26:ef:85:47:43:60:c0:69:82:41:
4f:7f:e5:b3:61:97:e4:a6:5e:e3:eb:5c:f4:c7:30:4f:dd:28:
98:4f:1d:30:a2:03:84:34:8c:33:1e:95:ac:89:ca:ae:50:00:
c1:15:27:f6:b5:1f:3c:8d:5e:6d:58:fd:98:b2:fc:df:d5:85:
98:3f:8e:b6:0e:3f:bc:b6:ec:ef:a1:35:0a:d8:1b:b8:6e:39:
a5:d6:eb:a4:7a:b6:c2:db:0b:1a:e9:f6:10:74:e2:68:1c:de:
bb:d1:76:ce:ca:6a:1f:e5:3c:65:9b:13:ec:74:7c:1a:c1:1d:
8e:e5:be:5e:f9:ff:23:06:bb:d3:39:6f:b3:78:9a:96:b4:6c:
62:c2:5c:06:d8:61:36:69:78:61:f7:f4:90:dc:c8:22:ad:cb:
a9:e0:c5:67:b2:f4:13:23:88:49:2d:7c:91:5c:e3:a8:f3:11:
00:78:42:4b:34:ae:49:03:d9:61:d7:18:71:ac:5a:57:63:67:
e2:19:7b:29:85:81:c0:5e:45:5d:33:72:a7:42:71:9f:a4:14:
49:08:31:62:f3:29:9c:ac:96:86:81:47:97:66:98:4c:5d:8e:
97:3f:b3:7f:9a:4a:8a:2f:92:b0:e4:a1:26:eb:ba:47:8f:a8:
83:0f:04:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:13 2026 by rpki-client