
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3234382e302f32312d3231203d3e2034383437.roa
File: 3131392e35372e3234382e302f32312d3231203d3e2034383437.roa (raw, json)
Hash identifier: OaS6a7Ca+4ZvlwRX2xBD/BJAdLOypZVc0C3EhjJ5iRE=
Subject key identifier: 30:B5:F2:56:92:D3:7F:2F:BA:24:15:E4:D6:0E:B2:AA:5F:A7:F3:FF
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 1E668BA32F87BD4E1A87D07A7BC696E562D0ECCE
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3234382e302f32312d3231203d3e2034383437.roa
Signing time: Fri 22 May 2026 08:49:44 +0000
ROA not before: Fri 22 May 2026 08:44:44 +0000
ROA not after: Fri 21 May 2027 08:49:44 +0000
asID: 4847
IP address blocks: 119.57.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:66:8b:a3:2f:87:bd:4e:1a:87:d0:7a:7b:c6:96:e5:62:d0:ec:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 22 08:44:44 2026 GMT
Not After : May 21 08:49:44 2027 GMT
Subject: CN=30B5F25692D37F2FBA2415E4D60EB2AA5FA7F3FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d8:f4:26:52:1d:f9:7e:f1:80:b4:1f:86:5c:
e1:52:c0:3a:6c:d6:33:d6:45:4d:eb:fc:de:c3:9b:
74:71:9d:4a:24:a0:48:eb:2c:cf:48:28:cd:4e:22:
91:07:c5:90:81:4c:0e:bf:de:08:21:47:d3:12:93:
f6:8c:dc:7e:d6:be:fd:e7:ef:12:ac:c8:45:87:f3:
a0:4b:d1:d1:00:54:42:10:30:b5:b6:39:ce:01:65:
ac:e1:60:8e:12:37:e1:00:eb:61:42:66:9d:f7:a7:
40:54:f4:bd:0a:1a:bd:29:7c:5b:b0:8b:73:5a:97:
6b:9d:cb:72:4b:b0:9e:91:68:89:e6:d6:9c:37:e2:
77:6a:f8:4e:f3:be:f4:81:fa:49:89:5d:66:0a:43:
cf:4f:86:75:0f:86:14:14:f1:72:d0:09:a4:02:98:
48:6e:5c:a8:5d:5a:8c:22:6a:3b:64:73:81:19:30:
19:a2:bd:bd:e4:29:3b:b7:1e:a6:15:fb:12:73:42:
47:bc:71:35:4a:76:15:5e:45:55:0a:26:3d:7f:bf:
7e:45:fb:8f:ba:ae:5d:ea:cc:bf:72:5e:f2:66:82:
cc:eb:7a:6b:e3:64:3a:63:e0:4d:78:88:34:45:a1:
4f:b7:5b:48:65:fd:f3:be:bc:99:14:d8:a2:e0:9a:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B5:F2:56:92:D3:7F:2F:BA:24:15:E4:D6:0E:B2:AA:5F:A7:F3:FF
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e3234382e302f32312d3231203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.57.248.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:b6:c4:ec:eb:2f:c0:43:c0:ee:7e:0f:59:a4:17:9c:c8:4a:
98:4a:82:1f:10:a9:17:de:eb:5c:12:f9:f5:6b:0a:39:95:9a:
41:61:3e:cf:b7:69:d3:f4:43:86:6b:1d:35:c5:f2:74:62:4a:
d5:4e:71:ff:55:d3:c3:84:28:73:a4:30:fd:71:05:b0:60:ae:
79:69:2a:52:31:c1:c7:e1:23:aa:90:72:35:12:3f:8d:f5:20:
7b:de:15:9f:e5:46:2d:59:64:41:7f:30:61:9d:28:c6:b4:b0:
14:47:e3:20:7d:7d:94:51:ce:a0:d7:89:b6:fc:90:b3:8f:c7:
28:0a:c9:f7:90:f8:06:8b:97:b6:6a:2c:61:ea:d9:8c:85:55:
92:ac:c8:63:a2:14:6d:2d:a3:d9:80:f9:f0:b7:e5:7b:37:6c:
7a:2b:7e:e3:38:c0:86:91:32:d0:0b:99:91:49:8e:2b:d4:01:
82:99:3d:34:bf:42:00:64:c9:1f:ab:80:78:f7:5a:d7:25:81:
ae:9e:ab:b5:e7:b0:42:22:45:8f:7d:87:b8:74:2f:d9:06:37:
3e:bd:3a:56:22:ad:fb:80:5b:8f:b4:f8:8f:8a:e1:1f:99:68:
7a:1e:86:52:11:28:a4:06:47:52:61:c1:22:ce:06:b4:ec:6f:
48:d0:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:47 2026 by rpki-client