
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e35322e302f32322d3232203d3e2034383437.roa
File: 3131392e35372e35322e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier: gpzIcYHUU9R0/DVneVRWpdQ0HNIpMD0N4QQ5dZJ6/zA=
Subject key identifier: E0:8A:11:9F:F6:BE:A4:D8:B5:CC:F1:E8:27:32:D2:23:32:2F:AB:CE
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 20752C5CD24B23CEA8B3EC3DD5EC14143CF3739B
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e35322e302f32322d3232203d3e2034383437.roa
Signing time: Fri 22 May 2026 08:46:42 +0000
ROA not before: Fri 22 May 2026 08:41:42 +0000
ROA not after: Fri 21 May 2027 08:46:42 +0000
asID: 4847
IP address blocks: 119.57.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:75:2c:5c:d2:4b:23:ce:a8:b3:ec:3d:d5:ec:14:14:3c:f3:73:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 22 08:41:42 2026 GMT
Not After : May 21 08:46:42 2027 GMT
Subject: CN=E08A119FF6BEA4D8B5CCF1E82732D223322FABCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:bd:0c:67:f4:0a:f5:20:49:83:13:7b:51:
e9:d4:5c:6c:c7:b0:21:c8:a6:32:c7:af:c7:53:96:
15:61:c4:97:57:43:20:9d:10:19:ae:34:1e:18:c9:
79:e8:71:ea:bf:57:1d:6e:f2:52:8c:0f:26:c3:77:
a0:5a:00:26:79:3d:5a:23:7c:a3:2f:a3:5d:1a:5c:
2d:22:02:f9:9a:d6:b4:f4:41:03:5b:31:09:b3:78:
02:82:88:a9:94:39:e0:6b:b5:f8:65:02:f8:a1:e4:
d6:73:9e:37:a5:84:cb:b3:ea:11:70:67:4f:12:6c:
36:64:bb:31:16:d3:e4:3b:cc:1a:38:a2:7d:bc:7a:
59:98:85:09:1b:cc:07:c8:d2:a4:82:37:56:0d:08:
a9:c5:b7:43:16:5a:d6:c5:14:b1:30:44:31:de:84:
dc:f9:15:5f:41:e3:2f:a5:d6:33:6b:f8:e6:c2:7f:
e0:e6:2c:fa:48:8c:65:9b:38:89:cc:6d:8d:fa:6d:
c5:53:16:d7:4f:ba:40:18:f9:29:18:c9:10:90:02:
96:71:d0:38:5f:a0:87:4b:dc:d1:e1:7f:b9:d1:d3:
58:2d:ec:d5:5f:fd:06:71:bb:57:66:e5:c2:81:89:
9f:2c:5b:c4:b1:5e:10:d1:d5:97:53:7f:f8:e5:b1:
3f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8A:11:9F:F6:BE:A4:D8:B5:CC:F1:E8:27:32:D2:23:32:2F:AB:CE
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e35322e302f32322d3232203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.57.52.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:07:11:4a:c1:24:72:f6:9f:dc:82:6f:30:9d:95:31:da:05:
3a:84:5c:1f:17:5e:63:66:8e:f7:0b:bd:49:ad:d3:e2:d4:ac:
20:b0:9a:86:03:c6:d5:5c:a5:48:d5:f9:51:63:56:d2:5e:57:
25:c2:3d:2c:e4:f1:b3:49:89:ea:bf:9a:70:1e:0c:5d:f8:a2:
2f:a8:25:5c:21:fa:1d:17:15:d6:d6:f9:c4:ea:dc:1e:d9:ce:
ef:91:b7:d8:5a:77:42:f7:dd:61:20:f4:ab:e1:06:d9:ce:db:
27:4c:3b:1a:72:0c:45:19:7e:61:35:1a:0e:ee:82:24:d3:4b:
4a:a9:f5:1f:4d:a2:fc:ae:a6:e0:5e:80:68:bd:97:7f:59:db:
38:f9:b5:95:7d:c2:f5:78:0c:d8:49:ab:bd:3b:1d:5c:c7:bc:
10:13:bc:32:0d:b1:08:f7:1e:93:2b:2c:03:cf:45:8f:e0:19:
f3:10:80:3e:f1:5c:68:f6:d3:46:86:54:5e:63:30:90:69:5a:
d2:ac:92:8b:52:85:2d:26:e1:63:4a:b4:9d:40:fe:2d:ff:ed:
bc:f4:1e:92:f5:c8:fd:97:02:47:d1:51:63:c1:23:da:1f:a8:
54:42:cf:5c:b7:bc:93:a0:9f:f7:00:b5:15:2b:3f:8b:72:34:
eb:4b:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:52:41 2026 by rpki-client