
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e36342e302f32302d3230203d3e2034383437.roa
File: 3131392e35372e36342e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier: XOmrKr4NRPD4TwXU2bm2nnhU6CKMS9WqR8G6s8+zEUg=
Subject key identifier: 03:49:0B:9A:6A:E3:B7:4F:96:C1:33:CE:37:9F:07:78:A7:95:A8:07
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 430B07595A30F208B6152FAE4E28CC440613DEA0
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e36342e302f32302d3230203d3e2034383437.roa
Signing time: Fri 22 May 2026 08:46:40 +0000
ROA not before: Fri 22 May 2026 08:41:40 +0000
ROA not after: Fri 21 May 2027 08:46:40 +0000
asID: 4847
IP address blocks: 119.57.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0b:07:59:5a:30:f2:08:b6:15:2f:ae:4e:28:cc:44:06:13:de:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 22 08:41:40 2026 GMT
Not After : May 21 08:46:40 2027 GMT
Subject: CN=03490B9A6AE3B74F96C133CE379F0778A795A807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:5d:31:c5:f1:06:95:8e:d9:a8:0d:23:40:
71:53:58:8b:2d:64:44:34:12:7b:0e:8e:89:d9:d7:
6d:6a:78:87:84:80:29:a5:31:37:8e:48:79:82:21:
bf:4f:96:8a:e7:23:3c:36:16:df:4a:b2:d0:f5:5e:
41:ad:15:b6:0e:d4:e9:0f:51:74:01:05:90:52:57:
8a:40:64:b1:72:25:5b:85:79:b1:28:c6:37:cc:ce:
b0:3d:3b:c9:ea:e1:f9:91:79:45:00:fa:9f:21:75:
d5:04:82:28:4d:d3:f7:ba:b8:20:65:18:f1:e1:9c:
fe:63:0c:49:1c:30:c4:af:1c:2f:0d:79:e1:9a:96:
f5:f6:b8:a3:77:0a:51:5a:f0:b8:b0:14:78:1c:35:
7f:e2:9a:3c:3d:fd:6e:12:6c:33:40:13:56:29:f8:
ab:88:c1:14:cc:17:2b:00:c3:d0:07:77:48:5d:8a:
49:c3:b5:3c:82:22:45:51:90:b5:f9:63:e5:f2:ac:
25:6e:52:a2:bb:e6:21:c7:ea:f8:4c:dd:b4:f8:c3:
0c:0a:0e:08:d0:d6:fd:a4:75:b6:71:8a:59:17:09:
92:a6:ac:37:11:30:87:80:06:6b:d8:71:e2:b5:c0:
ee:fa:17:14:73:8c:65:14:d2:3d:f0:b7:51:0b:56:
c6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:0B:9A:6A:E3:B7:4F:96:C1:33:CE:37:9F:07:78:A7:95:A8:07
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e36342e302f32302d3230203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.57.64.0/20
Signature Algorithm: sha256WithRSAEncryption
03:a8:0a:a6:5f:b7:5d:21:30:01:49:39:a7:0b:ee:83:d5:20:
94:05:df:70:98:8c:13:83:4b:a7:0e:6a:05:5c:4c:2e:e8:f1:
18:32:6e:ff:29:b3:ff:c5:65:fd:10:84:a1:01:8b:9f:3c:a1:
38:32:01:3e:2f:19:b0:d1:cc:ec:ff:5a:cf:7e:4c:db:19:27:
f6:ee:3a:89:67:1d:5f:c1:bb:df:ee:42:48:29:b2:3a:66:a1:
96:e2:65:21:b5:a3:ea:9c:4d:e5:33:9c:8f:35:a8:01:0a:03:
bb:75:0c:1d:b7:c2:5a:6d:d6:ad:6d:8b:f3:96:e7:04:05:04:
25:d2:b2:1d:e2:98:01:21:35:46:39:19:3e:56:bb:f9:fd:39:
39:47:a4:74:8b:ed:3f:e7:16:bd:fd:1e:92:70:2f:56:6a:2e:
8d:70:a2:b6:63:f1:6d:dd:58:ad:c9:ad:a6:cd:1c:4e:a0:79:
99:bd:b9:05:56:f9:1f:95:09:ea:46:3a:f7:5c:58:42:63:06:
30:4a:ac:2e:0c:0a:9f:24:a1:53:ae:48:6a:d4:8b:c3:8c:de:
49:57:ca:61:da:c9:33:29:61:09:f6:fe:3c:cf:99:29:7e:3d:
20:ca:4f:41:4b:46:48:ea:be:6f:78:a9:8f:e8:52:40:eb:2d:
cf:8e:bd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:50 2026 by rpki-client