
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e39362e302f32322d3232203d3e2034383437.roa
File: 3131392e35372e39362e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier: 4Ow3LrsTX0Cz3p3Aq16MzwBMrNPc6SW916dR94kNWh4=
Subject key identifier: FD:28:E0:A3:CD:49:BD:E3:13:50:DC:B6:97:3A:B8:C0:BC:5B:CA:31
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 68B8759BA5F3235F093067390C2741223D56A13E
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e39362e302f32322d3232203d3e2034383437.roa
Signing time: Fri 22 May 2026 08:46:41 +0000
ROA not before: Fri 22 May 2026 08:41:41 +0000
ROA not after: Fri 21 May 2027 08:46:41 +0000
asID: 4847
IP address blocks: 119.57.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b8:75:9b:a5:f3:23:5f:09:30:67:39:0c:27:41:22:3d:56:a1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 22 08:41:41 2026 GMT
Not After : May 21 08:46:41 2027 GMT
Subject: CN=FD28E0A3CD49BDE31350DCB6973AB8C0BC5BCA31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:0b:f6:c2:2d:11:2f:aa:47:2f:ed:c7:b5:
ff:c1:2b:9e:47:d2:62:2c:6b:a3:a7:5d:fa:97:8c:
9a:29:f9:84:f8:3b:03:ba:91:a5:a7:4f:84:bd:77:
ef:d2:2d:5a:85:34:c0:c0:88:50:a3:3a:9a:0c:28:
b3:b3:2c:df:7e:70:ae:73:94:aa:ed:1c:8a:3c:fa:
0e:fa:a1:e9:15:af:71:ca:df:1d:23:a1:c1:c1:9e:
c7:55:1d:c6:d8:a3:bc:49:06:ad:2d:78:38:d0:87:
6a:76:58:f2:f2:08:9e:cf:86:f1:93:24:af:29:cc:
1b:86:3e:c6:32:7a:8b:d1:a5:12:6c:c4:92:73:7b:
6c:f4:41:02:57:6a:1c:97:64:56:ac:87:87:a8:2f:
34:3c:5d:1e:02:c1:0f:e4:63:fe:99:67:51:1d:c7:
14:b5:a2:3a:53:7d:b2:b2:15:a4:a4:29:76:e5:bf:
c2:1b:50:e6:1f:90:65:49:c5:5c:a4:1f:be:cc:f7:
5f:3d:0d:a0:81:ec:38:56:56:df:f4:52:bf:a8:ab:
0f:fd:17:70:65:b8:71:2d:ff:3a:ae:c5:40:73:a0:
3b:1e:7f:cc:9b:f2:7c:4e:56:9f:83:3f:b3:f7:80:
87:8f:1a:28:c5:39:50:46:dd:65:a2:1f:e3:bf:f8:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:28:E0:A3:CD:49:BD:E3:13:50:DC:B6:97:3A:B8:C0:BC:5B:CA:31
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e39362e302f32322d3232203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.57.96.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:7a:97:ed:f5:75:af:ae:52:4e:9d:09:63:92:e9:15:a8:fa:
28:82:53:80:e3:e6:a3:8c:47:0b:33:25:3d:81:a0:8f:f0:0d:
99:90:b3:ad:bd:7c:11:02:6a:5a:69:6f:c6:db:66:c5:1f:a1:
c9:18:75:5a:08:e0:42:7f:f3:29:e4:29:0d:e9:f4:12:2b:84:
ef:37:e2:d5:d3:a2:8f:6f:2d:e0:68:75:5d:91:f1:0c:7d:87:
02:a5:7a:43:61:4a:3a:e4:97:f7:26:e0:4c:e3:09:7c:c8:13:
4a:2f:2d:3a:f8:80:e0:b5:4b:97:04:ce:2d:01:d1:9e:6d:43:
6c:b3:40:11:ef:c7:ec:4b:7a:ec:7b:61:39:af:73:40:c6:7a:
9b:47:ce:fc:89:61:1f:9b:bb:7e:b2:b2:4a:1f:a8:42:b3:4e:
8f:ab:c0:a2:4f:96:86:36:ad:78:10:8d:c8:f2:0b:61:09:84:
c4:0d:80:7e:b8:a0:f0:12:97:75:b9:61:c2:bf:9c:bc:21:56:
04:12:84:36:c4:85:21:41:66:66:e9:3c:83:4b:45:67:e6:7b:
4b:a4:88:e4:c7:85:fc:eb:37:f1:84:b1:4e:df:ce:4f:00:16:
19:07:91:a3:13:d7:45:23:99:43:94:85:ce:eb:ba:81:cc:17:
d9:74:00:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:18 2026 by rpki-client