
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS133929.roa
File: AS133929.roa (raw, json)
Hash identifier: fTa0KAovedpTNed8J/fTUJiQCVcEY6qA9qv3ROU1fuE=
Subject key identifier: 2A:4F:64:48:14:4E:BB:1F:8C:E9:69:59:3B:C8:AD:C7:25:D0:C0:D4
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 457FA378552249A39D2B63C89EB350D3088A0787
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS133929.roa
Signing time: Tue 09 Jun 2026 09:18:50 +0000
ROA not before: Tue 09 Jun 2026 09:13:50 +0000
ROA not after: Tue 08 Jun 2027 09:18:50 +0000
asID: 133929
IP address blocks: 114.112.232.0/24 maxlen: 24
114.112.236.0/22 maxlen: 22
114.112.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 11:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:7f:a3:78:55:22:49:a3:9d:2b:63:c8:9e:b3:50:d3:08:8a:07:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: Jun 9 09:13:50 2026 GMT
Not After : Jun 8 09:18:50 2027 GMT
Subject: CN=2A4F6448144EBB1F8CE969593BC8ADC725D0C0D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:f6:ad:3b:22:ad:c5:b8:1f:27:c2:a1:46:
d2:cd:fe:42:de:9e:33:bb:e4:96:1b:0f:13:ea:f2:
71:d2:5a:64:ab:d4:37:0a:40:0d:40:79:8b:fc:40:
94:38:99:6b:10:fa:9e:04:66:e9:96:48:ed:ea:d7:
b0:35:93:72:3c:80:db:0b:35:e4:9c:fb:a9:22:48:
c7:4b:1b:58:7b:61:b3:68:d1:cc:15:8a:72:26:e8:
56:be:1e:95:9f:90:19:ae:bb:a6:a8:76:f3:80:c1:
1e:5e:6c:6f:d6:08:82:27:79:23:41:36:8a:1b:e8:
5a:d4:54:89:ec:35:4a:4d:7c:77:81:67:4a:d2:ec:
b9:3d:e6:e1:f8:a6:20:79:de:39:45:8a:14:d6:b9:
83:77:e7:70:ef:99:8a:e5:f6:76:43:7f:ea:22:1f:
e7:92:0b:74:76:01:ee:9f:8c:59:69:98:1c:d2:e3:
0a:19:79:32:46:eb:89:9b:4c:c3:4d:78:f1:65:38:
14:c8:11:da:4c:bf:4c:49:26:c6:b3:c9:30:4b:ab:
cd:fb:18:25:77:8b:c3:06:76:6f:85:b9:83:47:9a:
9d:42:a4:c5:3a:79:93:ab:c6:ce:09:de:12:ca:4e:
ee:87:98:13:5e:1d:cc:29:96:32:9b:17:24:50:68:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4F:64:48:14:4E:BB:1F:8C:E9:69:59:3B:C8:AD:C7:25:D0:C0:D4
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS133929.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.112.232.0/24
114.112.236.0/22
Signature Algorithm: sha256WithRSAEncryption
60:c8:f6:3e:3c:28:a4:ad:c6:b4:f3:9a:7e:cf:e0:57:36:26:
b9:6a:73:e2:2f:73:a9:d4:cd:69:07:45:46:4a:ec:f7:eb:b7:
9d:28:78:a4:0c:1d:16:eb:cf:aa:01:f1:86:47:b6:e4:b0:00:
a7:88:f9:1f:34:d7:8a:65:9e:34:b7:88:d4:c8:7f:1d:78:a1:
1f:ec:48:e5:2a:34:4f:0e:53:7f:30:bb:c4:2a:db:f7:aa:d2:
b1:69:b8:75:a5:34:7b:29:95:96:e4:39:7e:55:fa:c4:73:64:
d7:9b:46:68:f2:33:5e:f2:db:a3:10:63:3d:24:e7:bc:25:2b:
ac:97:f2:0f:1b:46:97:2d:3d:ad:46:d3:e4:6c:e5:0a:5f:a2:
73:24:77:96:ad:41:52:90:ee:93:0e:69:77:a8:c8:39:f6:39:
14:52:dc:50:47:d2:77:b6:85:10:db:b3:36:52:c7:0f:fa:76:
9e:18:14:7d:dc:b5:ad:70:38:79:0a:90:c5:3c:6b:1f:9b:d0:
91:6c:dc:8f:8c:8f:55:45:b4:72:97:38:98:c1:db:0a:56:59:
f3:ee:32:ea:9a:db:90:64:66:58:7a:f6:d5:ed:60:6f:cc:35:
7c:ba:0a:23:8e:d0:cd:ff:dc:56:ff:f0:46:1d:e7:d7:63:c2:
37:a1:9e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:35 2026 by rpki-client