
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS58779.roa
File: AS58779.roa (raw, json)
Hash identifier: tZN8NFWk5ucqhAkuvlhTXr0GXvi0RFPK/EGNmycn4sU=
Subject key identifier: 54:C8:42:4F:A7:73:58:9C:A6:32:BB:97:32:CC:25:A4:B9:DD:E5:F2
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 06A0AB6EB7558809597838562030B384E0DF53E9
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS58779.roa
Signing time: Tue 09 Jun 2026 09:22:12 +0000
ROA not before: Tue 09 Jun 2026 09:17:12 +0000
ROA not after: Tue 08 Jun 2027 09:22:12 +0000
asID: 58779
IP address blocks: 114.112.229.0/24 maxlen: 24
114.112.245.0/24 maxlen: 24
114.112.248.0/23 maxlen: 23
114.112.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 04:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a0:ab:6e:b7:55:88:09:59:78:38:56:20:30:b3:84:e0:df:53:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: Jun 9 09:17:12 2026 GMT
Not After : Jun 8 09:22:12 2027 GMT
Subject: CN=54C8424FA773589CA632BB9732CC25A4B9DDE5F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d1:1e:e0:49:5c:3d:d5:36:5c:5d:73:8c:b7:
c5:a7:40:1c:62:3e:dc:29:00:e0:bf:bb:12:c0:8c:
61:3c:65:9a:a6:b5:90:14:22:db:3d:4f:d5:35:a6:
08:71:69:cd:ac:7e:37:12:e6:a2:79:9a:5f:6d:33:
71:e4:b4:50:49:3c:61:68:af:08:f8:ba:f3:0d:96:
49:4b:72:ad:6b:f9:03:02:e0:95:1a:fb:64:5b:6f:
3d:b5:5f:bd:2e:d6:37:11:71:6b:4c:ec:38:f4:a4:
63:86:c8:78:81:4f:52:be:d2:c2:ea:65:97:3e:c2:
3b:65:83:ce:34:ab:63:92:59:10:81:41:b3:ca:05:
81:dd:45:40:57:45:20:51:7b:1d:cf:0f:47:53:8a:
7a:3b:78:75:6e:97:bc:86:ae:cf:87:4f:a1:07:b8:
4a:c9:e1:4d:4d:0e:da:33:33:ce:d0:25:f5:e0:ee:
6b:b2:a5:e0:30:f6:f3:52:a3:8a:5c:95:a4:75:28:
66:d0:e5:d7:62:1c:46:70:0b:a6:7c:65:3d:ab:06:
2a:e7:96:52:29:55:20:ce:33:4f:c5:26:16:a0:ca:
92:73:2d:55:db:b4:43:17:24:8f:c7:25:43:e1:6d:
e2:05:a8:ab:eb:e4:5c:70:99:40:8e:51:2a:6d:f8:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C8:42:4F:A7:73:58:9C:A6:32:BB:97:32:CC:25:A4:B9:DD:E5:F2
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS58779.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.112.229.0/24
114.112.245.0/24
114.112.248.0/23
114.112.252.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:af:4c:ad:c5:be:3e:ba:4b:2e:7e:32:59:29:61:e0:6a:bc:
11:19:03:84:7f:d1:db:4d:73:b7:7c:61:cd:e9:9f:be:3d:24:
d7:6d:c2:71:7a:74:1a:76:8e:38:c9:93:a1:1c:23:22:ae:aa:
c3:0d:c5:bc:7b:74:0b:4d:c8:7f:be:6d:d6:fd:95:f2:69:db:
f5:70:37:eb:91:ed:73:da:34:06:95:94:e7:a5:d2:0a:dd:09:
93:68:47:92:e1:c7:4b:8f:27:d2:27:64:ac:bb:b9:52:f6:22:
e0:1e:1f:29:29:dc:66:4e:e5:01:30:c0:34:70:53:5d:24:e8:
f2:3c:d2:55:a8:8d:40:c8:89:30:94:f8:ec:61:d8:b0:93:80:
e1:2d:b8:73:57:4a:00:39:53:99:2b:45:9c:3d:21:cf:e7:30:
c9:8c:b5:d2:7c:4f:90:0a:b5:c5:24:25:73:01:2e:5b:4c:72:
2e:ef:f8:59:12:af:92:34:75:b4:34:fc:8d:ff:23:55:0d:80:
ec:e6:4a:f0:3b:6e:18:43:88:af:e6:e6:36:dc:a2:1a:b8:80:
b3:4b:6e:ee:92:47:0c:e6:6c:1f:65:37:6a:c4:33:54:22:6f:
cd:b7:47:c8:d7:09:e7:22:de:b5:30:71:26:53:01:db:d9:bc:
87:fa:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:42:23 2026 by rpki-client