
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f31372d3137203d3e20313333313139.roa
File: 3130312e33362e3132382e302f31372d3137203d3e20313333313139.roa (raw, json)
Hash identifier: cPAB0XEKAYtKQ1n3gq0jLqYFta7SihWqhkcKUo59/QU=
Subject key identifier: 11:AD:CA:54:A6:E9:15:A4:DB:1C:05:BD:97:A0:55:39:EC:8B:FD:C0
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 44EFBDB89B43E521F18E0FDF2C6BA96E80B80D30
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f31372d3137203d3e20313333313139.roa
Signing time: Tue 12 May 2026 07:03:24 +0000
ROA not before: Tue 12 May 2026 06:58:24 +0000
ROA not after: Tue 11 May 2027 07:03:24 +0000
asID: 133119
IP address blocks: 101.36.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ef:bd:b8:9b:43:e5:21:f1:8e:0f:df:2c:6b:a9:6e:80:b8:0d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 12 06:58:24 2026 GMT
Not After : May 11 07:03:24 2027 GMT
Subject: CN=11ADCA54A6E915A4DB1C05BD97A05539EC8BFDC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:ea:c9:b4:eb:8b:cd:7a:b9:a1:01:63:a8:
46:33:27:c3:0d:00:c5:c4:2e:43:69:08:2e:80:d5:
e7:d9:68:7c:75:e0:27:d8:16:0e:c7:68:04:ff:e9:
c2:84:2e:7d:c9:7a:e5:b7:aa:96:47:5a:4a:ff:5d:
3c:6a:49:3e:9e:b8:0c:ef:e5:16:34:0d:3c:6c:04:
8b:ce:69:55:a5:a9:dc:72:62:82:0a:47:72:8f:94:
60:78:39:cf:aa:78:7c:6f:8e:86:62:9f:36:b3:1d:
8d:aa:27:75:20:f6:45:a7:57:7c:c5:d1:f2:87:d4:
c8:9e:4b:6b:10:1d:77:9a:46:25:40:12:76:6c:be:
f8:47:91:36:1c:3e:68:b7:fa:85:f7:0c:50:65:17:
67:1c:57:9c:93:95:dc:b7:f5:71:61:a3:71:7c:c2:
77:5b:d4:84:d0:ba:04:48:e5:ca:fe:f7:6c:e0:2b:
8c:d5:51:12:92:ce:de:28:c3:52:ba:50:ce:f5:f1:
3b:af:1d:90:bb:01:be:e8:df:a1:95:b2:56:01:8b:
b5:bc:a1:4a:70:f7:11:01:3a:63:56:2e:e2:a8:9a:
0a:89:ff:bd:18:75:69:8f:33:d0:fb:a8:5b:f2:df:
9e:a8:54:bd:a1:41:83:bb:26:94:72:20:cb:51:0a:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AD:CA:54:A6:E9:15:A4:DB:1C:05:BD:97:A0:55:39:EC:8B:FD:C0
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f31372d3137203d3e20313333313139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.36.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4f:50:05:9e:0d:4b:d4:38:97:49:55:a8:20:94:e6:16:9f:00:
32:fc:c7:18:7b:d2:36:a9:11:a2:86:1d:04:36:f4:58:24:79:
88:45:ff:ab:54:ff:34:63:4f:69:a8:68:32:f8:ae:8d:7e:1e:
50:ed:7f:a4:33:6c:c3:2f:9e:1c:ea:b6:8b:86:f3:f8:99:8a:
8b:45:5d:f9:db:1f:e0:ef:eb:59:57:01:4c:89:02:71:54:a0:
8e:02:63:d8:7c:aa:52:39:b1:78:fb:d0:5f:0e:07:6a:8b:e0:
0a:29:db:94:12:11:65:77:46:9b:74:b7:85:80:96:33:cf:1f:
c5:00:4b:63:f2:82:78:d0:df:65:af:2e:d8:ca:10:f9:5b:b6:
fb:ba:b5:ca:36:9b:8f:78:c7:b7:16:5a:5c:10:35:c2:54:19:
ea:c8:29:ec:00:7d:19:73:8e:a7:8f:25:30:01:1b:53:49:c9:
b0:c0:87:94:c1:c8:bc:d2:09:32:89:df:5b:3d:75:e9:91:a2:
eb:14:2e:d6:56:37:ce:8e:a9:66:e2:a0:50:75:a2:c0:8d:cb:
0f:dc:85:d3:2d:9d:02:ea:11:da:bd:5b:8d:b3:54:75:23:dc:
31:c4:4f:b8:2c:5b:30:ff:5f:bd:ad:af:5a:39:4b:ab:22:72:
05:ae:5d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:43:45 2026 by rpki-client