
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f31392d3139203d3e203234313338.roa
File: 3130312e33362e3132382e302f31392d3139203d3e203234313338.roa (raw, json)
Hash identifier: BomAAjm2uYC6S4qHfXq9xT3BetCinAn2qxNQqH93d+s=
Subject key identifier: 6C:2D:67:A0:6E:FA:65:24:A8:10:78:54:B8:9A:A9:85:86:7D:57:68
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 5325846EB5B2A49D9FB5F2430AB07671C3C226F5
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f31392d3139203d3e203234313338.roa
Signing time: Tue 12 May 2026 07:03:24 +0000
ROA not before: Tue 12 May 2026 06:58:24 +0000
ROA not after: Tue 11 May 2027 07:03:24 +0000
asID: 24138
IP address blocks: 101.36.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:25:84:6e:b5:b2:a4:9d:9f:b5:f2:43:0a:b0:76:71:c3:c2:26:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 12 06:58:24 2026 GMT
Not After : May 11 07:03:24 2027 GMT
Subject: CN=6C2D67A06EFA6524A8107854B89AA985867D5768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:ef:30:be:68:1d:76:ef:70:ae:e0:e2:9c:
0d:5a:50:ca:78:1c:ee:a2:be:89:de:7a:36:df:ba:
05:75:69:2b:9a:c9:83:dc:ea:bd:35:7c:69:8a:de:
f8:21:e4:a7:69:c5:8b:6e:e0:2a:1a:65:eb:8e:67:
af:0e:33:eb:88:43:ab:d4:56:93:a4:86:af:be:1e:
2d:f3:fa:29:8f:98:73:07:1f:19:85:b6:73:63:42:
69:a3:28:20:aa:0a:8d:f2:8d:27:24:78:a7:8b:aa:
9b:9b:58:4d:6c:0f:3d:37:fd:3c:97:cc:43:4f:82:
88:58:fa:fa:4e:f5:69:cb:08:f4:24:61:49:40:4f:
54:7d:8a:ba:6f:18:51:44:08:2c:33:a3:bc:12:a1:
98:8f:28:5b:5e:1a:7b:fe:40:b7:15:54:d1:86:6a:
d9:51:e0:4d:4a:76:5f:84:aa:63:22:55:db:f0:fc:
a7:87:d5:b7:5b:d7:31:7b:c2:8a:10:6a:01:4d:df:
d7:7e:e4:80:85:9c:91:44:8d:71:ab:5c:45:dc:9b:
93:81:06:73:b8:50:ec:5a:12:9e:05:48:31:36:f6:
d7:6a:b7:d1:35:92:06:b7:80:95:08:e2:d4:d5:c2:
b1:4d:67:2f:2f:15:fb:fe:53:fc:5d:4d:b1:7a:d7:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2D:67:A0:6E:FA:65:24:A8:10:78:54:B8:9A:A9:85:86:7D:57:68
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3132382e302f31392d3139203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.36.128.0/19
Signature Algorithm: sha256WithRSAEncryption
32:5f:38:24:72:ee:a5:7e:91:a1:c3:27:65:65:ae:96:9c:29:
09:03:76:22:90:da:a6:9b:30:14:3f:f5:b6:87:fa:00:d0:0a:
14:39:89:a8:cb:d6:82:a2:24:01:99:b4:9e:ee:2b:09:80:8b:
74:78:c2:f8:9c:a4:1a:d1:a4:50:20:a4:27:f9:f5:2f:c9:b0:
c7:40:8f:e5:51:c1:11:d9:bc:85:5c:79:fb:1d:79:81:3d:b1:
10:28:79:d5:4e:3e:4c:3e:c7:82:17:85:b9:42:5a:23:c8:96:
bb:98:8d:36:e5:27:d9:51:96:de:3b:41:1b:3e:44:34:ca:1a:
36:04:b1:95:c4:21:75:2f:3e:40:7c:f1:79:89:5b:41:80:ab:
50:b6:35:a8:3c:46:49:6e:38:85:fc:76:c6:52:e5:84:04:48:
c2:e7:f1:c1:7f:61:65:2b:fa:75:11:1d:a0:ac:ff:3d:5b:ca:
4b:3b:c4:aa:1f:f4:15:0b:41:2a:64:b6:ab:75:17:f8:64:be:
0f:98:66:97:dc:64:93:e4:60:5f:12:3a:6c:36:15:dd:d0:d5:
7f:af:e9:5f:8f:28:12:b9:b0:69:35:c2:de:30:21:1e:58:e9:
fb:f8:a1:55:e5:27:e9:76:6f:a1:7a:e5:4d:72:69:e2:14:a2:
d4:65:92:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:24:15 2026 by rpki-client