
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3230382e302f32302d3230203d3e2039383038.roa
File: 3130312e33362e3230382e302f32302d3230203d3e2039383038.roa (raw, json)
Hash identifier: fwxf9gmSz/Su/LPsjUM66qtUICzRQb7xggIZag9HcjE=
Subject key identifier: DC:C7:34:D9:E7:7C:16:48:E3:7E:A9:40:F1:C2:64:8B:B4:4F:49:C7
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 1C0B03E26232C37D89A0B151B8EABF860CE23EC3
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3230382e302f32302d3230203d3e2039383038.roa
Signing time: Tue 12 May 2026 07:03:25 +0000
ROA not before: Tue 12 May 2026 06:58:25 +0000
ROA not after: Tue 11 May 2027 07:03:25 +0000
asID: 9808
IP address blocks: 101.36.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0b:03:e2:62:32:c3:7d:89:a0:b1:51:b8:ea:bf:86:0c:e2:3e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 12 06:58:25 2026 GMT
Not After : May 11 07:03:25 2027 GMT
Subject: CN=DCC734D9E77C1648E37EA940F1C2648BB44F49C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:0e:d7:10:49:95:68:15:37:b4:ad:fd:ec:
c5:9f:19:d5:13:13:79:62:3c:87:f0:cb:65:9b:96:
e2:67:67:d2:48:51:fd:eb:18:d9:eb:d4:f5:e0:09:
4f:40:d6:8a:78:b7:ec:3f:c9:cf:65:e8:6b:17:07:
c1:b6:c4:38:20:79:2a:7f:96:f9:b6:fb:57:96:53:
95:40:4e:08:60:86:61:74:a5:96:48:6d:fe:0f:a8:
a9:1b:1a:a0:10:05:a6:e8:58:e3:8e:20:7e:89:59:
98:5a:51:c9:0d:49:68:31:49:bf:ad:18:1d:c2:57:
4c:0a:04:4d:03:96:92:59:8e:ac:97:6b:64:95:40:
08:c2:ac:79:84:75:7b:f4:be:cd:c3:89:56:79:65:
88:e5:72:df:59:bb:31:79:c8:88:ec:c7:fc:b4:ab:
63:03:9a:c2:90:88:dc:9b:6b:39:c7:60:f6:15:fa:
f4:4c:1f:ec:36:bf:e4:f2:15:e3:0e:42:06:71:aa:
87:1a:68:88:54:9e:f0:87:59:00:ee:34:59:0b:25:
6d:10:dd:62:48:1c:00:01:ee:d9:47:7c:96:28:cc:
18:db:09:87:61:b3:52:2a:0c:f3:ca:75:7d:42:d4:
b1:90:28:42:4d:b9:a3:1d:7a:b5:4f:82:da:cb:c7:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C7:34:D9:E7:7C:16:48:E3:7E:A9:40:F1:C2:64:8B:B4:4F:49:C7
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3230382e302f32302d3230203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.36.208.0/20
Signature Algorithm: sha256WithRSAEncryption
86:92:9b:30:29:71:a8:8b:df:59:35:c8:66:3c:da:f3:a4:aa:
56:af:f9:34:30:4e:bb:ee:eb:b6:f5:b8:aa:73:e9:44:09:55:
45:e5:ec:bc:c6:85:ac:31:2e:3b:2f:6f:f7:f2:a9:b1:92:8a:
05:48:3a:ff:12:7d:36:eb:fb:7d:7b:66:82:2e:7f:5e:31:30:
90:5d:fa:f9:54:99:5a:ed:4f:2c:6b:c2:3c:6b:31:2c:ed:88:
66:cf:f5:af:16:8d:13:86:07:80:d8:d9:a6:f9:80:bb:04:03:
0d:c1:aa:a1:d1:b4:81:e3:c3:e7:1c:fc:1c:58:89:0e:eb:60:
c8:28:19:07:f0:b1:ed:63:a4:dc:d6:4c:6a:9d:7c:5f:45:a7:
d1:a6:c2:ed:55:3d:5f:c5:e0:d0:54:4d:39:50:a3:d2:13:7a:
aa:74:5c:12:fd:4c:5e:d6:1d:4e:f5:ee:be:f5:83:d6:68:f7:
54:64:6a:56:83:c8:8b:14:8a:1a:b0:31:04:e3:93:2b:7b:7d:
05:b5:cc:d8:18:e4:03:7b:09:61:f4:01:be:ae:1a:f9:b8:4c:
e9:a0:70:27:b7:56:2e:f2:c0:42:77:c7:a3:43:d0:e1:9f:1b:
52:64:37:19:15:ad:ee:04:c8:d6:a2:70:23:cf:f2:67:7e:b4:
c9:c8:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:49:56 2026 by rpki-client