
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3233342e302f32342d3234203d3e203234313338.roa
File: 3130312e33362e3233342e302f32342d3234203d3e203234313338.roa (raw, json)
Hash identifier: XNyoCVHC5CcnIWjlIvNjXavneIYCe/yzSdrxXFuZ+8w=
Subject key identifier: 1F:CF:76:B1:F9:B4:CC:4E:25:FD:62:66:05:59:E7:39:9A:46:62:8C
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 18B920DFCB7D2FA102971F3AB1ABD8B84F3A33DC
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3233342e302f32342d3234203d3e203234313338.roa
Signing time: Tue 12 May 2026 07:03:24 +0000
ROA not before: Tue 12 May 2026 06:58:24 +0000
ROA not after: Tue 11 May 2027 07:03:24 +0000
asID: 24138
IP address blocks: 101.36.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b9:20:df:cb:7d:2f:a1:02:97:1f:3a:b1:ab:d8:b8:4f:3a:33:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 12 06:58:24 2026 GMT
Not After : May 11 07:03:24 2027 GMT
Subject: CN=1FCF76B1F9B4CC4E25FD62660559E7399A46628C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:8b:f2:34:f2:1a:8e:c3:38:82:f4:f3:9f:
75:3b:05:79:88:16:2a:d3:25:ee:41:fa:d0:85:d6:
af:8e:db:11:58:6a:c1:59:b3:cb:75:80:c0:95:4e:
51:63:9a:83:e2:64:3a:0e:82:ee:06:c1:4b:1b:2b:
90:82:9f:a8:01:4e:7a:59:73:1d:9b:7a:d9:fb:42:
2c:23:7a:0c:33:e5:b9:84:15:8b:02:c3:cc:fd:1b:
d7:e5:0a:56:65:bd:40:c7:a6:e6:0e:43:13:68:72:
1e:01:f7:0e:26:5f:df:b8:8e:60:0b:79:87:73:14:
3b:6a:db:56:de:23:0b:96:fa:b8:50:e7:e0:15:5f:
6a:76:75:8c:ad:3b:d3:d6:0c:6b:75:64:61:74:42:
92:79:af:6b:31:09:0b:f3:56:ac:5a:86:6c:6c:76:
a7:e5:94:3e:fb:b3:b2:90:49:17:05:a6:86:69:72:
5e:6c:5b:5c:65:e8:9b:41:47:45:f1:f4:20:f4:d1:
0e:f5:e2:50:87:dd:a7:a8:c1:38:7d:a4:98:eb:89:
4a:ac:8b:2e:96:5f:5e:a0:6e:43:02:a8:f1:e8:c6:
f3:4c:b8:62:c6:4f:d4:c2:c8:a5:ab:f2:4d:69:40:
97:24:4b:e9:58:11:ef:96:4c:c2:7c:2b:d0:ef:bb:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CF:76:B1:F9:B4:CC:4E:25:FD:62:66:05:59:E7:39:9A:46:62:8C
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3233342e302f32342d3234203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.36.234.0/24
Signature Algorithm: sha256WithRSAEncryption
46:33:84:fc:fe:fc:a6:60:f4:49:ae:ed:16:03:06:96:2f:20:
37:1e:ac:cf:f7:fd:82:b1:9b:0b:35:51:2a:e2:fb:97:b9:c0:
5c:50:fe:30:bd:f5:92:38:52:b2:09:5f:92:70:ba:f4:47:7d:
f0:e8:6f:93:d0:44:d0:81:6e:8c:d8:b5:17:f8:85:d1:c7:0e:
e7:98:24:4a:df:25:25:1e:72:18:d7:fc:72:dd:c0:71:0a:7c:
96:f3:b0:48:44:ae:8b:08:cf:58:a3:e7:ca:2c:e6:bc:c1:55:
fb:44:2c:db:c1:fe:f3:63:c3:0f:1e:2e:d3:70:a5:21:a8:58:
f6:b8:16:96:18:42:14:65:f5:f3:46:46:79:b3:fa:b2:56:61:
cb:b4:54:1c:34:bf:13:42:f9:61:32:92:d9:52:9c:62:ce:53:
7e:37:a6:d6:05:6e:75:ae:82:65:0c:39:8d:64:e4:f9:c1:a5:
e3:20:f7:34:58:4b:32:36:e5:79:94:1f:da:f7:63:1f:35:63:
d4:b6:c7:9a:a0:36:63:d6:2d:bd:e7:67:ba:5f:fe:d2:e7:cd:
64:12:28:67:c9:b8:1d:a1:d7:34:1e:79:ee:ca:85:1e:f6:cf:
24:ab:f9:05:7c:26:cf:ad:a1:0e:ca:18:c8:c1:c3:0e:26:c3:
c2:f3:f1:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:50:34 2026 by rpki-client