
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3234302e302f32302d3230203d3e2039383038.roa
File: 3130312e33362e3234302e302f32302d3230203d3e2039383038.roa (raw, json)
Hash identifier: zCIhnsnrV1WixIjCliroEr15Lj2DP79UWR2jFphW5xM=
Subject key identifier: 50:DE:82:67:6C:E7:EE:08:98:38:AD:72:6D:67:58:F3:6D:C0:DD:39
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 38778C36CC762A39D18173DD4A7DB3E176E52FBA
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3234302e302f32302d3230203d3e2039383038.roa
Signing time: Tue 12 May 2026 07:03:24 +0000
ROA not before: Tue 12 May 2026 06:58:24 +0000
ROA not after: Tue 11 May 2027 07:03:24 +0000
asID: 9808
IP address blocks: 101.36.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:77:8c:36:cc:76:2a:39:d1:81:73:dd:4a:7d:b3:e1:76:e5:2f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 12 06:58:24 2026 GMT
Not After : May 11 07:03:24 2027 GMT
Subject: CN=50DE82676CE7EE089838AD726D6758F36DC0DD39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:ce:78:85:08:0a:1d:8e:76:63:50:9e:9c:
cd:9b:f5:e6:e2:da:21:24:28:0e:7e:14:b5:8a:17:
1f:56:be:cf:e7:14:fb:9e:ac:72:d7:79:82:10:76:
9b:27:03:4d:b9:1c:15:a4:70:48:50:e4:93:09:32:
a0:5d:c0:92:82:81:e4:67:f5:0a:db:24:40:4e:f9:
b0:d6:b0:71:6e:10:68:c1:58:ba:1c:b0:21:35:48:
8e:d3:65:ef:a5:cd:5f:02:99:42:ae:6c:2f:61:ee:
89:2a:50:56:76:0c:b9:e6:67:0d:6c:45:03:2c:5f:
1a:ac:5c:b8:67:c3:70:43:54:59:8b:56:9e:86:c3:
f3:29:01:69:52:86:54:e7:47:06:16:35:5d:88:a5:
0d:ac:c6:74:bc:08:31:d9:32:8d:76:96:2a:2e:86:
68:6e:9f:0d:a0:f0:a9:a0:bb:90:20:03:9f:8d:8a:
e6:2a:69:6f:2d:aa:0e:17:57:03:2d:15:d7:79:62:
9f:d9:26:2c:0a:78:f3:21:4a:c2:a6:17:45:e9:3d:
14:c9:81:1f:bb:a2:bb:ef:5a:c5:ac:39:fa:d8:a6:
96:86:25:28:85:c7:ca:3e:bb:72:a4:8c:1d:6d:69:
2d:30:c8:21:3d:90:ff:29:75:97:2b:30:f6:1c:4a:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DE:82:67:6C:E7:EE:08:98:38:AD:72:6D:67:58:F3:6D:C0:DD:39
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130312e33362e3234302e302f32302d3230203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.36.240.0/20
Signature Algorithm: sha256WithRSAEncryption
33:3d:b6:a0:2c:b6:d4:87:51:cd:57:e3:7f:cc:83:76:51:b7:
a8:37:de:49:c4:82:87:83:c0:fe:b3:4f:31:f2:b3:80:c6:8a:
41:4f:ba:5b:51:c4:e3:7a:24:4c:c4:7d:42:07:b4:02:7a:7a:
22:8f:d8:e3:f3:05:12:52:80:b0:c5:3c:32:54:29:0d:0c:24:
41:c5:94:60:aa:e8:e4:90:25:6c:72:63:22:e9:78:26:b9:60:
71:c9:62:1c:ae:f3:06:54:02:c8:3f:06:cc:d6:c5:e8:fe:71:
cc:55:3f:1b:da:91:26:63:6e:fc:26:f2:cc:9b:dc:03:dc:9a:
53:ef:2b:bc:3b:11:6c:91:e6:47:f5:24:83:37:44:b7:d2:3c:
9c:a7:ca:3b:f1:29:fc:b7:4a:2a:6d:ca:95:07:dd:a6:52:f5:
78:c6:81:0b:0f:1c:96:a1:0b:b8:4e:a1:00:93:2a:ef:d7:a7:
19:83:4a:75:19:3c:b6:0f:32:3f:4c:ca:21:12:f9:a2:42:d4:
0f:11:fa:c4:91:1c:dd:27:8c:bd:b9:80:47:14:49:d8:91:91:
19:50:d5:f8:d8:ce:80:f5:9a:3c:b2:f9:17:0e:1c:b2:59:71:
09:a7:4d:68:fa:1c:ee:3a:e1:4c:01:6f:4e:0a:a3:27:1e:9a:
48:4e:e6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:47:07 2026 by rpki-client