
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130362e332e3230382e302f32312d3231203d3e2034383337.roa
File: 3130362e332e3230382e302f32312d3231203d3e2034383337.roa (raw, json)
Hash identifier: NuJ5rpj46pBkDvFHEdXvRloydTccgqM3PK+MZ0SA9Z4=
Subject key identifier: 95:CD:A9:70:C3:1E:8D:9F:1B:40:29:64:4C:C0:41:19:60:56:DC:3C
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 0B010D153643ACFC3552FAD155A5D237E9C6D608
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130362e332e3230382e302f32312d3231203d3e2034383337.roa
Signing time: Mon 11 May 2026 02:27:50 +0000
ROA not before: Mon 11 May 2026 02:22:50 +0000
ROA not after: Mon 10 May 2027 02:27:50 +0000
asID: 4837
IP address blocks: 106.3.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:01:0d:15:36:43:ac:fc:35:52:fa:d1:55:a5:d2:37:e9:c6:d6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 11 02:22:50 2026 GMT
Not After : May 10 02:27:50 2027 GMT
Subject: CN=95CDA970C31E8D9F1B4029644CC041196056DC3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:41:9c:6c:23:f9:31:0f:96:6a:0b:1d:30:
6b:f3:9b:b9:f6:7e:45:09:08:cc:26:9f:1a:03:64:
cd:18:60:9f:5d:f5:d7:7f:cd:a7:3c:d5:3a:59:78:
5d:63:ce:2d:b6:a5:91:79:e8:d8:df:85:b8:dc:a3:
16:3f:bd:9f:73:e6:93:6a:22:65:4b:da:7b:52:44:
9a:d5:ff:19:a2:46:08:51:fe:03:25:76:76:f3:27:
97:79:74:a1:8a:1c:a7:aa:5d:b0:aa:e2:65:99:da:
2a:0b:d9:0c:6a:3c:98:95:2c:de:1a:ee:b3:5f:23:
83:c6:f6:6e:e7:45:9f:3f:3f:45:3e:df:14:e1:81:
34:a0:81:2b:d3:44:34:ba:34:7f:8c:f7:c5:23:34:
1b:d0:14:a5:31:30:25:81:3a:2f:19:c8:ba:32:c4:
06:24:03:b8:e8:52:5b:96:aa:a1:d7:29:26:be:f8:
fd:f1:39:a3:ff:2d:80:8e:3e:61:1e:1f:c9:50:26:
6a:68:29:d0:c9:de:9c:ad:d9:5e:90:e3:ad:0b:cb:
11:1e:b7:a8:0a:15:b2:17:d0:d9:4f:89:9c:19:8e:
c3:ed:df:e0:c4:b4:2d:14:47:38:88:fe:62:96:de:
a7:78:29:a4:75:65:03:22:5f:64:91:48:c0:f6:6e:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CD:A9:70:C3:1E:8D:9F:1B:40:29:64:4C:C0:41:19:60:56:DC:3C
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3130362e332e3230382e302f32312d3231203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.3.208.0/21
Signature Algorithm: sha256WithRSAEncryption
81:71:c4:9f:52:29:96:76:5f:f9:d0:bb:d3:d4:20:c6:ef:e5:
92:29:7c:78:56:dc:8e:f6:8f:93:95:b6:dc:0d:27:34:98:24:
4e:db:1c:6b:fc:c3:bb:b9:02:81:1f:01:9d:8b:b5:47:a2:b7:
9a:ec:ec:30:ef:b9:90:e7:23:3b:f8:60:c9:de:13:81:72:57:
90:46:c4:ad:5d:5b:55:01:1d:25:33:63:d5:ab:e4:2e:05:73:
ca:e1:c5:47:4d:73:eb:56:48:0e:d5:4a:a8:b1:17:21:d3:46:
18:61:9b:05:02:df:1c:65:df:d0:d5:ba:f8:70:e3:38:ee:e9:
b4:af:a0:d8:9b:00:87:25:de:0b:a1:c2:2e:14:dd:c7:e9:4c:
31:dd:6e:03:65:4d:53:04:42:e0:0b:b1:19:c2:1c:b2:b7:3a:
d7:ba:df:54:de:68:a1:69:10:8d:1f:d6:90:b4:62:6a:b7:b2:
7c:af:a2:25:e9:16:8f:5b:90:f4:0f:50:58:73:48:f6:73:86:
78:77:0c:f8:f0:71:1d:6a:c1:87:3b:33:67:94:6c:2d:a1:73:
3c:75:54:9c:ab:4d:18:a2:a4:73:72:c0:dd:36:76:20:f6:d7:
f7:fd:7a:83:44:88:23:2c:89:e8:33:2d:8e:ed:d1:aa:e4:b2:
c1:72:36:35
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUCwENFTZDrPw1UvrRVaXSN+nG1ggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw
NDk1QzhDNDAeFw0yNjA1MTEwMjIyNTBaFw0yNzA1MTAwMjI3NTBaMDMxMTAvBgNV
BAMTKDk1Q0RBOTcwQzMxRThEOUYxQjQwMjk2NDRDQzA0MTE5NjA1NkRDM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKEGcbCP5MQ+WagsdMGvzm7n2
fkUJCMwmnxoDZM0YYJ9d9dd/zac81TpZeF1jzi22pZF56NjfhbjcoxY/vZ9z5pNq
ImVL2ntSRJrV/xmiRghR/gMldnbzJ5d5dKGKHKeqXbCq4mWZ2ioL2QxqPJiVLN4a
7rNfI4PG9m7nRZ8/P0U+3xThgTSggSvTRDS6NH+M98UjNBvQFKUxMCWBOi8ZyLoy
xAYkA7joUluWqqHXKSa++P3xOaP/LYCOPmEeH8lQJmpoKdDJ3pyt2V6Q460LyxEe
t6gKFbIX0NlPiZwZjsPt3+DEtC0URziI/mKW3qd4KaR1ZQMiX2SRSMD2bs+bAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUlc2pcMMejZ8bQClkTMBBGWBW3DwwHwYDVR0j
BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4
NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1LzAvMzEzMDM2MmUzMzJl
MzIzMDM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BANqA9AwDQYJKoZIhvcNAQELBQADggEBAIFxxJ9SKZZ2X/nQu9PUIMbv5ZIpfHhW
3I72j5OVttwNJzSYJE7bHGv8w7u5AoEfAZ2LtUeit5rs7DDvuZDnIzv4YMneE4Fy
V5BGxK1dW1UBHSUzY9Wr5C4Fc8rhxUdNc+tWSA7VSqixFyHTRhhhmwUC3xxl39DV
uvhw4zju6bSvoNibAIcl3guhwi4U3cfpTDHdbgNlTVMEQuALsRnCHLK3Ote631Te
aKFpEI0f1pC0Ymq3snyvoiXpFo9bkPQPUFhzSPZzhnh3DPjwcR1qwYc7M2eUbC2h
czx1VJyrTRiipHNywN02diD21/f9eoNEiCMsiegzLY7t0arkssFyNjU=
-----END CERTIFICATE-----
Generated at Wed May 13 12:06:01 2026 by rpki-client