
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e3131332e3133372e302f32342d3234203d3e20313334373030.roa
File: 3131342e3131332e3133372e302f32342d3234203d3e20313334373030.roa (raw, json)
Hash identifier: G/LaSEqR8lYWxMRlUSkbwZszetBSN3n9CeoaUsr/oxc=
Subject key identifier: F8:5A:9C:A3:DA:4F:1F:87:F2:EB:55:FD:E7:1C:92:13:E3:27:3F:9D
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 4A52852D8E3EF8E1728B43C7E95B8B600F84F071
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e3131332e3133372e302f32342d3234203d3e20313334373030.roa
Signing time: Sat 09 May 2026 08:21:20 +0000
ROA not before: Sat 09 May 2026 08:16:20 +0000
ROA not after: Sat 08 May 2027 08:21:20 +0000
asID: 134700
IP address blocks: 114.113.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:52:85:2d:8e:3e:f8:e1:72:8b:43:c7:e9:5b:8b:60:0f:84:f0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 9 08:16:20 2026 GMT
Not After : May 8 08:21:20 2027 GMT
Subject: CN=F85A9CA3DA4F1F87F2EB55FDE71C9213E3273F9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:cc:5d:38:c3:6a:92:b3:72:42:cc:2d:75:
51:4a:83:d1:ea:07:91:0e:e9:00:12:a8:07:38:a4:
67:b5:d8:2f:4a:47:06:bc:10:72:4a:f9:b1:9a:40:
11:99:20:69:36:89:ae:fe:2b:fb:51:a2:ed:a3:44:
19:43:31:eb:8b:30:33:8e:bd:64:de:d1:c6:cd:fa:
8f:8c:ae:21:e8:26:40:9b:d6:26:75:7e:1c:2b:18:
7c:0d:f1:92:bb:01:7d:c8:68:a1:48:0f:62:af:17:
fb:91:78:5f:c8:33:79:72:cf:83:df:7d:17:e2:50:
f2:be:f6:4c:c0:cb:25:a8:d7:fd:b3:b8:5d:3b:53:
f4:49:6f:3f:4b:fb:dc:7c:22:c5:c7:5e:2c:42:e5:
36:df:ff:48:4d:96:92:b3:2a:4a:31:01:e7:d7:cd:
de:30:ff:30:79:d0:38:96:0e:2a:4f:f2:87:7b:96:
34:fa:ec:d2:3c:01:24:bc:ae:77:fd:b0:37:08:83:
da:1e:93:c9:f8:cb:88:f1:48:da:cf:3a:75:f4:15:
02:78:2a:2e:0f:a9:a9:7b:33:0a:31:4f:15:d1:c7:
d6:4c:b9:73:30:1a:b6:83:0c:23:db:0d:34:22:ca:
9a:b9:f9:1b:66:5b:f4:c5:35:75:a4:49:1a:10:14:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5A:9C:A3:DA:4F:1F:87:F2:EB:55:FD:E7:1C:92:13:E3:27:3F:9D
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e3131332e3133372e302f32342d3234203d3e20313334373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.113.137.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a9:e0:43:66:cf:40:61:0e:24:36:ae:cc:98:32:37:4c:09:
40:aa:e6:56:87:99:97:d9:ea:45:54:e7:f2:c4:b4:97:b5:f8:
73:99:3d:5a:3f:be:0d:b2:e3:be:09:1e:93:bd:c4:47:c2:97:
19:3c:dd:45:cd:9e:59:18:82:d0:a8:47:77:28:ff:6f:fa:06:
2e:9b:dc:6a:2c:d8:d3:4f:f9:f6:2c:ec:db:17:80:c1:69:b5:
62:1d:94:6c:79:4d:75:9a:9a:71:17:21:0c:c2:84:16:9e:08:
53:a1:e0:aa:18:11:bb:70:21:f5:f0:9f:55:88:ae:98:92:af:
ba:b5:a6:04:1c:4d:ea:f7:b9:25:4e:4a:15:39:5f:c7:88:be:
b6:0f:51:1d:22:30:5b:a6:4c:18:8e:65:f5:d4:a9:77:f3:ca:
bc:8e:d9:13:f4:1e:09:d4:dd:cd:b1:0b:a6:1e:e5:28:8f:6a:
8c:77:22:12:14:15:3c:20:04:6c:34:a2:fc:34:ea:04:13:6e:
13:39:47:48:51:dc:52:7b:c5:2a:93:58:35:4b:fa:46:84:cb:
4f:ed:4f:ef:9c:8a:f7:bb:41:3c:fd:06:e4:10:06:d9:f3:d0:
0f:f3:e0:14:1d:1e:12:d1:ad:a2:c6:a0:94:26:29:46:6a:8e:
ad:f7:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:57:06 2026 by rpki-client