
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e3131332e3133382e302f32342d3234203d3e20313334373030.roa
File: 3131342e3131332e3133382e302f32342d3234203d3e20313334373030.roa (raw, json)
Hash identifier: 6zGqoiX5FaVxrenz9FpnjYO+/e1gsOhuYE4JLa5q/OY=
Subject key identifier: F0:E6:64:84:7F:77:ED:83:AE:D3:52:6A:56:A7:67:A9:1E:07:46:23
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 65682BD4580CFFC15D6E5B9781B4A60579E2FC2F
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e3131332e3133382e302f32342d3234203d3e20313334373030.roa
Signing time: Sat 09 May 2026 08:21:20 +0000
ROA not before: Sat 09 May 2026 08:16:20 +0000
ROA not after: Sat 08 May 2027 08:21:20 +0000
asID: 134700
IP address blocks: 114.113.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:68:2b:d4:58:0c:ff:c1:5d:6e:5b:97:81:b4:a6:05:79:e2:fc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 9 08:16:20 2026 GMT
Not After : May 8 08:21:20 2027 GMT
Subject: CN=F0E664847F77ED83AED3526A56A767A91E074623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:b3:1c:50:d8:db:62:c1:14:29:c3:47:26:
6a:aa:b2:21:55:54:3f:ed:a6:b9:10:d7:82:96:59:
1b:dc:ad:64:47:22:c3:33:7b:4b:ad:12:bb:54:69:
59:e1:7c:ef:69:0e:6e:c0:51:a1:51:37:95:69:47:
0b:80:41:e3:a7:b7:56:83:52:3f:ba:89:1a:29:e6:
c6:e5:01:e8:6f:fd:da:ed:f2:20:3b:5b:a5:42:01:
db:7c:9b:21:96:d2:e1:69:6e:e1:f4:24:76:5c:f6:
86:bf:0f:7f:87:49:12:d7:f7:6e:ac:e4:b0:2b:01:
ed:fb:77:bf:ce:b3:cd:b2:16:5f:85:b9:07:22:55:
dc:92:f1:65:60:c0:73:e9:ef:4b:01:81:70:a7:19:
9e:70:d0:db:61:c6:9c:90:97:b7:e6:f5:45:81:6d:
41:0e:3f:d7:72:b4:3d:f7:a7:5c:6e:40:f7:1a:02:
7a:44:d5:1f:b5:bc:ec:4e:e3:fd:f7:b8:ee:64:88:
0a:c2:34:83:40:b5:9c:8b:0a:74:33:23:93:8e:dc:
d0:a9:9c:19:66:17:66:b1:82:a7:9a:b8:a5:fa:ad:
43:d9:db:92:cb:12:75:0f:fe:da:1c:99:5b:1a:c7:
6c:b7:e6:7f:e2:ec:ee:f3:50:36:31:e3:28:59:92:
b9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E6:64:84:7F:77:ED:83:AE:D3:52:6A:56:A7:67:A9:1E:07:46:23
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131342e3131332e3133382e302f32342d3234203d3e20313334373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.113.138.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c9:ec:ac:4a:ce:a2:66:b0:f0:b4:47:4d:60:92:45:34:37:
e8:48:30:f4:cb:92:3b:3b:ca:d6:92:e8:e1:64:ad:74:05:0a:
3f:7e:c8:1b:07:52:4f:4e:ad:ea:ba:14:1e:19:ae:a4:f4:38:
b3:6f:a1:73:97:92:86:ba:5a:3e:7a:de:7d:ad:40:c3:37:b6:
22:43:65:79:21:a3:7a:a6:0b:10:54:50:99:61:f0:f9:f9:90:
98:d4:b7:c4:a5:12:1e:f6:72:be:69:56:3b:b3:38:01:c3:d3:
0a:7f:d4:b2:3a:c0:57:f9:e1:87:5c:2c:66:ed:03:70:1b:68:
ae:8b:e3:a1:b0:91:bb:b5:df:48:0c:2a:db:0f:4f:5c:02:5b:
58:3d:cb:7c:21:81:14:d4:3c:b2:5d:18:f0:25:72:a3:9a:e2:
1e:5e:c9:35:d1:fe:05:4b:7a:e0:bf:49:54:e7:7f:3d:e3:0a:
ce:ca:9e:40:db:27:80:c1:ff:a0:87:fd:e2:4e:58:e4:4e:6f:
40:c9:fe:41:ff:62:cb:9a:2b:35:0c:59:f5:b3:e2:1b:8d:b7:
d0:8c:b1:e3:85:dc:5e:fe:37:e1:7b:ca:77:01:e3:4b:79:68:
3b:d9:50:18:39:19:1d:39:90:c0:03:ae:f6:94:a0:cc:07:81:
d1:e3:ab:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:56:46 2026 by rpki-client