
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e37392e3133312e302f32342d3234203d3e203338333634.roa
File: 3132312e37392e3133312e302f32342d3234203d3e203338333634.roa (raw, json)
Hash identifier: 7cFDUlg60bMIW9jFfm3UZtdUvZh+bsri/rVFuEb0oDI=
Subject key identifier: D0:6D:DC:60:19:7B:6A:95:97:3F:41:5F:B6:D9:DE:9A:73:29:FA:BB
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 7902EDF1B8BB586A1F51FE740D2D7C990B2C6C66
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e37392e3133312e302f32342d3234203d3e203338333634.roa
Signing time: Tue 12 May 2026 02:51:55 +0000
ROA not before: Tue 12 May 2026 02:46:55 +0000
ROA not after: Tue 11 May 2027 02:51:55 +0000
asID: 38364
IP address blocks: 121.79.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:02:ed:f1:b8:bb:58:6a:1f:51:fe:74:0d:2d:7c:99:0b:2c:6c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 12 02:46:55 2026 GMT
Not After : May 11 02:51:55 2027 GMT
Subject: CN=D06DDC60197B6A95973F415FB6D9DE9A7329FABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:41:fa:8f:51:f9:3f:34:0d:13:f7:c7:1d:
47:54:4e:b9:f6:a0:87:d2:2f:d6:6d:12:0e:3e:89:
6e:40:1a:86:6a:ff:cd:5a:e3:fc:5c:65:85:62:d3:
74:fb:c0:e8:10:79:0f:a9:68:4a:d6:4f:12:7c:6d:
28:d9:e3:44:81:64:90:7e:92:7d:b1:67:60:c0:d5:
0b:71:a5:3c:92:2b:3b:a3:bb:a8:9c:82:5d:45:20:
46:f6:0c:c8:1c:41:05:6e:90:7a:d9:fd:bc:ba:2e:
96:c9:b6:8b:18:86:89:3d:fb:c9:68:91:96:ef:d3:
0c:91:05:e4:0b:c6:79:17:0d:20:ff:c5:82:d5:85:
8c:55:de:09:a9:99:f0:2a:da:dc:48:48:b5:a2:86:
d4:00:69:98:72:28:80:e1:d0:38:88:1f:df:90:cf:
d5:47:4d:f9:cd:27:47:d5:ca:62:a4:28:32:40:97:
8d:73:63:46:27:21:e0:2a:62:bc:69:24:17:46:32:
1e:a6:c9:07:bf:18:18:3b:60:02:48:02:5a:86:e3:
fc:53:80:2c:d7:a3:be:96:59:e7:06:b2:f5:af:e2:
61:f0:bb:8a:1e:98:bb:31:12:32:43:96:c6:fa:a1:
14:e8:47:38:d4:4d:16:4b:a6:c8:15:90:3c:a7:97:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6D:DC:60:19:7B:6A:95:97:3F:41:5F:B6:D9:DE:9A:73:29:FA:BB
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e37392e3133312e302f32342d3234203d3e203338333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.79.131.0/24
Signature Algorithm: sha256WithRSAEncryption
12:5b:05:44:9d:7f:52:dd:fb:63:b3:4f:75:81:fd:65:d2:41:
02:71:4d:c9:a7:d8:00:4b:18:7b:19:86:65:77:60:84:08:d8:
22:b7:6b:2b:79:e4:97:6b:08:2e:be:af:da:a6:3e:c4:a8:a3:
9f:26:3c:03:ef:c4:23:93:87:20:bb:3c:11:0a:d4:aa:a6:a8:
0e:4a:cb:6a:9e:98:74:64:62:78:0b:60:f2:30:06:dc:5e:a2:
9c:6a:dc:ba:7f:f1:ed:7c:52:fe:0e:4d:bb:6d:29:b3:ba:a3:
c1:80:36:f1:67:5d:a7:bf:f7:70:6d:41:73:69:9e:09:cf:86:
d2:0f:e5:5e:4d:32:d0:00:4c:60:81:cc:d3:d8:1e:5d:ea:7e:
dc:b3:ec:18:0b:d7:3f:fc:bb:13:8e:a6:09:fc:21:7f:97:01:
8b:e0:c6:21:de:2c:76:a1:ac:5a:db:48:94:4e:a3:78:dd:19:
58:79:18:99:44:de:36:ab:97:f8:f1:31:6f:8d:97:2f:53:95:
14:15:9c:c9:67:cd:91:a2:ab:13:b3:6c:b8:40:cb:6a:df:6d:
2b:a7:3e:01:ee:b5:f6:79:5b:54:58:5e:29:e5:21:1e:38:37:
9d:ab:e1:61:42:30:20:b5:7d:84:81:37:ee:50:af:6a:4e:f2:
5a:c8:af:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:57:21 2026 by rpki-client