
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3139322e302f31392d3139203d3e203234313338.roa
File: 3132322e31342e3139322e302f31392d3139203d3e203234313338.roa (raw, json)
Hash identifier: TwPhi2MyB9GY9cJPHMmbLrDZX+yaqaJO9ERrKD5bUDQ=
Subject key identifier: EF:76:FF:E1:5C:3C:AF:4C:12:B1:32:06:F7:E2:35:3E:B0:B7:30:80
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 44508ACDA408CF8EA7ABCC78E977CB77E787DFD7
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3139322e302f31392d3139203d3e203234313338.roa
Signing time: Tue 12 May 2026 07:03:24 +0000
ROA not before: Tue 12 May 2026 06:58:24 +0000
ROA not after: Tue 11 May 2027 07:03:24 +0000
asID: 24138
IP address blocks: 122.14.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:50:8a:cd:a4:08:cf:8e:a7:ab:cc:78:e9:77:cb:77:e7:87:df:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 12 06:58:24 2026 GMT
Not After : May 11 07:03:24 2027 GMT
Subject: CN=EF76FFE15C3CAF4C12B13206F7E2353EB0B73080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:8b:10:30:1b:3f:05:30:7a:5b:90:a8:4b:
49:c0:bd:3a:ff:75:fa:ff:35:7e:5c:27:4f:0a:98:
84:ba:e8:57:fd:c6:a2:be:7f:35:0d:49:16:5c:50:
f8:a5:6a:ae:e6:f7:e1:ce:b9:81:be:3f:4f:ac:2f:
60:98:80:d1:87:f8:a1:2c:60:30:b1:a8:63:71:3b:
cc:4c:ed:e1:e1:0e:ea:1a:a4:41:fd:c0:ea:79:4f:
2f:ad:be:d4:8a:f5:a4:b9:eb:e5:de:26:30:2e:a1:
67:14:75:ef:39:c8:fe:d7:81:53:3d:f4:96:3b:be:
65:b7:83:07:43:64:64:f0:64:2c:df:2f:d0:f9:38:
9d:ec:65:ca:c0:d2:be:09:b2:80:15:2a:ae:34:20:
3b:18:2a:5e:1e:01:b5:0e:cf:be:aa:9d:cc:4c:45:
00:fc:97:62:e7:47:7b:b2:f9:2f:93:78:49:3a:e8:
2f:be:58:77:da:d5:9d:6d:4a:22:6c:83:c8:ea:88:
f2:fa:38:f4:2f:bd:d8:ea:93:c3:19:f1:92:5f:c1:
bb:da:33:a0:8e:29:14:e3:69:cb:9f:21:8c:b1:a1:
f8:bf:00:c5:13:e2:9a:a0:00:0c:db:2c:78:71:a1:
7b:d0:30:fa:1a:00:46:86:a7:f8:11:f1:ca:54:d6:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:76:FF:E1:5C:3C:AF:4C:12:B1:32:06:F7:E2:35:3E:B0:B7:30:80
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3139322e302f31392d3139203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.14.192.0/19
Signature Algorithm: sha256WithRSAEncryption
42:3e:b1:32:37:ce:e7:ae:07:f0:dc:f7:32:fe:17:22:a3:e8:
ed:48:86:85:60:6c:fc:24:a3:00:81:fe:0f:3a:49:c3:e9:80:
3f:d3:0c:ea:3f:89:86:fa:4e:c3:af:0c:e8:8e:ee:d6:1c:b8:
f3:03:8f:78:36:ec:53:25:59:0c:20:2e:04:20:99:a9:4c:91:
84:e7:19:81:9f:47:c4:4a:8f:31:0e:69:e0:e3:f1:fa:b3:46:
aa:18:5d:37:d8:33:fb:ed:54:b1:e5:1b:03:61:5a:20:6e:ef:
df:70:45:cb:45:17:b8:2c:cd:95:57:a2:48:88:e9:f1:df:63:
9a:8c:8f:b4:b5:49:ac:f8:13:45:2a:34:c9:37:cf:e9:fb:17:
28:3b:0c:20:16:88:61:0f:e8:30:e9:ea:e9:67:8e:17:a4:9b:
4e:ee:48:ca:16:75:7f:fc:31:35:4d:e2:54:20:4f:e7:ef:8d:
30:18:d9:76:e2:10:7f:c5:bb:be:39:a3:cc:78:35:fe:4b:dc:
5f:2c:e0:eb:52:ab:b8:78:ac:80:a5:51:76:18:c5:e7:c6:24:
29:64:d3:8b:05:56:e9:6f:f8:44:55:2d:5f:f6:5c:5a:22:6a:
0a:75:af:96:c2:ca:79:2e:45:db:20:90:7e:3c:d9:9d:d0:9c:
f6:81:91:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:49:22 2026 by rpki-client