
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3232342e302f32302d3230203d3e2039383038.roa
File: 3132322e31342e3232342e302f32302d3230203d3e2039383038.roa (raw, json)
Hash identifier: k5sPhbLDUbmS9k6u/0mcbPlBpgUxmRri9nNTbh8iPL8=
Subject key identifier: 86:EA:77:AA:21:27:F1:EC:A1:C1:37:46:2C:75:C6:47:1B:F8:C8:F7
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 202F7EE49849DB1C42AC20F5B612A6C5F1FA5D3D
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3232342e302f32302d3230203d3e2039383038.roa
Signing time: Tue 12 May 2026 07:05:53 +0000
ROA not before: Tue 12 May 2026 07:00:53 +0000
ROA not after: Tue 11 May 2027 07:05:53 +0000
asID: 9808
IP address blocks: 122.14.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2f:7e:e4:98:49:db:1c:42:ac:20:f5:b6:12:a6:c5:f1:fa:5d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 12 07:00:53 2026 GMT
Not After : May 11 07:05:53 2027 GMT
Subject: CN=86EA77AA2127F1ECA1C137462C75C6471BF8C8F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:8b:00:bc:7e:2f:5d:ac:69:47:72:68:98:
13:23:c5:70:17:9e:06:9a:f8:56:b9:c1:64:ab:9f:
a0:d2:46:94:3b:75:94:fa:63:54:19:d4:31:3b:21:
fe:dc:d9:f5:76:9b:7f:01:ff:d6:27:76:28:a8:30:
8c:50:47:9c:0c:73:12:1c:35:8c:d3:2e:3c:08:47:
fe:3c:6e:f5:eb:47:d5:64:cd:8c:b8:bd:66:34:d8:
c0:e6:0c:bb:83:c3:b1:45:78:0b:35:f4:7a:e6:77:
c9:78:d1:a4:a5:40:f5:77:34:29:7d:51:f5:de:52:
dc:69:13:1f:b8:83:09:9c:aa:c6:b4:8e:58:aa:c5:
1b:af:7a:2c:49:b2:08:6a:cf:a1:43:0f:c4:32:83:
18:8a:68:bb:7b:13:bc:fe:05:30:4d:cc:48:38:f0:
3e:4f:a4:fe:af:35:6e:df:30:8a:9c:25:5c:73:bb:
e8:76:45:86:81:64:8c:34:d3:a8:ab:63:ce:f6:7f:
3b:0b:eb:2f:0a:43:82:02:75:07:22:47:4d:4d:f3:
1b:55:20:ae:9f:c8:58:b9:b1:0c:e9:b7:88:9b:21:
76:11:8a:04:c3:8e:4e:e7:f0:59:df:58:83:e1:28:
96:4f:f7:50:4f:c5:13:f4:79:ac:bb:22:45:fc:93:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EA:77:AA:21:27:F1:EC:A1:C1:37:46:2C:75:C6:47:1B:F8:C8:F7
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e31342e3232342e302f32302d3230203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.14.224.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:d7:19:c5:ca:78:93:98:0f:82:be:e1:4e:a9:f4:39:06:df:
04:d0:6b:4e:a7:ab:ff:d4:bc:cc:77:b6:bb:b6:02:b4:98:6e:
ab:b5:39:92:bd:32:85:29:97:d5:45:6a:cc:7c:cd:07:ac:a7:
97:a0:2c:8c:c9:5d:ca:66:c3:f1:5d:15:a7:e4:18:43:d5:87:
a6:87:fc:29:68:8a:4a:a9:f5:71:a7:30:65:93:07:ba:bc:17:
70:1b:5b:06:1f:65:3c:1a:96:21:e0:2e:c6:30:cf:23:79:f9:
8a:9c:b8:24:22:fa:fe:df:92:92:d3:78:ac:f7:98:1e:46:11:
e7:f6:be:82:9b:b8:01:13:41:db:3c:ff:88:e4:60:21:18:9e:
52:91:f8:4a:9d:eb:e6:1c:20:5b:cc:79:37:14:ee:36:e9:76:
a6:67:ec:e1:b4:83:f8:a4:0b:f7:4c:51:1d:bc:e7:93:d5:56:
be:ea:0a:b2:73:df:a5:61:a1:24:d5:18:95:1f:47:92:e9:26:
8a:59:00:fb:7c:81:58:ee:e5:c8:ef:f7:c2:78:42:69:f0:a9:
70:0e:72:e6:ee:cd:63:7a:fd:b5:db:93:27:97:fa:16:19:8f:
c7:85:ce:4f:c4:4d:44:ae:87:41:f3:1f:1c:88:d5:4d:5a:22:
5e:59:d1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:58 2026 by rpki-client