
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3130342e302f32322d3232203d3e2034383038.roa
File: 3132322e3230302e3130342e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier: iXOYj/Fhjzf9gMRQ0mnVtZoZzhTaVO0oI319TMAsSLc=
Subject key identifier: 9E:2E:1A:8B:9F:33:53:D8:D4:9A:99:36:4A:F1:7D:5B:2A:06:85:59
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 0F8A3B334C5E6B701FDD0DFCC67A3401426CC9A9
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3130342e302f32322d3232203d3e2034383038.roa
Signing time: Tue 12 May 2026 02:51:56 +0000
ROA not before: Tue 12 May 2026 02:46:56 +0000
ROA not after: Tue 11 May 2027 02:51:56 +0000
asID: 4808
IP address blocks: 122.200.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:8a:3b:33:4c:5e:6b:70:1f:dd:0d:fc:c6:7a:34:01:42:6c:c9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 12 02:46:56 2026 GMT
Not After : May 11 02:51:56 2027 GMT
Subject: CN=9E2E1A8B9F3353D8D49A99364AF17D5B2A068559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:47:f2:c3:76:f9:ab:20:eb:f2:82:9d:a0:
7c:a2:f3:02:26:fe:cb:12:93:8a:b9:21:60:f8:9c:
b7:f5:94:f3:8f:28:99:a0:13:fe:3d:00:1f:63:e4:
46:e3:03:f4:4f:fd:ed:25:c7:e4:f0:2a:28:87:4d:
ca:6c:c2:2e:de:96:a5:06:18:f8:01:ef:8e:3f:c2:
e9:0e:1c:ce:62:85:f2:d5:b6:f0:44:88:0e:af:ab:
09:10:72:14:bb:da:e6:1c:f0:ba:2a:da:40:aa:bf:
b4:be:97:40:46:c2:db:fb:81:d9:3c:52:a2:94:b2:
c3:19:3c:d3:49:3b:b2:d5:8d:e0:35:57:d0:6c:13:
ff:7f:fe:f7:4e:d8:cd:bb:54:bd:dd:7f:00:40:4c:
76:7d:5e:af:45:1c:50:68:99:31:b9:37:3f:f1:df:
91:0a:1a:04:af:62:4a:85:35:02:3d:42:f1:89:a6:
58:65:63:b0:02:8b:8f:7f:e1:6d:bd:eb:f1:fc:5a:
38:44:f9:ce:e2:ee:c7:50:48:9e:85:76:50:d8:8c:
0f:e5:da:30:11:0b:fa:64:fc:41:8a:ca:46:72:c6:
72:51:68:66:5a:a0:9a:36:ea:3f:ea:b2:0b:63:f6:
b0:92:ba:47:be:a7:29:82:54:bf:44:ad:0e:2a:82:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2E:1A:8B:9F:33:53:D8:D4:9A:99:36:4A:F1:7D:5B:2A:06:85:59
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3130342e302f32322d3232203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.200.104.0/22
Signature Algorithm: sha256WithRSAEncryption
06:f3:1a:3e:3f:8d:00:53:98:dd:e7:3a:82:c6:e2:6a:66:b4:
72:a6:bb:52:36:e8:2c:94:cd:2c:98:59:00:51:c3:dd:a6:e9:
78:3b:d8:2a:dd:bf:f5:f1:f4:20:50:c4:c3:ce:8a:fd:b9:62:
8a:7c:79:26:50:cc:e5:30:c5:6b:19:ee:3f:d1:1a:56:52:61:
fc:9b:ff:29:f2:13:14:bd:db:1b:67:5e:69:c0:8b:4f:49:f4:
81:07:35:37:24:39:03:29:0e:50:ff:3b:aa:57:fc:00:85:60:
1c:3f:2e:4a:39:c1:c9:c4:53:90:5d:54:9b:79:9b:7c:2a:a5:
1e:22:76:74:44:73:c8:3c:bf:c1:b4:64:07:1f:1e:3b:6f:ae:
5a:90:62:d7:41:44:55:dd:c8:23:31:49:64:da:e5:00:2d:6a:
ce:bf:53:4c:de:fd:fb:8d:07:ac:ce:0a:e8:df:fb:a3:97:f9:
e6:24:27:6f:fc:ac:f9:5a:4f:fb:a1:87:f9:27:5e:ab:a3:5a:
b4:82:94:2c:78:46:a0:71:59:c0:10:05:3e:c3:2b:6a:62:b9:
56:d8:33:9f:04:23:91:2f:ff:3d:cf:99:99:a3:86:2c:cf:b2:
3c:01:3d:a9:36:9a:ee:f2:60:06:c2:5b:ea:10:65:ee:f5:d5:
4e:dd:26:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:57:34 2026 by rpki-client