
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3130342e302f32322d3232203d3e2034383437.roa
File: 3132322e3230302e3130342e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier: I7O0b32S5Ny5dYvklkN181O8FeK7g4NGtnZwrDuI22w=
Subject key identifier: E0:A9:D9:F8:CC:AC:43:8B:11:78:DE:97:C6:24:5C:92:37:97:DB:F8
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 04DB0C1E04EBF4794DED94AB8836F8FBE11F1C4C
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3130342e302f32322d3232203d3e2034383437.roa
Signing time: Tue 12 May 2026 02:51:56 +0000
ROA not before: Tue 12 May 2026 02:46:56 +0000
ROA not after: Tue 11 May 2027 02:51:56 +0000
asID: 4847
IP address blocks: 122.200.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:db:0c:1e:04:eb:f4:79:4d:ed:94:ab:88:36:f8:fb:e1:1f:1c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 12 02:46:56 2026 GMT
Not After : May 11 02:51:56 2027 GMT
Subject: CN=E0A9D9F8CCAC438B1178DE97C6245C923797DBF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:a3:15:5b:67:ee:da:be:1a:77:a8:a7:17:
3e:3e:4d:b4:0a:f3:aa:aa:6b:8e:96:55:5e:14:69:
e2:e0:ab:1e:98:84:9f:1e:c8:51:60:9f:10:81:f7:
c8:ae:d6:8b:94:32:79:f6:7c:0d:ea:6a:54:87:52:
8c:f6:e2:9d:02:43:0e:67:08:45:95:50:5f:0f:ed:
62:5b:9b:fa:bf:fa:fd:b3:c2:c0:6c:f6:a7:18:4a:
d3:c3:a7:6d:d9:d4:54:ab:dc:39:2d:ed:6b:2c:ad:
87:ae:b8:a6:7b:c6:b6:b2:0f:c9:c1:bd:1f:b1:7e:
2a:bf:aa:7a:4b:ae:1f:ca:6f:95:35:74:25:ce:6e:
36:58:78:15:cd:23:43:37:15:49:a5:2c:9f:07:93:
af:a1:5e:ca:c5:6e:ad:53:c9:b7:54:4b:55:6d:d8:
ec:9d:9a:a9:99:de:bf:e7:33:5e:e1:cf:5e:8a:cd:
b0:b4:c7:ae:43:97:ec:5f:74:52:ad:eb:a7:1d:5d:
8f:94:b6:f1:42:04:db:49:05:1b:cd:48:00:fc:46:
e9:78:0e:f6:d7:b6:94:b4:9c:df:93:82:6e:98:db:
20:7f:7d:fd:ee:79:df:65:15:2a:4e:2e:0e:8f:f6:
51:1d:30:68:2c:5e:61:17:61:73:81:61:b8:98:6e:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A9:D9:F8:CC:AC:43:8B:11:78:DE:97:C6:24:5C:92:37:97:DB:F8
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3130342e302f32322d3232203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.200.104.0/22
Signature Algorithm: sha256WithRSAEncryption
88:20:83:35:3d:49:72:17:59:ec:15:5a:ba:02:bb:69:4a:58:
b4:c3:d4:85:54:85:e8:5a:b2:08:5a:72:71:2d:72:2b:bb:8c:
0e:a4:af:0b:06:5f:2c:c8:be:8d:ef:9d:74:83:e4:9d:4a:b9:
aa:f3:d2:eb:95:92:39:e7:eb:02:d8:aa:1d:5e:f9:5e:77:6a:
01:ee:11:65:31:0f:36:e2:22:2a:d4:da:b1:67:37:60:8b:01:
67:d3:43:95:d0:69:a3:f5:62:36:8a:45:0b:2d:25:c8:1b:fa:
8b:4b:d9:e2:86:7e:39:e2:4e:43:2a:b3:dd:cd:23:49:99:07:
e9:1a:09:fc:fd:3a:76:2f:c8:8c:c2:9f:f1:0e:7e:65:88:6a:
7f:98:28:92:64:b1:2a:1e:09:1c:43:e0:61:04:76:f3:35:f1:
b9:ce:4b:76:f5:04:65:65:67:ea:84:79:42:99:49:76:ed:25:
6d:3e:be:92:f8:45:73:15:7d:86:08:89:33:10:f5:75:ee:d4:
72:c3:54:cc:a5:7d:a1:31:43:75:0e:f9:a1:49:e6:4d:69:d4:
24:47:c8:60:71:4d:02:36:b4:5a:a0:9e:44:32:e3:57:f3:9e:
2d:5c:54:90:3c:74:8d:9a:fb:8a:1e:9d:72:03:c6:4d:cd:52:
93:a0:e6:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:57:36 2026 by rpki-client