
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3132302e302f32322d3232203d3e2034383437.roa
File: 3132322e3230302e3132302e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier: ixrDIQPtSvqeCHJydcqhJ2fFXPkf0AyIMrq5nw6rQFM=
Subject key identifier: 46:CD:B3:96:37:25:F5:37:6F:A1:1C:9B:D4:43:50:C9:89:92:9B:9F
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 38DA837ABDBAAA6C24F922A65C9E0741FAD3A878
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3132302e302f32322d3232203d3e2034383437.roa
Signing time: Tue 12 May 2026 02:51:55 +0000
ROA not before: Tue 12 May 2026 02:46:55 +0000
ROA not after: Tue 11 May 2027 02:51:55 +0000
asID: 4847
IP address blocks: 122.200.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:da:83:7a:bd:ba:aa:6c:24:f9:22:a6:5c:9e:07:41:fa:d3:a8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 12 02:46:55 2026 GMT
Not After : May 11 02:51:55 2027 GMT
Subject: CN=46CDB3963725F5376FA11C9BD44350C989929B9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:c1:60:ab:5c:c6:ad:e4:1e:7b:ab:d4:d9:
58:db:fd:a3:14:20:dc:05:9d:ac:a5:e0:af:a1:a3:
13:57:94:67:7a:f0:36:36:0e:ad:d5:9d:d3:68:37:
4c:32:c9:c8:8a:ff:47:de:05:1d:c3:ca:10:bc:b5:
07:bc:d0:b3:1e:bf:d8:bc:04:90:92:37:8d:cf:8b:
d5:60:32:f3:64:a8:18:ec:98:0c:09:78:bd:ab:2c:
7a:e3:fd:e1:7b:55:ea:fc:3b:92:80:87:46:9a:ad:
e7:82:e9:ce:1c:73:34:09:e1:90:ae:b7:96:20:31:
a2:5e:55:92:93:83:1d:b4:5f:30:cf:d6:df:a0:d3:
e9:3a:d0:09:8f:fc:e8:80:fd:76:7e:5f:fa:e4:58:
e2:c8:bd:00:14:cf:b9:5a:02:6d:25:06:2c:51:bb:
77:79:1b:26:88:c6:14:f0:f1:98:8a:93:ed:71:72:
5a:f5:5e:85:e1:62:10:b5:1d:b3:59:75:45:e1:e2:
46:17:d0:75:cb:b6:92:d8:99:c6:d3:5c:1f:ea:77:
05:75:de:7c:e8:d7:b9:c9:6d:73:70:1f:9f:b8:a2:
b2:c9:62:b0:49:a2:12:b3:39:68:c8:98:3e:d1:38:
1c:9b:e2:0b:9c:b2:c9:d2:d9:36:d8:19:2d:42:9c:
4a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:B3:96:37:25:F5:37:6F:A1:1C:9B:D4:43:50:C9:89:92:9B:9F
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3132302e302f32322d3232203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.200.120.0/22
Signature Algorithm: sha256WithRSAEncryption
52:45:3a:8d:9b:3c:e3:34:b7:38:99:09:38:86:47:9d:5a:15:
c6:32:bb:65:d3:26:b5:69:a9:f6:2d:a7:a3:08:56:91:1b:46:
70:5a:ea:b2:81:fa:d7:f2:bf:7a:16:f3:86:24:7a:bf:3c:60:
62:42:05:f3:e5:fb:84:ed:be:1f:ce:cf:88:02:00:c9:93:91:
dd:d4:de:21:da:3c:3c:be:76:9b:48:23:b7:3a:cf:05:55:cd:
ad:67:f0:32:6b:94:fd:73:aa:69:71:78:47:be:e4:a0:a4:37:
84:8b:2b:d1:a0:66:d1:93:90:2e:58:ed:96:a0:7a:48:9d:8c:
6c:49:46:21:29:2a:b5:03:67:de:f6:e0:13:fd:07:b9:cc:e4:
82:0f:2e:06:d7:82:f9:fb:02:f6:c1:67:c5:ff:2c:ca:4d:45:
7a:31:9e:39:88:5f:9c:10:a0:19:5a:7d:9c:c7:22:1a:19:9a:
cd:62:75:e4:c7:a2:6a:27:f9:bc:c3:86:e7:a2:5b:6e:36:f6:
6f:5a:9d:bf:43:74:5f:c7:3c:df:0d:84:c3:27:0d:7b:96:70:
a2:99:6d:33:7b:7d:94:22:c5:77:f8:83:dc:06:12:58:56:9e:
70:f6:ae:1b:42:44:1e:46:d4:0a:52:5c:83:c0:c2:27:72:4a:
dc:3b:73:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:02:15 2026 by rpki-client