
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3132342e302f32342d3234203d3e2034383038.roa
File: 3132322e3230302e3132342e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: vnraDsLTN+I/REuZMAzn+lAg9TtfljiD2+1b7UKAED8=
Subject key identifier: 3F:AC:9B:33:0E:56:67:6A:3A:FA:BB:A4:69:15:EF:44:7E:E7:5B:1E
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 6892AE76018523A50FF516713F7E77BE92ED2169
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3132342e302f32342d3234203d3e2034383038.roa
Signing time: Tue 12 May 2026 02:51:55 +0000
ROA not before: Tue 12 May 2026 02:46:55 +0000
ROA not after: Tue 11 May 2027 02:51:55 +0000
asID: 4808
IP address blocks: 122.200.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:92:ae:76:01:85:23:a5:0f:f5:16:71:3f:7e:77:be:92:ed:21:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 12 02:46:55 2026 GMT
Not After : May 11 02:51:55 2027 GMT
Subject: CN=3FAC9B330E56676A3AFABBA46915EF447EE75B1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f4:8a:01:c0:8a:a6:cd:0d:75:ce:61:b3:6b:
a8:7c:21:1a:7e:68:62:36:45:59:7c:74:3b:40:3c:
1f:60:4c:cb:c6:39:ae:f4:c9:84:88:a9:e5:ba:33:
5d:4d:dc:41:dc:6c:49:a5:67:2d:df:5f:55:18:70:
85:86:bb:03:70:8e:2b:ec:da:7b:72:35:f9:b3:36:
7a:ba:ae:5c:b2:70:ed:f5:1d:6f:7e:d7:91:e0:0d:
c3:ac:6f:47:66:1c:76:68:18:94:67:89:97:d4:2b:
e2:c0:ca:b7:9d:33:24:67:57:fb:aa:30:95:17:c1:
4a:5d:ec:cb:c6:76:cf:2b:10:f4:16:07:b7:7e:80:
df:9a:48:d8:58:a0:8a:17:d7:e8:dc:44:5a:8d:1a:
ee:03:7f:12:cb:db:2b:e1:10:22:2a:da:07:ae:84:
c6:3a:34:77:3f:65:fa:c6:b2:bf:e5:92:1e:e5:50:
31:84:32:1b:94:2a:05:18:e8:c1:31:e9:b2:04:15:
9c:27:93:7c:05:b7:29:45:68:fc:32:78:5e:29:41:
6a:37:a3:b3:bc:fe:12:6b:bb:ac:8d:68:3a:ba:37:
e1:dd:c2:59:cb:d4:f9:8c:40:f6:fd:4d:61:4f:d8:
3a:1a:a9:7b:2b:30:34:d8:2b:6d:02:91:2b:6e:f9:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AC:9B:33:0E:56:67:6A:3A:FA:BB:A4:69:15:EF:44:7E:E7:5B:1E
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3132342e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.200.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:66:ea:ab:64:bc:92:34:a2:d1:26:7f:bf:2f:16:65:82:c2:
72:bd:32:50:b7:c8:9b:39:53:13:cf:24:2c:5f:f6:52:77:ba:
37:73:2a:f2:96:1b:e0:93:b0:b0:0e:0f:4f:20:c0:64:68:6f:
da:6e:30:8d:4e:a2:66:ac:70:f2:84:7a:f6:df:fb:cb:79:0f:
89:fc:ff:99:c7:a1:27:8b:33:d4:1c:aa:de:40:05:70:5f:68:
f1:b1:f6:ef:d5:ab:3b:78:18:49:49:01:29:7a:32:20:f5:cc:
61:91:ea:90:e5:1a:86:dc:77:ba:ef:eb:a4:37:d6:03:c1:5a:
2c:14:a1:6a:cb:ba:d1:96:0d:0a:d8:d3:a2:04:a1:58:3f:dd:
d4:41:f7:bb:4a:b3:5d:ca:a3:e1:5c:ff:d0:08:22:d2:5c:cf:
23:33:a9:1c:d2:1e:db:4f:53:0c:d2:f3:2e:17:28:8e:9f:f2:
ed:2e:85:01:a3:42:1a:fc:50:11:04:91:bc:bc:13:4c:ad:8e:
bd:52:ef:a9:e8:da:e4:af:b7:99:bb:eb:2e:07:a2:f8:ca:c4:
24:f9:bc:f9:42:ec:1c:8c:e9:fb:90:42:34:89:6a:05:20:4e:
bb:67:e0:1c:cd:11:9f:48:0e:1b:8f:a4:7f:46:83:a5:a7:48:
66:10:f4:32
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 09:20:55 2026 by rpki-client