
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e31362e302f32312d3231203d3e203137393634.roa
File: 3132322e34392e31362e302f32312d3231203d3e203137393634.roa (raw, json)
Hash identifier: ApbvfV4l2B3hsnNaKLCa26x1HXWTyaxbQvfM2K0onEY=
Subject key identifier: E4:0D:03:DF:32:39:43:08:9C:E7:80:0F:DF:4A:9B:50:1E:AE:FA:7B
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 38BD65A7FAD8AB17A82201C605A4939B70113722
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e31362e302f32312d3231203d3e203137393634.roa
Signing time: Mon 11 May 2026 02:44:48 +0000
ROA not before: Mon 11 May 2026 02:39:48 +0000
ROA not after: Mon 10 May 2027 02:44:48 +0000
asID: 17964
IP address blocks: 122.49.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:bd:65:a7:fa:d8:ab:17:a8:22:01:c6:05:a4:93:9b:70:11:37:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 11 02:39:48 2026 GMT
Not After : May 10 02:44:48 2027 GMT
Subject: CN=E40D03DF323943089CE7800FDF4A9B501EAEFA7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:ea:6c:a2:8c:6d:13:9c:c2:61:69:fd:6c:
c7:49:98:a6:3f:d1:5e:84:c8:46:2d:7e:18:1a:50:
31:56:be:4d:a4:0e:56:67:2e:ea:73:d8:e2:ca:83:
2e:65:ac:e1:9e:af:b4:b5:f5:96:ff:40:64:c0:f9:
99:7b:77:89:fc:e7:03:2f:a5:c5:b9:6e:58:5c:fb:
d2:d0:51:ca:2c:1b:96:fd:f7:c0:f7:af:bb:29:f6:
3f:53:28:0a:40:6c:75:e4:df:32:1a:83:dc:f1:d0:
74:6c:73:80:38:36:03:57:0b:14:c3:61:c9:92:71:
9a:88:3c:10:94:ab:f6:1d:07:9c:e2:2c:2b:5c:24:
57:83:0e:9e:97:72:69:9f:48:f9:58:9c:8b:1c:c4:
56:b3:ec:9d:15:a3:41:66:e9:9d:1f:5a:50:44:34:
e8:18:79:72:02:83:31:e3:ba:94:ef:51:37:6a:e9:
9d:46:19:57:12:35:50:09:7e:b6:27:25:06:31:80:
83:b7:e0:95:c7:69:42:3f:bb:f7:21:ee:41:02:ff:
16:c9:84:30:9f:a6:07:50:e4:ec:69:b9:4d:0e:b5:
52:aa:83:8a:20:8c:c1:c5:67:87:3b:8f:39:56:fb:
68:dd:59:7c:9b:bf:ab:97:02:f0:69:ee:7d:41:d6:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:03:DF:32:39:43:08:9C:E7:80:0F:DF:4A:9B:50:1E:AE:FA:7B
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e31362e302f32312d3231203d3e203137393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.49.16.0/21
Signature Algorithm: sha256WithRSAEncryption
86:32:83:7d:61:e0:ec:b7:fa:79:0c:1c:9d:8a:6a:43:b6:a4:
5a:06:2e:84:f9:d4:91:cc:26:c4:87:fa:3d:f1:5c:33:73:7e:
b0:33:40:96:6d:b9:3f:dd:88:0a:f0:b2:1c:29:49:5b:3e:89:
40:7a:e3:99:54:a2:53:a9:d5:06:a6:91:63:84:58:0e:92:fa:
41:fd:d2:21:c6:13:e5:f8:06:c4:bf:76:2f:ef:13:e1:bd:9b:
c1:e4:3a:ff:34:22:57:72:f8:81:3e:0f:7c:ec:86:81:07:51:
68:0d:72:eb:a4:20:a6:cf:58:11:ea:f6:14:e9:53:42:2b:7a:
af:d8:ac:d7:f8:ff:81:c6:ca:39:67:df:7c:31:53:61:6d:99:
e6:85:54:9e:0d:22:0e:45:f3:32:31:f3:bc:93:77:f8:07:ad:
c5:97:2c:b6:66:d7:85:a8:5c:2c:a3:0d:ef:41:5e:ab:23:08:
07:8a:35:3e:8d:48:9d:5f:9c:5b:98:56:f5:aa:52:b9:10:df:
6a:6e:a6:4e:2c:ae:e7:60:b9:77:6d:d9:c6:3b:85:20:fc:2d:
92:71:ef:04:ee:25:a1:08:79:80:44:9c:e4:63:61:64:49:6c:
df:76:bd:36:cc:57:7a:cf:0b:97:b7:fe:09:1f:74:5b:0a:5f:
c9:71:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:24:07 2026 by rpki-client