
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e33322e302f32302d3230203d3e203137393634.roa
File: 3132322e34392e33322e302f32302d3230203d3e203137393634.roa (raw, json)
Hash identifier: 44XgW+CHmujKFvia7qIRz4OTpiP/kO5myEm0O1AbgFE=
Subject key identifier: AB:DB:A7:99:1C:0A:0B:BA:55:8B:53:7F:0D:51:0F:19:21:FD:27:96
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 46E2810BAFBC7119A981B0FD7C8008FD6AAE1594
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e33322e302f32302d3230203d3e203137393634.roa
Signing time: Mon 11 May 2026 02:44:49 +0000
ROA not before: Mon 11 May 2026 02:39:49 +0000
ROA not after: Mon 10 May 2027 02:44:49 +0000
asID: 17964
IP address blocks: 122.49.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e2:81:0b:af:bc:71:19:a9:81:b0:fd:7c:80:08:fd:6a:ae:15:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 11 02:39:49 2026 GMT
Not After : May 10 02:44:49 2027 GMT
Subject: CN=ABDBA7991C0A0BBA558B537F0D510F1921FD2796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a2:ae:0d:0e:cc:2f:46:91:78:c3:73:3a:9f:
6e:90:58:15:81:b0:e2:9c:ee:4b:02:3d:f2:c3:32:
7f:33:6b:cf:04:b6:e1:82:a0:cf:7a:6d:85:84:b4:
05:65:ec:ec:65:a7:89:6e:92:a4:2a:5a:fa:62:14:
f7:d0:7f:41:2e:76:6e:0a:7b:ce:97:13:a1:e7:dc:
b3:ed:61:15:4f:a5:97:f1:df:ee:d0:fd:43:b9:ab:
49:5d:d4:78:ce:a2:89:83:d1:fa:4f:10:b5:6f:a1:
0b:01:20:b5:e8:5a:ae:0f:5f:2b:9b:02:15:8f:01:
04:96:da:58:09:6a:7b:15:5e:5b:39:05:d6:eb:62:
e8:89:18:95:6b:dd:8d:4e:5b:83:92:f1:60:bb:af:
94:7e:80:e6:80:1f:e6:a5:e8:f5:c5:95:2b:57:f3:
76:fe:87:83:a1:b6:94:a4:41:be:13:43:11:4b:ff:
eb:65:60:0b:72:b9:f6:b2:36:1d:29:11:03:42:68:
46:80:fb:96:ca:ef:9f:97:20:1e:95:4d:4b:7f:a7:
cf:de:39:45:64:22:91:5f:f1:f0:22:e0:fb:ac:51:
23:c5:e9:83:eb:ef:e2:25:93:2b:34:22:b0:38:56:
49:4f:6c:b2:e5:74:ed:90:dd:0c:24:ad:16:e3:48:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DB:A7:99:1C:0A:0B:BA:55:8B:53:7F:0D:51:0F:19:21:FD:27:96
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e33322e302f32302d3230203d3e203137393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.49.32.0/20
Signature Algorithm: sha256WithRSAEncryption
43:85:d6:f2:fb:8e:0c:36:c5:98:5c:3d:00:da:3f:ca:c1:a5:
c6:28:1e:ce:68:3c:db:18:9e:8d:bc:56:1a:be:32:38:99:02:
ff:57:d0:3d:0a:94:e0:82:1e:8e:ae:60:07:4f:a4:d4:d0:89:
3e:fe:9d:3c:91:a4:7d:4e:e3:84:3b:64:e2:54:f2:f3:08:17:
ba:e1:8e:d0:04:51:02:8c:4c:99:68:36:ad:1c:6a:70:6f:08:
ad:bd:fd:1f:33:4c:f4:d9:9b:cc:18:08:df:9d:7b:f6:ba:85:
19:07:22:a1:ba:21:42:e1:b7:6e:f5:a6:42:c9:45:41:72:dd:
26:6d:08:b9:35:41:38:53:05:46:6c:07:d5:5e:c2:fd:34:21:
0b:0f:90:d3:3c:b4:75:74:fd:21:07:2f:3e:71:9f:f4:8f:0d:
0c:cf:12:f0:f1:64:25:e7:9c:f8:eb:5e:fd:f2:84:f1:82:63:
78:bf:00:7c:59:2d:c3:85:e0:13:ed:38:b1:73:74:b4:30:b8:
bd:54:cd:55:82:87:ba:d8:4d:96:0f:9e:37:1b:5c:ca:f4:e8:
73:c7:2a:05:a6:f3:d8:e4:e0:c4:7b:ee:e6:2f:c2:f5:6e:97:
c4:fe:87:c3:32:9b:17:0c:a3:9f:27:92:c2:42:57:82:d0:67:
15:ff:7d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:33:43 2026 by rpki-client