
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132332e35382e39362e302f31392d3139203d3e20313333313139.roa
File: 3132332e35382e39362e302f31392d3139203d3e20313333313139.roa (raw, json)
Hash identifier: 9PtTYTuS8PZhu+HQb3rZG4gHVeSks2bE1enmWRL6CiM=
Subject key identifier: CA:78:8D:2B:B7:B2:6F:29:6B:93:CA:5B:06:07:F5:6F:D4:33:B0:70
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 22E0EA7DAA9E75704C7572AC6BFD28DF62D59794
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132332e35382e39362e302f31392d3139203d3e20313333313139.roa
Signing time: Tue 12 May 2026 07:05:54 +0000
ROA not before: Tue 12 May 2026 07:00:54 +0000
ROA not after: Tue 11 May 2027 07:05:54 +0000
asID: 133119
IP address blocks: 123.58.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e0:ea:7d:aa:9e:75:70:4c:75:72:ac:6b:fd:28:df:62:d5:97:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 12 07:00:54 2026 GMT
Not After : May 11 07:05:54 2027 GMT
Subject: CN=CA788D2BB7B26F296B93CA5B0607F56FD433B070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:f3:43:0b:85:e3:ee:49:66:88:42:d1:04:
d8:2f:f2:1c:58:f3:a9:bd:ef:0f:ed:9a:04:fb:62:
d5:33:71:32:43:f7:7c:7d:75:37:cf:29:5b:64:b4:
fd:9d:29:31:77:5d:e5:ed:2b:0a:56:0c:60:3b:ac:
45:9e:a1:b4:a3:d1:1c:f1:48:37:f6:8f:ca:21:4d:
c3:d5:6a:f1:f2:a5:37:87:f3:98:bd:1f:22:9a:78:
66:16:4c:5a:af:04:ef:92:b7:a9:7b:60:b7:0e:0a:
72:88:31:b8:0e:a2:71:ec:0a:b1:a7:8c:e5:d8:b0:
06:7a:bf:4c:4b:e8:b1:e2:68:c5:5c:48:d4:88:95:
0e:27:2c:54:11:58:ab:9a:d9:b6:98:60:cd:7a:2f:
8d:10:be:77:65:9f:e7:4d:40:6c:87:5b:84:ca:cf:
f2:32:4b:b0:13:31:8f:61:f1:9b:35:a4:02:cc:0e:
34:95:92:9a:fc:04:1e:06:b8:65:df:fa:ce:c8:48:
31:45:67:f4:50:ea:42:d5:ab:d0:ef:77:48:cf:af:
44:f7:e5:67:12:47:9d:5b:1c:d8:64:b6:98:fb:b9:
47:65:c4:ab:de:62:12:cc:f9:f6:9a:e6:2c:87:b1:
16:51:ab:53:99:4a:95:b2:27:d0:d8:fe:8d:91:fd:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:78:8D:2B:B7:B2:6F:29:6B:93:CA:5B:06:07:F5:6F:D4:33:B0:70
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132332e35382e39362e302f31392d3139203d3e20313333313139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.58.96.0/19
Signature Algorithm: sha256WithRSAEncryption
03:57:97:97:90:0e:8c:33:36:3c:0d:27:a9:7f:f7:90:3e:3b:
fb:ce:b1:75:95:1e:68:db:ea:f3:9b:9a:c0:ac:31:26:13:ac:
2c:75:8f:91:6f:07:cb:f0:ba:44:ef:05:1d:94:49:20:93:80:
2f:df:d8:3b:27:67:b2:be:f5:14:dd:7e:44:72:e9:25:a5:67:
f7:6a:53:b3:0c:d5:64:cb:52:27:fa:c5:af:e9:f3:84:62:b7:
a6:c1:84:b7:7a:6f:10:7b:b5:1e:52:08:00:96:c1:8f:8c:be:
57:4e:9b:46:c1:1a:69:8e:8f:6d:ad:4b:a4:f6:30:d9:44:34:
62:75:d4:12:a2:f6:5f:a0:20:d8:e5:b6:0b:30:26:a8:67:4b:
d1:6b:1f:2b:ff:61:60:77:f4:c4:98:02:9e:39:cc:9e:f1:4b:
18:67:0c:96:20:be:93:d4:04:f0:64:a7:21:d7:89:92:20:76:
1f:72:ef:13:67:f0:0d:99:a1:1a:a8:9e:e2:b4:b6:22:21:74:
8b:d1:84:fe:22:da:64:03:69:f2:ae:c6:fc:5f:76:ff:23:14:
be:3e:bd:45:6d:ce:a3:8b:64:eb:84:fa:79:8f:d2:fb:ef:16:
85:8b:1e:58:7e:e9:dd:a4:e2:2e:56:17:fd:62:65:b8:ac:3a:
e8:bc:21:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:39:56 2026 by rpki-client