
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3231302e37342e302e302f32322d3232203d3e203137393634.roa
File: 3231302e37342e302e302f32322d3232203d3e203137393634.roa (raw, json)
Hash identifier: yqehKub7LZHIDw3h+VrMyHAKOfS7djcy58RUgKXJ7MI=
Subject key identifier: 99:81:F4:63:3B:48:51:AA:FA:59:F2:A3:03:70:D4:24:F5:0F:DC:F9
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 39D065D787770E0E4CFED93EDF575E54B1DACC55
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3231302e37342e302e302f32322d3232203d3e203137393634.roa
Signing time: Mon 11 May 2026 02:44:49 +0000
ROA not before: Mon 11 May 2026 02:39:49 +0000
ROA not after: Mon 10 May 2027 02:44:49 +0000
asID: 17964
IP address blocks: 210.74.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d0:65:d7:87:77:0e:0e:4c:fe:d9:3e:df:57:5e:54:b1:da:cc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 11 02:39:49 2026 GMT
Not After : May 10 02:44:49 2027 GMT
Subject: CN=9981F4633B4851AAFA59F2A30370D424F50FDCF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:83:c4:b6:ec:2f:5f:26:7f:29:06:1e:c2:
ae:98:90:52:80:0c:af:d5:72:99:c0:5b:76:7d:c4:
6f:b9:e5:16:0b:36:bf:16:09:e8:42:20:65:af:0b:
7b:32:78:5c:11:24:7f:e3:ba:71:26:88:2c:ce:b1:
e8:68:b6:19:2d:13:11:ec:c5:d5:08:0a:34:c7:ca:
59:09:a2:22:c7:9a:25:49:5b:ee:1d:df:4b:2b:ff:
66:59:cf:c6:4f:cc:38:23:42:7e:20:e4:ac:57:02:
3c:b3:75:00:41:0b:1b:2b:55:20:22:6e:f4:04:80:
e8:3b:79:49:6d:1a:af:3d:03:c2:57:2c:54:f9:86:
2c:3e:f2:ba:8a:39:11:74:d5:89:18:d8:64:d9:cc:
4a:f7:e7:c4:9e:49:4d:98:69:1d:e2:00:3e:3f:33:
5f:df:b4:eb:10:75:31:5e:a9:33:41:4f:ea:8c:47:
59:c2:f0:a0:be:63:51:da:cc:e8:31:bd:f7:52:8c:
5d:26:66:ac:f7:fb:10:2d:32:2c:4b:a4:26:32:4d:
3f:a8:2c:6c:42:0f:5b:70:1c:60:63:95:25:2a:8c:
98:30:b6:9a:7d:11:96:d1:d3:4b:d2:6f:18:ae:0a:
af:32:0c:34:ea:b2:46:a4:0d:ff:a7:11:73:e7:ea:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:81:F4:63:3B:48:51:AA:FA:59:F2:A3:03:70:D4:24:F5:0F:DC:F9
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3231302e37342e302e302f32322d3232203d3e203137393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.74.0.0/22
Signature Algorithm: sha256WithRSAEncryption
27:98:08:62:2e:c9:5b:38:2d:34:47:d8:38:7d:77:3d:dc:9e:
d8:f1:ac:7a:fc:69:29:ff:dd:79:8b:91:e3:ad:9b:f3:c3:81:
0a:0f:db:c1:af:38:7a:b3:47:4a:1f:65:03:36:0e:e3:4e:ac:
44:86:27:30:5e:52:e4:f9:8d:13:e7:fa:05:5d:fe:ed:72:f6:
a9:28:73:13:ce:41:35:4c:e5:77:62:ee:37:3d:02:73:77:10:
dd:95:ab:28:0c:ff:03:96:47:9a:45:3e:cc:c8:2e:11:52:b7:
0a:e5:15:08:d1:1c:6f:c8:89:fe:3b:c7:36:c1:44:dd:db:de:
57:cf:63:81:fd:b5:08:24:87:c7:4d:d0:2a:5f:46:81:31:01:
38:0d:6b:d5:5a:9d:74:f1:24:02:c7:c4:4d:64:87:ef:cd:3e:
ed:77:cc:e0:38:8c:9f:59:bf:b7:60:ca:6b:3c:b2:e3:f8:6f:
97:c4:16:10:e4:c7:1c:7a:20:ee:17:34:9e:7e:0a:4f:50:a1:
e8:b6:dc:9c:62:cf:19:2b:be:1e:6e:8e:b6:ec:b2:3f:98:9a:
91:62:4b:6c:12:5c:3f:35:4d:96:bc:cf:2d:1e:40:f1:f4:c9:
9d:da:e7:d2:37:8d:c5:62:34:8c:da:9a:a9:ab:fd:36:1e:fc:
c4:34:74:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:56 2026 by rpki-client