
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3231382e3234312e32342e302f32322d3232203d3e203137393634.roa
File: 3231382e3234312e32342e302f32322d3232203d3e203137393634.roa (raw, json)
Hash identifier: qlQWQHpiq03KPo3Lk/7WqLWcy6JEvhwMZ/r5f9ZNwz8=
Subject key identifier: 72:62:D1:0F:22:F3:0A:28:9E:00:AB:C3:CD:C9:79:2F:45:C8:E7:96
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 6DB1FEEEC44E2FC4694ADEB340BE959B3FB12581
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3231382e3234312e32342e302f32322d3232203d3e203137393634.roa
Signing time: Mon 11 May 2026 02:44:48 +0000
ROA not before: Mon 11 May 2026 02:39:48 +0000
ROA not after: Mon 10 May 2027 02:44:48 +0000
asID: 17964
IP address blocks: 218.241.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b1:fe:ee:c4:4e:2f:c4:69:4a:de:b3:40:be:95:9b:3f:b1:25:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 11 02:39:48 2026 GMT
Not After : May 10 02:44:48 2027 GMT
Subject: CN=7262D10F22F30A289E00ABC3CDC9792F45C8E796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:4a:d5:24:db:75:a2:a7:7d:2f:d0:f8:70:
3e:c3:cc:ed:9f:72:28:6a:13:c4:9c:91:e7:61:fd:
e3:cc:54:e3:90:fc:02:9a:39:f6:1b:1a:2e:7c:81:
63:7b:57:e5:dc:d5:b4:cd:7d:f2:50:45:fe:db:d0:
9f:3d:b4:b6:a1:87:4e:33:6a:d5:6c:6d:3f:03:79:
73:1b:6c:a5:76:bf:59:b1:e7:42:81:22:67:a6:c9:
b4:ba:04:f4:22:f3:ae:45:68:06:dd:48:9d:d9:48:
68:b9:6a:e4:f0:e3:fa:9a:cf:dc:14:e9:10:0d:73:
48:28:3f:07:89:9c:8b:ac:62:11:e9:cc:bb:25:96:
92:97:38:bd:8e:16:15:79:8a:7e:b0:b1:b5:05:76:
46:27:49:2f:9c:61:9a:b3:f1:10:53:22:5e:27:86:
b2:27:f1:06:f2:cc:3a:2d:c5:2a:f1:2e:1b:17:4b:
e4:92:27:81:e7:81:03:84:0d:9b:ea:17:42:e3:99:
db:36:ea:ed:25:fb:a7:a2:ba:f1:00:94:1b:a1:8e:
34:7e:62:54:1f:8d:e0:6d:de:83:ec:e4:32:29:e9:
37:b8:f3:16:2b:3c:85:db:25:61:79:ec:a1:83:35:
c9:81:67:46:7d:1e:c8:b2:e3:33:6d:c9:79:ed:8e:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:62:D1:0F:22:F3:0A:28:9E:00:AB:C3:CD:C9:79:2F:45:C8:E7:96
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3231382e3234312e32342e302f32322d3232203d3e203137393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.241.24.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:fd:28:86:cc:b8:c9:82:e9:66:0d:35:f9:50:79:7a:92:97:
f5:03:16:8c:f4:c8:58:22:62:97:13:40:36:0d:a9:1a:38:b6:
02:b8:72:95:a0:29:ea:7e:21:5d:49:ec:91:09:0d:c5:48:03:
76:5a:d1:29:ee:e8:91:12:d8:21:b4:9f:0b:22:96:64:e4:c2:
fb:4b:33:08:e2:03:9b:4c:34:14:2f:71:9e:1b:7a:f9:15:8e:
f1:23:d1:84:6e:85:c5:bc:f3:a1:ff:de:80:2d:86:46:ea:23:
ba:fd:dd:5d:39:35:a3:1a:37:d3:3c:af:fd:b7:e4:36:7c:79:
99:af:2b:45:77:36:3e:9a:c6:eb:17:93:9c:49:24:ef:d1:04:
b1:1b:d6:07:25:c7:25:c8:4b:74:81:7f:5d:0f:bd:8c:9a:5a:
27:59:b2:fb:cd:16:ca:30:56:3d:0f:eb:e2:e0:91:ee:97:fd:
1f:14:94:18:96:2f:1e:a2:6e:fd:e7:66:c3:8f:24:cc:be:3d:
fe:2f:47:a5:b2:46:92:2e:81:aa:b5:0b:47:0b:58:aa:b0:64:
76:7c:f5:e1:d5:59:ca:d8:26:14:b5:d5:81:6c:33:0b:b0:c4:
a6:2f:85:ee:1b:88:d1:f2:de:a8:56:81:e0:54:5c:a3:fe:1a:
33:a6:a4:9c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUbbH+7sROL8RpSt6zQL6Vmz+xJYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw
NDk1QzhDNDAeFw0yNjA1MTEwMjM5NDhaFw0yNzA1MTAwMjQ0NDhaMDMxMTAvBgNV
BAMTKDcyNjJEMTBGMjJGMzBBMjg5RTAwQUJDM0NEQzk3OTJGNDVDOEU3OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEWErVJNt1oqd9L9D4cD7DzO2f
cihqE8Sckedh/ePMVOOQ/AKaOfYbGi58gWN7V+Xc1bTNffJQRf7b0J89tLahh04z
atVsbT8DeXMbbKV2v1mx50KBImemybS6BPQi865FaAbdSJ3ZSGi5auTw4/qaz9wU
6RANc0goPweJnIusYhHpzLsllpKXOL2OFhV5in6wsbUFdkYnSS+cYZqz8RBTIl4n
hrIn8QbyzDotxSrxLhsXS+SSJ4HngQOEDZvqF0Ljmds26u0l+6eiuvEAlBuhjjR+
YlQfjeBt3oPs5DIp6Te48xYrPIXbJWF57KGDNcmBZ0Z9Hsiy4zNtyXntjhgJAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUcmLRDyLzCiieAKvDzcl5L0XI55YwHwYDVR0j
BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4
NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTg5MDk4NTIyNjg2MjU5NS8wLzMyMzEzODJlMzIz
NDMxMmUzMjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM5MzYzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAtrxGDANBgkqhkiG9w0BAQsFAAOCAQEAnv0ohsy4yYLpZg01+VB5epKX
9QMWjPTIWCJilxNANg2pGji2ArhylaAp6n4hXUnskQkNxUgDdlrRKe7okRLYIbSf
CyKWZOTC+0szCOIDm0w0FC9xnht6+RWO8SPRhG6Fxbzzof/egC2GRuojuv3dXTk1
oxo30zyv/bfkNnx5ma8rRXc2PprG6xeTnEkk79EEsRvWByXHJchLdIF/XQ+9jJpa
J1my+80WyjBWPQ/r4uCR7pf9HxSUGJYvHqJu/edmw48kzL49/i9HpbJGki6BqrUL
RwtYqrBkdnz14dVZytgmFLXVgWwzC7DEpi+F7huI0fLeqFaB4FRco/4aM6aknA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:47:32 2026 by rpki-client