
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/323430313a626530303a3a2f34382d3438203d3e203233373234.roa
File: 323430313a626530303a3a2f34382d3438203d3e203233373234.roa (raw, json)
Hash identifier: jRIIzIAfOWwFCZuTemsLanyfTulVu63odn4YBZ6lqk8=
Subject key identifier: 4C:9E:D0:92:0A:E1:E5:F3:78:51:24:CE:6C:32:F3:D6:D1:07:05:29
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 49991A2EF4C441DED3E244ACEE4CF8F7377F616C
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/323430313a626530303a3a2f34382d3438203d3e203233373234.roa
Signing time: Tue 12 May 2026 07:05:53 +0000
ROA not before: Tue 12 May 2026 07:00:53 +0000
ROA not after: Tue 11 May 2027 07:05:53 +0000
asID: 23724
IP address blocks: 2401:be00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:99:1a:2e:f4:c4:41:de:d3:e2:44:ac:ee:4c:f8:f7:37:7f:61:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 12 07:00:53 2026 GMT
Not After : May 11 07:05:53 2027 GMT
Subject: CN=4C9ED0920AE1E5F3785124CE6C32F3D6D1070529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:23:01:3a:14:8c:66:51:7f:9b:65:27:ec:
fa:b2:d9:5f:75:51:76:56:4a:63:0a:cf:31:a6:5a:
4e:82:92:48:44:cf:50:c8:18:ec:f8:50:13:aa:53:
64:4f:b8:bc:07:a4:77:3d:19:75:b1:1f:42:52:7f:
70:90:c2:4f:66:99:58:a6:93:85:8c:69:22:89:67:
9c:95:2a:c0:9d:cf:f9:6c:81:98:33:d8:a6:2a:21:
5d:46:1c:cc:ef:96:6a:6e:f6:9b:ce:0c:fe:96:4d:
8e:73:bd:33:91:e1:99:66:1b:c5:0e:82:2f:78:cc:
29:4f:ab:3f:e1:2f:92:0c:ea:ea:e4:15:4d:66:4e:
9a:57:b3:5a:24:33:6e:45:03:7b:94:8c:25:50:6a:
b8:9d:c5:44:7f:7f:d1:70:23:0d:05:68:0b:fd:88:
fb:28:7a:09:81:f3:e9:7a:52:4f:e4:ba:97:b9:a8:
92:dc:23:32:97:94:4b:3c:4f:b2:a8:a7:6e:ce:c4:
0e:4f:4f:ff:9f:69:3d:cf:83:4e:86:a4:3e:7f:dd:
18:ec:1d:d4:41:4b:d9:bf:67:f8:44:ef:d5:e0:94:
96:f6:ef:01:27:31:66:f9:4b:40:a2:b4:0c:64:01:
99:86:be:d0:fc:f0:bd:71:8c:f3:f0:52:07:71:f4:
d1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9E:D0:92:0A:E1:E5:F3:78:51:24:CE:6C:32:F3:D6:D1:07:05:29
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/323430313a626530303a3a2f34382d3438203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:be00::/48
Signature Algorithm: sha256WithRSAEncryption
b0:56:99:88:1a:d0:fd:a3:1c:a6:4f:de:cd:d8:48:29:83:83:
07:aa:37:b2:77:bb:86:9d:d1:a6:13:bd:5e:7d:3e:cc:2a:cb:
66:d9:54:8c:e0:81:9e:dc:d4:80:71:bb:f8:0e:76:a4:3e:ea:
8c:b9:42:87:f3:b7:59:93:17:e8:47:90:16:ba:64:e9:52:44:
f6:69:07:39:a1:eb:33:d7:1b:e9:47:b1:5f:be:58:8e:b2:d3:
06:35:00:87:24:d9:45:0e:bd:26:61:32:b4:a6:08:f7:50:2b:
42:91:b2:46:86:63:92:2a:a6:5a:38:c5:9c:a4:78:b6:d9:8a:
50:61:69:46:0a:ff:59:ac:16:2a:3a:76:b5:e3:0e:94:54:20:
79:cb:9d:5c:17:92:42:b3:a0:d2:d3:27:16:3b:56:1e:35:df:
10:17:89:5a:2c:59:e1:54:21:c6:cd:6b:0e:3c:84:b0:2b:b1:
ee:7c:c0:e7:11:85:94:b4:5b:ae:15:38:56:b0:43:91:dd:bb:
2d:48:a5:8e:0c:ae:2b:1e:1b:7a:3f:04:ab:c3:b0:c9:bd:ea:
fa:33:16:d5:dc:80:7c:63:0b:48:84:43:68:f0:35:18:6d:fb:
bd:67:79:6a:23:df:c1:ff:45:6e:e2:2c:2d:8e:9a:22:d7:bb:
78:12:bd:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 17:33:46 2026 by rpki-client