
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/34322e35312e3132382e302f31382d3138203d3e203536303035.roa
File: 34322e35312e3132382e302f31382d3138203d3e203536303035.roa (raw, json)
Hash identifier: yzyUuSr16nuncdvdVBXtNG71KElXfh2M2luxtL1l09s=
Subject key identifier: 91:22:E3:6A:75:30:52:C4:BA:40:60:AD:8D:00:EF:3D:9A:CB:AE:4F
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 797B00AA41F910C3C8B4CB8FF7647ED790EEB966
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/34322e35312e3132382e302f31382d3138203d3e203536303035.roa
Signing time: Sat 09 May 2026 09:24:36 +0000
ROA not before: Sat 09 May 2026 09:19:36 +0000
ROA not after: Sat 08 May 2027 09:24:36 +0000
asID: 56005
IP address blocks: 42.51.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:7b:00:aa:41:f9:10:c3:c8:b4:cb:8f:f7:64:7e:d7:90:ee:b9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 9 09:19:36 2026 GMT
Not After : May 8 09:24:36 2027 GMT
Subject: CN=9122E36A753052C4BA4060AD8D00EF3D9ACBAE4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b2:08:8e:bd:98:2d:20:01:e3:71:b8:7a:80:
6f:54:8f:26:7b:c5:f2:b3:57:78:ce:ba:c5:d6:96:
9e:6e:d5:31:6e:bc:c6:77:1d:d2:2a:45:6d:da:24:
a2:e9:9d:36:61:36:ea:86:4c:22:cf:4c:04:a8:a9:
91:5a:94:63:f0:98:ce:8e:b5:a3:d4:f4:17:10:4b:
f3:83:95:eb:72:bd:16:45:b3:4a:85:5c:00:4c:96:
5c:c9:6d:53:a1:60:ec:18:5c:64:9b:8c:33:0f:a7:
e0:04:50:3e:9d:e8:a6:31:14:5a:98:a3:6b:c9:cd:
bf:05:35:b7:bd:13:f0:6e:7f:60:23:8d:b4:5b:21:
1d:f0:16:96:b9:04:8f:7b:8a:df:1c:4c:ca:80:7c:
a9:59:b7:d1:fa:f5:78:78:41:d1:88:88:71:bc:f7:
3c:33:9f:99:f1:0f:9a:48:84:d9:fb:fd:79:14:d5:
f2:ab:9d:68:01:7f:e5:4a:aa:74:70:ae:74:a4:4f:
f3:ca:4d:c7:ca:88:52:76:e2:d7:8f:26:78:d9:0f:
c8:1a:a3:5f:bb:6b:07:4c:a6:64:bc:bb:de:4a:2d:
f3:c1:ab:c7:a0:f0:f0:91:64:ec:16:39:0e:77:da:
3c:71:c7:ec:0b:ab:6d:2b:2a:e4:b9:c4:2e:87:b9:
01:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:22:E3:6A:75:30:52:C4:BA:40:60:AD:8D:00:EF:3D:9A:CB:AE:4F
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/34322e35312e3132382e302f31382d3138203d3e203536303035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.51.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a6:fa:32:c8:e2:f5:78:2b:d2:b7:23:9a:e5:8e:e9:a2:ca:cb:
2c:28:87:eb:db:21:07:0a:2f:9e:79:c8:d5:8b:6e:34:4e:02:
fd:fc:2d:91:a6:18:be:f6:1c:64:a9:1c:1e:51:4d:12:57:01:
6d:00:f2:1a:a6:df:65:78:a1:a3:3f:41:fb:ee:3b:b6:ab:18:
d6:8f:98:8a:48:8b:c6:ab:e8:2c:50:b3:25:3c:a2:38:8c:bf:
a3:b9:13:90:f2:0e:5c:22:17:e7:7d:8a:96:ac:c4:ff:8b:bd:
74:70:14:53:df:3c:8b:d0:0b:08:00:a1:a2:10:40:93:31:dd:
7c:43:fa:40:80:78:d1:28:3d:0c:53:f6:6c:78:4f:72:24:63:
06:1a:58:8b:cc:09:73:14:f0:a1:6c:2b:3b:6f:31:2a:3f:58:
38:5a:7b:85:3f:e2:a4:8a:53:fb:16:2d:92:b5:e0:c5:32:91:
d3:29:10:a9:7f:a6:4a:0a:18:f9:75:bf:35:bb:6b:8e:2b:48:
e9:f9:9e:0a:af:9c:8f:fa:fe:43:f3:e3:15:4c:31:2f:8b:e0:
bc:d4:81:c2:bd:15:63:a2:47:b8:c7:e7:ac:92:8b:b0:86:92:
9d:5b:ce:d4:4f:4d:a0:c7:df:c8:18:11:8c:49:c6:e7:64:e5:
80:3d:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:42:41 2026 by rpki-client