
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS132818.roa
File: AS132818.roa (raw, json)
Hash identifier: enp6j+wQPA+jZ6jClfRx02szBQC6POH+LSyp20J4fVw=
Subject key identifier: 87:00:FF:22:EB:50:FB:4F:9D:41:5C:CD:AA:39:11:C2:01:99:8E:1D
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 38E236B5AD6EFF2795964B4925117F7EA4AC39B8
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS132818.roa
Signing time: Tue 09 Jun 2026 09:22:12 +0000
ROA not before: Tue 09 Jun 2026 09:17:12 +0000
ROA not after: Tue 08 Jun 2027 09:22:12 +0000
asID: 132818
IP address blocks: 114.112.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e2:36:b5:ad:6e:ff:27:95:96:4b:49:25:11:7f:7e:a4:ac:39:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: Jun 9 09:17:12 2026 GMT
Not After : Jun 8 09:22:12 2027 GMT
Subject: CN=8700FF22EB50FB4F9D415CCDAA3911C201998E1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:23:1c:76:dc:59:62:e5:82:34:81:af:f8:
aa:c5:52:ae:22:4a:77:cf:68:01:2a:a5:de:c4:bc:
1b:9c:49:00:84:40:de:c8:2f:5e:b6:13:1b:16:65:
7e:0a:d4:b6:68:dc:3b:14:a7:20:49:bc:88:f6:de:
14:5d:6a:01:8f:1d:e4:ac:3f:e7:b8:09:b0:1a:89:
39:9a:60:1f:5b:0f:b9:bc:82:12:6f:44:4d:f8:7c:
48:6b:bd:a1:0d:57:fc:fb:ba:e6:5a:1c:3c:5f:15:
e9:3b:29:b7:04:c2:58:a4:35:e6:8f:ad:1d:b2:b4:
a9:b1:5c:c3:68:81:f3:3d:3a:5e:45:2e:3a:30:37:
16:77:81:f9:31:90:2b:4c:28:f6:93:a0:75:bd:20:
46:1d:0c:b4:d8:a5:65:c8:af:1f:24:b8:4a:cd:6e:
2b:4c:b0:f0:0a:56:b9:0e:61:9e:67:fc:37:cc:85:
ae:85:e4:58:a2:4e:ce:a2:3d:cb:81:2f:17:46:39:
0b:1d:ec:f5:42:c5:2e:ef:4d:92:50:14:00:91:6d:
ed:2c:cb:a7:83:2e:60:fa:be:bc:de:cb:06:ad:8c:
97:d3:66:a9:53:6b:84:49:84:10:15:8e:8c:d3:04:
a7:2b:81:4f:a8:ed:e1:ff:c2:00:73:31:8c:c5:03:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:00:FF:22:EB:50:FB:4F:9D:41:5C:CD:AA:39:11:C2:01:99:8E:1D
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS132818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.112.240.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:21:b7:b2:18:3c:66:f7:b5:25:f1:64:27:2f:68:97:59:f9:
15:5d:0f:e7:11:5a:70:7c:44:a1:ca:03:dc:b0:38:b5:0a:6a:
49:be:40:1e:cf:a2:46:31:dd:bd:43:26:d1:ba:96:31:f2:16:
23:24:eb:a5:b9:d7:0e:2d:a5:ea:91:bd:0f:d7:d1:7f:9d:1c:
fe:23:90:02:51:7d:48:18:4c:fd:25:6e:46:f0:a5:4e:9a:42:
72:f9:3a:68:2a:6a:65:e8:99:4a:a6:82:0b:21:eb:33:c1:3c:
c9:f5:7c:91:d1:59:a3:18:b8:22:ff:69:3c:4b:8a:0e:ed:21:
28:14:7d:04:34:4f:85:6e:d0:c4:8e:6b:da:3c:9e:85:a4:8a:
f6:74:33:aa:76:03:93:43:22:80:8e:07:cb:4f:28:ad:5d:9b:
17:cd:7b:30:ab:d5:f1:9a:cc:7e:a3:56:b3:b4:5e:c5:b9:9d:
0f:7d:69:78:47:da:a1:6b:78:9a:50:b3:0c:34:98:d8:73:2d:
02:e0:be:3e:ab:75:8e:4b:1c:73:0a:82:81:e5:fe:27:33:3a:
94:92:8c:a6:5b:04:9b:e1:97:3c:4b:1c:00:a8:df:7b:0f:e2:
cb:67:8c:ab:ec:7d:48:e5:27:a0:11:47:2d:11:01:37:b9:07:
6b:8f:30:73
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUOOI2ta1u/yeVlktJJRF/fqSsObgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw
NDk1QzhDNDAeFw0yNjA2MDkwOTE3MTJaFw0yNzA2MDgwOTIyMTJaMDMxMTAvBgNV
BAMTKDg3MDBGRjIyRUI1MEZCNEY5RDQxNUNDREFBMzkxMUMyMDE5OThFMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/yMcdtxZYuWCNIGv+KrFUq4i
SnfPaAEqpd7EvBucSQCEQN7IL162ExsWZX4K1LZo3DsUpyBJvIj23hRdagGPHeSs
P+e4CbAaiTmaYB9bD7m8ghJvRE34fEhrvaENV/z7uuZaHDxfFek7KbcEwlikNeaP
rR2ytKmxXMNogfM9Ol5FLjowNxZ3gfkxkCtMKPaToHW9IEYdDLTYpWXIrx8kuErN
bitMsPAKVrkOYZ5n/DfMha6F5FiiTs6iPcuBLxdGOQsd7PVCxS7vTZJQFACRbe0s
y6eDLmD6vrzeywatjJfTZqlTa4RJhBAVjozTBKcrgU+o7eH/wgBzMYzFA2PxAgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQUhwD/IutQ+0+dQVzNqjkRwgGZjh0wHwYDVR0j
BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4
NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw
XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTU4OTA5ODUyMjY4NjI1OTUvMC9BUzEzMjgxOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHJw8DANBgkqhkiG9w0BAQsFAAOCAQEArCG3shg8Zve1JfFkJy9ol1n5
FV0P5xFacHxEocoD3LA4tQpqSb5AHs+iRjHdvUMm0bqWMfIWIyTrpbnXDi2l6pG9
D9fRf50c/iOQAlF9SBhM/SVuRvClTppCcvk6aCpqZeiZSqaCCyHrM8E8yfV8kdFZ
oxi4Iv9pPEuKDu0hKBR9BDRPhW7QxI5r2jyehaSK9nQzqnYDk0MigI4Hy08orV2b
F817MKvV8ZrMfqNWs7RexbmdD31peEfaoWt4mlCzDDSY2HMtAuC+Pqt1jksccwqC
geX+JzM6lJKMplsEm+GXPEscAKjfew/iy2eMq+x9SOUnoBFHLREBN7kHa48wcw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:35:41 2026 by rpki-client