
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS136188.roa
File: AS136188.roa (raw, json)
Hash identifier: IPk6L5PbnrtagcKgNcMFsn9XatPTqlU6nhugSiUOzZ4=
Subject key identifier: 4B:1E:9C:41:FF:55:DA:C0:11:22:2F:95:42:7C:E5:04:17:5A:1B:26
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 51594D9D2FD356F53C2ED280A1CE5160DA4915D9
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS136188.roa
Signing time: Mon 08 Jun 2026 09:03:47 +0000
ROA not before: Mon 08 Jun 2026 08:58:47 +0000
ROA not after: Mon 07 Jun 2027 09:03:47 +0000
asID: 136188
IP address blocks: 114.66.0.0/18 maxlen: 18
114.66.0.0/19 maxlen: 19
114.66.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:59:4d:9d:2f:d3:56:f5:3c:2e:d2:80:a1:ce:51:60:da:49:15:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: Jun 8 08:58:47 2026 GMT
Not After : Jun 7 09:03:47 2027 GMT
Subject: CN=4B1E9C41FF55DAC011222F95427CE504175A1B26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b1:f2:3f:47:24:af:c2:fc:d9:bf:d6:bd:6b:
60:9b:09:37:19:d1:cd:c5:9c:49:a6:ba:1d:79:e7:
85:7d:a7:4e:43:b8:33:7d:7e:e1:46:0f:34:4e:8b:
a7:61:9d:95:01:ac:f3:62:5d:66:36:74:45:ea:15:
43:68:6b:6d:17:de:23:76:13:cf:73:7a:74:aa:13:
91:d6:d1:ef:73:28:91:9b:4e:4e:6e:f6:55:43:d2:
c6:67:a4:85:ae:36:9c:7a:5d:6d:11:89:8e:3b:d0:
21:70:1d:f0:1c:d3:0b:89:17:55:92:a4:67:0e:89:
23:13:61:e4:76:7a:ea:2f:75:a6:b7:d4:b9:ff:9c:
d6:c1:85:ed:b0:22:1a:13:a4:d7:60:76:79:f6:0f:
a5:7c:ca:2a:e0:76:b1:f4:1d:65:f2:4f:13:8a:02:
10:a6:a8:9e:89:f5:02:72:84:e8:46:30:f4:64:5f:
b6:3a:1d:bb:ab:3b:30:a3:02:e6:a9:53:42:92:d7:
db:5e:95:52:28:56:e8:85:e4:ee:1d:02:c5:88:a3:
a6:4b:cd:fd:b8:2a:03:cc:1f:8f:1d:49:c6:ba:b7:
06:e6:c6:ca:b8:90:0c:11:6f:b1:94:86:4b:b9:b0:
36:b8:5c:37:b8:7c:b2:e4:17:d3:a9:c2:e7:8c:45:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1E:9C:41:FF:55:DA:C0:11:22:2F:95:42:7C:E5:04:17:5A:1B:26
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS136188.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.66.0.0/18
Signature Algorithm: sha256WithRSAEncryption
63:fe:a8:39:a8:0a:26:61:42:c0:58:96:63:a6:c4:0b:2d:5e:
e1:a4:5c:ce:8b:79:9e:76:86:02:3a:14:fe:13:9c:77:5e:bd:
f8:e5:fc:59:d8:eb:56:e6:63:4e:a0:ac:a0:1e:77:23:e4:b5:
f9:6f:fb:15:f4:8f:b7:83:be:53:96:0a:61:45:c3:76:dc:0a:
e0:83:3c:d7:77:e6:bb:c3:89:da:09:47:df:07:ce:4b:7f:54:
fa:e2:58:6c:71:82:90:17:ed:b5:f9:2d:84:df:65:f9:3f:9d:
de:d4:e6:1e:7a:c5:d3:53:cf:43:f3:b0:46:84:2b:32:46:81:
0e:14:b0:b9:1b:54:e3:09:a0:f6:39:f6:67:d0:51:d8:86:8d:
27:a8:fb:8a:66:cd:0d:17:6a:ac:9f:15:cd:7e:c3:78:f6:e0:
97:5e:26:45:f5:76:b3:12:0e:ed:b8:b9:88:1e:68:be:da:c2:
d4:f0:82:d1:1a:da:fc:15:00:6e:34:e8:08:c9:76:81:9e:70:
b9:04:c6:0f:b4:ab:d9:3d:80:54:18:42:c1:0d:59:87:06:3a:
6e:c9:22:b0:e6:d9:ad:e2:0a:70:a4:19:8b:09:de:b7:96:65:
58:ab:1e:aa:74:99:7f:7c:4d:b7:e1:c2:70:88:ec:db:76:63:
b2:3a:36:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:35:40 2026 by rpki-client