
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/3133382e3235322e37332e302f32342d3234203d3e20313337373331.roa
File: 3133382e3235322e37332e302f32342d3234203d3e20313337373331.roa (raw, json)
Hash identifier: BYAXVTxfgLWzT4RgbXwqdG0dnJo1tFwF8NnGu6h4glA=
Subject key identifier: B8:3A:1F:B4:66:13:9C:4F:28:D3:A7:23:73:96:2B:D6:4F:90:41:EA
Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701
Certificate serial: 037334323D63D3FCA5917E0EC988815DBADFBBF3
Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/3133382e3235322e37332e302f32342d3234203d3e20313337373331.roa
Signing time: Mon 27 Apr 2026 02:48:03 +0000
ROA not before: Mon 27 Apr 2026 02:43:03 +0000
ROA not after: Mon 26 Apr 2027 02:48:03 +0000
asID: 137731
IP address blocks: 138.252.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 12:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:73:34:32:3d:63:d3:fc:a5:91:7e:0e:c9:88:81:5d:ba:df:bb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701
Validity
Not Before: Apr 27 02:43:03 2026 GMT
Not After : Apr 26 02:48:03 2027 GMT
Subject: CN=B83A1FB466139C4F28D3A72373962BD64F9041EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:45:d1:9b:a3:ac:3b:0d:80:3c:2f:19:3d:90:
2e:ba:05:b3:9e:97:31:bf:d7:be:60:68:44:33:c6:
91:63:20:7d:1f:07:77:df:68:a2:05:c5:9c:f7:a7:
f4:79:96:2d:c6:26:c8:cf:39:8f:1b:ec:2c:6f:ce:
b9:2a:0a:58:0e:96:f5:93:c7:fb:44:94:e0:b3:15:
5c:1e:c2:72:e8:6b:dd:85:2a:e9:85:5f:10:fb:0e:
e0:c8:89:47:54:ed:e3:a2:37:7a:53:cc:e3:c3:1a:
bc:b5:6e:b4:32:cb:cf:d5:89:57:02:17:54:68:5f:
20:d0:38:bd:df:fc:ae:73:8e:5f:6d:d2:45:50:03:
76:f2:92:aa:ed:99:08:5f:e1:a1:40:b0:4c:50:a4:
d0:cb:aa:4f:8b:e9:4a:39:30:2a:5a:d7:65:f9:83:
ed:5b:32:34:9d:c5:24:65:40:3c:c8:85:45:1f:37:
6c:bc:3c:dd:05:cc:1d:d9:fb:6b:33:9e:bc:14:33:
02:88:3d:2e:66:ae:66:56:44:90:54:cc:0c:84:3c:
ba:7a:42:82:ed:ab:04:7e:8e:ec:4b:e5:4d:ff:c7:
b1:ff:c9:9a:b4:77:f6:b5:d6:ab:61:1a:01:ee:8d:
6d:e5:a0:2c:c5:db:a9:1b:55:99:4d:bb:bb:2b:99:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3A:1F:B4:66:13:9C:4F:28:D3:A7:23:73:96:2B:D6:4F:90:41:EA
X509v3 Authority Key Identifier:
keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/3133382e3235322e37332e302f32342d3234203d3e20313337373331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.252.73.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5f:1f:72:a5:97:03:26:a5:c0:68:18:89:cf:24:4f:cd:84:
b9:b1:ae:4e:11:94:67:ed:e2:60:d7:dd:1d:e1:23:89:96:10:
a7:ea:4f:0e:4f:67:e4:82:2b:a8:79:72:2f:f1:b9:ee:de:cb:
6a:9b:f3:b7:cf:7a:9e:a5:ac:3b:48:39:b2:49:e0:9b:07:ac:
54:1a:c5:df:c3:e2:1a:77:3f:65:80:25:61:cb:34:66:6e:b4:
cc:aa:10:a0:0c:10:f1:17:4f:58:07:42:b5:32:2b:4c:82:56:
10:73:16:f2:a3:ad:41:3c:6f:3c:0f:6c:a7:62:f8:d4:b2:7f:
04:c7:6b:04:1f:0a:0f:2d:78:93:04:5b:e0:54:9b:40:ea:b9:
8e:97:0b:54:05:5b:a4:86:44:92:dc:ce:0d:ce:9c:49:82:08:
0c:71:3f:c5:4f:f5:65:f0:1f:43:7b:64:0a:c7:29:0a:83:38:
5b:f1:8e:3c:0d:4f:a0:d8:05:2c:cf:8e:9b:47:6d:5a:d5:ed:
26:88:5e:d1:33:e8:17:2f:ca:d0:8f:43:d0:49:78:1e:69:20:
76:8c:b6:d8:bb:3e:08:ed:83:40:8f:59:04:5a:84:c3:d2:b7:
75:3b:de:7b:b3:69:96:66:5e:d3:8d:91:3c:94:5b:b7:d0:06:
82:5e:b4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:20 2026 by rpki-client