
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3130332e3233352e3134342e302f32342d3234203d3e2039333839.roa
File: 3130332e3233352e3134342e302f32342d3234203d3e2039333839.roa (raw, json)
Hash identifier: tck5DLEX5DrIqaVI5Rc02QUNNRuQhiy3A8F+mwevu+A=
Subject key identifier: CD:64:3E:02:0C:AB:97:4C:1E:D2:5A:3E:E5:45:61:10:56:7E:72:CA
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 505E53E01BA3CD816A24B125D835B0F3B5D39A75
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3130332e3233352e3134342e302f32342d3234203d3e2039333839.roa
Signing time: Thu 07 May 2026 02:06:45 +0000
ROA not before: Thu 07 May 2026 02:01:45 +0000
ROA not after: Thu 06 May 2027 02:06:45 +0000
asID: 9389
IP address blocks: 103.235.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:5e:53:e0:1b:a3:cd:81:6a:24:b1:25:d8:35:b0:f3:b5:d3:9a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:01:45 2026 GMT
Not After : May 6 02:06:45 2027 GMT
Subject: CN=CD643E020CAB974C1ED25A3EE5456110567E72CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:4d:d3:37:f0:65:4e:7a:4e:42:9b:c4:26:
cd:f1:00:69:97:d7:ac:d7:de:20:60:05:6b:cc:5c:
3a:9d:f4:bc:5a:a2:a1:ad:06:1e:03:5e:1f:d8:97:
15:83:f1:49:f8:0c:61:e3:83:88:d5:d3:c6:9d:fe:
a2:fc:4c:26:82:6e:fc:7a:0f:2f:a7:35:a5:0f:61:
02:53:5d:d8:a9:80:2c:15:fa:29:cb:ef:9c:25:4c:
14:75:90:5a:74:c2:5f:fb:85:c3:49:94:30:e5:9b:
cb:bf:06:28:0d:37:8a:46:a4:be:55:12:7f:1d:dd:
ed:b0:21:4b:e6:2d:33:02:f3:e2:c2:18:53:26:d0:
55:86:f4:98:39:47:32:9c:6d:2c:e8:a1:29:f2:39:
7f:29:5e:ff:a4:aa:df:a9:c8:36:b5:62:8a:9e:b7:
44:11:6c:21:b0:7f:4c:fd:30:ae:20:0d:3a:67:48:
be:01:06:84:44:f2:2e:a2:0e:16:97:4e:63:87:63:
8b:7e:58:40:98:28:a7:3d:41:7e:7f:0e:38:35:ca:
de:3a:7e:0b:8b:fa:6c:80:c4:cd:13:d0:23:f8:29:
25:47:e3:39:bf:de:70:72:13:12:c4:1c:56:c7:50:
dd:81:53:88:67:fe:a9:8e:a9:5e:78:d4:7f:3b:f0:
cf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:64:3E:02:0C:AB:97:4C:1E:D2:5A:3E:E5:45:61:10:56:7E:72:CA
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3130332e3233352e3134342e302f32342d3234203d3e2039333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.144.0/24
Signature Algorithm: sha256WithRSAEncryption
60:5e:9d:55:2e:68:50:8c:79:7a:c3:09:2d:55:18:94:c7:d7:
0f:6a:d2:e7:bc:8c:77:2c:e5:31:65:d1:50:90:b6:98:70:9a:
26:a0:e7:c3:a0:8a:d7:74:cc:55:25:92:46:e6:66:93:f5:05:
cc:2f:8c:e4:81:4f:ca:d1:3c:b9:65:4e:26:53:88:35:6f:c2:
49:77:16:fc:40:a6:ca:68:28:0e:63:63:b3:f9:73:d2:98:6e:
d3:e4:2a:de:ba:ea:0a:a7:11:a8:a9:f5:52:18:37:1c:ef:8e:
69:35:13:6a:f9:2e:9a:d2:fc:1f:94:ab:94:5f:bb:9d:b5:47:
1e:1e:5e:4a:8a:d3:13:9e:34:f0:00:ed:0f:62:63:d1:fe:b8:
64:80:8d:b1:5d:17:92:5d:21:73:9b:5a:0f:c0:dc:5a:e1:ae:
24:65:8c:03:80:a9:11:43:a5:00:ca:4d:9d:bc:21:e1:9b:42:
bd:03:29:50:40:dc:53:41:b5:b2:8f:9c:c0:67:5b:a3:7c:fb:
75:64:8d:fe:4f:2a:22:b5:61:49:49:cc:8c:c6:5d:2e:d3:72:
5a:22:3a:a5:22:77:ea:13:b4:22:d2:55:71:0f:56:b6:6c:60:
ca:51:d7:73:4f:a6:62:05:e8:72:fd:d2:34:1c:8c:cd:b4:35:
37:cf:da:17
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:18:04 2026 by rpki-client