
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e302e302f31342d3134203d3e2030.roa
File: 3131332e34382e302e302f31342d3134203d3e2030.roa (raw, json)
Hash identifier: BXwXelvdfXad+LlIk99UkFAx/zud0desn5xZH50Kl74=
Subject key identifier: 40:D2:C7:0F:AC:3F:0B:4F:DC:87:12:7E:84:06:69:AF:4F:4D:A3:5B
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 499FF44336EE580B4EE17A9C5EA02CA1BF21FAE7
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e302e302f31342d3134203d3e2030.roa
Signing time: Thu 07 May 2026 02:21:21 +0000
ROA not before: Thu 07 May 2026 02:16:21 +0000
ROA not after: Thu 06 May 2027 02:21:21 +0000
asID: 0
IP address blocks: 113.48.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:9f:f4:43:36:ee:58:0b:4e:e1:7a:9c:5e:a0:2c:a1:bf:21:fa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:16:21 2026 GMT
Not After : May 6 02:21:21 2027 GMT
Subject: CN=40D2C70FAC3F0B4FDC87127E840669AF4F4DA35B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:ac:1c:b4:f3:6a:d1:4c:fe:4e:c7:4c:29:
cd:0e:e8:d4:d9:74:b5:50:ad:81:5b:5f:75:81:74:
9b:67:f9:b4:a5:cf:3b:07:ac:93:f8:5d:95:fa:6a:
43:92:a6:54:76:38:b3:84:42:93:2a:a0:99:13:04:
24:85:b4:e2:1e:ed:42:74:5c:30:f7:1d:40:01:80:
0b:f0:7d:31:73:c6:37:17:cc:b3:fc:d1:d9:1f:cb:
80:5a:d3:50:19:7d:07:43:01:bc:3e:6e:9d:f8:fa:
06:80:f1:b8:4c:d9:55:f3:d4:da:99:2d:69:0f:2f:
d5:6e:6d:a5:69:70:cb:92:5c:e4:1f:fd:7f:a9:ff:
1c:81:5a:99:a2:7a:09:45:57:26:66:0b:42:28:ac:
7f:07:7a:cc:3f:fd:49:4c:13:fc:05:f4:51:5c:23:
4e:d3:ad:b8:aa:1b:b1:57:81:b3:29:e9:7e:5c:74:
de:c6:fe:94:94:71:da:ce:27:19:96:71:c8:86:bd:
f2:6a:48:cb:30:3f:a4:ce:78:67:7a:59:39:f0:21:
7f:af:88:bc:49:20:c2:dc:71:0f:f0:63:5d:c3:79:
09:eb:36:c6:74:18:9d:94:51:83:ce:41:3a:f8:08:
6c:83:cb:ea:ee:54:af:bb:5e:0c:ad:9e:c9:d2:08:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D2:C7:0F:AC:3F:0B:4F:DC:87:12:7E:84:06:69:AF:4F:4D:A3:5B
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e302e302f31342d3134203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.48.0.0/14
Signature Algorithm: sha256WithRSAEncryption
3a:7f:cf:2e:1d:a8:21:d4:25:d1:92:3b:1b:d2:10:55:95:ce:
8f:7e:cf:6b:9f:b5:5a:3d:11:73:ca:7f:01:2b:ad:6b:09:4d:
ee:70:84:21:54:e6:9d:c4:2b:43:fa:ea:91:60:77:3b:3f:12:
b4:a5:8e:c8:5d:46:a7:db:34:41:4f:8a:76:b3:0a:c9:b4:5d:
8a:34:50:44:09:b2:9b:9a:6b:31:89:9d:6e:4c:2d:4c:ab:a7:
23:1c:3c:6f:cf:b8:15:60:58:5f:1f:db:da:39:b0:bb:b1:9a:
a7:8e:d8:8f:26:9b:e1:21:28:66:f0:82:f6:16:5c:1d:45:b9:
a4:93:2f:b2:2f:59:28:81:31:75:34:a7:f7:96:6d:d5:11:ef:
06:de:ab:68:86:61:e5:72:a8:7e:8c:a2:b8:bb:8f:31:c3:6d:
07:b0:e9:b6:36:73:53:ce:3f:57:5f:7c:70:93:3c:b5:e4:76:
43:41:5e:e7:19:a8:73:e5:dd:54:72:a3:63:d2:96:d9:16:0d:
20:21:e4:23:74:6b:9e:21:99:91:56:30:18:34:e5:64:18:fe:
07:b4:40:28:02:22:e3:99:f0:c3:00:4b:c7:7b:9e:e9:04:7c:
42:19:22:6d:2a:b9:1f:75:a4:a1:24:52:8d:54:75:e8:ab:83:
f4:dd:b6:c3
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUSZ/0QzbuWAtO4XqcXqAsob8h+ucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYz
QTdGQ0IwOTAeFw0yNjA1MDcwMjE2MjFaFw0yNzA1MDYwMjIxMjFaMDMxMTAvBgNV
BAMTKDQwRDJDNzBGQUMzRjBCNEZEQzg3MTI3RTg0MDY2OUFGNEY0REEzNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXlKwctPNq0Uz+TsdMKc0O6NTZ
dLVQrYFbX3WBdJtn+bSlzzsHrJP4XZX6akOSplR2OLOEQpMqoJkTBCSFtOIe7UJ0
XDD3HUABgAvwfTFzxjcXzLP80dkfy4Ba01AZfQdDAbw+bp34+gaA8bhM2VXz1NqZ
LWkPL9VubaVpcMuSXOQf/X+p/xyBWpmieglFVyZmC0IorH8Hesw//UlME/wF9FFc
I07TrbiqG7FXgbMp6X5cdN7G/pSUcdrOJxmWcciGvfJqSMswP6TOeGd6WTnwIX+v
iLxJIMLccQ/wY13DeQnrNsZ0GJ2UUYPOQTr4CGyDy+ruVK+7XgytnsnSCEMxAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQUQNLHD6w/C0/chxJ+hAZpr09No1swHwYDVR0j
BBgwFoAUOOQnl3SE828/CkUojW32Tzp/ywkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDU4NjM1ODA5NTA4NTU3Ny8wLzM4RTQyNzk3NzQ4NEYzNkYzRjBBNDUyODhENkRG
NjRGM0E3RkNCMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYzQTdGQ0IwOS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA0NTg2MzU4MDk1MDg1NTc3LzAvMzEzMTMzMmUzNDM4
MmUzMDJlMzAyZjMxMzQyZDMxMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCcTAwDQYJ
KoZIhvcNAQELBQADggEBADp/zy4dqCHUJdGSOxvSEFWVzo9+z2uftVo9EXPKfwEr
rWsJTe5whCFU5p3EK0P66pFgdzs/ErSljshdRqfbNEFPinazCsm0XYo0UEQJspua
azGJnW5MLUyrpyMcPG/PuBVgWF8f29o5sLuxmqeO2I8mm+EhKGbwgvYWXB1FuaST
L7IvWSiBMXU0p/eWbdUR7wbeq2iGYeVyqH6Mori7jzHDbQew6bY2c1POP1dffHCT
PLXkdkNBXucZqHPl3VRyo2PSltkWDSAh5CN0a54hmZFWMBg05WQY/ge0QCgCIuOZ
8MMAS8d7nukEfEIZIm0quR91pKEkUo1Udeirg/TdtsM=
-----END CERTIFICATE-----
Generated at Tue May 12 21:38:48 2026 by rpki-client