
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e3132372e302f32342d3234203d3e20313339353837.roa
File: 3131332e34382e3132372e302f32342d3234203d3e20313339353837.roa (raw, json)
Hash identifier: HTUljpDrGw1DCHuqKm7OwFRy3BuygYZB8Bf46LvsJG4=
Subject key identifier: 53:93:76:CF:A7:9B:32:A4:77:63:B0:D9:D2:65:01:6D:EE:79:89:D8
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 715352097D7972A381AED27E8A830888A0FF0B2C
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e3132372e302f32342d3234203d3e20313339353837.roa
Signing time: Thu 07 May 2026 02:06:45 +0000
ROA not before: Thu 07 May 2026 02:01:45 +0000
ROA not after: Thu 06 May 2027 02:06:45 +0000
asID: 139587
IP address blocks: 113.48.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:53:52:09:7d:79:72:a3:81:ae:d2:7e:8a:83:08:88:a0:ff:0b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:01:45 2026 GMT
Not After : May 6 02:06:45 2027 GMT
Subject: CN=539376CFA79B32A47763B0D9D265016DEE7989D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:dc:82:e5:c1:68:48:d7:ef:70:43:76:47:
74:77:68:37:cb:43:52:47:a6:0e:b6:60:1f:c8:65:
b1:fb:80:c3:4b:db:53:01:ae:67:36:91:15:98:aa:
42:3d:7f:68:16:9e:4b:c2:4e:46:7e:22:32:4e:ff:
3b:b9:c6:cb:90:cd:e6:7e:3f:13:3e:8c:88:f7:ef:
e1:12:59:c3:cd:8f:74:43:31:78:f7:5b:a9:33:41:
b1:43:e9:81:d3:c1:3f:bd:a2:0d:40:93:46:ce:72:
53:3b:f8:a7:aa:89:05:85:75:ff:b9:34:60:1e:6a:
45:26:7e:24:09:9e:fd:00:d0:12:2f:d5:d6:db:d5:
ec:62:00:58:35:8c:f6:35:a6:d9:60:20:69:d8:63:
38:1b:5d:b6:d6:6b:39:32:81:0d:8b:e3:ce:76:fc:
a0:89:9e:95:66:84:57:47:3d:78:e7:97:11:4c:a9:
6b:8a:69:fd:59:49:77:c9:5d:34:e2:76:21:9e:43:
84:cc:45:69:90:4b:00:cf:20:72:d4:10:39:60:3a:
a6:ed:e9:79:cb:bb:e0:67:d2:81:69:dd:9e:39:df:
bb:24:6b:fa:5d:75:17:d4:bb:df:a3:e7:2e:59:ab:
bf:6f:8e:85:f6:9d:a8:13:13:46:4c:9e:16:32:24:
f3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:93:76:CF:A7:9B:32:A4:77:63:B0:D9:D2:65:01:6D:EE:79:89:D8
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e3132372e302f32342d3234203d3e20313339353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.48.127.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9e:30:9d:49:30:ae:67:9c:27:19:99:c2:7e:e4:48:85:c3:
dc:9f:e9:86:83:d1:24:38:c2:22:0b:df:a0:dc:bf:d4:a7:8c:
16:56:87:88:ed:46:4c:61:c3:49:5c:bf:fe:ec:e8:d9:f0:f2:
e1:40:12:ce:af:9b:c6:30:c4:94:e5:e1:e9:8e:ea:7e:40:0f:
bb:32:5b:29:01:2a:0f:b3:2f:31:60:b3:f8:ec:53:0b:20:61:
d6:e9:47:5a:a7:8b:dc:a6:ee:1a:ee:09:a2:5d:02:52:03:87:
16:ee:f5:05:26:49:47:b7:3c:74:32:84:10:08:4f:a2:2a:af:
b2:98:c1:43:6f:d2:2b:31:5d:2f:7f:81:18:0d:bf:14:48:6e:
45:4d:96:b7:07:94:77:b6:e3:91:85:80:3a:e3:9b:a7:1f:ba:
4e:ad:d1:d2:b0:16:d7:63:47:ce:b3:a9:1a:92:93:97:f4:fe:
f9:68:93:00:87:34:3f:3a:53:86:44:31:8c:da:cd:03:1b:1a:
2c:c6:a5:57:15:81:10:8c:e6:5c:47:92:5d:aa:cd:11:cd:25:
ca:67:db:44:32:8b:1c:63:3c:58:f9:63:9c:d4:6e:e9:46:28:
04:da:85:82:a7:07:3c:fd:58:6b:b1:58:8f:7a:20:74:d3:ff:
cb:3d:a0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:42:44 2026 by rpki-client