
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e34382e302f32302d3230203d3e2039333839.roa
File: 3131332e34382e34382e302f32302d3230203d3e2039333839.roa (raw, json)
Hash identifier: 9bPV0cC0IGjdSA5JVLDKF4J/5tmikZb33aL3J1Zas98=
Subject key identifier: 82:CF:2E:DD:1D:A2:69:1D:2D:53:FA:A5:95:C1:72:E0:79:CA:8B:7C
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 7CC08C369E8C64C70D6634DF5365F79E1B36CBEE
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e34382e302f32302d3230203d3e2039333839.roa
Signing time: Thu 07 May 2026 02:06:45 +0000
ROA not before: Thu 07 May 2026 02:01:45 +0000
ROA not after: Thu 06 May 2027 02:06:45 +0000
asID: 9389
IP address blocks: 113.48.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c0:8c:36:9e:8c:64:c7:0d:66:34:df:53:65:f7:9e:1b:36:cb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:01:45 2026 GMT
Not After : May 6 02:06:45 2027 GMT
Subject: CN=82CF2EDD1DA2691D2D53FAA595C172E079CA8B7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:53:ed:82:a7:19:a7:1a:75:bd:5d:22:8d:
e6:07:3c:68:f4:e6:c5:f5:46:e2:af:57:a8:ce:66:
13:01:11:89:df:6b:8d:c8:be:d0:1b:f7:80:09:86:
fa:c7:0c:c8:52:f4:dd:62:37:d5:bb:ab:59:cf:c5:
db:13:73:15:ca:41:8c:c7:46:d6:85:91:96:12:89:
ff:28:9c:50:af:ad:11:a9:83:5e:5e:07:68:a5:fa:
87:52:b3:98:b0:c2:cb:e5:f3:0f:e3:29:6f:d7:cc:
7c:12:46:98:b4:c4:dd:b0:4e:e9:95:bf:90:ed:3e:
d5:80:0a:3e:e0:c3:8f:4d:ae:0e:28:1f:a9:16:81:
eb:00:1e:45:7a:17:59:f2:bd:f0:a3:4d:0f:f7:fe:
67:05:5d:9c:5a:e7:c0:5a:6a:b9:31:ab:1e:41:16:
eb:3d:59:66:3f:2b:45:56:16:00:57:77:c1:cc:e2:
69:51:d7:e4:e5:62:26:87:2b:83:b1:57:7a:84:cb:
ef:e0:2c:20:2c:1f:3d:db:ab:b1:d0:78:c4:c5:18:
47:bc:f9:41:c6:18:46:16:79:44:dc:50:1b:f6:6b:
16:f3:a3:8f:21:f6:46:45:2a:ab:33:1b:40:fe:81:
22:11:1e:a5:da:9c:e0:4e:76:9c:b8:db:9c:40:7f:
30:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CF:2E:DD:1D:A2:69:1D:2D:53:FA:A5:95:C1:72:E0:79:CA:8B:7C
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e34382e302f32302d3230203d3e2039333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.48.48.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:08:04:40:33:4f:e1:20:11:05:4a:95:1f:36:6d:68:9f:33:
b0:97:7f:89:72:ce:0c:70:c5:9e:a2:03:df:52:01:18:4c:f5:
5d:78:51:df:7a:ab:88:6a:19:ad:37:6b:dc:ea:64:0f:4e:ea:
3e:e4:a1:4d:42:c3:05:80:74:1f:ef:db:7d:46:d3:bc:9f:6a:
b3:9e:12:65:47:aa:a3:cf:68:dd:94:81:60:2f:c8:4d:32:22:
0b:b9:bc:3a:54:7c:1a:07:ed:52:90:b1:86:25:62:ae:60:c2:
61:48:f0:29:f1:18:9f:f8:ab:1c:f7:fc:f6:f3:ec:e8:95:b0:
79:5c:89:d2:24:37:72:87:2b:07:71:16:3a:74:80:ba:98:5a:
ee:e2:b6:b8:7a:80:0c:04:1c:b0:13:74:c9:e4:63:8f:98:5c:
24:88:99:ff:8f:8e:66:ad:ec:fa:13:08:63:aa:4c:c3:13:43:
87:38:c0:3b:b3:35:cf:b4:2f:a8:dd:f1:01:92:72:fe:c2:01:
1a:04:3f:95:1e:63:7d:b7:87:73:88:f1:6b:fe:1d:7d:a8:71:
2e:d7:67:e4:75:9a:7b:f2:36:d3:79:1a:ed:00:d1:38:9a:23:
f1:1f:9a:9d:85:f0:eb:b2:b5:97:e8:c0:d5:f4:8c:37:8a:9f:
32:2f:21:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:46:50 2026 by rpki-client