
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34392e302e302f32302d3230203d3e2034383337.roa
File: 3131332e34392e302e302f32302d3230203d3e2034383337.roa (raw, json)
Hash identifier: BtJuGH9eyI7J30aIlixhzcmnERaq7abngYrSLqEJF9E=
Subject key identifier: 77:F1:C5:37:A5:39:FA:8E:AC:FF:3C:C0:94:15:F5:07:9E:B9:2D:7C
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 04FEAD7DAF2C7E208E82059A0D657EAE283ADBE2
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34392e302e302f32302d3230203d3e2034383337.roa
Signing time: Thu 07 May 2026 02:06:45 +0000
ROA not before: Thu 07 May 2026 02:01:45 +0000
ROA not after: Thu 06 May 2027 02:06:45 +0000
asID: 4837
IP address blocks: 113.49.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:fe:ad:7d:af:2c:7e:20:8e:82:05:9a:0d:65:7e:ae:28:3a:db:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:01:45 2026 GMT
Not After : May 6 02:06:45 2027 GMT
Subject: CN=77F1C537A539FA8EACFF3CC09415F5079EB92D7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0b:33:ed:6e:f4:13:0f:ff:4b:2a:59:0b:16:
4d:83:d9:9e:83:71:27:a0:14:3c:6a:79:f0:ae:25:
69:da:15:d2:c7:f9:35:b5:a0:c8:49:35:8a:cb:9c:
57:c8:17:b6:70:16:fd:d4:74:6e:ea:b9:ff:86:eb:
6a:41:6b:3c:c0:62:96:1c:ea:25:17:51:8c:1f:53:
aa:aa:70:94:a7:1b:1c:bb:ef:a5:35:98:aa:b3:ed:
bf:85:42:1e:37:2b:6f:71:ed:60:c9:e4:da:02:07:
d8:00:ca:54:ff:1b:07:ad:27:0c:db:e5:76:f2:05:
52:d1:15:5a:9a:d5:2d:bf:b0:b1:55:7f:30:10:ab:
ae:3f:e2:d5:27:7b:f0:79:7d:92:f4:9b:49:69:30:
67:7f:f7:cb:4c:7a:61:c0:44:52:bc:11:52:fd:1f:
a5:a2:a1:6c:20:42:9f:38:99:fe:58:73:8a:2b:7d:
a1:1d:46:3b:7d:28:c0:bf:c7:45:23:2c:c9:78:49:
a8:3d:97:a9:3a:3b:99:df:2e:31:32:5f:1b:3c:74:
cf:10:86:76:18:c0:32:fc:b1:8e:db:d5:d5:7a:72:
36:8a:fd:5d:7a:f7:f5:b3:6e:e3:71:d6:72:4a:42:
68:98:7b:7a:42:c3:85:aa:fd:23:bf:fd:23:47:68:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F1:C5:37:A5:39:FA:8E:AC:FF:3C:C0:94:15:F5:07:9E:B9:2D:7C
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34392e302e302f32302d3230203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.49.0.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:d9:4b:6d:12:c2:ab:cf:64:18:2a:a9:60:88:55:db:70:c8:
da:cc:ad:3c:3d:e4:94:5c:8e:21:58:0d:fa:70:b2:01:02:4d:
1c:56:38:86:ed:16:72:10:4a:03:bd:e2:d4:97:89:c4:cf:81:
e4:f6:46:2d:c3:e2:b1:4e:a6:b1:b8:cc:5b:fc:f2:60:1a:9a:
21:48:be:e3:d8:06:9b:f5:65:1c:f4:e9:8d:8d:27:33:9c:81:
5a:e1:9a:8b:dc:e0:9f:1a:4f:8a:9a:7a:04:7b:42:2e:ec:14:
8a:8f:92:e2:78:aa:a7:e0:fd:1a:14:fa:1c:65:bb:52:b3:c6:
ee:37:35:5e:c3:5d:5e:28:0d:d5:7f:ef:ad:45:96:f1:2b:f7:
a0:b1:95:49:51:4a:72:4b:f1:84:33:ad:23:35:1e:48:96:38:
91:96:6d:e9:d5:58:52:32:25:33:bd:a3:76:b8:e1:38:86:4d:
a7:1a:db:36:94:b4:9a:cd:ed:6a:c1:86:59:d9:fe:37:9c:f4:
f7:b0:6a:55:a5:7d:ac:01:bb:28:6d:a2:e2:be:4e:da:4b:82:
5a:d5:c4:bc:63:5c:33:08:78:40:35:76:70:20:c2:af:05:13:
04:03:41:79:08:2e:d1:8d:28:97:f2:27:43:90:d1:5d:7f:02:
a0:fe:fa:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUBP6tfa8sfiCOggWaDWV+rig62+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYz
QTdGQ0IwOTAeFw0yNjA1MDcwMjAxNDVaFw0yNzA1MDYwMjA2NDVaMDMxMTAvBgNV
BAMTKDc3RjFDNTM3QTUzOUZBOEVBQ0ZGM0NDMDk0MTVGNTA3OUVCOTJEN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCICzPtbvQTD/9LKlkLFk2D2Z6D
cSegFDxqefCuJWnaFdLH+TW1oMhJNYrLnFfIF7ZwFv3UdG7quf+G62pBazzAYpYc
6iUXUYwfU6qqcJSnGxy776U1mKqz7b+FQh43K29x7WDJ5NoCB9gAylT/GwetJwzb
5XbyBVLRFVqa1S2/sLFVfzAQq64/4tUne/B5fZL0m0lpMGd/98tMemHARFK8EVL9
H6WioWwgQp84mf5Yc4orfaEdRjt9KMC/x0UjLMl4Sag9l6k6O5nfLjEyXxs8dM8Q
hnYYwDL8sY7b1dV6cjaK/V169/WzbuNx1nJKQmiYe3pCw4Wq/SO//SNHaKEZAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUd/HFN6U5+o6s/zzAlBX1B565LXwwHwYDVR0j
BBgwFoAUOOQnl3SE828/CkUojW32Tzp/ywkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDU4NjM1ODA5NTA4NTU3Ny8wLzM4RTQyNzk3NzQ4NEYzNkYzRjBBNDUyODhENkRG
NjRGM0E3RkNCMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYzQTdGQ0IwOS5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA0NTg2MzU4MDk1MDg1NTc3LzAvMzEzMTMzMmUzNDM5
MmUzMDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
cTEAMA0GCSqGSIb3DQEBCwUAA4IBAQBf2UttEsKrz2QYKqlgiFXbcMjazK08PeSU
XI4hWA36cLIBAk0cVjiG7RZyEEoDveLUl4nEz4Hk9kYtw+KxTqaxuMxb/PJgGpoh
SL7j2Aab9WUc9OmNjScznIFa4ZqL3OCfGk+KmnoEe0Iu7BSKj5LieKqn4P0aFPoc
ZbtSs8buNzVew11eKA3Vf++tRZbxK/egsZVJUUpyS/GEM60jNR5IljiRlm3p1VhS
MiUzvaN2uOE4hk2nGts2lLSaze1qwYZZ2f43nPT3sGpVpX2sAbsobaLivk7aS4Ja
1cS8Y1wzCHhANXZwIMKvBRMEA0F5CC7RjSiX8idDkNFdfwKg/vpn
-----END CERTIFICATE-----
Generated at Tue May 12 21:53:13 2026 by rpki-client