
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34392e31362e302f32302d3230203d3e2039333839.roa
File: 3131332e34392e31362e302f32302d3230203d3e2039333839.roa (raw, json)
Hash identifier: 8mWM/JJe1yVYZ8pkiEzSGfDd/EY4c64RrfpXc2H4n+c=
Subject key identifier: 08:FD:81:84:66:B9:23:22:E8:79:2B:C0:CC:03:90:31:29:A2:D7:ED
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 326F3BEAA557208BA6A0146D9A9F696A25A6409F
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34392e31362e302f32302d3230203d3e2039333839.roa
Signing time: Thu 07 May 2026 02:06:44 +0000
ROA not before: Thu 07 May 2026 02:01:44 +0000
ROA not after: Thu 06 May 2027 02:06:44 +0000
asID: 9389
IP address blocks: 113.49.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:6f:3b:ea:a5:57:20:8b:a6:a0:14:6d:9a:9f:69:6a:25:a6:40:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:01:44 2026 GMT
Not After : May 6 02:06:44 2027 GMT
Subject: CN=08FD818466B92322E8792BC0CC03903129A2D7ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:d8:06:2f:de:c4:44:61:ff:16:b9:e7:1f:
d2:7b:5e:23:d1:8d:86:95:3a:07:7c:78:06:ad:cc:
d3:6b:77:3e:81:73:7b:f3:cf:ba:bf:56:09:92:47:
48:35:09:0c:99:fb:39:db:86:c6:71:9e:f6:20:d7:
04:d7:26:d0:d3:9e:74:8d:c6:57:fa:9c:5f:68:ad:
5d:3a:f1:26:fa:cf:8e:04:4c:50:83:dd:65:f4:d2:
90:b0:33:63:53:1e:2e:59:5a:26:cc:c6:8f:aa:22:
ac:be:99:ac:bb:04:7a:35:c5:2b:28:3e:49:90:9c:
85:0d:1a:c6:08:7d:f1:69:fb:a7:91:90:1b:c6:8b:
05:55:7a:da:d7:42:b3:3a:cf:02:25:82:a7:81:0b:
b5:06:b8:6d:20:08:29:d2:b4:3f:d7:08:12:78:a7:
64:5c:4d:ff:7e:00:fd:79:f8:04:68:a3:d5:57:c4:
87:8e:f8:cc:fe:1d:6a:22:c1:2a:bb:0b:18:9b:71:
87:c2:d7:b0:0f:af:44:bd:db:8c:67:59:48:9b:92:
87:18:a9:6a:ff:28:f3:fa:71:ef:eb:59:d1:fa:0a:
53:cd:7a:36:a6:4c:35:3a:cd:5c:a9:1e:b3:3e:54:
6b:d5:77:ee:c1:e0:fd:40:4a:7f:37:22:f1:e9:3e:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FD:81:84:66:B9:23:22:E8:79:2B:C0:CC:03:90:31:29:A2:D7:ED
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34392e31362e302f32302d3230203d3e2039333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.49.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:f4:06:df:ad:90:3f:51:39:67:d8:8b:13:ae:4b:8a:3d:2c:
eb:43:28:da:31:d1:5b:2e:94:66:23:ef:9d:66:b7:48:92:de:
d8:b7:fb:81:66:a9:04:1c:19:4d:ac:40:1f:e6:c0:75:51:3d:
46:d6:a7:b1:40:97:93:3a:03:b1:a3:a2:e3:1c:cd:22:9b:2e:
1a:b9:c4:e4:fb:f1:d9:88:ce:b0:a6:ff:9d:43:93:a0:96:d3:
91:ff:9d:b7:91:82:a2:ae:b7:19:30:02:09:f7:9b:16:72:a2:
ff:e3:f8:62:87:31:b8:58:db:fe:0b:6e:36:30:1d:ca:81:47:
c1:0f:aa:fd:27:0d:31:eb:65:95:ee:69:9c:54:24:8b:42:44:
06:a0:62:3e:bf:f1:80:78:58:da:5c:b4:17:36:5a:4d:0c:54:
bf:c3:ba:57:4e:6b:53:2c:43:9b:e3:7b:83:7f:08:9e:bc:09:
31:98:4b:8b:88:61:cb:89:f6:47:d4:68:2d:6f:0f:02:ad:6e:
4c:dd:a1:88:1d:de:0b:f1:6a:d1:a6:ef:93:8e:fb:85:9a:af:
a9:ac:ab:1b:5b:c6:f1:a3:01:eb:88:29:35:f5:06:35:3c:d7:
c4:0a:cf:55:8b:e2:c9:ec:6c:47:95:cb:ff:2b:d7:16:aa:d7:
c9:f1:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:48 2026 by rpki-client