
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e34382e302f32302d3230203d3e2039333839.roa
File: 3131332e35302e34382e302f32302d3230203d3e2039333839.roa (raw, json)
Hash identifier: c4NWXy1p0XKcFSYqIpfljl2mH7GFvLsdPkgqEG1lKg4=
Subject key identifier: A8:BF:2C:96:91:C1:CD:F3:0D:F9:5A:37:57:DE:33:CF:A6:21:6E:90
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 3D03C5D43D3198EA4FE0B0D4923628773E969538
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e34382e302f32302d3230203d3e2039333839.roa
Signing time: Thu 07 May 2026 02:06:44 +0000
ROA not before: Thu 07 May 2026 02:01:44 +0000
ROA not after: Thu 06 May 2027 02:06:44 +0000
asID: 9389
IP address blocks: 113.50.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:03:c5:d4:3d:31:98:ea:4f:e0:b0:d4:92:36:28:77:3e:96:95:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:01:44 2026 GMT
Not After : May 6 02:06:44 2027 GMT
Subject: CN=A8BF2C9691C1CDF30DF95A3757DE33CFA6216E90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:a5:49:21:e7:74:72:6d:79:e2:a2:48:a4:
c8:88:6e:1e:d7:d2:ad:6f:6b:d5:3e:0d:b5:41:a4:
e3:eb:54:78:46:82:72:28:41:f4:ff:ce:7e:1d:be:
c8:a4:75:ae:3e:88:bc:70:b1:e0:75:a2:00:cd:20:
b8:59:03:fa:f8:79:8d:cd:bc:d3:08:f9:fa:db:3b:
14:17:55:2f:34:2f:02:22:89:4a:9a:06:66:07:a9:
71:a6:4a:9b:49:60:11:a8:c5:50:64:7c:e8:3b:a1:
fc:7a:ea:b4:94:79:4c:91:17:5d:95:de:76:b3:c7:
a3:59:52:bb:ca:80:7f:da:6c:e4:ff:70:de:57:1d:
db:1d:31:58:c0:78:3f:61:c2:d5:0c:73:9a:99:56:
5c:80:56:90:e8:74:2c:2b:47:bb:49:3d:a0:f6:8c:
8e:a0:8d:cb:c9:6d:21:86:6b:a4:17:8b:dc:78:fd:
1c:15:a8:42:02:08:8c:8e:ef:4c:2b:c3:9b:3c:a6:
80:f3:97:8b:02:0d:2d:da:4e:6a:01:b1:aa:7d:21:
c6:97:1a:b4:49:d4:96:d3:fa:6a:6d:20:c4:10:80:
8c:a5:7a:07:23:09:ff:c1:bc:c6:3a:8b:44:e7:b9:
70:a0:d1:24:f4:e6:26:ba:91:59:06:b3:d2:fd:88:
c1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BF:2C:96:91:C1:CD:F3:0D:F9:5A:37:57:DE:33:CF:A6:21:6E:90
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e34382e302f32302d3230203d3e2039333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.50.48.0/20
Signature Algorithm: sha256WithRSAEncryption
64:b6:73:bc:e3:15:32:f0:db:38:04:be:70:38:6f:6c:66:98:
69:b0:68:4f:fe:1e:d7:42:01:61:c9:c8:ee:82:ed:ea:3e:cf:
22:6e:ba:ae:ae:35:18:b3:47:04:ea:7a:aa:7b:d5:ee:f7:6b:
ca:3f:8b:cc:e5:e6:54:bf:de:ad:cb:ad:01:6b:8d:33:1d:7a:
31:be:09:35:cd:3e:5a:c1:d2:5b:f3:5e:3a:73:a2:d3:7d:cc:
d1:bc:cb:14:33:b2:02:f7:cb:0d:6e:19:a1:a0:fb:db:81:75:
e8:0f:f8:d0:8d:0c:9e:8e:76:be:53:3c:39:13:5e:cf:57:5b:
e8:31:fc:d6:8d:7c:16:c5:5c:4e:0d:ad:80:dd:d3:16:27:6d:
23:6d:01:42:0e:0e:04:7a:6e:b3:a7:02:19:89:b4:4d:dd:ab:
da:20:b1:c6:a9:f7:47:3b:9d:22:11:76:3f:2a:be:1a:31:81:
1d:cf:43:ff:26:e4:87:69:00:8b:4a:b0:60:d8:9d:61:7e:3e:
38:eb:25:3e:b8:18:8a:72:18:3c:c7:59:06:45:47:a0:dd:05:
5a:10:f5:c7:f3:f8:c5:c8:5b:f0:0b:70:ce:f8:4b:92:9f:25:
a1:9e:f1:db:64:27:d8:99:0c:f7:1f:bd:43:43:0e:98:de:98:
02:03:30:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:59 2026 by rpki-client