
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36372e302f32342d3234203d3e2039333839.roa
File: 3131332e35302e36372e302f32342d3234203d3e2039333839.roa (raw, json)
Hash identifier: JHDTSIW5VE5Yjr39X7xAL/i1NVN/A9HYQw2kkbpsSlA=
Subject key identifier: 8F:D0:D4:3C:8E:75:6A:A1:12:E5:E5:56:48:09:76:4D:05:5B:13:D4
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 0CC01DD516A5A62E3662F62B29DF740913A2B552
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36372e302f32342d3234203d3e2039333839.roa
Signing time: Thu 07 May 2026 02:06:45 +0000
ROA not before: Thu 07 May 2026 02:01:45 +0000
ROA not after: Thu 06 May 2027 02:06:45 +0000
asID: 9389
IP address blocks: 113.50.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c0:1d:d5:16:a5:a6:2e:36:62:f6:2b:29:df:74:09:13:a2:b5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:01:45 2026 GMT
Not After : May 6 02:06:45 2027 GMT
Subject: CN=8FD0D43C8E756AA112E5E5564809764D055B13D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:58:e3:a3:28:40:a0:4c:44:91:c5:b9:a3:
a1:0e:a1:2a:aa:3a:60:8b:9a:f6:4c:3e:b9:a0:4f:
3e:54:6b:e4:a6:e8:ba:6d:55:4a:a2:72:18:81:0c:
f1:92:57:e1:23:33:b7:01:8c:65:c6:d9:c5:25:f2:
2b:c7:fb:ad:29:cd:e7:53:2d:09:c7:22:b9:81:80:
e9:00:0c:d4:95:64:81:11:12:a4:42:11:e1:89:2d:
aa:9f:e8:f7:d6:27:da:58:3c:cb:b6:71:63:0b:5d:
92:a6:af:6f:5a:38:08:e8:a2:35:b7:e1:66:d7:c2:
64:ec:45:d3:e5:18:b8:d2:04:d6:0b:6f:40:8b:7f:
f6:dc:b9:1d:93:48:16:a6:75:bc:19:79:e9:b0:44:
99:0a:57:bc:17:a6:23:2a:22:8f:1c:74:36:a4:fb:
9b:fa:e2:53:c7:e4:df:40:98:0f:1b:74:4b:a2:00:
72:b1:18:dc:9d:10:64:c9:fc:66:b2:17:84:98:0f:
b7:d0:48:0b:ea:01:34:31:f5:78:26:87:dc:07:33:
e3:a6:8b:79:bf:53:48:1c:c4:12:9c:a9:96:0a:94:
69:a3:1b:be:41:15:02:71:81:3a:34:f4:8f:d6:db:
2c:c5:33:1d:56:54:be:54:c9:9e:7f:4f:99:5e:68:
50:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D0:D4:3C:8E:75:6A:A1:12:E5:E5:56:48:09:76:4D:05:5B:13:D4
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36372e302f32342d3234203d3e2039333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.50.67.0/24
Signature Algorithm: sha256WithRSAEncryption
66:77:c2:40:99:ce:78:53:19:c2:80:46:b1:30:4e:2a:10:7b:
07:c1:73:36:6d:9c:ac:1f:78:31:1b:da:d6:85:34:bf:a1:b3:
ca:98:a5:ec:db:39:fe:ed:ac:6b:8d:74:48:3f:66:f4:41:ca:
fd:47:9c:43:f1:e7:21:76:62:a2:61:91:6d:15:62:c6:a0:28:
ca:a6:48:1e:86:a5:11:c5:57:84:fc:0c:10:11:e1:dc:74:9e:
b0:e5:96:2f:a8:6d:49:51:aa:6d:38:b8:61:88:a0:1c:06:6e:
49:74:43:c2:f6:7e:3c:f4:65:5e:95:a6:3d:cb:d4:24:0e:46:
34:a4:6d:b9:d3:28:a6:b4:7c:26:5e:ed:15:ad:28:e3:d6:a2:
57:8b:67:40:63:eb:4a:7b:92:aa:64:a0:14:c3:38:52:8f:47:
dd:80:ec:d4:2b:9f:6c:36:37:ea:3b:e7:84:e2:c1:b7:7b:d1:
57:4b:27:01:f6:ef:f4:44:86:68:1e:59:ab:e5:6c:94:25:06:
11:78:53:81:97:07:b4:88:1e:8c:95:7b:dd:41:97:62:3d:cc:
89:dc:62:54:2d:55:52:f5:61:85:99:cb:21:25:fc:a0:5f:fa:
c3:70:23:44:30:70:4c:c1:8c:89:50:b0:c0:9f:27:8e:3b:f9:
35:5f:1b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:39 2026 by rpki-client