
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36382e302f32322d3232203d3e2039333839.roa
File: 3131332e35302e36382e302f32322d3232203d3e2039333839.roa (raw, json)
Hash identifier: 5shpfZM4csM92G9KqQB2jL7zDdwWlWeCQRI/kCd2Qi0=
Subject key identifier: 0C:0F:9C:E5:67:88:15:4D:37:F9:D4:87:98:FE:EB:69:A9:35:12:57
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 0ADE6559AC896C39F6FF247FF26CF0D83C88F351
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36382e302f32322d3232203d3e2039333839.roa
Signing time: Thu 07 May 2026 02:06:45 +0000
ROA not before: Thu 07 May 2026 02:01:45 +0000
ROA not after: Thu 06 May 2027 02:06:45 +0000
asID: 9389
IP address blocks: 113.50.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:de:65:59:ac:89:6c:39:f6:ff:24:7f:f2:6c:f0:d8:3c:88:f3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:01:45 2026 GMT
Not After : May 6 02:06:45 2027 GMT
Subject: CN=0C0F9CE56788154D37F9D48798FEEB69A9351257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:06:07:3c:9f:e7:fa:69:03:39:e6:a4:3c:
6e:f9:e1:92:eb:8c:ba:7f:9a:61:9f:3e:32:0a:9f:
23:e0:4e:95:90:3e:f4:32:16:b4:81:2d:16:13:4f:
0b:68:2d:15:f4:ef:c0:27:33:ea:3e:8d:79:1b:ab:
ba:a2:5a:0b:8e:d5:95:8b:5f:01:20:e7:1b:37:cf:
7a:4c:72:6b:ee:b1:2d:a5:d4:cf:f9:50:47:5a:d3:
3e:96:0a:0c:83:27:cf:be:93:44:90:40:cf:c9:65:
12:95:7c:4a:34:04:23:7b:f6:46:68:6d:bb:b3:11:
22:cb:15:e5:86:83:11:14:da:d7:17:66:a5:c5:06:
e9:4a:e9:60:da:c5:c1:6f:69:86:c1:6b:0e:f8:7a:
a4:2a:c3:25:3b:c4:fc:b4:49:7d:8a:ad:0a:de:f4:
56:77:f8:6d:5b:db:56:30:e4:1d:c6:5b:3b:16:80:
30:0a:a3:d2:b2:dd:d9:ad:52:7b:e5:00:6b:06:c0:
fe:19:6e:9c:52:a3:a8:05:27:89:e8:8d:9f:98:12:
d8:2a:e1:52:1a:bf:66:d0:f1:b9:e0:c9:30:b0:a6:
6f:94:a0:02:a7:06:5f:51:9d:ed:ad:77:8e:a8:d1:
a9:2c:c7:10:eb:5d:73:a7:23:e0:c0:ca:d0:db:7c:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0F:9C:E5:67:88:15:4D:37:F9:D4:87:98:FE:EB:69:A9:35:12:57
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36382e302f32322d3232203d3e2039333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.50.68.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:2f:8b:6e:a8:32:f8:da:b9:58:ee:df:0d:3d:06:68:cf:c7:
1e:c8:86:09:48:7b:55:f2:39:ea:8d:6a:28:39:31:48:36:99:
cc:b2:c3:be:fe:ff:51:35:1e:73:d1:42:cd:06:58:7b:ab:47:
70:7d:8b:e2:26:8a:b9:75:14:71:22:99:97:9f:7b:00:a7:e3:
ea:94:e7:07:ad:71:91:9a:a3:22:5c:cb:ec:23:73:26:e3:ef:
0b:7b:ef:07:0e:37:21:70:ba:2a:f3:5c:08:34:3c:f1:92:f9:
95:30:99:0d:42:5c:5a:28:cb:5d:56:6d:ee:1b:db:31:eb:76:
07:ed:df:f7:32:18:4b:54:b0:4b:01:e8:70:d7:ce:84:d1:a3:
f0:9b:71:58:41:f3:15:50:d3:05:c5:f2:c9:c9:a7:b7:3d:ad:
c0:92:f3:fe:09:37:28:27:c1:c0:12:28:d9:45:75:a7:25:01:
dc:4c:84:a6:25:1f:13:a4:37:fb:1f:ea:77:89:05:ee:06:4d:
01:e2:b7:a9:2c:34:c1:41:77:52:94:7c:6b:e2:f0:ca:50:15:
2f:73:40:fd:76:0b:4a:15:6a:89:d8:05:d6:17:67:54:03:64:
b8:04:40:12:7d:9c:89:78:ba:19:82:14:f2:d5:a1:0b:20:b6:
3b:e6:c8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:41 2026 by rpki-client