
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36342e3234382e302f32322d3232203d3e2039333839.roa
File: 3131382e36342e3234382e302f32322d3232203d3e2039333839.roa (raw, json)
Hash identifier: ZM9rsn+2zRyQY2FSjW+wzuvcn2X9VYUbzSEjizyUOi0=
Subject key identifier: 4B:73:16:5F:37:3D:F1:38:79:AA:7D:71:E5:10:AA:C8:D8:09:71:13
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 73A9E94DB9B762BF7E5E55E0626BF854845F394E
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36342e3234382e302f32322d3232203d3e2039333839.roa
Signing time: Thu 07 May 2026 02:06:45 +0000
ROA not before: Thu 07 May 2026 02:01:45 +0000
ROA not after: Thu 06 May 2027 02:06:45 +0000
asID: 9389
IP address blocks: 118.64.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a9:e9:4d:b9:b7:62:bf:7e:5e:55:e0:62:6b:f8:54:84:5f:39:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:01:45 2026 GMT
Not After : May 6 02:06:45 2027 GMT
Subject: CN=4B73165F373DF13879AA7D71E510AAC8D8097113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:29:49:6c:82:1a:5f:88:03:26:90:4e:c1:
8d:51:57:ad:b3:bf:49:7b:f0:58:7a:a6:18:e7:57:
22:27:c4:0c:b8:31:5f:62:5d:b8:31:7a:8e:4a:bf:
4e:de:52:a4:f2:93:3b:45:9d:b2:04:ad:91:f5:cf:
96:53:fc:3f:87:b7:eb:83:a2:ba:50:93:97:16:54:
37:24:0f:1a:c4:46:11:df:c6:26:4a:b9:d4:23:75:
ef:8c:79:d4:6d:88:ff:e8:a6:82:b0:c4:77:33:fa:
27:4f:11:4f:09:cf:9e:d5:26:fc:7c:b5:80:72:32:
87:2e:6c:35:f4:54:ac:ae:4c:ce:55:6c:1b:f0:f8:
b8:44:46:e0:fa:75:d7:8a:4c:22:26:d3:35:9a:71:
40:fb:28:12:12:f6:35:a7:da:16:9d:f8:28:d2:cc:
f6:aa:58:2e:74:77:ec:02:d1:30:4b:34:18:55:52:
9f:2b:95:06:2a:29:19:8e:9c:14:68:65:16:62:94:
1d:a9:24:fa:67:63:c1:0d:00:5b:b4:c3:b8:b5:73:
87:ad:f1:cf:08:3d:93:41:e3:4f:11:b7:8e:9e:7e:
da:9a:7e:e5:ae:b5:ac:fb:3d:5c:26:35:9a:f1:9e:
48:a3:77:60:22:6c:46:65:8a:fa:bc:81:9c:ac:91:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:73:16:5F:37:3D:F1:38:79:AA:7D:71:E5:10:AA:C8:D8:09:71:13
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36342e3234382e302f32322d3232203d3e2039333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.64.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:83:9c:ed:b8:04:fb:18:6e:e5:39:3a:ca:50:7d:28:d1:72:
7c:79:ab:f3:b7:c5:e3:75:a5:f7:89:d2:e3:fc:ae:99:74:ea:
2e:e1:9a:ff:30:7d:85:66:44:a1:77:30:6c:f6:b5:45:0e:49:
7b:0f:e6:e8:31:18:5e:61:55:8e:a8:9b:e4:f7:37:03:96:60:
90:3a:ac:af:bb:7b:07:32:c5:d9:58:27:71:54:fc:af:19:9f:
d0:4c:a8:cb:d0:d2:f4:20:ce:42:cc:2f:35:8e:c7:fc:a0:74:
46:aa:26:ac:41:56:77:2f:a9:24:67:de:53:32:0f:3c:b7:ac:
5b:cc:00:a8:1e:bc:eb:eb:99:9a:d9:5c:07:93:08:24:eb:9d:
77:e4:ea:bd:3a:68:15:59:a5:71:38:0f:dd:a0:e9:94:6f:51:
b9:e0:07:ae:07:94:53:f9:76:13:86:bb:4c:a0:ee:5f:03:7b:
0f:01:28:b9:f5:5a:cf:17:3d:e3:6f:0c:4f:f2:f7:7f:25:a3:
2f:29:43:9c:5b:39:f3:f6:48:4b:fb:e1:6c:86:ea:b5:51:c6:
38:af:1d:91:cd:ef:88:fa:0d:8a:f4:d5:f6:28:be:fe:39:44:
13:b2:55:6e:d0:f2:74:04:c8:0c:b9:5d:60:bd:a3:af:2b:bd:
27:a7:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:33 2026 by rpki-client