
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36342e3235322e302f32322d3232203d3e2039333839.roa
File: 3131382e36342e3235322e302f32322d3232203d3e2039333839.roa (raw, json)
Hash identifier: 0cOx0Uq18L00o8ojK9ZxQoZY5iM5Zy8Q1L3do7Q+Myo=
Subject key identifier: 61:95:54:51:29:B4:A5:DC:BA:5C:9F:28:19:BD:A6:27:F5:C8:83:B6
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 5132464C76C8BB0FC7FEC502047D30E2E1B4C311
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36342e3235322e302f32322d3232203d3e2039333839.roa
Signing time: Thu 07 May 2026 02:06:44 +0000
ROA not before: Thu 07 May 2026 02:01:44 +0000
ROA not after: Thu 06 May 2027 02:06:44 +0000
asID: 9389
IP address blocks: 118.64.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:32:46:4c:76:c8:bb:0f:c7:fe:c5:02:04:7d:30:e2:e1:b4:c3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:01:44 2026 GMT
Not After : May 6 02:06:44 2027 GMT
Subject: CN=6195545129B4A5DCBA5C9F2819BDA627F5C883B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:09:65:49:eb:b4:1b:26:12:d9:01:6c:45:
0f:a9:5f:a0:2c:ed:ae:3e:a8:01:ad:8c:b9:d1:e3:
b9:f1:2c:39:22:e5:19:8e:15:63:ac:62:ea:d3:13:
b3:15:f4:db:ba:dd:27:80:26:8f:05:8f:fc:5e:01:
c0:9e:43:46:ba:dc:c6:26:bb:79:8b:7e:53:f3:53:
e6:38:c5:eb:32:2e:e6:89:56:4d:79:ec:32:9c:61:
1a:73:35:d6:7e:68:84:5b:4d:8a:ab:3d:dd:d6:cd:
3f:cd:3e:8f:64:a5:1e:27:ea:47:2a:87:a1:71:e5:
4d:f7:a2:5e:c5:87:62:28:53:f2:14:89:0f:c0:a9:
4f:3a:19:b4:d5:c0:7f:74:8b:b1:d2:85:09:e4:c8:
09:0b:49:f1:75:13:4b:b2:67:6c:08:97:1d:be:20:
33:d2:c3:86:5d:19:61:b9:2e:e2:c8:a3:7b:36:46:
21:34:2a:32:41:8b:0f:54:47:8b:b3:a2:b3:a5:99:
ca:ae:7d:6c:be:eb:2b:76:f8:2e:11:6f:2a:32:28:
f9:58:22:92:dd:04:74:d9:29:1b:3d:95:a9:0b:1c:
8b:04:71:f0:98:3c:d5:fb:a7:73:d1:e6:fb:c3:e4:
29:3c:77:ca:44:5d:0e:19:3a:53:15:32:98:10:9d:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:95:54:51:29:B4:A5:DC:BA:5C:9F:28:19:BD:A6:27:F5:C8:83:B6
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36342e3235322e302f32322d3232203d3e2039333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.64.252.0/22
Signature Algorithm: sha256WithRSAEncryption
28:42:6d:43:ac:70:1f:0b:8d:d2:94:05:c3:34:b4:96:fe:9d:
bb:80:d6:9e:93:24:49:ac:64:10:0a:64:4c:0f:9a:89:8b:f5:
0b:24:65:44:e1:04:60:76:f0:d2:42:81:e7:23:f9:24:bc:c8:
6f:ae:fd:9c:ae:d0:1e:c0:a0:23:07:b9:3d:f6:95:93:cd:a2:
8e:58:35:a5:6e:81:34:b6:80:95:09:80:8d:51:31:a3:20:d0:
3c:a1:0c:12:06:03:da:c1:be:79:0b:83:90:62:64:2e:fa:33:
0e:0c:8b:0b:b4:51:cf:3e:a4:2b:ec:ce:d8:12:7c:71:fb:ee:
25:2a:f7:26:80:d1:47:ba:2a:df:d8:3f:06:0d:b6:e1:49:9a:
3a:82:a1:b4:58:7c:7f:20:c4:f3:c3:81:7f:08:87:73:44:7a:
9c:c5:23:a4:d8:82:a3:69:37:4f:49:cb:db:29:75:8a:3f:d4:
fc:a4:4f:6d:89:e5:0c:b6:df:46:b8:5c:3f:81:a0:95:66:d8:
2c:b2:7c:0b:0c:df:27:1f:a1:0e:67:a6:67:c3:cf:36:1c:0c:
46:1c:b5:7c:76:dc:47:1e:a6:0b:cc:a5:cf:48:94:37:ac:8f:
cf:b7:27:92:37:a2:2c:9f:85:81:b4:07:c3:b3:3d:75:d5:7a:
a8:83:9e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:32 2026 by rpki-client