
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36352e302e302f32312d3231203d3e2039333839.roa
File: 3131382e36352e302e302f32312d3231203d3e2039333839.roa (raw, json)
Hash identifier: EMXnjW5fyrgq7evdXlY/vapeIx/Y+U/+DJjJNFryQH0=
Subject key identifier: 27:51:87:F9:35:9C:45:9F:63:26:54:92:72:37:EA:07:71:72:85:F2
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 6E353E7FB4968BDCF18353CF97ED769415BD324F
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36352e302e302f32312d3231203d3e2039333839.roa
Signing time: Thu 07 May 2026 02:06:44 +0000
ROA not before: Thu 07 May 2026 02:01:44 +0000
ROA not after: Thu 06 May 2027 02:06:44 +0000
asID: 9389
IP address blocks: 118.65.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:35:3e:7f:b4:96:8b:dc:f1:83:53:cf:97:ed:76:94:15:bd:32:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:01:44 2026 GMT
Not After : May 6 02:06:44 2027 GMT
Subject: CN=275187F9359C459F632654927237EA07717285F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:56:7b:58:51:fa:53:53:6b:9e:08:9f:a5:f0:
67:3c:00:b3:a8:2e:e1:d7:42:42:9a:4b:93:a6:3b:
27:f2:38:c2:47:7d:32:c8:7d:5e:9c:72:a3:d2:40:
71:73:34:65:c8:20:8b:f6:7c:f1:86:00:7b:b0:44:
2d:93:e0:6b:2a:5e:5d:42:cb:79:80:b1:63:4b:eb:
40:54:43:cf:bd:c9:06:6c:51:62:cf:da:f8:f8:ed:
be:f6:f2:42:c3:fd:48:72:b3:f9:84:3e:c8:ff:c4:
92:70:1e:af:42:d1:66:a1:17:c5:0c:cd:54:07:ec:
a8:e5:5a:fb:9c:26:92:20:b8:ba:f8:20:01:0c:76:
b1:c9:d7:c5:31:98:ae:06:b9:88:c4:c1:8b:f0:1b:
62:c1:27:ca:54:b8:c6:7a:44:47:19:d2:25:e9:b2:
fa:0e:98:2a:39:5f:39:33:83:1f:c0:07:32:df:a3:
06:77:ae:e2:e6:d3:cc:3e:21:ed:0a:47:e6:72:c1:
1c:4b:c3:a0:51:93:e1:f7:0a:2d:3c:fc:a0:ff:e0:
fc:06:b8:30:c8:ca:45:f4:dc:f5:fc:29:c4:56:18:
8c:78:98:d0:dc:e5:43:69:79:88:bd:ab:fc:2b:e4:
97:d7:68:01:f5:33:8b:6a:b5:56:26:22:0e:79:63:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:51:87:F9:35:9C:45:9F:63:26:54:92:72:37:EA:07:71:72:85:F2
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36352e302e302f32312d3231203d3e2039333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.65.0.0/21
Signature Algorithm: sha256WithRSAEncryption
50:85:55:cd:1c:ba:f3:c4:5a:11:95:c1:8c:07:0a:3a:56:69:
bf:7e:0b:3e:e4:e6:7c:7c:bd:16:11:58:7c:ea:c0:c5:06:22:
40:76:be:b6:c9:ee:79:e8:09:54:17:d4:2e:9c:8a:34:65:05:
d2:ad:ae:83:f4:17:e8:c7:69:ed:87:a3:7f:80:ea:b0:47:01:
78:5d:08:4b:16:8b:1a:61:6d:9b:d5:1f:be:c9:72:61:1d:97:
12:f0:1c:4c:15:30:79:8c:60:1d:4b:db:59:a7:30:7f:49:45:
a5:9b:5f:ac:87:2d:52:2a:0b:72:a8:0a:b9:7c:50:36:a6:d2:
11:ae:35:7a:0f:88:c4:03:e5:42:c1:3c:64:89:da:4c:78:19:
b5:cb:76:e1:d6:61:0e:ef:1d:86:19:98:64:3c:06:da:44:16:
1b:c0:e2:99:b1:b8:09:0b:c8:cd:a6:75:b6:3f:6b:bb:75:30:
2f:e5:47:a5:90:7c:41:56:56:75:9a:4b:06:e6:a5:40:1a:33:
a6:b8:e2:b9:16:7f:ae:3c:1a:42:c8:4b:50:4a:22:84:e5:f5:
24:7f:ac:ca:b1:39:db:13:63:0e:a1:da:79:84:70:92:4d:fc:
e3:eb:5e:52:d3:fc:fd:02:8a:56:4c:56:d6:7f:71:8f:44:f8:
62:c1:dc:32
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUbjU+f7SWi9zxg1PPl+12lBW9Mk8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYz
QTdGQ0IwOTAeFw0yNjA1MDcwMjAxNDRaFw0yNzA1MDYwMjA2NDRaMDMxMTAvBgNV
BAMTKDI3NTE4N0Y5MzU5QzQ1OUY2MzI2NTQ5MjcyMzdFQTA3NzE3Mjg1RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6VntYUfpTU2ueCJ+l8Gc8ALOo
LuHXQkKaS5OmOyfyOMJHfTLIfV6ccqPSQHFzNGXIIIv2fPGGAHuwRC2T4GsqXl1C
y3mAsWNL60BUQ8+9yQZsUWLP2vj47b728kLD/Uhys/mEPsj/xJJwHq9C0WahF8UM
zVQH7KjlWvucJpIguLr4IAEMdrHJ18UxmK4GuYjEwYvwG2LBJ8pUuMZ6REcZ0iXp
svoOmCo5Xzkzgx/ABzLfowZ3ruLm08w+Ie0KR+ZywRxLw6BRk+H3Ci08/KD/4PwG
uDDIykX03PX8KcRWGIx4mNDc5UNpeYi9q/wr5JfXaAH1M4tqtVYmIg55Yz4LAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUJ1GH+TWcRZ9jJlSScjfqB3FyhfIwHwYDVR0j
BBgwFoAUOOQnl3SE828/CkUojW32Tzp/ywkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDU4NjM1ODA5NTA4NTU3Ny8wLzM4RTQyNzk3NzQ4NEYzNkYzRjBBNDUyODhENkRG
NjRGM0E3RkNCMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYzQTdGQ0IwOS5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA0NTg2MzU4MDk1MDg1NTc3LzAvMzEzMTM4MmUzNjM1
MmUzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM5MzMzODM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
dkEAMA0GCSqGSIb3DQEBCwUAA4IBAQBQhVXNHLrzxFoRlcGMBwo6Vmm/fgs+5OZ8
fL0WEVh86sDFBiJAdr62ye556AlUF9QunIo0ZQXSra6D9Bfox2nth6N/gOqwRwF4
XQhLFosaYW2b1R++yXJhHZcS8BxMFTB5jGAdS9tZpzB/SUWlm1+shy1SKgtyqAq5
fFA2ptIRrjV6D4jEA+VCwTxkidpMeBm1y3bh1mEO7x2GGZhkPAbaRBYbwOKZsbgJ
C8jNpnW2P2u7dTAv5UelkHxBVlZ1mksG5qVAGjOmuOK5Fn+uPBpCyEtQSiKE5fUk
f6zKsTnbE2MOodp5hHCSTfzj615S0/z9AopWTFbWf3GPRPhiwdwy
-----END CERTIFICATE-----
Generated at Wed May 13 05:11:16 2026 by rpki-client