
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36362e3131322e302f32342d3234203d3e20313339353837.roa
File: 3131382e36362e3131322e302f32342d3234203d3e20313339353837.roa (raw, json)
Hash identifier: WlDZt5DNQd9pUbscGxkkg1Wf/GqdqmH/RYZrmy64Wv8=
Subject key identifier: 32:6E:9A:6F:F5:6D:DE:44:87:45:36:DF:25:80:13:C9:33:E9:E2:FB
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 58E6C8E82AF0540B500B656F2F05A2CD081B51D2
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36362e3131322e302f32342d3234203d3e20313339353837.roa
Signing time: Thu 07 May 2026 02:11:36 +0000
ROA not before: Thu 07 May 2026 02:06:36 +0000
ROA not after: Thu 06 May 2027 02:11:36 +0000
asID: 139587
IP address blocks: 118.66.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e6:c8:e8:2a:f0:54:0b:50:0b:65:6f:2f:05:a2:cd:08:1b:51:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:06:36 2026 GMT
Not After : May 6 02:11:36 2027 GMT
Subject: CN=326E9A6FF56DDE44874536DF258013C933E9E2FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:b8:42:bd:72:77:cc:e3:e0:16:42:6b:62:
aa:82:8e:86:07:3d:d9:2c:b8:fe:43:31:08:99:17:
cb:b8:26:d5:7d:66:cf:0a:59:28:e8:59:c4:60:cd:
86:8b:e4:fa:23:61:6b:f0:39:1f:d0:ae:1b:17:06:
ea:b4:bc:fc:96:58:ca:af:c6:27:20:52:ad:06:d1:
e1:db:fe:97:ab:71:92:5e:be:74:e3:60:50:32:ff:
36:b0:23:30:be:9f:bd:03:2e:a9:8c:3f:d8:2e:ae:
e9:2e:3d:e6:e7:80:24:1f:07:88:9c:1f:bc:80:ed:
e8:74:73:7d:d6:32:40:0f:61:0c:b4:42:90:be:e3:
bf:de:2e:5f:8e:78:49:cb:92:32:6d:98:ff:4b:5c:
d2:44:6d:94:b9:a3:47:e6:ad:80:1c:42:d8:23:e1:
8e:76:72:cd:60:1d:d0:07:71:47:f3:1f:2b:1b:ce:
a1:a4:30:9e:57:d2:57:41:b4:5d:31:cb:43:53:06:
58:8a:6c:ba:b2:a6:44:d7:be:2f:16:c9:5d:c4:ca:
0c:f1:41:c4:b1:65:71:96:f8:c6:26:69:a4:20:6e:
e3:bc:48:f4:27:ee:1c:a2:9c:6c:42:23:6b:60:33:
94:9f:55:a0:7d:e6:e1:2d:0c:87:56:9f:2a:8d:be:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6E:9A:6F:F5:6D:DE:44:87:45:36:DF:25:80:13:C9:33:E9:E2:FB
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36362e3131322e302f32342d3234203d3e20313339353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.66.112.0/24
Signature Algorithm: sha256WithRSAEncryption
69:65:68:f2:7c:0f:51:64:61:ad:89:e6:ef:85:89:74:d0:8a:
41:3a:87:2f:69:57:f0:5b:a1:37:52:4d:91:0c:00:ed:b4:7b:
45:89:0b:3e:79:0f:97:18:38:0d:1b:c6:47:30:ac:84:43:a9:
97:b6:e7:c9:5f:da:75:3a:b2:8e:a0:d7:b0:89:0e:56:b6:b3:
22:19:43:62:99:2e:ba:cf:3e:e7:30:e1:52:5b:65:0d:2f:15:
ec:2e:e9:47:65:d5:9a:8c:2d:da:18:58:b9:c6:b0:d0:42:9c:
61:a9:da:fd:5f:80:31:86:f3:f2:ed:aa:d7:bf:94:6a:6b:98:
1c:aa:3a:23:35:ba:79:a2:47:50:fd:34:6d:70:47:4b:41:e5:
41:4b:9e:77:b1:5a:cd:4a:4d:72:a2:01:48:ce:fb:71:6f:8d:
aa:ba:99:6f:a4:25:43:f1:6b:e3:fb:e8:c5:5b:55:cd:c0:93:
73:2d:52:4b:1c:df:53:a0:12:67:df:d2:ac:6c:ae:93:9b:7c:
38:7e:e2:50:7b:62:b5:d6:c5:71:d5:cc:de:bf:2b:68:05:5e:
d1:b3:50:6a:86:b3:e1:4e:82:47:1b:b4:86:3a:3a:f5:cc:6c:
f6:69:7b:a8:3d:21:6f:4d:1e:9d:39:2c:11:14:91:4e:56:d4:
d8:9b:cd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:57:18 2026 by rpki-client