
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36362e3131332e302f32342d3234203d3e20313339353837.roa
File: 3131382e36362e3131332e302f32342d3234203d3e20313339353837.roa (raw, json)
Hash identifier: 16Ifx3/0ujCFnlrPxNvJI5ohb0uw9s8gszA7e4PWs1Y=
Subject key identifier: D0:63:AC:D0:A3:28:77:97:A7:54:5C:65:A3:0E:9A:D2:84:D5:38:1D
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 72FDBB689B27FB2C002EE0BE453EC0263A13507A
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36362e3131332e302f32342d3234203d3e20313339353837.roa
Signing time: Thu 07 May 2026 02:11:37 +0000
ROA not before: Thu 07 May 2026 02:06:37 +0000
ROA not after: Thu 06 May 2027 02:11:37 +0000
asID: 139587
IP address blocks: 118.66.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:fd:bb:68:9b:27:fb:2c:00:2e:e0:be:45:3e:c0:26:3a:13:50:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:06:37 2026 GMT
Not After : May 6 02:11:37 2027 GMT
Subject: CN=D063ACD0A3287797A7545C65A30E9AD284D5381D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:eb:c4:c7:91:ea:24:c4:42:44:2c:06:df:
9b:a7:c2:e2:9f:1e:98:ba:bf:8b:c3:00:c1:0f:61:
87:bf:dd:0f:c9:d5:75:da:dc:58:c0:2e:ca:0c:ea:
92:01:46:01:25:ec:f8:6c:6b:37:be:37:96:4b:b6:
bb:22:27:0b:55:2a:96:36:b6:16:5c:8e:a4:4f:d7:
88:bc:02:ee:07:54:49:17:0c:f7:90:fb:c6:ba:15:
dd:14:91:6c:a7:53:44:16:74:20:0c:f6:89:75:f2:
4a:bd:e2:31:fd:2b:2b:8f:e8:96:4b:85:0e:a0:f9:
95:06:f6:2b:9b:98:a3:2b:25:a1:d1:c2:97:e3:19:
34:ed:34:2c:fd:21:52:b2:db:b7:e8:44:3a:79:c7:
e6:2b:ff:56:3b:2c:cf:df:9a:41:5b:db:1b:13:bc:
71:48:9a:f4:01:d4:e3:89:43:2a:89:cd:32:26:53:
39:06:b7:bd:b9:a0:e6:d0:a0:4d:70:db:5a:66:80:
73:f2:4a:95:d5:7a:07:9a:0e:19:1a:e7:ec:33:8b:
0a:6a:d6:ed:df:f9:da:f5:e9:9d:f2:b4:89:3f:85:
e1:ad:41:98:b0:b5:3d:5a:66:8d:3c:e5:79:50:fd:
50:4b:13:bd:63:45:97:7a:bb:a3:30:e5:f6:08:76:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:63:AC:D0:A3:28:77:97:A7:54:5C:65:A3:0E:9A:D2:84:D5:38:1D
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36362e3131332e302f32342d3234203d3e20313339353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.66.113.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:cb:d8:5d:78:15:56:1c:6c:50:4b:5d:3b:4a:55:e7:79:e2:
45:d6:1f:7f:26:4b:fe:a5:29:72:85:b9:cc:cb:69:3c:7e:55:
e9:24:7b:9a:7e:18:6e:e2:24:1b:20:dd:16:22:7f:f6:06:ee:
62:23:e6:94:a1:dc:85:36:8d:10:ce:34:9f:88:e5:71:e6:10:
c7:2d:db:b6:9c:8f:32:4a:b3:6e:60:8d:e2:7c:40:4e:6e:fe:
df:9f:fb:1e:01:cf:b4:32:0f:8c:c0:82:ec:10:c8:d0:55:4a:
f1:49:55:84:36:91:28:41:c8:2b:4d:77:5a:f4:e6:4b:0f:9c:
52:db:32:b7:54:5d:39:d3:35:2a:f4:89:de:2e:34:70:1b:22:
6c:e1:41:e2:2d:b5:ab:00:52:6f:91:8b:df:cf:c8:e2:66:4b:
b7:b4:fb:ab:44:af:a3:b5:03:57:5b:26:61:3c:01:75:32:da:
84:93:ae:a6:72:9c:92:37:54:52:e5:d5:d0:53:eb:26:aa:8a:
6c:07:8b:b3:dd:82:39:91:82:95:46:b7:df:a6:78:e9:69:ca:
89:72:68:f8:2a:36:45:b3:67:a1:70:2c:57:64:79:b3:27:2c:
85:5d:40:42:4b:84:0a:11:9a:c0:31:6e:e1:91:c1:5a:7a:98:
de:6d:f7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:02:28 2026 by rpki-client