
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136352e302e302f31362d3136203d3e2039333839.roa
File: 3231312e3136352e302e302f31362d3136203d3e2039333839.roa (raw, json)
Hash identifier: WAlM1OT8l+VLzbrVnfL7myJ4AlE/qvzTchM9n/w5mS4=
Subject key identifier: 72:B5:2C:94:3C:D8:64:0B:EE:B3:12:CF:6E:1B:56:0E:93:49:86:DF
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 496CE59F91478D67B39DC855273D1148A4FA6D59
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136352e302e302f31362d3136203d3e2039333839.roa
Signing time: Thu 07 May 2026 02:11:36 +0000
ROA not before: Thu 07 May 2026 02:06:36 +0000
ROA not after: Thu 06 May 2027 02:11:36 +0000
asID: 9389
IP address blocks: 211.165.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:6c:e5:9f:91:47:8d:67:b3:9d:c8:55:27:3d:11:48:a4:fa:6d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:06:36 2026 GMT
Not After : May 6 02:11:36 2027 GMT
Subject: CN=72B52C943CD8640BEEB312CF6E1B560E934986DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:62:48:fb:3b:cf:05:3a:6b:7c:7c:1b:0f:
cd:92:89:ff:e1:28:d7:48:14:0c:24:dd:6e:b6:d1:
dd:ec:db:8b:a7:5a:76:c2:54:d4:fe:74:c7:9b:ba:
da:61:c2:88:a2:0c:c7:ac:cf:e3:4b:65:5a:09:39:
59:02:93:30:0d:30:9d:82:ae:99:0a:d7:96:3e:33:
8d:1f:a8:9f:49:b8:f9:dc:14:d7:32:70:1f:96:46:
e3:6b:42:48:3c:7b:c3:3b:48:ec:fc:cd:42:81:0e:
a3:17:f4:33:d6:02:d5:5f:db:20:65:1d:e8:85:e8:
7d:12:0d:06:b1:b7:c8:f6:49:b0:66:ac:d1:f9:13:
81:05:65:22:52:5f:de:ca:99:d7:a7:a2:41:09:b6:
7d:ea:66:fc:50:09:68:b1:46:6e:e3:78:35:8d:4a:
61:0e:c1:06:e2:8e:8f:c1:26:cd:1e:77:89:f9:02:
e5:40:5f:83:78:7f:3b:a9:a0:e7:d1:15:65:f3:15:
44:3f:b8:c8:ee:83:39:3c:d6:9f:5d:7d:c1:2b:42:
65:a7:ce:60:36:61:e7:f9:68:89:ee:ba:65:52:31:
8a:32:ed:6f:b1:15:f0:45:40:7c:96:ce:1a:ed:49:
08:9d:5e:31:e4:82:1c:1b:8f:70:89:48:45:3e:8a:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B5:2C:94:3C:D8:64:0B:EE:B3:12:CF:6E:1B:56:0E:93:49:86:DF
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136352e302e302f31362d3136203d3e2039333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.165.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:95:3c:02:36:23:96:37:2f:b5:7b:03:4c:0a:26:48:7a:f0:
fb:0d:ad:63:f6:e0:9d:51:76:da:33:bc:c6:a8:1d:d6:84:d9:
31:4f:17:2f:f4:f9:52:ff:57:13:57:a6:ef:2f:fc:da:d5:38:
1c:0d:20:ca:79:1b:ba:59:15:59:11:91:67:5c:bc:c9:9a:26:
fb:b4:41:67:a9:db:1e:71:fc:5c:31:51:89:28:5e:53:42:81:
9f:c2:a7:e1:2d:f0:60:62:9b:b5:77:d9:2b:91:44:ca:8c:47:
56:0c:f7:45:f4:b3:0f:46:ba:ef:67:f6:4b:62:cc:b7:be:c6:
d4:71:3a:9d:6b:42:5d:6f:8b:44:a7:c7:ae:23:db:12:70:67:
f7:bd:3e:40:c2:9f:9e:e8:95:50:69:b4:af:99:a0:a3:42:fa:
99:bd:7c:cf:dc:25:2d:84:de:15:cd:26:3e:31:be:53:66:89:
a7:8a:36:83:38:5a:e6:f4:c4:ed:b9:d3:cf:89:e9:d8:37:99:
77:97:9e:38:ba:3a:3b:42:00:f5:e4:bf:76:67:e2:d5:7d:d0:
f7:28:c1:eb:a6:dc:21:a4:eb:31:a9:f3:3a:89:55:cf:7b:6a:
85:3b:e6:35:af:2a:5c:54:70:10:de:fc:ed:5f:de:0b:67:ad:
bc:3f:89:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:01 2026 by rpki-client