
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e302e302f31362d3136203d3e2039333839.roa
File: 3231312e3136362e302e302f31362d3136203d3e2039333839.roa (raw, json)
Hash identifier: M0OtK1D+ULaR+RVSiW2nwxtlmwYAkrczAi9g0+5RDr4=
Subject key identifier: E9:DC:AE:DE:02:6E:18:3F:B7:1A:B8:99:69:E8:32:27:B3:15:13:CE
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 01743E29A8596A4A298573D903E9469347455CF5
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e302e302f31362d3136203d3e2039333839.roa
Signing time: Thu 07 May 2026 02:11:37 +0000
ROA not before: Thu 07 May 2026 02:06:37 +0000
ROA not after: Thu 06 May 2027 02:11:37 +0000
asID: 9389
IP address blocks: 211.166.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:74:3e:29:a8:59:6a:4a:29:85:73:d9:03:e9:46:93:47:45:5c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:06:37 2026 GMT
Not After : May 6 02:11:37 2027 GMT
Subject: CN=E9DCAEDE026E183FB71AB89969E83227B31513CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:56:55:7e:8c:34:c6:9b:1d:40:74:0e:c3:
15:18:64:16:10:92:91:2d:60:c1:c7:c8:62:03:b5:
75:4c:21:4d:04:1e:35:e0:95:ea:37:1e:cf:52:e9:
90:9d:21:c5:5a:aa:d3:7b:d2:05:5f:e2:ea:11:4f:
61:aa:ee:83:f6:5e:23:a7:4f:2d:78:58:10:b1:12:
9d:a5:20:df:9f:22:4c:61:1c:d0:d3:7f:0a:f5:cd:
ff:86:ec:8e:ea:b0:35:ae:f1:9a:1c:2e:e4:6c:48:
5a:37:65:b9:81:1e:93:39:c1:b6:88:16:00:aa:60:
07:37:29:ef:85:d1:2a:c8:4f:e0:a4:1e:f2:09:30:
cf:e1:9b:a7:98:4e:6a:da:f6:2e:c0:e2:fd:ca:55:
82:24:60:5f:4a:34:d3:ae:25:5a:5c:08:fc:91:d0:
8d:d5:b2:9d:49:37:12:64:c5:97:e3:1c:a3:3f:41:
c6:3f:ff:fc:d9:ce:94:51:06:12:bc:9b:78:70:c3:
1e:fe:2d:d8:28:2c:08:f5:ac:5c:d9:09:29:bb:70:
94:5d:48:ca:5f:6f:cc:70:c5:67:da:69:84:ea:8c:
1f:21:13:11:62:aa:2e:53:4e:f3:b7:fc:25:4e:63:
fa:68:2a:d9:f7:ca:1e:bb:ea:cf:cc:21:e2:9a:fe:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DC:AE:DE:02:6E:18:3F:B7:1A:B8:99:69:E8:32:27:B3:15:13:CE
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e302e302f31362d3136203d3e2039333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.166.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:71:1e:9b:ad:9c:63:f6:d2:48:6e:80:da:bb:0a:db:48:5f:
bf:c7:49:3c:b5:b8:c1:7f:66:e4:dc:b4:7c:08:f1:08:da:7d:
59:50:4d:1a:44:80:22:52:86:ef:ae:8a:38:da:e0:35:25:71:
a0:f7:a5:3c:73:19:1e:ec:31:16:5f:77:69:b8:15:c9:0f:43:
28:47:9f:74:32:c8:aa:0f:34:b3:f5:16:f9:6b:85:17:35:84:
10:77:2a:de:9d:74:be:74:70:c7:49:99:e4:13:a3:04:f4:67:
01:3f:d5:cc:3c:e0:76:89:c1:fb:9d:8c:e2:78:ed:89:b6:1c:
78:80:82:d9:db:e3:c1:3e:27:7b:a2:6f:13:e9:4c:c7:91:3b:
5c:2a:f1:70:3e:0b:ea:97:41:ee:87:47:ca:19:b0:f7:f5:5b:
d6:4e:79:c8:51:88:4d:01:fa:ec:5c:46:df:d2:3c:46:20:7f:
d4:b6:e6:e3:61:e0:66:9f:42:95:e3:11:50:2e:89:cc:42:4f:
fe:a7:c6:17:dc:5d:e6:f3:e3:be:83:44:e7:28:f2:35:ef:be:
d4:67:49:2f:1a:4e:ed:f5:e7:4c:8d:73:68:98:28:f6:90:53:
8c:74:48:26:fb:32:a2:7a:65:e5:c0:e9:c5:2c:46:a5:c5:f9:
59:3e:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:20 2026 by rpki-client