
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e3234372e302f32342d3234203d3e2039333839.roa
File: 3231312e3136362e3234372e302f32342d3234203d3e2039333839.roa (raw, json)
Hash identifier: BxwGbk86ZOYJEgP6g2Tu/qAwxbhqmBoJJ9sVSWIuT98=
Subject key identifier: AC:55:16:EA:4E:60:1A:9E:E6:09:A1:35:67:A6:B0:2B:64:94:F9:B2
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 53980D0695759BE94A098B046573516C4BB8EE95
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e3234372e302f32342d3234203d3e2039333839.roa
Signing time: Thu 07 May 2026 02:11:37 +0000
ROA not before: Thu 07 May 2026 02:06:37 +0000
ROA not after: Thu 06 May 2027 02:11:37 +0000
asID: 9389
IP address blocks: 211.166.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:98:0d:06:95:75:9b:e9:4a:09:8b:04:65:73:51:6c:4b:b8:ee:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:06:37 2026 GMT
Not After : May 6 02:11:37 2027 GMT
Subject: CN=AC5516EA4E601A9EE609A13567A6B02B6494F9B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:af:20:5c:6c:c6:05:78:a2:16:be:cc:43:
dc:04:85:9a:03:0f:c2:e8:67:d8:54:13:40:28:d1:
71:95:d3:33:ea:f8:7f:d0:5c:04:71:14:f4:d8:5a:
64:15:7c:dc:09:68:09:fd:3b:92:c7:bf:7d:20:b3:
2d:df:9e:90:da:b5:d6:eb:3d:9c:ca:96:dd:e8:cd:
41:0e:84:84:fa:31:38:9d:78:83:83:89:fe:90:f5:
d8:fa:70:bd:a7:87:0e:87:c3:9c:a6:83:91:20:d1:
d1:34:10:92:ea:26:a6:41:1e:2a:af:be:8b:52:14:
02:c0:6d:2f:b0:d5:48:09:37:de:ca:0d:87:09:aa:
fb:89:3c:b2:51:46:2f:4c:c4:31:d5:b0:0e:20:c6:
c2:c0:87:7e:d8:bd:86:2f:9e:c9:27:a4:01:d6:52:
ba:29:ac:7d:05:62:2e:49:fc:e1:60:3f:5b:db:f2:
f6:7e:2d:93:8a:e2:85:6d:44:78:d5:93:f1:61:0f:
a7:8e:90:4f:e0:76:55:5a:8e:37:b6:44:9c:28:ec:
ea:df:2e:bf:1d:99:9f:f9:77:ce:56:bb:90:21:ca:
5a:82:4a:e8:f5:eb:c2:af:c7:31:74:5c:ef:06:7c:
55:5c:3d:2f:98:b0:e2:f7:99:4c:12:bd:0b:5c:ae:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:55:16:EA:4E:60:1A:9E:E6:09:A1:35:67:A6:B0:2B:64:94:F9:B2
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e3234372e302f32342d3234203d3e2039333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.166.247.0/24
Signature Algorithm: sha256WithRSAEncryption
02:62:87:d3:1d:fc:30:dc:52:87:c6:5e:5f:82:e1:10:06:06:
c2:27:ce:d1:08:5b:3b:16:c3:de:4d:d5:32:a3:5c:3e:7e:07:
17:10:25:08:ca:07:99:89:58:3a:a4:92:27:91:dc:ce:86:40:
40:5e:cc:76:14:b1:78:3d:19:4a:e8:34:0d:f0:cf:9c:0c:3b:
27:ac:2a:27:f7:c6:35:6f:6f:6e:2f:79:bc:34:05:0a:14:77:
00:69:60:bd:ff:72:a8:2d:bb:d9:36:dd:c5:6c:0d:e2:46:98:
b0:bc:a1:7f:ab:93:8d:e1:c8:98:3e:c9:f3:a7:9b:98:7a:59:
29:c3:55:4e:aa:78:d8:1f:86:c8:67:86:08:b7:26:1d:87:a2:
6a:74:a3:db:18:7f:7a:b2:f5:db:98:fb:af:fa:c9:ff:6a:a9:
56:e5:0b:26:80:0a:9d:69:79:6a:66:a5:8a:85:e9:66:29:e4:
f0:01:25:07:0b:87:ca:42:d4:06:d8:94:26:91:8c:b3:16:eb:
a6:89:82:5a:46:f6:54:ce:d0:3f:b6:ad:6a:b4:38:0d:37:00:
fd:b9:32:53:49:c9:80:e9:8a:0c:dc:28:7a:19:68:fd:05:5b:
99:49:d9:3a:dc:6a:bc:2a:53:82:0c:98:67:b2:25:b8:b1:0f:
ec:7d:8c:c5
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUU5gNBpV1m+lKCYsEZXNRbEu47pUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYz
QTdGQ0IwOTAeFw0yNjA1MDcwMjA2MzdaFw0yNzA1MDYwMjExMzdaMDMxMTAvBgNV
BAMTKEFDNTUxNkVBNEU2MDFBOUVFNjA5QTEzNTY3QTZCMDJCNjQ5NEY5QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcq8gXGzGBXiiFr7MQ9wEhZoD
D8LoZ9hUE0Ao0XGV0zPq+H/QXARxFPTYWmQVfNwJaAn9O5LHv30gsy3fnpDatdbr
PZzKlt3ozUEOhIT6MTideIODif6Q9dj6cL2nhw6Hw5ymg5Eg0dE0EJLqJqZBHiqv
votSFALAbS+w1UgJN97KDYcJqvuJPLJRRi9MxDHVsA4gxsLAh37YvYYvnsknpAHW
UroprH0FYi5J/OFgP1vb8vZ+LZOK4oVtRHjVk/FhD6eOkE/gdlVajje2RJwo7Orf
Lr8dmZ/5d85Wu5AhylqCSuj168KvxzF0XO8GfFVcPS+YsOL3mUwSvQtcrg/1AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUrFUW6k5gGp7mCaE1Z6awK2SU+bIwHwYDVR0j
BBgwFoAUOOQnl3SE828/CkUojW32Tzp/ywkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDU4NjM1ODA5NTA4NTU3Ny8wLzM4RTQyNzk3NzQ4NEYzNkYzRjBBNDUyODhENkRG
NjRGM0E3RkNCMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYzQTdGQ0IwOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNDU4NjM1ODA5NTA4NTU3Ny8wLzMyMzEzMTJlMzEz
NjM2MmUzMjM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMzMzgzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEANOm9zANBgkqhkiG9w0BAQsFAAOCAQEAAmKH0x38MNxSh8ZeX4LhEAYG
wifO0QhbOxbD3k3VMqNcPn4HFxAlCMoHmYlYOqSSJ5HczoZAQF7MdhSxeD0ZSug0
DfDPnAw7J6wqJ/fGNW9vbi95vDQFChR3AGlgvf9yqC272TbdxWwN4kaYsLyhf6uT
jeHImD7J86ebmHpZKcNVTqp42B+GyGeGCLcmHYeianSj2xh/erL125j7r/rJ/2qp
VuULJoAKnWl5amalioXpZink8AElBwuHykLUBtiUJpGMsxbrpomCWkb2VM7QP7at
arQ4DTcA/bkyU0nJgOmKDNwoehlo/QVbmUnZOtxqvCpTggyYZ7IluLEP7H2MxQ==
-----END CERTIFICATE-----
Generated at Wed May 13 13:07:55 2026 by rpki-client