
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e3235302e302f32342d3234203d3e2039333839.roa
File: 3231312e3136362e3235302e302f32342d3234203d3e2039333839.roa (raw, json)
Hash identifier: 4XFIafVZt4UMGKfjzhZufXRC1xNo1AZWbIlOpslyhd8=
Subject key identifier: 7C:76:C5:11:F8:1F:66:27:31:84:0B:7F:BB:1A:8C:E5:02:A0:94:0D
Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial: 4F0836F188F648177ED7AF75659D17FE2BA29AC7
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e3235302e302f32342d3234203d3e2039333839.roa
Signing time: Thu 07 May 2026 02:11:37 +0000
ROA not before: Thu 07 May 2026 02:06:37 +0000
ROA not after: Thu 06 May 2027 02:11:37 +0000
asID: 9389
IP address blocks: 211.166.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:08:36:f1:88:f6:48:17:7e:d7:af:75:65:9d:17:fe:2b:a2:9a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Validity
Not Before: May 7 02:06:37 2026 GMT
Not After : May 6 02:11:37 2027 GMT
Subject: CN=7C76C511F81F662731840B7FBB1A8CE502A0940D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:9b:b3:0b:f3:b3:c8:04:50:34:46:48:a8:
b7:9d:f6:eb:82:89:f3:1e:d1:9d:c5:a4:6d:1d:ef:
ba:55:ad:52:7e:a8:56:32:5f:23:58:6d:ce:9b:a4:
d8:22:2b:72:64:5b:74:f4:b3:f9:d2:92:c9:e9:66:
7e:5d:e9:88:a0:1e:e6:62:2f:0c:c8:be:3e:f2:35:
7f:a7:1d:d2:d1:e4:c5:4d:41:eb:1a:60:ff:be:9b:
f9:f8:3b:1b:ad:a1:07:c9:a4:b5:09:2d:b6:b2:e3:
40:f2:62:ad:80:16:51:16:54:bd:10:25:6b:26:2d:
56:c3:b6:69:8b:b7:de:bd:88:0d:57:c4:63:de:05:
47:0e:2c:0b:cc:83:ec:6b:ac:de:15:4b:b0:db:e6:
ba:b0:bb:ad:bf:15:59:0f:4b:83:4a:7d:4f:ad:ab:
10:90:2e:4f:70:bc:c2:c5:10:5e:14:42:13:cf:88:
33:b5:c4:b9:50:2e:6e:62:9a:72:38:5d:28:0f:8a:
6b:8c:d7:fe:bc:59:f3:1a:53:53:6d:45:bf:bb:bc:
be:25:26:51:dd:10:b2:e8:f5:98:a6:1d:c6:82:a4:
61:4b:9b:60:bf:17:45:a6:19:55:38:2e:ff:0d:71:
4c:14:22:b8:26:2f:5c:c8:37:ee:07:f5:bc:ea:f5:
0b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:76:C5:11:F8:1F:66:27:31:84:0B:7F:BB:1A:8C:E5:02:A0:94:0D
X509v3 Authority Key Identifier:
keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e3235302e302f32342d3234203d3e2039333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.166.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:7e:23:9c:23:aa:4e:57:15:1f:dc:ed:ce:31:73:6e:f0:d1:
85:84:32:bc:07:6d:82:d1:d2:e9:d8:25:7a:cc:23:ce:5f:94:
22:2f:de:cb:83:72:6d:09:c1:a3:7b:9e:5c:1f:c2:ee:e2:4a:
2c:7a:72:dc:08:67:04:5c:63:a0:c2:a7:6f:23:8a:64:88:3c:
55:fd:16:86:51:28:04:1e:68:49:d7:4b:3b:b2:9b:5c:77:ca:
16:94:43:5b:d7:31:68:a9:d2:d2:f9:c5:d4:f5:47:40:ea:d6:
57:45:41:e1:30:55:4d:07:80:37:e9:79:8b:ec:ab:5b:80:66:
e6:d1:d0:a5:9d:47:c9:63:7e:77:66:b1:f7:d4:df:e6:16:c5:
e5:a7:d0:82:47:40:2f:87:fb:30:81:d4:27:dd:4f:a2:b4:b9:
0c:3f:6d:6a:0a:67:3e:fd:46:ad:e3:fd:09:0e:fe:52:c2:80:
ba:a9:29:2a:5b:db:9f:fb:c4:5a:aa:4f:ec:13:6a:85:f6:73:
ef:53:fd:32:c7:99:c6:a7:04:46:2c:c4:f4:fa:fc:f9:60:1b:
c6:7a:b7:2a:bb:b4:e8:87:63:f2:5c:76:02:27:ff:c7:f8:c4:
d6:d4:03:c1:fb:73:43:8b:62:a3:3f:ea:e7:65:ef:aa:be:e7:
ab:2b:1e:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:10:27 2026 by rpki-client