
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220043283/0/3131392e33382e3139322e302f32302d3230203d3e203338333637.roa
File: 3131392e33382e3139322e302f32302d3230203d3e203338333637.roa (raw, json)
Hash identifier: niXTpol86vmz6DcPKGxvQoGJAvpzazIgo8KhQW4C54k=
Subject key identifier: A5:38:B2:9C:6F:18:18:FF:49:DC:06:CE:A7:7A:29:A4:E6:78:D4:AB
Certificate issuer: /CN=644F9AE827627B0357D7972FE08D569A0CB97C31
Certificate serial: 1DD1AB78A3242AE24353D4621C62EED44E20BFDF
Authority key identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/3131392e33382e3139322e302f32302d3230203d3e203338333637.roa
Signing time: Wed 13 May 2026 09:13:05 +0000
ROA not before: Wed 13 May 2026 09:08:05 +0000
ROA not after: Wed 12 May 2027 09:13:05 +0000
asID: 38367
IP address blocks: 119.38.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl
rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:d1:ab:78:a3:24:2a:e2:43:53:d4:62:1c:62:ee:d4:4e:20:bf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644F9AE827627B0357D7972FE08D569A0CB97C31
Validity
Not Before: May 13 09:08:05 2026 GMT
Not After : May 12 09:13:05 2027 GMT
Subject: CN=A538B29C6F1818FF49DC06CEA77A29A4E678D4AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8b:99:1f:af:29:75:77:7b:63:ed:13:64:5e:
85:ba:11:8f:24:58:65:55:33:77:f1:34:c8:01:d5:
3e:5b:b6:fe:f9:1e:09:4a:9e:4d:c9:18:3a:5e:26:
b7:99:f1:c0:84:58:1d:10:7b:cd:a1:df:e8:b1:43:
94:f3:1a:4f:0c:8b:5f:fe:d4:57:c8:5d:66:fa:cd:
39:32:cc:e5:2f:ea:6b:04:fd:db:21:e4:ce:2f:49:
9f:b1:c1:61:be:2e:3a:33:35:2f:01:19:9b:c6:07:
29:c5:0c:4b:8b:9f:ab:58:1a:38:62:27:d1:f9:6e:
37:3e:45:37:bb:6b:48:c3:0a:84:26:66:8a:0e:b6:
4f:34:21:bd:5a:c8:d2:71:b3:63:88:55:72:3f:2e:
5d:45:39:09:8b:7f:17:67:66:8c:73:a7:a5:6f:7a:
3f:96:e1:f5:98:c6:4e:02:75:10:10:84:c5:1e:b7:
56:4b:04:4e:2c:23:75:ed:60:30:50:18:56:78:f4:
ec:b6:d5:e3:ac:a0:4d:22:86:dd:af:c6:be:6d:b7:
c2:e8:93:c7:67:78:c9:d0:35:5d:a1:8c:04:2a:aa:
b7:21:b0:b4:ba:70:c4:53:35:16:31:da:ee:5e:dd:
d3:34:56:59:f8:11:87:29:12:44:bc:54:45:b6:34:
64:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:38:B2:9C:6F:18:18:FF:49:DC:06:CE:A7:7A:29:A4:E6:78:D4:AB
X509v3 Authority Key Identifier:
keyid:64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/3131392e33382e3139322e302f32302d3230203d3e203338333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.38.192.0/20
Signature Algorithm: sha256WithRSAEncryption
cb:b9:40:29:e3:72:2d:27:a5:6e:97:63:2b:cd:88:a4:39:4f:
20:74:93:30:0b:f0:82:a8:40:c5:04:f4:f8:35:be:8d:aa:77:
a6:31:95:16:f6:7a:70:83:8c:fe:c1:f5:2a:1e:5d:5f:50:52:
78:e0:ef:00:3e:a5:10:92:83:e3:c4:24:f5:e1:70:c9:f2:bb:
f8:8c:d3:ab:f5:32:8f:c4:2e:7c:91:f3:b3:f6:d9:b2:40:91:
69:94:87:2e:06:60:27:a0:ea:60:69:26:27:0e:7b:ee:38:84:
f1:7b:c3:53:ac:a8:59:6b:5c:1b:b2:df:d2:5f:4d:b7:c8:03:
04:64:24:ec:13:ba:c1:fc:ce:b8:91:6e:52:97:04:97:cf:86:
f8:e5:62:a8:dd:6b:66:38:df:cc:37:87:a0:0f:d2:51:a8:a8:
75:9f:cc:84:ba:d7:67:b0:f8:01:f2:4d:b8:58:4c:8d:d7:b7:
5c:d1:0f:36:7e:e0:87:10:3a:00:3c:0a:a0:3b:65:5f:d4:3d:
c6:fa:35:8d:1f:25:15:5c:6a:fe:50:7b:f7:c8:41:66:9e:00:
49:cc:c7:00:9a:18:ec:e0:74:5c:8c:c8:50:c6:0e:fa:e3:df:
84:c7:85:8f:60:c6:2f:78:cc:cc:45:48:1b:f6:e1:05:c2:4a:
2d:d4:a1:13
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUHdGreKMkKuJDU9RiHGLu1E4gv98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEw
Q0I5N0MzMTAeFw0yNjA1MTMwOTA4MDVaFw0yNzA1MTIwOTEzMDVaMDMxMTAvBgNV
BAMTKEE1MzhCMjlDNkYxODE4RkY0OURDMDZDRUE3N0EyOUE0RTY3OEQ0QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNi5kfryl1d3tj7RNkXoW6EY8k
WGVVM3fxNMgB1T5btv75HglKnk3JGDpeJreZ8cCEWB0Qe82h3+ixQ5TzGk8Mi1/+
1FfIXWb6zTkyzOUv6msE/dsh5M4vSZ+xwWG+LjozNS8BGZvGBynFDEuLn6tYGjhi
J9H5bjc+RTe7a0jDCoQmZooOtk80Ib1ayNJxs2OIVXI/Ll1FOQmLfxdnZoxzp6Vv
ej+W4fWYxk4CdRAQhMUet1ZLBE4sI3XtYDBQGFZ49Oy21eOsoE0iht2vxr5tt8Lo
k8dneMnQNV2hjAQqqrchsLS6cMRTNRYx2u5e3dM0Vln4EYcpEkS8VEW2NGTlAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUpTiynG8YGP9J3AbOp3oppOZ41KswHwYDVR0j
BBgwFoAUZE+a6CdiewNX15cv4I1Wmgy5fDEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg3MTA3NjIyMDA0MzI4My8wLzY0NEY5QUU4Mjc2MjdCMDM1N0Q3OTcyRkUwOEQ1
NjlBMENCOTdDMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEwQ0I5N0MzMS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjg3MTA3NjIyMDA0MzI4My8wLzMxMzEzOTJlMzMz
ODJlMzEzOTMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzMzODMzMzYzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBHcmwDANBgkqhkiG9w0BAQsFAAOCAQEAy7lAKeNyLSelbpdjK82IpDlP
IHSTMAvwgqhAxQT0+DW+jap3pjGVFvZ6cIOM/sH1Kh5dX1BSeODvAD6lEJKD48Qk
9eFwyfK7+IzTq/Uyj8QufJHzs/bZskCRaZSHLgZgJ6DqYGkmJw577jiE8XvDU6yo
WWtcG7Lf0l9Nt8gDBGQk7BO6wfzOuJFuUpcEl8+G+OViqN1rZjjfzDeHoA/SUaio
dZ/MhLrXZ7D4AfJNuFhMjde3XNEPNn7ghxA6ADwKoDtlX9Q9xvo1jR8lFVxq/lB7
98hBZp4ASczHAJoY7OB0XIzIUMYO+uPfhMeFj2DGL3jMzEVIG/bhBcJKLdShEw==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:11 2026 by rpki-client