
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e34302e302f32322d3232203d3e20313431373731.roa
File: 3138322e31382e34302e302f32322d3232203d3e20313431373731.roa (raw, json)
Hash identifier: v1MD9sv2ILZoriOHHZrT7AjIomMaXzlgg2mvMhfZGTM=
Subject key identifier: BF:D0:C9:C5:BA:37:32:2C:D9:F3:9F:E1:75:80:D3:32:98:CB:5E:8C
Certificate issuer: /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial: 11884ADC9734F57BBF365CDDB9652B7F2D8E0B07
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e34302e302f32322d3232203d3e20313431373731.roa
Signing time: Wed 27 May 2026 04:48:30 +0000
ROA not before: Wed 27 May 2026 04:43:30 +0000
ROA not after: Wed 26 May 2027 04:48:30 +0000
asID: 141771
IP address blocks: 182.18.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:88:4a:dc:97:34:f5:7b:bf:36:5c:dd:b9:65:2b:7f:2d:8e:0b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Validity
Not Before: May 27 04:43:30 2026 GMT
Not After : May 26 04:48:30 2027 GMT
Subject: CN=BFD0C9C5BA37322CD9F39FE17580D33298CB5E8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:94:54:a5:5a:85:9f:03:21:74:f1:2c:5e:
d0:1c:de:1f:47:8b:2d:f8:cc:d0:a4:8d:44:43:fd:
84:a9:b3:d2:48:c9:88:88:3a:e1:c0:a0:cd:c0:34:
30:96:4c:c8:15:05:5c:68:e6:54:c4:e6:a2:72:2e:
de:f7:18:a3:3b:02:da:1e:38:4e:67:18:08:48:12:
76:3f:bb:79:30:10:1f:c8:82:f1:e6:e1:eb:29:03:
f5:96:31:8e:ca:02:19:c1:2d:40:7c:7d:b7:7e:a4:
a9:cf:e4:e1:89:a0:f8:d2:e9:47:3e:0f:9b:fa:cb:
23:23:54:3d:13:16:4d:ee:e1:c6:f6:7e:19:54:4e:
5a:ce:1d:68:2a:3d:4c:c7:e1:03:b5:b9:f3:13:ee:
76:90:72:20:9f:36:c4:d7:b9:ed:78:89:b6:69:2a:
9d:79:83:85:49:da:d2:2f:4c:1b:de:bf:4a:ba:2b:
3a:5e:69:b9:1a:e3:71:c2:39:ba:9c:b5:bd:08:c2:
7c:ad:fe:96:6b:18:71:cb:c0:44:f1:39:b6:bb:c5:
08:54:9a:f3:3a:a7:18:15:5e:f5:c0:72:11:f0:1d:
8d:e9:3b:c2:8e:b8:04:44:ad:e6:d2:9f:5a:fc:c2:
25:28:07:ff:fa:fe:a7:0e:85:34:27:97:f6:79:01:
c4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D0:C9:C5:BA:37:32:2C:D9:F3:9F:E1:75:80:D3:32:98:CB:5E:8C
X509v3 Authority Key Identifier:
keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e34302e302f32322d3232203d3e20313431373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.18.40.0/22
Signature Algorithm: sha256WithRSAEncryption
78:29:26:c4:0f:4e:39:64:8b:6a:42:f3:4b:c9:47:dd:ed:ad:
9c:87:05:33:73:c5:c7:b9:70:fd:67:df:e9:36:2d:d5:bb:f4:
61:ac:86:08:11:14:13:78:fb:c3:a1:ad:28:f7:1e:84:f2:2e:
4a:e5:d6:b0:82:2d:f2:46:3c:2c:36:b2:d6:2a:dd:b8:ce:40:
05:8d:95:d4:a2:9f:2d:f0:7a:f4:1f:7b:9d:c9:5f:1d:ce:02:
19:9c:17:d9:23:4d:3a:c1:e2:ea:96:6c:77:11:b2:b6:66:77:
f4:96:3a:0f:25:29:50:a9:8f:66:5e:12:71:75:c6:dc:ab:2e:
3c:a8:86:ef:10:c4:60:e8:59:95:7d:2e:f4:58:b7:7e:d9:4b:
14:41:a7:3e:6b:b3:c1:e1:f0:85:a2:29:ff:5e:ca:fd:06:0c:
2d:23:b3:29:2d:68:11:4c:83:b5:85:b3:d6:5b:31:d3:1f:6d:
87:6f:25:8d:c3:b0:6d:71:de:d3:4b:93:fa:f4:f1:06:fa:bb:
44:86:17:8a:5a:bb:a9:98:0c:b8:57:cb:dd:66:03:9a:af:b7:
ac:18:2b:da:6c:0d:82:4d:69:82:54:87:01:67:ee:45:3e:28:
86:95:c1:9b:a3:e6:84:90:10:6e:cc:5f:21:04:06:2e:85:ed:
36:d9:20:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:49 2026 by rpki-client