
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS38730.roa
File: AS38730.roa (raw, json)
Hash identifier: R6GUDNjhj7Y2lemEXh2qBIc7qq98BsfLVSYfayFPICM=
Subject key identifier: 2E:F6:DA:6D:0D:F8:E6:6B:6E:0A:D5:88:25:B4:1D:47:6B:3B:55:5D
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 711A1962FAF863A65EC190B82886EF913DE97DFC
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS38730.roa
Signing time: Wed 27 May 2026 07:20:00 +0000
ROA not before: Wed 27 May 2026 07:15:00 +0000
ROA not after: Wed 26 May 2027 07:20:00 +0000
asID: 38730
IP address blocks: 121.46.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:1a:19:62:fa:f8:63:a6:5e:c1:90:b8:28:86:ef:91:3d:e9:7d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: May 27 07:15:00 2026 GMT
Not After : May 26 07:20:00 2027 GMT
Subject: CN=2EF6DA6D0DF8E66B6E0AD58825B41D476B3B555D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:72:2e:b6:5a:b0:92:9c:9a:11:c8:9d:a6:
62:e3:44:ba:7f:66:43:34:40:cb:56:52:ea:25:0f:
80:90:97:c9:30:f9:e7:2f:64:a3:57:04:13:9b:ea:
a8:f9:37:02:dc:90:8b:df:b1:15:d4:e1:df:55:db:
d7:88:34:9c:5b:2d:d0:02:ef:86:9b:1d:10:73:35:
12:bd:5f:95:c1:1f:19:3f:bd:5c:4a:9b:91:3f:c0:
4f:ef:78:47:e4:f5:7b:09:e3:32:ce:73:a6:1a:1f:
65:4c:20:09:00:15:e7:df:9b:eb:e6:c0:ba:36:73:
a0:72:fa:ee:bb:65:e6:32:cf:b0:d6:90:a1:24:0c:
de:19:4e:e2:bb:a0:63:38:28:ff:c7:94:03:c3:75:
1a:66:a7:43:49:2e:3d:cb:69:4a:2d:1d:8d:93:1c:
6b:88:ac:f0:b5:a5:42:9e:8e:5b:11:b0:c4:26:45:
7b:ff:b7:de:35:8e:45:2a:47:48:12:d3:a8:fb:36:
41:07:5b:db:26:ee:eb:8e:98:39:23:5b:8f:15:f6:
d0:3d:dd:42:3c:f3:56:8a:1e:37:8e:ad:7e:01:5e:
7f:ec:86:16:71:ed:63:c5:00:2b:1e:2b:e5:84:39:
a6:f3:06:10:3c:af:db:1a:5e:4d:4b:9c:08:c8:e1:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F6:DA:6D:0D:F8:E6:6B:6E:0A:D5:88:25:B4:1D:47:6B:3B:55:5D
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS38730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.156.0/22
Signature Algorithm: sha256WithRSAEncryption
62:68:e8:63:49:ff:79:7c:88:3d:29:0d:03:5b:91:fe:45:85:
3d:b7:65:8c:e9:18:d6:d6:a2:01:ed:ae:e9:24:3d:54:96:70:
f0:3f:e6:6a:14:ba:81:3c:54:71:ec:17:e2:e5:f9:15:b2:46:
64:ee:29:cb:f3:16:9e:1c:83:d2:97:7a:80:e2:e5:b7:d7:67:
ce:e1:00:12:d2:17:f5:e5:3b:d3:3a:5d:63:2a:1d:86:1b:4a:
1e:b9:f9:7c:5a:74:57:2e:c0:e3:88:c3:5a:aa:6e:02:1b:45:
51:95:79:2c:99:24:d0:8c:ff:f6:ad:a6:ec:1a:04:4d:4f:87:
70:4b:53:59:28:74:58:91:63:e8:02:17:92:12:39:d8:5f:a1:
ae:83:9a:0e:53:dc:29:d0:19:01:86:a9:d2:6a:0e:8f:64:e5:
31:4d:e4:aa:54:56:1e:89:7e:fe:e1:09:76:e5:41:fd:87:0e:
cc:aa:5d:bd:09:d4:66:78:3e:14:8c:25:2e:9c:25:32:97:ad:
1e:b4:b9:55:aa:6f:fc:37:f1:4a:21:4e:01:c5:1e:2b:4d:e4:
98:6d:4f:ca:9d:67:35:1d:a6:65:44:8b:21:15:3a:db:fa:b7:
29:97:e9:d6:8a:2c:4f:d7:70:b3:92:60:11:7d:34:02:fc:e5:
eb:2c:b3:38
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUcRoZYvr4Y6ZewZC4KIbvkT3pffwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA1MjcwNzE1MDBaFw0yNzA1MjYwNzIwMDBaMDMxMTAvBgNV
BAMTKDJFRjZEQTZEMERGOEU2NkI2RTBBRDU4ODI1QjQxRDQ3NkIzQjU1NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0XIutlqwkpyaEcidpmLjRLp/
ZkM0QMtWUuolD4CQl8kw+ecvZKNXBBOb6qj5NwLckIvfsRXU4d9V29eINJxbLdAC
74abHRBzNRK9X5XBHxk/vVxKm5E/wE/veEfk9XsJ4zLOc6YaH2VMIAkAFeffm+vm
wLo2c6By+u67ZeYyz7DWkKEkDN4ZTuK7oGM4KP/HlAPDdRpmp0NJLj3LaUotHY2T
HGuIrPC1pUKejlsRsMQmRXv/t941jkUqR0gS06j7NkEHW9sm7uuOmDkjW48V9tA9
3UI881aKHjeOrX4BXn/shhZx7WPFACseK+WEOabzBhA8r9saXk1LnAjI4XfxAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQULvbabQ345mtuCtWIJbQdR2s7VV0wHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTYyNzUzMzA3NzczNTAxNDYvMC9BUzM4NzMwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQCeS6cMA0GCSqGSIb3DQEBCwUAA4IBAQBiaOhjSf95fIg9KQ0DW5H+RYU9
t2WM6RjW1qIB7a7pJD1UlnDwP+ZqFLqBPFRx7Bfi5fkVskZk7inL8xaeHIPSl3qA
4uW312fO4QAS0hf15TvTOl1jKh2GG0oeufl8WnRXLsDjiMNaqm4CG0VRlXksmSTQ
jP/2rabsGgRNT4dwS1NZKHRYkWPoAheSEjnYX6Gug5oOU9wp0BkBhqnSag6PZOUx
TeSqVFYeiX7+4Ql25UH9hw7Mql29CdRmeD4UjCUunCUyl60etLlVqm/8N/FKIU4B
xR4rTeSYbU/KnWc1HaZlRIshFTrb+rcpl+nWiixP13CzkmARfTQC/OXrLLM4
-----END CERTIFICATE-----
Generated at Sat Jun 6 15:49:54 2026 by rpki-client