
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/37312e3133372e302e302f31382d3138203d3e203535393630.roa
File: 37312e3133372e302e302f31382d3138203d3e203535393630.roa (raw, json)
Hash identifier: bv3PSy2LELP01OG9sfFtzSY5yt4tlynmjBP3ScpfGTk=
Subject key identifier: DF:95:C6:E0:87:FB:66:63:D0:73:FD:03:9C:C6:B9:C7:CF:5C:3F:77
Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial: 38592C391C2E0331893BEB96F8CAD5A5C0F89FC6
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/37312e3133372e302e302f31382d3138203d3e203535393630.roa
Signing time: Tue 19 May 2026 03:07:11 +0000
ROA not before: Tue 19 May 2026 03:02:11 +0000
ROA not after: Tue 18 May 2027 03:07:11 +0000
asID: 55960
IP address blocks: 71.137.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:59:2c:39:1c:2e:03:31:89:3b:eb:96:f8:ca:d5:a5:c0:f8:9f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Validity
Not Before: May 19 03:02:11 2026 GMT
Not After : May 18 03:07:11 2027 GMT
Subject: CN=DF95C6E087FB6663D073FD039CC6B9C7CF5C3F77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:28:96:94:e3:56:65:18:f9:50:0e:50:5e:
10:b3:b3:49:21:51:dd:71:f6:69:61:95:0f:01:df:
fa:65:74:57:80:d5:0e:d8:ca:87:00:4a:f5:77:66:
c1:bd:b0:83:08:3b:3d:e4:35:6e:51:38:80:77:9f:
09:24:e5:af:b6:24:10:26:13:c9:cf:51:91:c1:43:
23:81:00:d4:2c:69:ae:f7:84:96:e1:3c:78:ae:f0:
2d:d9:ea:89:dd:b4:26:e5:fb:04:c9:d4:81:eb:26:
c0:24:01:eb:49:40:e0:d1:6d:05:a9:0e:c9:98:8d:
76:e8:46:ef:b6:17:d2:bc:98:78:e8:a8:2e:9b:d6:
ee:2e:92:5f:80:cf:5d:5a:b9:1b:6f:1f:03:17:65:
fd:78:45:80:9a:62:f3:be:13:d7:21:bb:be:45:d4:
a7:9b:12:f6:7e:20:88:05:cb:87:ba:9f:62:27:8f:
29:0d:b2:1f:8f:81:db:7d:d0:0d:c0:d3:6a:0d:8d:
d0:d4:62:f1:ec:f0:62:4d:12:eb:f5:32:6b:f9:06:
23:bd:89:8d:ae:6e:0d:53:01:cf:dd:cc:e4:ef:b3:
19:da:a2:d5:96:f4:cb:da:62:f2:d1:55:ab:82:4b:
d0:33:e2:15:9d:f2:aa:ce:01:3a:22:93:e8:0a:c1:
b8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:95:C6:E0:87:FB:66:63:D0:73:FD:03:9C:C6:B9:C7:CF:5C:3F:77
X509v3 Authority Key Identifier:
keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/37312e3133372e302e302f31382d3138203d3e203535393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.137.0.0/18
Signature Algorithm: sha256WithRSAEncryption
01:73:29:fa:0e:bc:27:ce:87:fc:14:31:bb:13:be:94:af:85:
a4:df:73:fb:83:a7:dc:3a:a9:dc:27:f9:82:2a:76:a1:ac:29:
82:4c:d1:16:39:4c:46:bb:b9:0c:2e:d5:f7:66:8c:cd:be:f5:
71:a2:79:6c:80:ec:72:8f:5d:8f:21:1c:27:0b:67:a0:f5:16:
74:94:59:b9:6d:3d:04:97:73:a4:18:dc:ec:84:ed:6f:22:90:
78:7d:9e:12:a7:9a:1a:c7:5e:89:e9:4a:8d:1d:94:0f:b1:bf:
71:20:42:4d:f7:13:6b:0e:fa:8f:7b:39:d1:6c:f0:7e:b9:d1:
f9:00:fd:79:78:d4:97:53:67:de:68:25:e8:a7:fc:42:8b:bc:
ab:4d:5a:63:d6:f0:32:c4:33:16:21:e7:13:c0:cf:4d:be:8d:
e1:1f:45:a7:c4:d7:0b:42:46:69:1c:7d:b0:2b:d5:14:e2:f6:
45:03:da:ba:66:2c:9f:c1:11:f4:6a:70:03:95:f8:0b:94:fa:
f7:e6:00:ac:48:5f:0c:cb:ad:e0:bb:44:3e:99:e0:66:18:ea:
0e:0b:1c:fe:c8:e8:8a:e4:c9:56:1f:ae:81:77:17:03:88:54:
ed:2e:1b:69:77:fb:91:d9:34:0c:57:c0:28:cd:1d:0e:53:2f:
7f:19:f1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:22:41 2026 by rpki-client