
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS38364.roa
File: AS38364.roa (raw, json)
Hash identifier: nXtoEpbv8tRLhLehKuk+X43OCnfknVH05o4+F/j4lu8=
Subject key identifier: 3E:BE:12:51:5A:B2:A7:9E:3B:05:75:97:EB:DA:1A:4F:DB:FC:C7:AB
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 73D36219F08895E4C5A53D231530A2880DDAB972
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS38364.roa
Signing time: Mon 08 Jun 2026 09:03:46 +0000
ROA not before: Mon 08 Jun 2026 08:58:46 +0000
ROA not after: Mon 07 Jun 2027 09:03:46 +0000
asID: 38364
IP address blocks: 121.79.131.0/24 maxlen: 24
121.79.132.0/24 maxlen: 24
121.79.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d3:62:19:f0:88:95:e4:c5:a5:3d:23:15:30:a2:88:0d:da:b9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: Jun 8 08:58:46 2026 GMT
Not After : Jun 7 09:03:46 2027 GMT
Subject: CN=3EBE12515AB2A79E3B057597EBDA1A4FDBFCC7AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:7b:6b:4e:2c:35:39:4c:22:82:77:75:c2:
fb:43:ed:9b:8e:2b:58:9f:22:1d:c0:c2:19:6b:e6:
61:5a:6f:f9:a2:b6:55:19:6f:ad:23:27:fc:fa:56:
e4:7a:7b:20:20:9e:6d:99:5f:8b:39:d1:62:db:93:
15:5c:4c:7d:e9:16:04:1c:11:6f:41:c1:c4:04:bd:
da:44:f2:85:d6:15:e7:66:b7:38:86:70:35:ca:6d:
7c:d3:0f:f7:ea:45:3b:d9:18:66:56:8f:8e:38:ed:
fd:34:cb:2d:56:58:34:be:a7:2c:cf:62:83:92:7b:
92:4a:6b:89:54:96:36:68:74:23:37:36:58:79:97:
3e:0f:c5:f8:8a:bb:8e:9f:5b:e5:77:2f:47:83:66:
f4:62:e5:7f:05:31:75:b3:2f:3d:92:bc:a2:d3:16:
f5:98:6e:ca:42:74:6c:7b:11:7d:9b:0f:1f:2d:7b:
94:f5:48:72:29:e5:9c:47:31:15:e1:f1:9d:15:dc:
af:7a:72:a3:19:fa:8d:2c:28:43:fb:6d:b7:5b:d3:
dc:c8:e0:8f:85:04:8d:ed:ca:7d:bf:8d:2f:c0:3a:
5a:e9:30:dd:db:1a:8c:22:36:86:6f:76:73:ca:30:
76:41:19:ef:8d:a6:13:0b:83:b8:28:f2:d1:1d:f0:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BE:12:51:5A:B2:A7:9E:3B:05:75:97:EB:DA:1A:4F:DB:FC:C7:AB
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS38364.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.79.131.0-121.79.132.255
121.79.134.0/23
Signature Algorithm: sha256WithRSAEncryption
78:10:63:58:41:cc:71:d1:0b:b7:fb:c4:60:39:6f:cc:28:1f:
39:56:43:ff:73:6c:6a:53:6a:62:34:4c:00:d5:f0:44:3f:6e:
ab:ed:d2:97:b8:8a:50:58:de:fa:48:67:d4:47:a4:7e:c8:b9:
94:5b:92:63:9a:15:3f:df:4c:ea:89:1e:31:98:d5:88:c3:21:
3d:2e:87:36:7e:4c:ef:9c:9c:ee:60:81:0f:67:a1:bf:64:29:
c1:b9:48:71:f7:11:7a:e9:f6:b4:a6:7f:7b:c5:9d:db:8d:f4:
87:eb:bc:64:a8:41:b1:a2:b1:b9:bb:17:cd:28:c5:b5:9f:62:
07:ef:db:b0:91:53:6e:49:97:fd:22:8a:70:0f:20:12:a2:da:
e1:d3:01:0e:d5:53:5c:bb:8c:23:1d:b8:7f:da:de:b4:47:79:
61:e3:40:f2:6d:82:c9:ee:2f:39:31:69:00:70:2b:d1:3f:2f:
f9:af:d6:e4:7c:c9:eb:1e:b9:bc:cc:6e:ba:ec:a0:dd:7e:ca:
27:af:23:9d:84:2b:ea:90:b0:d5:71:92:d2:63:c3:96:cb:48:
da:1c:d4:2e:62:a4:a3:e9:03:9c:4b:43:97:24:6d:2a:bd:52:
92:10:bf:e8:e7:9e:77:41:2d:16:f0:cb:77:ed:f7:d3:1d:ee:
eb:d9:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:35:41 2026 by rpki-client