
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/36302e3139352e3234382e302f32312d3231203d3e2034383437.roa
File: 36302e3139352e3234382e302f32312d3231203d3e2034383437.roa (raw, json)
Hash identifier: cHC8Aa7FytR3TU/TZRL9ZFxs5p4IyknvgRDPG8EIaI8=
Subject key identifier: 9F:C4:E8:44:BF:D2:D4:F7:DA:0A:A3:E7:E9:46:53:F2:47:F2:F8:0D
Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial: 58C05D10E88312CC9B0D4B281581098F989CEF9B
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/36302e3139352e3234382e302f32312d3231203d3e2034383437.roa
Signing time: Wed 15 Apr 2026 04:02:12 +0000
ROA not before: Wed 15 Apr 2026 03:57:12 +0000
ROA not after: Wed 14 Apr 2027 04:02:12 +0000
asID: 4847
IP address blocks: 60.195.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:c0:5d:10:e8:83:12:cc:9b:0d:4b:28:15:81:09:8f:98:9c:ef:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Validity
Not Before: Apr 15 03:57:12 2026 GMT
Not After : Apr 14 04:02:12 2027 GMT
Subject: CN=9FC4E844BFD2D4F7DA0AA3E7E94653F247F2F80D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:27:01:9d:0c:d9:09:71:f9:77:f0:fa:7e:
ca:ca:de:a4:20:8a:53:f8:60:bd:aa:1c:c8:eb:b1:
2b:1c:f7:0f:70:6c:64:bf:41:c4:10:35:6d:b3:6d:
31:d2:37:de:ab:c8:93:c3:0b:3a:59:07:26:91:70:
cf:7b:84:bc:8f:02:b4:d2:16:4f:f8:4d:6b:97:7d:
6d:ac:86:7d:18:d2:1c:f3:11:f7:d4:df:c1:8e:eb:
87:78:41:2f:15:ef:10:b9:9d:bf:9b:df:0a:ac:d3:
6c:d9:6a:b2:09:58:97:66:84:a5:6d:6a:c0:4b:93:
9f:fe:dd:8a:0c:1a:95:d7:93:4b:5d:a3:93:6e:97:
22:79:9e:74:54:ef:3b:4a:ba:55:80:fe:f1:50:ce:
9e:d6:eb:3a:22:27:69:e0:5e:62:7a:43:0f:15:e7:
ec:5b:db:bf:00:63:36:84:fc:d3:6b:1e:d9:4a:6c:
5b:cb:09:32:e9:02:78:79:c5:c3:d1:fa:e3:7b:10:
71:bd:eb:67:5d:ac:7c:5e:43:74:64:c1:14:04:f6:
2a:7f:ac:99:81:55:b1:93:44:13:81:4f:f1:8d:6b:
a2:f8:bc:7b:46:50:4f:c3:42:99:f1:55:d5:b2:48:
37:50:36:cb:91:6a:35:1d:e3:ed:cc:f0:f7:78:2f:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C4:E8:44:BF:D2:D4:F7:DA:0A:A3:E7:E9:46:53:F2:47:F2:F8:0D
X509v3 Authority Key Identifier:
keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/36302e3139352e3234382e302f32312d3231203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.195.248.0/21
Signature Algorithm: sha256WithRSAEncryption
47:ca:89:a9:2c:2f:45:bc:d6:86:f3:68:5e:ce:7d:4b:4b:8d:
7a:0e:f5:57:a5:03:45:f9:58:90:97:10:52:50:23:79:e4:58:
d9:e5:3c:55:9d:85:24:76:6e:27:73:03:a9:2a:44:46:9b:97:
c2:cc:fa:db:65:92:f3:ac:f9:f0:9e:31:bf:5a:ac:ad:24:b3:
b4:08:a7:6d:6f:cd:34:64:14:e4:09:36:76:ae:f9:51:da:20:
c4:27:12:70:ec:cd:37:e0:0f:e3:17:ef:92:e8:a2:29:35:42:
1c:09:90:b2:cb:52:c6:6d:2b:90:40:94:c9:bb:f6:69:ad:14:
22:d5:bf:79:19:59:85:3a:d1:83:b9:f7:0b:bd:50:de:e6:f6:
e4:be:ae:cc:48:b2:05:ba:2a:65:d2:00:92:da:df:fa:02:4b:
9d:9a:86:20:51:67:1d:f9:d1:d2:b8:48:59:d3:b2:f4:53:2e:
32:36:65:d3:d8:a4:e7:8a:ed:a9:b0:a1:42:60:64:e9:11:00:
ef:7d:de:87:70:a6:b6:2c:f7:f2:b8:e6:df:17:e0:3c:75:b4:
15:66:9a:64:7c:aa:a0:1f:8c:53:16:11:de:e4:a0:91:c7:9e:
3e:39:10:a7:47:ce:57:1d:4e:5b:fc:99:2e:c4:b2:be:b3:94:
1b:53:7d:26
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUWMBdEOiDEsybDUsoFYEJj5ic75swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky
MjJFOEY5RjAeFw0yNjA0MTUwMzU3MTJaFw0yNzA0MTQwNDAyMTJaMDMxMTAvBgNV
BAMTKDlGQzRFODQ0QkZEMkQ0RjdEQTBBQTNFN0U5NDY1M0YyNDdGMkY4MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrrScBnQzZCXH5d/D6fsrK3qQg
ilP4YL2qHMjrsSsc9w9wbGS/QcQQNW2zbTHSN96ryJPDCzpZByaRcM97hLyPArTS
Fk/4TWuXfW2shn0Y0hzzEffU38GO64d4QS8V7xC5nb+b3wqs02zZarIJWJdmhKVt
asBLk5/+3YoMGpXXk0tdo5NulyJ5nnRU7ztKulWA/vFQzp7W6zoiJ2ngXmJ6Qw8V
5+xb278AYzaE/NNrHtlKbFvLCTLpAnh5xcPR+uN7EHG962ddrHxeQ3RkwRQE9ip/
rJmBVbGTRBOBT/GNa6L4vHtGUE/DQpnxVdWySDdQNsuRajUd4+3M8Pd4L+25AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUn8ToRL/S1PfaCqPn6UZT8kfy+A0wHwYDVR0j
BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3
MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz
QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDcwOTU1OTI0MDczNTQ1NzMxLzAvMzYzMDJlMzEzOTM1
MmUzMjM0MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAzzD+DANBgkqhkiG9w0BAQsFAAOCAQEAR8qJqSwvRbzWhvNoXs59S0uNeg71
V6UDRflYkJcQUlAjeeRY2eU8VZ2FJHZuJ3MDqSpERpuXwsz622WS86z58J4xv1qs
rSSztAinbW/NNGQU5Ak2dq75UdogxCcScOzNN+AP4xfvkuiiKTVCHAmQsstSxm0r
kECUybv2aa0UItW/eRlZhTrRg7n3C71Q3ub25L6uzEiyBboqZdIAktrf+gJLnZqG
IFFnHfnR0rhIWdOy9FMuMjZl09ik54rtqbChQmBk6REA733eh3Cmtiz38rjm3xfg
PHW0FWaaZHyqoB+MUxYR3uSgkceePjkQp0fOVx1OW/yZLsSyvrOUG1N9Jg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:48 2026 by rpki-client