
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3136302e302f32342d3234203d3e2034383337.roa
File: 3231382e39382e3136302e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: 28ClLRNHc1ca5OaJY9IvDzg6NXbTQfy3ShDofWhJRXo=
Subject key identifier: 8C:A7:90:99:2C:96:B3:C7:FC:20:CD:2D:F5:72:74:3E:81:D2:98:31
Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial: 163EC93B73D0A4ADED7E8EB851AEDDDC8CD6B96C
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3136302e302f32342d3234203d3e2034383337.roa
Signing time: Tue 14 Apr 2026 01:45:27 +0000
ROA not before: Tue 14 Apr 2026 01:40:27 +0000
ROA not after: Tue 13 Apr 2027 01:45:27 +0000
asID: 4837
IP address blocks: 218.98.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 10:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:3e:c9:3b:73:d0:a4:ad:ed:7e:8e:b8:51:ae:dd:dc:8c:d6:b9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Validity
Not Before: Apr 14 01:40:27 2026 GMT
Not After : Apr 13 01:45:27 2027 GMT
Subject: CN=8CA790992C96B3C7FC20CD2DF572743E81D29831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:c4:c4:66:ed:ae:2f:40:c0:10:9d:c8:24:
03:06:4d:9a:51:ca:0a:4b:de:69:50:3c:67:87:c1:
16:3b:8c:74:43:4b:4d:0b:3d:f2:6b:08:27:f4:a6:
76:e4:c5:23:75:9a:ca:89:db:f6:8c:bf:5b:80:9b:
2c:bd:7c:9e:0f:71:fb:df:fb:29:98:82:5f:2b:60:
0e:53:ee:2d:6d:ae:3b:c0:aa:f2:54:d6:bb:c5:e6:
42:48:d3:f5:9d:3a:f1:0a:99:61:42:12:1a:01:70:
67:e7:92:3c:ad:46:38:33:60:97:f6:aa:a2:55:3f:
ca:95:81:a0:1e:71:32:34:2c:cb:c6:0e:9b:f1:67:
6d:38:67:d9:c7:10:64:b0:ee:c9:5b:e4:d5:7e:c5:
a4:a6:7a:be:aa:b6:e7:75:f3:ad:1c:3e:bd:e3:39:
5c:17:a0:d1:e8:cc:7b:aa:70:70:bb:b4:58:78:c6:
62:7a:a1:4b:be:d6:50:80:a8:bb:83:88:70:40:45:
b6:49:dd:a4:5d:5c:13:00:55:4c:46:35:78:8c:87:
01:5f:23:fd:b4:bc:38:19:cf:b7:39:a5:63:79:41:
ca:34:89:a4:4c:fe:f2:2a:5c:94:9a:91:ed:9b:20:
6a:b8:08:11:40:63:00:61:69:8f:2e:f9:06:aa:1a:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A7:90:99:2C:96:B3:C7:FC:20:CD:2D:F5:72:74:3E:81:D2:98:31
X509v3 Authority Key Identifier:
keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3136302e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.160.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:bf:41:14:f6:a0:76:34:94:bd:e7:26:b3:39:83:ea:b0:72:
05:5c:a1:cd:6c:24:3a:1f:5d:97:a2:78:ab:72:d2:e9:fb:0b:
b6:c0:2d:ab:02:2b:a2:9f:f1:1a:0c:7f:91:f3:95:77:d5:8f:
2c:b9:99:57:6e:54:f9:5c:bd:f5:7b:a0:87:0e:16:7b:fe:92:
5c:59:be:3a:e2:d8:c6:6e:9b:4c:06:e4:4b:41:2a:88:10:91:
9b:db:8f:66:c2:59:23:e8:fc:69:58:53:df:5b:c0:8b:91:d6:
2a:f5:4e:17:d4:fd:18:d2:fd:b1:94:1b:d3:6b:9a:2c:55:2b:
a7:55:8a:8c:34:04:a8:5c:19:eb:d5:c7:f8:70:f0:1e:d3:8c:
1d:85:ad:1e:55:b4:56:13:0a:bb:4f:d8:77:0b:e6:0e:15:ae:
c1:82:b5:b3:73:1b:53:ac:3b:70:27:86:35:d7:90:d9:9f:e1:
3e:d5:ac:90:9c:b7:5a:54:9f:22:96:44:ee:26:a7:ae:4a:06:
c3:4d:ed:ca:d5:4a:4e:1e:b7:1c:7d:f8:27:cf:ec:f2:73:33:
be:54:1b:22:ed:1c:b4:dc:ff:2c:fb:77:d2:e8:0f:39:2c:96:
59:4d:b5:7a:77:d5:38:d4:60:98:7d:1d:fd:05:c5:71:81:95:
1e:78:b1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:13:11 2026 by rpki-client