
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3137362e302f32342d3234203d3e20313436383431.roa
File: 3231382e39382e3137362e302f32342d3234203d3e20313436383431.roa (raw, json)
Hash identifier: W9YQVXCZAs9kS2UDOyKiYaw3OS4DRjkHfthCx48ARa8=
Subject key identifier: 0D:72:C9:FC:AE:99:98:66:26:78:C3:65:3E:C9:55:49:67:98:FD:9C
Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial: 17C90A01590A2ADD5784E0E98181931592A01F70
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3137362e302f32342d3234203d3e20313436383431.roa
Signing time: Tue 14 Apr 2026 01:45:27 +0000
ROA not before: Tue 14 Apr 2026 01:40:27 +0000
ROA not after: Tue 13 Apr 2027 01:45:27 +0000
asID: 146841
IP address blocks: 218.98.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 10:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c9:0a:01:59:0a:2a:dd:57:84:e0:e9:81:81:93:15:92:a0:1f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Validity
Not Before: Apr 14 01:40:27 2026 GMT
Not After : Apr 13 01:45:27 2027 GMT
Subject: CN=0D72C9FCAE9998662678C3653EC955496798FD9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:b7:33:e7:f6:2d:8e:62:4e:bc:e1:c2:9a:
db:22:da:a1:dc:49:f1:fe:cb:1b:ed:0d:03:0d:4e:
45:24:8e:81:c1:33:e2:27:f7:e3:54:73:01:d8:0c:
91:d1:d2:fd:d1:74:bf:a7:bc:c5:87:5a:56:a9:d3:
09:59:9e:3f:8d:9a:56:3c:c3:ab:a5:95:9c:90:15:
32:46:c7:00:1e:0c:a4:87:92:66:cb:cc:3a:a9:49:
ab:23:fd:ff:ca:7d:c0:dc:eb:d8:8e:11:de:85:59:
75:7b:b2:32:67:38:e7:95:ab:d4:fa:33:de:ff:b0:
2f:56:2f:a3:41:1e:33:57:96:05:21:ba:d6:89:1a:
73:9e:e8:7e:f2:1e:ee:5c:de:9f:0b:d0:82:54:9c:
e7:e4:61:01:53:cb:b8:3f:bf:29:26:cf:6c:d7:84:
05:9a:36:ab:34:9c:a8:70:7e:59:2d:e5:4d:17:c6:
91:8f:be:05:97:b3:90:e0:b0:a2:79:c1:aa:02:02:
d4:35:02:ed:cf:bf:79:39:43:54:ef:49:58:98:3c:
06:0b:d5:b6:c4:39:c3:ad:fc:ff:96:6c:37:55:db:
5b:46:84:7a:9d:a7:ef:08:10:6c:db:68:92:b0:0f:
db:c2:47:66:fb:27:33:a5:36:5f:67:48:17:63:d7:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:72:C9:FC:AE:99:98:66:26:78:C3:65:3E:C9:55:49:67:98:FD:9C
X509v3 Authority Key Identifier:
keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3137362e302f32342d3234203d3e20313436383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.176.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d3:f6:17:dc:1d:29:fe:f0:1c:d3:d2:94:de:c8:ec:38:44:
83:8d:0f:9b:6d:b0:8f:c7:ee:e1:ce:31:13:06:22:6a:7f:d3:
eb:78:32:9c:ff:0e:d2:2c:42:af:69:a1:9e:89:b1:e6:26:56:
ef:99:7d:ad:b1:9e:0c:f5:c1:7e:a1:60:5c:b7:f9:cd:c1:2a:
66:1c:39:e1:61:6e:58:4c:94:31:e6:3c:88:0b:1d:ab:30:3a:
63:4c:34:70:86:03:7e:7c:67:64:bc:9c:58:9a:08:66:5b:e9:
5b:5a:36:02:a7:71:6b:fd:84:fd:3f:71:97:66:a7:83:aa:fa:
1d:99:25:49:8b:16:cc:9f:b2:a5:8c:2b:32:e9:06:c9:77:a9:
f1:a7:61:aa:e3:fb:c5:85:08:b5:46:a5:34:dd:e7:27:75:c1:
9f:e5:a4:71:ed:3a:cf:69:e6:e4:74:06:b4:4e:b1:72:3f:c1:
53:c6:51:7b:5d:b7:b7:ad:b5:69:a3:8a:cd:4e:95:97:1b:c7:
ff:54:09:54:7c:4d:66:cc:a3:1f:35:03:55:9f:a8:78:58:29:
e1:43:3d:81:e6:bf:6c:f9:9d:4f:35:97:ec:90:c8:e6:29:57:
eb:21:71:3a:1a:6d:d9:c7:62:1c:46:bb:8f:10:e7:dc:7c:d3:
06:be:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:53 2026 by rpki-client