
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3137392e302f32342d3234203d3e20313436383431.roa
File: 3231382e39382e3137392e302f32342d3234203d3e20313436383431.roa (raw, json)
Hash identifier: ARWBa9IdK08EGnOSuh23uDfuB0JMI9PCXpZKCN/m7l4=
Subject key identifier: C7:9C:EE:40:42:B2:54:C9:5B:F4:66:23:12:F6:67:37:25:39:79:5A
Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial: 76259F3DC7063EC26C9DF8E8C4B9378DBAE5C251
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3137392e302f32342d3234203d3e20313436383431.roa
Signing time: Tue 14 Apr 2026 01:45:27 +0000
ROA not before: Tue 14 Apr 2026 01:40:27 +0000
ROA not after: Tue 13 Apr 2027 01:45:27 +0000
asID: 146841
IP address blocks: 218.98.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 10:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:25:9f:3d:c7:06:3e:c2:6c:9d:f8:e8:c4:b9:37:8d:ba:e5:c2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Validity
Not Before: Apr 14 01:40:27 2026 GMT
Not After : Apr 13 01:45:27 2027 GMT
Subject: CN=C79CEE4042B254C95BF4662312F667372539795A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0c:9a:fd:4a:3b:f7:fc:a4:c0:9d:07:9d:bf:
69:f0:65:9a:a6:ee:2e:85:e0:39:21:36:1e:8f:ca:
41:62:23:7c:b0:a5:9a:ba:62:1f:c9:84:aa:40:fc:
d7:1a:2c:e1:08:1e:4b:4e:71:b6:45:63:58:62:9c:
3b:4f:0f:08:1e:25:71:f2:bd:43:79:8b:66:3c:89:
cd:98:7e:ac:36:17:25:81:8e:22:6f:5b:fa:dd:3b:
40:31:a9:5c:55:46:40:80:64:bf:f0:89:1a:bd:b0:
97:75:39:f4:fd:90:5d:22:fa:fc:98:1e:ab:f3:19:
2e:f9:bf:85:fe:ea:c5:cf:c2:d3:2f:d8:72:be:38:
42:fc:ed:1c:1e:91:51:a7:b2:db:3a:51:7a:da:6f:
e6:bc:50:2b:e6:c0:02:6d:df:ac:35:8a:e1:79:3d:
e9:d8:65:30:9d:bb:af:44:c8:72:0f:24:13:3e:4e:
35:3f:61:34:4e:f9:d8:63:cc:bf:98:9f:da:b4:8f:
07:7d:f2:bf:32:35:a3:1b:2a:e1:07:49:29:87:b7:
9d:75:a9:22:77:f8:15:a2:10:9b:5f:17:8d:20:e7:
1a:ea:e1:27:8a:80:6f:15:77:c6:85:e5:34:43:d6:
c7:b2:2b:8d:12:e3:cf:0a:04:16:da:e0:97:07:d2:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9C:EE:40:42:B2:54:C9:5B:F4:66:23:12:F6:67:37:25:39:79:5A
X509v3 Authority Key Identifier:
keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3137392e302f32342d3234203d3e20313436383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.179.0/24
Signature Algorithm: sha256WithRSAEncryption
61:05:6d:64:68:8b:6c:4a:09:d3:6c:ad:ce:e1:ad:0c:cb:32:
e0:c2:56:f4:0d:b2:04:3d:0e:8b:ef:eb:0a:e8:8f:2d:a2:33:
3e:25:4d:19:ab:c9:b9:2d:72:44:b6:5c:b1:74:1e:2f:3c:d6:
9d:d0:9d:75:cb:e0:e3:02:d6:93:02:15:b4:14:d0:8e:22:64:
5b:b8:c6:2b:f5:b4:83:e5:94:ff:06:e6:9d:5d:92:c5:45:d0:
d8:a6:66:0a:09:0a:04:9e:6d:cd:55:d5:63:41:c1:9a:5c:63:
d7:0d:6c:c1:e4:f9:12:29:1c:46:27:aa:63:ca:32:93:1e:da:
fe:df:4e:90:21:e3:cc:09:95:6d:70:19:ae:87:3e:1b:46:0b:
1f:bf:52:ee:06:2a:ec:7d:1b:cc:0a:c9:fc:f5:6e:57:45:70:
66:51:0e:4c:05:48:cb:15:d2:4e:1f:5a:c8:21:a3:c8:c3:ec:
ab:63:eb:da:16:a5:70:56:94:68:29:59:ab:ce:45:56:99:38:
c8:4b:f9:7d:97:c9:49:63:81:db:56:82:13:2b:11:31:34:a9:
e2:52:c3:91:a9:c4:49:64:ed:6c:8a:ba:3b:59:db:3b:b5:18:
d7:05:e3:d8:de:ef:aa:1d:ed:97:8c:cb:0f:23:80:eb:43:3e:
72:1c:f0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:28:25 2026 by rpki-client