
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3138302e302f32342d3234203d3e20313436383431.roa
File: 3231382e39382e3138302e302f32342d3234203d3e20313436383431.roa (raw, json)
Hash identifier: 8vnvx69UZI9UjNoNLKJj/mjRHvJ90Etw1BCB1sZRg4Y=
Subject key identifier: 80:20:66:36:84:A8:21:C1:74:EC:4B:52:07:33:30:B7:A5:01:A5:EB
Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial: 68B445839D700450610E01E32C129E6002AAB159
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3138302e302f32342d3234203d3e20313436383431.roa
Signing time: Tue 14 Apr 2026 01:45:28 +0000
ROA not before: Tue 14 Apr 2026 01:40:28 +0000
ROA not after: Tue 13 Apr 2027 01:45:28 +0000
asID: 146841
IP address blocks: 218.98.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b4:45:83:9d:70:04:50:61:0e:01:e3:2c:12:9e:60:02:aa:b1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Validity
Not Before: Apr 14 01:40:28 2026 GMT
Not After : Apr 13 01:45:28 2027 GMT
Subject: CN=8020663684A821C174EC4B52073330B7A501A5EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:d6:42:e6:d5:c1:2b:04:db:6b:e2:bc:fc:
6a:c9:8b:9b:68:b2:0c:77:d2:a6:ea:29:32:77:e9:
29:cc:c7:b7:d4:51:f7:ac:d3:6b:2f:0c:6a:ca:f0:
97:5d:68:c5:e7:f2:7f:34:03:ae:b0:0f:2c:fc:65:
16:9f:b6:82:d5:21:d2:43:7d:4b:02:76:89:17:38:
bf:1b:67:75:36:b1:d1:95:6a:35:33:5f:1e:0f:fa:
f7:73:6c:94:2a:5d:07:ef:9a:26:63:ba:bc:d1:87:
ee:d5:36:4b:00:0f:8c:ec:c5:96:e3:6a:5c:74:77:
62:65:20:8d:56:0d:a7:d9:7b:0f:77:09:d4:8d:73:
d4:c6:7c:34:56:44:47:83:c6:7c:b5:25:f3:b7:7d:
5e:7a:88:0d:1a:e4:af:0f:47:64:23:bf:9e:9f:53:
28:c7:b5:45:31:5a:2e:f8:7b:79:fd:83:07:90:32:
69:c0:86:61:22:ad:a1:0f:7b:ee:fe:bd:4e:18:5d:
ec:b8:ec:7f:e8:21:7b:8f:af:eb:0f:cb:0c:18:11:
7b:5c:dc:3b:2f:3a:69:70:61:49:c7:eb:a4:a6:34:
d1:32:3f:15:82:0d:22:6a:f0:ea:9d:00:fc:24:99:
76:fe:c6:79:40:f9:79:b8:e4:e7:b2:bc:57:88:26:
30:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:20:66:36:84:A8:21:C1:74:EC:4B:52:07:33:30:B7:A5:01:A5:EB
X509v3 Authority Key Identifier:
keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3138302e302f32342d3234203d3e20313436383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.180.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d2:2e:71:92:4f:a8:1c:6a:6b:c1:9f:3e:03:e2:a4:d2:75:
c7:3b:45:7d:a5:00:59:51:d5:1b:3e:ac:51:02:9c:a7:6a:04:
dd:71:5c:8f:63:e6:8e:6e:77:1b:0a:94:0e:a5:4d:8b:39:50:
6c:81:9d:f9:39:7a:f0:c8:43:10:f7:af:39:d5:28:30:c3:d2:
da:fd:e5:4b:f6:e9:3b:e9:c7:b5:8d:e4:ce:14:c8:2a:71:57:
9a:59:63:22:26:af:eb:75:56:a3:c6:1e:42:35:81:23:b9:6a:
ff:ff:2d:cc:a6:32:b8:17:1e:fc:3e:98:bc:3f:fe:4d:39:46:
a3:05:a8:b4:b4:ce:df:df:55:aa:17:3d:a5:76:0e:35:00:ea:
83:0d:10:e8:70:dc:d2:48:0f:80:bb:61:42:8a:89:fb:63:ab:
1b:6c:68:ec:db:cc:a8:7e:d9:f8:9e:1f:e9:8c:c6:0d:9d:c9:
69:da:f0:f8:fe:16:fe:77:99:13:eb:3f:5e:92:e2:73:fc:a1:
b0:5a:e9:e8:8b:f5:ad:8a:ed:98:6c:fa:66:48:8b:b1:a4:44:
35:97:9e:39:61:c0:ab:b6:77:38:24:4f:7e:70:66:cf:cb:57:
cf:0f:0e:ea:22:ea:69:dc:df:4d:66:8e:68:36:ec:67:3a:b5:
7a:59:7a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:30:45 2026 by rpki-client