
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3138332e302f32342d3234203d3e20313436383431.roa
File: 3231382e39382e3138332e302f32342d3234203d3e20313436383431.roa (raw, json)
Hash identifier: BWgtN9ZlNkUkI1/9ORhwYHGUf2fn6nY77N3GU7vIwKg=
Subject key identifier: 83:9A:20:BF:63:D7:93:E6:90:4F:C7:72:FB:4A:66:8B:4C:7B:94:EF
Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial: 2BF259841C806B2344AFEAE5F8A63E1AC1B8E2AE
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3138332e302f32342d3234203d3e20313436383431.roa
Signing time: Tue 14 Apr 2026 01:45:27 +0000
ROA not before: Tue 14 Apr 2026 01:40:27 +0000
ROA not after: Tue 13 Apr 2027 01:45:27 +0000
asID: 146841
IP address blocks: 218.98.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 10:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f2:59:84:1c:80:6b:23:44:af:ea:e5:f8:a6:3e:1a:c1:b8:e2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Validity
Not Before: Apr 14 01:40:27 2026 GMT
Not After : Apr 13 01:45:27 2027 GMT
Subject: CN=839A20BF63D793E6904FC772FB4A668B4C7B94EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a8:22:32:fa:eb:ae:5f:8f:d8:63:96:10:1e:
93:d8:29:a3:fe:ab:cc:d6:10:36:7f:16:31:5f:f5:
f2:9c:bc:4d:45:85:0f:ba:92:59:e8:3e:bb:9e:35:
d8:fa:67:4c:e5:fc:41:5e:a3:c8:ca:ef:84:50:ac:
07:e5:98:b6:0a:f1:da:83:5f:fc:10:e8:1c:49:2c:
69:49:f2:bc:3a:46:7a:fd:76:87:4b:f7:41:5a:52:
09:40:19:c1:be:3f:d7:83:e8:96:7c:7e:01:dc:7e:
ff:18:92:4d:a3:98:ef:2b:f8:ca:0f:96:78:dc:7f:
fa:f2:e1:30:a8:22:49:eb:4f:18:2c:2c:71:bd:e5:
4e:8e:78:d8:ff:c1:1f:e9:20:ab:78:5e:fd:ef:13:
d3:20:af:ef:a4:07:ee:09:0b:96:7f:f3:3c:3b:e6:
f2:b8:b8:d4:3b:6b:75:2a:77:99:36:1a:d7:24:07:
90:28:d8:d4:2a:74:fe:69:0a:af:c2:34:31:f8:2f:
be:10:18:d6:3d:e0:58:2b:ea:2c:b4:9d:e2:ad:15:
08:5a:0b:83:81:b8:f7:44:06:1b:15:ce:d9:24:33:
2e:11:3c:4a:11:f7:d7:7e:0e:ee:16:3d:ea:f5:dc:
53:7f:d9:58:92:ef:8e:d4:f9:c8:a3:44:db:3b:96:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9A:20:BF:63:D7:93:E6:90:4F:C7:72:FB:4A:66:8B:4C:7B:94:EF
X509v3 Authority Key Identifier:
keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3138332e302f32342d3234203d3e20313436383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.183.0/24
Signature Algorithm: sha256WithRSAEncryption
59:dc:3d:0c:eb:eb:b5:df:7b:23:ef:e9:44:03:d7:39:6e:2c:
03:e2:65:b7:99:19:1f:79:90:d3:2b:a1:1e:e9:fc:6e:66:2d:
7a:05:0f:9d:02:86:06:79:58:66:97:f2:c6:fb:bf:50:2b:c6:
9d:a9:f0:f1:6c:1a:75:86:ce:86:43:f9:be:10:bb:93:31:7e:
f1:d7:6b:cc:dc:61:45:b1:91:4f:83:d7:65:e4:05:d1:7a:aa:
c9:2d:f4:fd:ab:74:fe:8a:d6:ee:17:59:88:f7:35:d8:96:b1:
cc:ff:c3:57:81:87:8f:70:f6:e5:bf:51:54:35:ea:65:17:a8:
85:81:99:e3:75:be:27:6c:5f:0f:f4:68:64:08:51:7f:fa:5f:
66:4b:6b:ac:f1:8d:d0:8a:eb:a6:9e:cc:ca:53:21:54:83:cb:
5f:b0:df:a6:83:2c:ec:16:18:10:2b:d1:46:79:fd:c7:53:03:
ff:8d:2a:42:cc:07:5d:8c:5b:b7:76:07:64:e9:ae:53:8f:4b:
73:c4:b4:5e:c1:70:14:78:d0:94:13:24:60:31:98:7d:46:42:
35:e2:2b:e9:81:36:5c:d9:d1:3c:ba:a9:31:de:92:21:54:66:
72:8f:b0:3d:83:f2:5a:4c:54:a0:82:38:50:22:a6:73:c3:fa:
fd:ef:e1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:54:57 2026 by rpki-client