
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3139322e302f32342d3234203d3e203538353432.roa
File: 3231382e39382e3139322e302f32342d3234203d3e203538353432.roa (raw, json)
Hash identifier: ZXHCilq7M6t5w4oLyy7/q0uzHX7ckcRbYUXkDNUYUO0=
Subject key identifier: E2:7F:9D:49:74:0A:D7:51:2B:14:B8:8F:8B:0D:48:34:12:B1:D8:72
Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial: 1EA45BAE8ABBA44CB32D9A177E26FD576BD47686
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3139322e302f32342d3234203d3e203538353432.roa
Signing time: Tue 14 Apr 2026 01:45:27 +0000
ROA not before: Tue 14 Apr 2026 01:40:27 +0000
ROA not after: Tue 13 Apr 2027 01:45:27 +0000
asID: 58542
IP address blocks: 218.98.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 10:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a4:5b:ae:8a:bb:a4:4c:b3:2d:9a:17:7e:26:fd:57:6b:d4:76:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Validity
Not Before: Apr 14 01:40:27 2026 GMT
Not After : Apr 13 01:45:27 2027 GMT
Subject: CN=E27F9D49740AD7512B14B88F8B0D483412B1D872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:55:22:6d:34:6d:58:96:5a:b2:2c:71:6d:f8:
cf:da:d2:ef:9b:c1:e3:ff:f9:39:9b:71:03:15:c1:
99:da:56:c0:05:1d:c2:4d:42:9b:9e:ed:b7:37:c5:
c1:30:d4:e4:f9:aa:68:72:4c:0f:1c:8f:e2:b1:a9:
6e:62:3c:9c:49:0c:97:2a:ea:67:58:02:43:dc:8b:
84:31:74:c7:37:41:28:ef:f7:53:5d:6b:8f:cd:09:
fc:73:cb:21:f6:a5:85:3d:e6:66:e9:fd:5a:06:c8:
16:07:2e:49:ad:e0:e6:cc:98:78:3b:c8:49:75:d6:
32:bf:9f:fa:af:d4:38:60:02:d7:f0:98:50:6c:6a:
80:75:42:89:74:48:e9:b7:e9:3a:d2:ae:2a:3d:a7:
a5:db:73:d9:c3:20:ff:6f:cd:28:bd:c1:fe:29:47:
85:74:de:c0:6a:e1:11:b2:de:a3:d9:33:6e:95:46:
18:18:aa:b2:32:2d:a8:b3:9c:dd:19:90:88:f0:ae:
ba:6f:7e:bf:db:21:24:24:6d:f8:1e:8f:53:d9:de:
45:9b:45:c9:16:99:52:a4:63:b6:f1:f0:18:87:77:
92:d0:69:11:d3:f2:50:3f:72:0e:b1:4a:7a:88:13:
61:d1:89:44:cc:8a:57:52:c9:ed:56:ad:42:9f:a0:
46:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7F:9D:49:74:0A:D7:51:2B:14:B8:8F:8B:0D:48:34:12:B1:D8:72
X509v3 Authority Key Identifier:
keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3139322e302f32342d3234203d3e203538353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.192.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a4:9d:26:d4:b1:53:8c:2f:a7:f6:d5:44:89:8a:b6:19:79:
18:0f:3c:ee:16:c4:67:16:81:c6:26:94:ea:0d:9e:b0:ce:6c:
9e:70:ea:41:98:2f:a6:83:bf:1f:20:b5:4e:d1:bd:70:7b:76:
76:12:ed:45:07:cc:b8:4d:84:37:e4:ad:3c:c5:59:e0:5e:68:
e2:06:33:dc:5c:05:dd:d9:85:0c:47:7d:42:91:e8:42:3a:35:
27:15:6b:0d:cb:e0:a2:98:78:63:ae:27:3f:39:23:2e:a6:81:
40:aa:36:cb:a4:85:fa:8d:f6:04:a7:8d:87:7b:7e:6e:a5:b1:
52:b1:41:17:c1:9a:33:af:2f:ac:1d:ad:c2:89:7c:7a:b6:dc:
72:c8:09:d9:86:e5:9a:06:59:21:57:8f:e7:f2:73:13:84:7c:
d8:f2:40:ef:82:96:5e:28:97:a4:a9:f5:61:31:16:71:3a:6c:
ec:cb:b2:dc:17:39:74:e4:74:0e:c8:33:97:2d:13:18:8d:73:
92:73:ab:71:d4:c2:74:51:1e:8d:9c:90:a9:ae:d7:bb:d4:82:
c6:dc:b5:d7:2f:4d:88:14:c1:1c:1e:41:cc:21:40:3a:29:06:
0c:0f:5d:49:f6:0f:fe:3f:9c:d0:0f:2d:d9:79:a7:b7:7a:e3:
21:c0:46:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:26:47 2026 by rpki-client