
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3139332e302f32342d3234203d3e203538353432.roa
File: 3231382e39382e3139332e302f32342d3234203d3e203538353432.roa (raw, json)
Hash identifier: qt4/6TOa7o32+dkGdPJJfaVcIo3Vl62WqM/O9RzlxHI=
Subject key identifier: C5:08:C4:4A:16:68:C4:3F:9C:97:E4:85:73:EE:7A:50:75:9F:B1:F1
Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial: 1E09133CF6670CF0EA3B79DF82239D3E829F3DBC
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3139332e302f32342d3234203d3e203538353432.roa
Signing time: Tue 14 Apr 2026 01:45:48 +0000
ROA not before: Tue 14 Apr 2026 01:40:48 +0000
ROA not after: Tue 13 Apr 2027 01:45:48 +0000
asID: 58542
IP address blocks: 218.98.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 10:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:09:13:3c:f6:67:0c:f0:ea:3b:79:df:82:23:9d:3e:82:9f:3d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Validity
Not Before: Apr 14 01:40:48 2026 GMT
Not After : Apr 13 01:45:48 2027 GMT
Subject: CN=C508C44A1668C43F9C97E48573EE7A50759FB1F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ef:95:06:9f:8f:a0:fd:f0:93:d8:d7:47:6c:
84:da:af:d3:0f:27:75:d9:c8:0f:8a:85:21:db:ef:
fc:50:51:a5:0b:ce:db:bb:89:42:58:ab:1f:48:ae:
2e:af:11:a5:a9:4d:da:12:cc:fb:a7:ad:4a:c9:6f:
15:0f:72:c0:34:bf:83:70:8e:01:a7:5f:6b:87:e4:
b8:ae:51:22:6d:f9:0c:55:40:2e:11:d7:83:30:7d:
d9:fa:59:c8:7f:cc:a0:60:d9:2b:34:ef:69:c3:90:
3b:e0:d0:9b:ed:87:0b:32:ab:6d:22:3c:03:d2:60:
4a:8c:a3:31:3d:11:53:fc:7e:fa:ff:d4:ff:8f:99:
a0:92:bf:a5:96:5c:c2:6c:2a:35:45:ef:d5:a9:95:
f9:ef:1d:5c:c7:a2:01:cd:62:22:c9:6c:6b:d0:02:
29:0d:d0:4c:9c:5c:4e:42:5d:e9:d6:96:71:98:f5:
de:51:92:8e:d0:3d:d8:3f:21:27:41:55:05:4d:0c:
9a:62:19:07:bf:aa:eb:01:e5:ab:f5:62:6c:3b:6e:
91:9c:2e:da:25:35:e2:86:09:f2:5c:8a:4c:64:15:
43:dc:86:ed:e1:cf:97:4a:f4:e3:96:a9:43:a5:8a:
d7:ff:ac:34:f0:88:4e:2d:2d:60:f1:a0:9c:f2:ce:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:08:C4:4A:16:68:C4:3F:9C:97:E4:85:73:EE:7A:50:75:9F:B1:F1
X509v3 Authority Key Identifier:
keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3139332e302f32342d3234203d3e203538353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.193.0/24
Signature Algorithm: sha256WithRSAEncryption
52:18:c2:e1:3e:10:7d:55:e7:e0:5f:a5:1e:23:2f:bd:41:ba:
a4:aa:f0:13:4a:94:64:e6:e8:19:9f:51:6a:e5:7b:07:10:54:
e9:02:9f:6d:a0:8f:81:75:83:6c:71:8f:f9:5d:11:fe:e3:e1:
a7:1a:39:19:91:26:ac:a1:ef:6a:95:24:b4:00:5e:59:33:8b:
9b:ab:62:57:04:57:3f:e5:5d:64:cf:6b:5f:37:cf:02:aa:08:
07:75:79:5d:7d:3e:27:9d:32:68:8c:5b:9e:2a:b0:31:a0:6d:
9c:45:68:b8:45:95:bf:fa:e8:39:39:1b:53:73:46:a4:47:7e:
f3:6f:4c:b0:2d:56:59:f1:39:1d:96:16:24:ed:42:fa:06:65:
7e:00:3d:1b:08:18:59:4b:58:6f:3f:02:c1:c1:29:73:b7:c2:
31:58:31:5b:2a:ad:39:38:dd:c9:ad:c1:f5:b9:9f:c3:b8:f1:
6b:52:27:f4:59:8d:4c:22:a1:d5:7d:8b:9d:a3:58:4a:15:92:
79:6f:b5:ab:b4:6a:79:b9:f2:fd:92:06:7a:6e:2a:6f:03:5a:
fd:67:cd:96:99:23:e4:1c:6b:c7:e3:d1:c3:ed:62:aa:f1:80:
0b:eb:31:32:f2:ad:ba:97:18:97:a4:88:c1:55:bf:d9:63:15:
05:ef:56:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:26:27 2026 by rpki-client