
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231352e302f32342d3234203d3e20313436383431.roa
File: 3231382e39382e3231352e302f32342d3234203d3e20313436383431.roa (raw, json)
Hash identifier: aywp0tqCBgRXzid69Cf+hmOo2wFnk5gKkSw0y125MMI=
Subject key identifier: C0:86:E4:C4:16:0F:A3:E4:BD:56:9A:E9:3E:D8:A5:F8:B4:0B:B9:81
Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial: 2E5EC2F53C3952C888618F30DC9E643230C0F411
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231352e302f32342d3234203d3e20313436383431.roa
Signing time: Tue 14 Apr 2026 01:45:27 +0000
ROA not before: Tue 14 Apr 2026 01:40:27 +0000
ROA not after: Tue 13 Apr 2027 01:45:27 +0000
asID: 146841
IP address blocks: 218.98.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:5e:c2:f5:3c:39:52:c8:88:61:8f:30:dc:9e:64:32:30:c0:f4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Validity
Not Before: Apr 14 01:40:27 2026 GMT
Not After : Apr 13 01:45:27 2027 GMT
Subject: CN=C086E4C4160FA3E4BD569AE93ED8A5F8B40BB981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:04:50:1f:6e:d5:e8:b8:06:13:87:a6:9a:
59:b7:26:4e:fc:08:62:e5:a8:ff:cc:7e:52:b8:a8:
4e:8c:0b:87:8c:de:a2:58:4a:e1:4a:d7:5c:d7:42:
44:4f:73:2e:c7:70:e9:46:2e:c8:6c:35:97:16:84:
9d:e2:a0:c0:75:30:13:e3:28:2d:4c:5f:4b:ba:2d:
a2:37:65:b5:9a:21:5a:7c:c7:63:c0:90:01:ef:6f:
f5:17:37:0a:2d:42:49:17:15:89:16:c1:fc:bc:a6:
6b:d5:63:89:c8:b8:6d:19:69:2d:9c:d2:4b:c0:d4:
46:70:fe:3f:c7:d1:df:08:e9:15:48:b5:87:9f:f9:
09:40:78:3b:e8:84:58:ba:4b:11:ab:f5:43:ff:e6:
c9:b0:d7:1e:5a:40:59:60:4a:da:55:6d:c2:06:b1:
d3:70:45:1a:ca:69:56:c8:10:f4:3a:90:26:5e:b4:
a6:ca:47:59:0b:2c:a3:b8:73:3d:91:4f:28:2d:6f:
09:fe:0f:59:67:5b:db:6a:9d:b8:21:8e:65:e3:ce:
85:35:bb:bb:5c:17:f4:f2:4d:1c:2d:88:2a:8c:75:
c8:5f:66:15:fe:5c:d1:51:c6:3f:5b:15:33:d3:07:
b2:16:88:f4:99:60:9c:8b:e5:b0:ca:4b:54:56:16:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:86:E4:C4:16:0F:A3:E4:BD:56:9A:E9:3E:D8:A5:F8:B4:0B:B9:81
X509v3 Authority Key Identifier:
keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231352e302f32342d3234203d3e20313436383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.215.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a8:71:9a:fc:d2:30:2c:88:7b:1a:63:a4:30:b2:a7:66:c2:
e1:d6:3b:b8:3f:4b:1d:55:56:78:b0:d0:eb:fe:45:6b:25:f5:
8b:60:de:54:05:a6:ee:f6:fb:74:81:b5:a9:45:32:ed:74:e9:
d0:9e:f9:73:55:b6:ef:16:6c:b9:db:34:ae:34:5e:e7:09:59:
e1:cc:a0:fe:e0:e1:97:9a:ab:cc:3c:7d:07:5e:c4:26:21:ec:
b7:d5:2b:6f:14:5d:50:75:9d:48:b0:92:b9:2f:8f:6e:d8:ec:
80:88:ef:ef:2e:40:fd:15:51:25:f6:75:81:e9:35:03:9d:aa:
4b:9b:55:31:80:b2:e8:fa:5f:b6:04:d2:d8:43:cd:92:0f:9b:
9d:90:db:4e:d2:a2:e3:0d:ce:26:e8:d9:91:05:8b:ec:a1:38:
c2:02:f3:b5:9a:c9:34:73:93:1b:93:6e:1c:08:be:c6:bd:05:
cf:7e:ef:73:00:c0:44:7b:3f:20:87:ef:f6:17:6e:43:bd:03:
d4:d9:b4:10:44:4e:31:0d:54:de:47:ed:66:f4:68:06:70:3e:
45:a6:4b:6c:18:29:fd:fa:31:5d:5b:07:3b:f5:d5:54:b3:56:
58:ea:ba:39:33:a0:eb:4c:45:59:6c:72:2e:ab:c7:aa:10:0b:
80:10:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:30:29 2026 by rpki-client