
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3133332e302f32342d3234203d3e2030.roa
File: 32372e35302e3133332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: HlhozveWgPOiNPsMsqsd754Fhtmj0sLvf7MUs3W/fdI=
Subject key identifier: AE:7B:5C:70:4D:55:D9:67:19:2B:B7:16:F3:11:B6:8A:BA:67:47:DA
Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
Certificate serial: 50C4106F928D609466060866022445695D8C1BA2
Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3133332e302f32342d3234203d3e2030.roa
Signing time: Thu 16 Apr 2026 09:28:44 +0000
ROA not before: Thu 16 Apr 2026 09:23:44 +0000
ROA not after: Thu 15 Apr 2027 09:28:44 +0000
asID: 0
IP address blocks: 27.50.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl
rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 09:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c4:10:6f:92:8d:60:94:66:06:08:66:02:24:45:69:5d:8c:1b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
Validity
Not Before: Apr 16 09:23:44 2026 GMT
Not After : Apr 15 09:28:44 2027 GMT
Subject: CN=AE7B5C704D55D967192BB716F311B68ABA6747DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:d7:e6:fd:67:42:45:32:8d:e4:1b:42:23:
a9:e1:b5:1a:11:3e:b6:5c:64:6b:de:94:6a:08:db:
89:9e:c5:0a:23:3c:02:06:79:99:dd:d4:29:86:4a:
3b:57:fd:c7:13:98:cb:d8:7a:b2:f5:9e:85:b0:31:
63:86:cd:45:81:7d:bb:4a:c7:19:2a:2c:76:39:3e:
1e:4e:82:c7:4d:52:fc:5b:6b:00:a7:16:3f:1d:97:
82:ba:db:f8:3f:96:76:d8:99:d3:cc:b6:96:dd:f2:
56:13:a4:b3:14:4d:6b:f1:f7:e3:44:4f:87:46:89:
ce:fd:bb:6d:f0:bd:56:51:23:af:39:ce:80:9f:75:
20:85:6c:19:71:19:77:51:88:4c:7d:55:35:c0:2f:
3e:4e:0b:02:3f:aa:34:33:45:50:a1:4a:ec:57:33:
5b:00:97:8f:b4:3d:bf:58:86:7a:36:25:d0:e2:9c:
01:07:02:e5:0a:f8:64:14:89:05:67:50:7f:4d:3d:
89:9e:5a:89:0e:f3:44:9e:e5:93:b6:30:a6:a1:76:
24:bb:6c:fb:dc:33:28:1e:14:17:0c:77:56:a4:91:
71:6c:e4:d8:b7:cf:15:6c:67:48:96:7f:77:d5:88:
48:4f:6d:5f:5c:9e:be:fd:16:cc:d2:6f:1d:00:09:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7B:5C:70:4D:55:D9:67:19:2B:B7:16:F3:11:B6:8A:BA:67:47:DA
X509v3 Authority Key Identifier:
keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3133332e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.50.133.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a1:78:3a:8b:57:37:0c:7c:1c:4a:94:8a:7e:e4:ea:16:d2:
06:ac:20:82:24:cb:b2:63:4a:4c:03:ef:47:e0:48:f6:f4:57:
5f:5f:0b:4f:16:a2:e0:be:81:5d:4a:bb:a5:bc:d3:65:0e:03:
2e:b7:b8:4c:a8:34:5e:4a:01:12:41:58:42:55:58:45:7a:02:
f5:8d:d4:26:09:84:dc:71:6c:07:a7:bf:8a:b6:84:9e:f8:7e:
5f:2c:7e:d1:11:8e:32:d4:76:bb:d7:49:00:f4:55:5f:a6:bf:
d8:e5:11:b5:11:2a:4a:65:a3:be:3b:0b:a5:8c:98:dd:6c:40:
a4:0f:e5:7f:95:44:0a:00:f5:b9:e4:bb:68:85:1c:82:de:d2:
1a:b0:07:c8:28:5f:1a:89:2b:55:c8:eb:58:e7:57:a1:aa:c7:
88:e7:61:4c:44:2a:e8:a1:78:cc:53:45:39:05:2c:97:b2:97:
92:a9:27:4e:31:69:68:dc:a4:44:ec:21:bc:d4:6e:93:86:59:
62:5e:72:21:21:73:79:20:c6:f4:3c:b7:ce:59:6f:43:16:dd:
38:8f:ba:f6:7b:d0:08:73:55:58:f6:e7:98:69:68:9a:23:ff:
3f:7c:60:60:45:d5:36:03:97:a9:b7:97:ac:38:e6:d5:b9:ec:
83:1a:b6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:29 2026 by rpki-client