
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3134342e302f32302d3230203d3e2030.roa
File: 32372e35302e3134342e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier: f6/1rN/k+RxrEp288MaxcleNJOjavS0msZKkyP9Jhb0=
Subject key identifier: C8:4F:55:B4:33:29:6E:55:E5:D4:E4:CB:49:3C:3C:DE:4C:03:D4:35
Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
Certificate serial: 13B59863A1EA2DF44AEAE38044E7AEFAB3774B5D
Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3134342e302f32302d3230203d3e2030.roa
Signing time: Thu 16 Apr 2026 09:28:44 +0000
ROA not before: Thu 16 Apr 2026 09:23:44 +0000
ROA not after: Thu 15 Apr 2027 09:28:44 +0000
asID: 0
IP address blocks: 27.50.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl
rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 09:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b5:98:63:a1:ea:2d:f4:4a:ea:e3:80:44:e7:ae:fa:b3:77:4b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
Validity
Not Before: Apr 16 09:23:44 2026 GMT
Not After : Apr 15 09:28:44 2027 GMT
Subject: CN=C84F55B433296E55E5D4E4CB493C3CDE4C03D435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:d0:2c:d9:95:38:f8:d9:79:8b:5d:66:65:
54:41:35:36:88:f4:01:07:cb:8e:2f:d9:af:ef:93:
8e:5a:4c:f8:5f:10:f8:02:8e:83:61:e0:e9:dc:59:
f7:ab:80:70:bb:94:7e:e1:48:b8:8f:52:de:5e:9a:
5e:3b:16:2a:40:e3:46:80:67:f0:d2:87:72:d6:89:
03:53:df:63:28:8a:83:18:ea:b2:89:dd:ab:b9:68:
d4:6e:21:aa:dd:25:e3:45:d7:c1:ed:c3:12:e4:90:
66:32:26:32:06:7a:4d:80:a5:e3:96:5c:97:19:68:
47:f1:4b:f5:de:5e:87:c6:f7:66:11:eb:ef:18:1b:
1c:7c:28:76:71:e9:78:ab:a0:23:11:e1:1b:09:a9:
ae:9b:78:07:70:2d:f3:18:3a:29:5a:66:dc:2e:72:
75:29:fc:4b:c1:71:b4:69:35:9d:cf:a3:44:b1:c8:
a7:c0:fb:27:6d:74:45:ff:c5:50:94:3d:d6:07:cb:
b2:70:83:c7:b2:5b:b5:d8:86:b8:b2:d7:d4:f6:b4:
d0:a0:90:21:b9:26:1a:50:2f:3b:b5:99:6a:35:e5:
1f:74:e5:fe:15:d2:40:1f:61:7b:9d:7a:71:ca:67:
ce:e2:12:a9:b9:99:c8:e0:22:06:2c:cb:87:14:ca:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4F:55:B4:33:29:6E:55:E5:D4:E4:CB:49:3C:3C:DE:4C:03:D4:35
X509v3 Authority Key Identifier:
keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3134342e302f32302d3230203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.50.144.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:ba:b3:0e:a8:18:04:43:43:9c:e3:d1:d8:bc:e8:fa:49:a4:
b9:07:43:3a:48:a2:31:93:ed:c4:d4:ea:38:69:b1:66:69:fb:
19:bc:ca:2d:2c:03:8e:33:0e:a1:2b:71:80:06:8a:2d:f9:cc:
e6:a0:1d:c6:38:00:91:a9:8b:95:ed:d4:b7:55:bc:7e:87:9a:
90:4b:10:73:f2:4c:63:95:bb:bd:1a:db:50:98:14:36:18:1b:
8f:c3:62:1d:b7:97:b9:c7:1b:5c:20:2e:61:61:f2:34:9a:6d:
a3:0f:b1:83:12:86:6f:57:d0:77:67:f0:cd:10:9a:7a:a4:27:
c4:a1:8e:a8:68:c9:dc:b1:bb:45:d8:1e:6b:60:c4:ce:22:3f:
bc:e7:39:51:7b:78:cd:c4:01:2b:7d:1c:5d:1c:be:5f:e4:8d:
a6:6b:d9:04:44:3e:53:ac:f5:96:33:8e:8f:8a:a1:f4:d7:c7:
2a:04:21:85:16:01:3c:cf:06:45:2b:35:32:45:ed:79:40:cb:
62:be:1e:2f:d5:94:82:a7:9d:4f:3d:e3:58:98:91:44:76:44:
f5:9d:17:48:a8:13:00:65:ad:e2:ce:cc:28:13:27:fe:f6:da:
5b:6b:9b:e8:79:ac:9e:fa:44:bf:9f:26:2d:c1:d4:85:60:b3:
5c:ff:67:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:45 2026 by rpki-client