
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3231322e302f32342d3234203d3e2030.roa
File: 32372e302e3231322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 1gxpHLl2efiqy1rtRuIFJL0j7IXIqK55wGOLHOlWhC8=
Subject key identifier: 09:92:41:53:9A:C6:FC:38:07:10:F5:AE:1E:3C:E3:2E:9B:31:4B:BD
Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial: 3724BA61B5853B02557A09206ADAF0DF7841569B
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3231322e302f32342d3234203d3e2030.roa
Signing time: Tue 16 Jun 2026 00:50:38 +0000
ROA not before: Tue 16 Jun 2026 00:45:38 +0000
ROA not after: Tue 15 Jun 2027 00:50:38 +0000
asID: 0
IP address blocks: 27.0.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 09:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:24:ba:61:b5:85:3b:02:55:7a:09:20:6a:da:f0:df:78:41:56:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
Validity
Not Before: Jun 16 00:45:38 2026 GMT
Not After : Jun 15 00:50:38 2027 GMT
Subject: CN=099241539AC6FC380710F5AE1E3CE32E9B314BBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:19:37:a9:9c:6d:1f:51:da:62:ed:a9:93:2c:
2c:4a:3a:65:dc:d1:2d:c6:58:20:00:4f:a7:0f:2b:
87:0d:46:bf:07:e8:14:3e:6d:cf:f0:63:d3:ed:b2:
da:68:8c:f3:dc:55:d4:1e:a5:f2:c3:38:b4:1d:e2:
8c:28:41:b5:f7:68:89:5d:5f:d5:3f:ae:6f:e6:4d:
4a:3f:e5:65:0c:6f:73:2d:4e:cb:9f:db:50:51:4d:
bd:a3:65:06:8f:b7:66:04:a3:81:85:83:7f:f3:80:
5d:d0:7d:02:21:8e:09:7a:2a:c3:f4:3b:0f:dd:52:
72:a7:f9:72:6e:e0:23:f1:fb:05:4c:e1:3b:2a:c5:
cc:60:2f:5f:3e:e7:30:5a:2a:7a:e7:e4:4b:f9:df:
b4:70:97:7f:70:81:7b:5b:c3:29:b5:6b:36:b3:3a:
a1:97:05:33:ef:e9:55:2e:35:c9:22:89:a6:7a:4e:
3c:63:f8:26:8b:bc:05:d7:d2:45:53:6d:85:87:ca:
bc:d5:ef:d7:b9:1d:75:fc:25:7a:d9:7a:c4:98:51:
b6:bf:7e:a1:9f:a3:83:6e:3e:16:56:90:d0:6f:14:
7c:18:f5:3c:c8:a5:06:b9:fe:58:8e:69:32:30:51:
9f:f4:ba:18:af:60:4c:19:ae:ff:71:37:e4:88:3d:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:92:41:53:9A:C6:FC:38:07:10:F5:AE:1E:3C:E3:2E:9B:31:4B:BD
X509v3 Authority Key Identifier:
keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3231322e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.212.0/24
Signature Algorithm: sha256WithRSAEncryption
17:76:b9:4d:bf:9a:09:e0:10:74:f0:fa:5d:ad:50:2d:7e:49:
87:c9:e0:da:bf:38:fc:71:ed:1c:2c:8d:ed:43:e4:67:75:26:
63:99:0c:e7:27:16:8d:21:ec:3e:bc:80:9c:e9:31:23:22:03:
3c:df:ef:a8:dd:5b:12:76:19:c1:bc:72:96:17:72:51:85:38:
db:98:56:c5:2d:15:27:64:4d:8e:e8:05:d0:96:a8:da:aa:a0:
4f:63:65:8b:73:60:27:85:1c:db:89:1e:0d:5f:45:52:e0:d1:
59:db:22:d1:6d:29:38:61:85:c9:e7:40:31:86:77:d0:df:07:
40:af:4a:35:3a:9b:e3:11:7e:39:65:52:17:5c:01:f5:05:d4:
99:df:37:12:0d:6b:8d:21:48:11:9c:bd:28:f0:f5:1e:0e:c7:
b3:79:8f:2a:7d:cf:06:b8:e2:b8:de:c0:c7:a6:12:0b:09:60:
a6:26:0f:6e:0c:7b:00:e9:c2:7b:25:e6:8c:a7:12:91:83:29:
82:2a:25:cd:30:fd:44:af:4f:70:22:af:e6:04:df:49:27:c1:
c7:87:d8:29:00:f7:45:41:05:0e:65:bd:3c:33:8f:10:fc:df:
c8:4e:5c:ff:93:ec:3e:19:b6:09:5c:57:98:74:37:39:9f:73:
07:44:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 16:01:47 2026 by rpki-client