
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32372e302f32342d3234203d3e203338333435.roa
File: 3230332e39392e32372e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier: mLIxneG3cSqtFCX5yWsvT8O1jRlhVD9RSfjC9xcsn8w=
Subject key identifier: 45:CB:F5:83:CF:63:97:BF:75:CB:2B:00:80:F2:7E:B5:77:3E:42:FC
Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial: 33419750B6A880731A6F41160F60FBF046ECF93E
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32372e302f32342d3234203d3e203338333435.roa
Signing time: Fri 10 Apr 2026 08:05:14 +0000
ROA not before: Fri 10 Apr 2026 08:00:14 +0000
ROA not after: Fri 09 Apr 2027 08:05:14 +0000
asID: 38345
IP address blocks: 203.99.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:41:97:50:b6:a8:80:73:1a:6f:41:16:0f:60:fb:f0:46:ec:f9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Validity
Not Before: Apr 10 08:00:14 2026 GMT
Not After : Apr 9 08:05:14 2027 GMT
Subject: CN=45CBF583CF6397BF75CB2B0080F27EB5773E42FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c7:48:b4:aa:c5:70:b1:ab:1f:30:55:37:b8:
54:6d:c4:d3:65:1b:03:b8:a7:81:96:97:75:b6:25:
d1:63:19:bc:ab:80:06:92:c5:6e:a7:ef:45:da:a0:
22:36:cb:0f:09:95:75:c2:fe:73:54:46:12:23:34:
28:0f:65:47:ae:23:2d:3d:3e:21:7a:8e:0c:30:44:
9f:db:af:e4:d6:5f:af:f0:c2:78:e2:1a:a4:ef:31:
87:a5:21:ff:61:97:7e:49:4e:bc:17:98:c4:ac:78:
b0:19:d7:71:1e:1a:bd:8c:87:92:76:4e:c2:05:ea:
c5:bf:97:3b:71:58:0a:21:cb:73:73:aa:4e:d7:46:
27:42:56:ac:dc:6a:7e:82:92:de:26:77:18:81:2e:
cb:5c:e4:e7:db:92:23:1c:61:c2:27:8e:e4:b6:13:
d1:7e:a1:26:e8:90:63:f3:50:f3:09:47:df:ca:e2:
0b:8e:c3:e0:0e:00:7d:03:f6:68:51:29:6b:4c:13:
19:99:74:dd:a2:77:a3:da:a4:56:bc:3a:9a:04:a9:
fd:b6:c7:ea:21:8c:f5:4e:94:82:0d:ea:76:fd:fc:
be:b7:b1:fa:4f:13:a5:7d:68:af:51:bc:6b:43:8d:
ce:6a:79:fc:4f:f7:f6:a7:a9:24:d5:b1:d9:f8:9b:
ff:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CB:F5:83:CF:63:97:BF:75:CB:2B:00:80:F2:7E:B5:77:3E:42:FC
X509v3 Authority Key Identifier:
keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32372e302f32342d3234203d3e203338333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.99.27.0/24
Signature Algorithm: sha256WithRSAEncryption
85:39:88:f9:f0:45:e4:72:7e:5f:88:d7:f1:d9:40:a9:7b:fb:
3d:eb:6c:e3:a5:f4:cd:a0:90:d7:12:a2:68:e7:ce:91:12:59:
8c:4c:00:0f:d6:26:53:56:3b:08:71:6d:31:32:e7:c2:80:d8:
75:f5:2e:5b:78:30:a8:5e:0f:65:2c:72:37:14:11:03:61:3e:
36:46:6e:bc:a6:1c:67:b5:21:4a:ab:3a:71:7b:1c:9f:b7:69:
08:b2:ab:0c:2c:b7:bc:99:16:a9:c5:5a:5b:99:46:7e:3b:a0:
b6:0f:4b:34:3a:63:f0:27:44:37:ad:36:c5:29:55:54:c6:7d:
88:6c:99:5a:8f:e9:e0:d8:5d:bc:c8:01:07:46:44:23:fa:76:
bd:6d:eb:db:ae:53:69:11:5c:98:6f:29:53:05:41:e8:3e:97:
f2:24:a9:34:d3:72:1d:22:68:13:b1:3e:2e:87:e4:4e:a2:30:
aa:00:6a:ca:4a:48:c8:d0:6c:7a:57:d9:f0:fe:d5:3d:39:a8:
ba:41:a4:50:a4:48:d9:f3:28:ec:2a:0e:ca:65:14:bc:75:8f:
06:db:d5:e9:88:f2:d4:29:53:61:24:43:21:bb:26:f7:3f:9c:
a5:9e:2e:a2:5f:78:2a:95:75:33:7f:42:bd:1c:1b:5e:c4:fb:
93:4b:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:11 2026 by rpki-client