
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/32372e3131332e3132382e302f31382d3138203d3e2030.roa
File: 32372e3131332e3132382e302f31382d3138203d3e2030.roa (raw, json)
Hash identifier: KK1RzKFiNcTfRxJmVFKufBBeLgH5EWmCWHV585IznMo=
Subject key identifier: D5:62:D6:67:FE:44:11:AD:74:70:A1:6A:A5:48:0E:90:02:35:9B:0C
Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial: 7A96077F8B79C859E87AF5D4C5B85B256BA859AF
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/32372e3131332e3132382e302f31382d3138203d3e2030.roa
Signing time: Mon 13 Apr 2026 02:58:32 +0000
ROA not before: Mon 13 Apr 2026 02:53:32 +0000
ROA not after: Mon 12 Apr 2027 02:58:32 +0000
asID: 0
IP address blocks: 27.113.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:96:07:7f:8b:79:c8:59:e8:7a:f5:d4:c5:b8:5b:25:6b:a8:59:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Validity
Not Before: Apr 13 02:53:32 2026 GMT
Not After : Apr 12 02:58:32 2027 GMT
Subject: CN=D562D667FE4411AD7470A16AA5480E9002359B0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:ab:5e:e7:b1:5d:ab:a8:2d:04:bf:bf:e9:
da:95:5b:75:4a:61:5e:bc:e1:2a:8b:4b:18:81:38:
9a:03:0c:73:51:14:de:64:36:34:25:e4:26:2b:3d:
c5:6b:cc:df:80:20:59:d1:16:b1:ac:21:8d:5a:b5:
ec:c9:13:d1:3a:07:a4:ab:7e:97:e5:7c:ea:26:27:
82:97:ea:46:4b:b2:ac:6e:92:e9:81:72:1b:5f:67:
67:39:99:72:ed:52:e8:a5:f2:4c:a7:52:8d:8a:f9:
8c:03:96:21:f6:f8:fe:77:51:05:19:92:aa:43:06:
6a:df:22:f5:4c:8f:44:d0:59:c1:eb:eb:44:33:fe:
8f:9b:e6:42:32:f0:07:9a:9b:e7:d7:d7:d8:7c:28:
61:72:65:5e:ce:8f:bb:87:c6:76:b4:0d:ef:fa:da:
f9:eb:48:53:47:b3:f8:3e:b0:cb:02:a0:cb:c2:07:
0d:ad:26:a8:9b:ac:79:af:28:61:a2:d3:ea:65:2f:
e0:55:2c:50:9b:3c:60:15:15:8f:e3:d4:86:a2:5e:
d9:4e:c3:fb:e1:13:d6:98:ae:bf:69:d6:08:a6:6a:
bb:da:93:f9:41:dc:ae:47:67:07:e8:fa:05:a0:1e:
7a:e1:e8:72:1e:b3:99:b8:20:42:d2:35:e2:8c:36:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:62:D6:67:FE:44:11:AD:74:70:A1:6A:A5:48:0E:90:02:35:9B:0C
X509v3 Authority Key Identifier:
keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/32372e3131332e3132382e302f31382d3138203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.113.128.0/18
Signature Algorithm: sha256WithRSAEncryption
89:53:83:45:e9:64:84:10:5a:64:9d:d3:69:78:8b:c5:8f:1d:
0f:73:d2:9d:34:99:ff:a4:87:4b:fe:db:d7:af:b5:b8:5d:c3:
06:e5:60:d4:f1:c7:0d:56:54:ce:78:f7:b1:77:03:65:51:47:
52:f8:51:45:36:a6:bb:15:10:b5:e1:d3:51:c7:49:05:b9:34:
79:5d:2e:ef:61:c1:32:f3:78:2d:76:a6:b3:02:45:7f:a1:cc:
a3:7b:11:32:1e:b8:b2:04:ae:05:38:e4:c1:db:15:2c:87:c7:
70:69:21:73:74:90:60:96:00:76:d0:55:3c:57:03:fb:21:83:
46:d7:02:fc:a6:b0:89:9e:1a:07:24:2a:24:1d:28:83:cd:1e:
7c:a1:b9:96:13:2d:de:c8:82:26:42:9b:8e:c0:43:ce:88:c5:
62:6f:53:e4:16:35:12:38:86:4e:82:d2:6a:ea:c4:ce:56:85:
21:eb:76:6e:40:4e:95:e3:7a:9d:b8:20:c1:5b:31:e1:01:fb:
f7:f2:74:c3:9f:e3:94:bb:9d:43:66:ce:f9:6b:f2:b7:9b:29:
37:a9:8e:ed:65:c5:29:4a:96:6b:af:2c:b9:28:2d:65:b1:84:
42:87:82:b9:57:3f:ad:ba:f6:40:43:ad:a4:df:39:4d:82:40:
22:95:e1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:25 2026 by rpki-client