
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3132382e302f31372d3137203d3e2034383337.roa
File: 32372e35302e3132382e302f31372d3137203d3e2034383337.roa (raw, json)
Hash identifier: NPgpiaYOTMF7gKYbmEqByfzCcKzoDaWWWehxvPrZib0=
Subject key identifier: F8:02:4B:81:E5:6B:2B:DF:32:C0:69:AE:30:FD:02:53:B3:ED:F8:FD
Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
Certificate serial: 378CEF180C9999FF2714544A89F68B278F49DD94
Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3132382e302f31372d3137203d3e2034383337.roa
Signing time: Tue 09 Jun 2026 07:47:45 +0000
ROA not before: Tue 09 Jun 2026 07:42:45 +0000
ROA not after: Tue 08 Jun 2027 07:47:45 +0000
asID: 4837
IP address blocks: 27.50.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl
rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8c:ef:18:0c:99:99:ff:27:14:54:4a:89:f6:8b:27:8f:49:dd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
Validity
Not Before: Jun 9 07:42:45 2026 GMT
Not After : Jun 8 07:47:45 2027 GMT
Subject: CN=F8024B81E56B2BDF32C069AE30FD0253B3EDF8FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:42:52:a3:35:99:20:76:bb:a4:de:25:60:
27:10:a7:68:68:5d:f4:be:19:77:4b:7c:55:bb:15:
9a:9f:5f:7b:49:e3:09:38:4e:d3:dc:56:a9:18:8f:
59:7e:95:63:6c:67:9c:89:6d:5b:81:f1:6b:3b:bc:
5b:ec:ae:ed:d9:ca:ee:92:c4:68:f1:df:a0:4a:d2:
dd:97:f2:29:25:f6:7d:78:8b:e9:0f:35:7c:77:43:
e2:04:a0:65:6d:92:d9:ed:0b:6f:6b:b4:35:ea:97:
01:33:95:49:3d:65:ca:98:57:93:aa:f6:37:e1:fa:
6f:cf:4b:b8:36:5d:73:5c:e2:1c:2c:52:bd:20:8d:
58:e3:a7:e3:21:21:fc:a6:c6:db:b2:13:fe:e7:63:
38:5d:c7:3f:e4:ba:27:b3:df:66:2f:5d:6e:29:2a:
ad:4e:9a:a3:82:38:01:ba:17:57:86:fc:07:ab:1c:
ab:a8:4d:39:0b:ef:a4:91:84:13:3c:fa:de:11:72:
a1:1a:d0:a2:ee:cc:93:91:ca:05:bd:cc:57:58:26:
4e:64:e3:38:6e:a9:80:d9:0e:85:2b:b7:44:6e:ee:
c3:fa:e9:93:87:a8:e9:70:84:96:a9:d5:e4:3e:ce:
a9:c2:1d:42:20:94:d4:ac:4e:95:0c:93:dc:bd:2e:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:02:4B:81:E5:6B:2B:DF:32:C0:69:AE:30:FD:02:53:B3:ED:F8:FD
X509v3 Authority Key Identifier:
keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3132382e302f31372d3137203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.50.128.0/17
Signature Algorithm: sha256WithRSAEncryption
23:14:81:0d:a4:2a:7a:e1:38:e1:2b:5b:e5:41:51:35:b4:5f:
b4:fa:bb:47:fb:06:ac:c8:09:ef:da:88:aa:40:5c:e3:c7:b5:
03:af:5f:4b:2f:1b:ae:ff:d2:50:40:76:d7:26:d0:4b:17:b6:
13:d0:27:94:52:1f:bf:a0:dc:ef:16:fb:59:33:86:18:01:dc:
24:0d:b3:2c:74:1d:85:82:df:62:ad:7e:3a:4e:f9:67:2e:d4:
d6:a2:79:b3:04:f6:9d:9a:25:58:8c:29:91:34:eb:2c:b3:b8:
5c:23:ad:97:6e:b7:18:02:56:5a:f8:14:df:ee:62:73:6e:1f:
96:79:3f:31:3f:a5:f1:ab:2d:98:5a:d2:93:75:73:bd:4b:0a:
27:04:96:9b:ab:72:5b:01:2d:06:78:fa:ba:e0:00:53:6c:cf:
19:cd:16:82:58:4c:69:e9:60:0f:2d:29:b2:b0:e2:e6:57:29:
2e:38:99:d0:79:70:6d:3d:ab:ae:4d:9a:0d:6a:27:a6:78:2b:
b2:cb:b7:ca:1e:ab:67:57:7c:e8:67:93:74:14:be:2d:1c:71:
fe:cb:f4:6a:92:b0:3f:a4:ab:28:5f:f7:29:0c:65:3e:23:c4:
fc:da:80:8f:f3:81:a4:8d:79:49:0c:c8:e6:52:b7:09:c1:52:
92:ac:c4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:32 2026 by rpki-client