
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230382e302f32312d3231203d3e203233363530.roa
File: 32372e302e3230382e302f32312d3231203d3e203233363530.roa (raw, json)
Hash identifier: W8GeqtiB4Bpe9lZt2oYz7ItMcwW4KI9RTCNyPrXs30E=
Subject key identifier: 7A:96:2F:17:E2:C4:D9:B5:91:1A:8E:A1:D0:3A:87:61:14:26:91:45
Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial: 0627C9ACB902B51ECAA014D1B5D288325471D178
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230382e302f32312d3231203d3e203233363530.roa
Signing time: Tue 16 Jun 2026 02:02:37 +0000
ROA not before: Tue 16 Jun 2026 01:57:37 +0000
ROA not after: Tue 15 Jun 2027 02:02:37 +0000
asID: 23650
IP address blocks: 27.0.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:27:c9:ac:b9:02:b5:1e:ca:a0:14:d1:b5:d2:88:32:54:71:d1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
Validity
Not Before: Jun 16 01:57:37 2026 GMT
Not After : Jun 15 02:02:37 2027 GMT
Subject: CN=7A962F17E2C4D9B5911A8EA1D03A876114269145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:12:59:96:5c:a5:80:1e:1a:a3:af:9e:09:
03:d1:ee:fa:cc:cc:26:a4:93:4a:86:00:a4:85:3f:
37:6a:94:85:4d:86:19:8f:8d:61:a1:b2:83:42:11:
32:85:b8:bb:59:cf:df:75:08:3c:2d:a0:e7:23:04:
f7:bc:45:9f:6b:7a:bd:41:97:82:46:ca:4e:fb:b5:
87:a0:13:bd:a5:c7:7c:26:19:b0:b8:ba:dc:d0:48:
b8:59:f8:78:88:e7:ac:c6:66:09:29:ec:f3:64:29:
55:89:57:ea:d5:9f:75:4d:5d:60:cf:fd:bc:dd:52:
f6:05:6a:0d:89:1e:e6:3a:a4:28:70:e3:0f:16:2d:
f3:96:0c:da:de:a0:9c:b4:e8:2a:56:95:c1:3b:6b:
8e:26:4e:eb:e8:f3:4b:95:03:ce:40:c9:ed:83:87:
55:a6:a5:11:f8:1c:3d:9c:5f:eb:6b:55:15:7d:cf:
8f:7a:f1:e2:3e:57:1a:ff:10:46:25:ce:7e:d5:2e:
2a:1d:e6:df:cd:f3:ac:ad:b3:8f:46:5c:bc:59:f7:
96:f3:6a:3f:e3:a8:9a:4b:f5:68:59:db:b5:0b:06:
3f:68:01:3a:69:de:f0:f2:9c:ad:3e:57:6c:5e:2b:
e1:4a:b9:69:7c:c4:dc:53:a6:37:fb:e0:d5:cc:6b:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:96:2F:17:E2:C4:D9:B5:91:1A:8E:A1:D0:3A:87:61:14:26:91:45
X509v3 Authority Key Identifier:
keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230382e302f32312d3231203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.208.0/21
Signature Algorithm: sha256WithRSAEncryption
36:51:28:ea:e5:a6:c2:a6:d2:fe:39:ee:7a:17:40:da:e8:7f:
17:ef:e6:4d:c0:cc:c9:28:e3:cc:e3:32:01:25:8f:ef:9e:a7:
97:1d:82:ca:04:a0:f8:7b:5a:2b:15:6d:b2:69:13:b4:96:27:
82:84:10:6e:6c:0f:8e:b1:8a:09:e6:c7:61:9e:2f:f6:f6:4c:
83:98:11:39:2f:27:68:7e:b5:fe:9f:0c:00:29:01:b6:08:08:
64:8d:5a:58:ba:56:4a:22:19:c0:b3:f8:5f:d4:45:61:b4:37:
a6:15:0f:91:3f:b1:84:f6:5d:32:c3:8e:36:a4:ed:d3:7c:38:
cd:fd:0d:e9:d6:e3:1a:a2:b4:b6:61:d4:48:29:05:04:39:57:
41:7b:52:be:b9:a4:67:1d:bf:a9:0d:b6:80:f5:6d:34:bb:d0:
ff:90:6c:42:ea:11:e5:dc:32:14:99:e2:c4:6e:99:10:69:1d:
31:2c:26:09:b3:85:f4:db:ad:3b:73:00:b7:c5:1d:e9:84:e5:
64:1d:0d:9e:34:8a:1e:12:ef:6b:6c:da:71:3c:51:f7:56:25:
ea:59:25:a1:cc:64:ac:be:41:22:77:5d:2b:94:22:2c:bf:c0:
25:a2:45:97:71:a0:97:0e:5e:a2:eb:29:92:c5:8d:dc:43:b7:
6c:7f:70:e8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUBifJrLkCtR7KoBTRtdKIMlRx0XgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4
QzMwOUNFRTAeFw0yNjA2MTYwMTU3MzdaFw0yNzA2MTUwMjAyMzdaMDMxMTAvBgNV
BAMTKDdBOTYyRjE3RTJDNEQ5QjU5MTFBOEVBMUQwM0E4NzYxMTQyNjkxNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbUBJZllylgB4ao6+eCQPR7vrM
zCakk0qGAKSFPzdqlIVNhhmPjWGhsoNCETKFuLtZz991CDwtoOcjBPe8RZ9rer1B
l4JGyk77tYegE72lx3wmGbC4utzQSLhZ+HiI56zGZgkp7PNkKVWJV+rVn3VNXWDP
/bzdUvYFag2JHuY6pChw4w8WLfOWDNreoJy06CpWlcE7a44mTuvo80uVA85Aye2D
h1WmpRH4HD2cX+trVRV9z4968eI+Vxr/EEYlzn7VLiod5t/N86yts49GXLxZ95bz
aj/jqJpL9WhZ27ULBj9oATpp3vDynK0+V2xeK+FKuWl8xNxTpjf74NXMa26XAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUepYvF+LE2bWRGo6h0DqHYRQmkUUwHwYDVR0j
BBgwFoAUmyLBnYQuRaqEQ5NmaU5MgowwnO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTcyMTg1OS8wLzlCMjJDMTlEODQyRTQ1QUE4NDQzOTM2NjY5NEU0
QzgyOEMzMDlDRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4QzMwOUNFRS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NzIxODU5LzAvMzIzNzJlMzAyZTMy
MzAzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzMzNjM1MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAMbANAwDQYJKoZIhvcNAQELBQADggEBADZRKOrlpsKm0v457noXQNrofxfv5k3A
zMko48zjMgElj++ep5cdgsoEoPh7WisVbbJpE7SWJ4KEEG5sD46xignmx2GeL/b2
TIOYETkvJ2h+tf6fDAApAbYICGSNWli6VkoiGcCz+F/URWG0N6YVD5E/sYT2XTLD
jjak7dN8OM39DenW4xqitLZh1EgpBQQ5V0F7Ur65pGcdv6kNtoD1bTS70P+QbELq
EeXcMhSZ4sRumRBpHTEsJgmzhfTbrTtzALfFHemE5WQdDZ40ih4S72ts2nE8UfdW
JepZJaHMZKy+QSJ3XSuUIiy/wCWiRZdxoJcOXqLrKZLFjdxDt2x/cOg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:49:15 2026 by rpki-client