
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3231322e302f32322d3232203d3e203233363530.roa
File: 32372e302e3231322e302f32322d3232203d3e203233363530.roa (raw, json)
Hash identifier: BnR+PZKY+8aUOoAAdYWVdmIHPHgi3uTNp1OUx0HV2Z0=
Subject key identifier: 94:0E:C3:F1:EE:66:D0:64:E3:E4:98:FE:05:B3:B5:36:B1:11:00:A6
Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial: 2E29BBBA496BCED570E461AAF34F6F2B03D6007C
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3231322e302f32322d3232203d3e203233363530.roa
Signing time: Tue 16 Jun 2026 02:06:16 +0000
ROA not before: Tue 16 Jun 2026 02:01:16 +0000
ROA not after: Tue 15 Jun 2027 02:06:16 +0000
asID: 23650
IP address blocks: 27.0.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:29:bb:ba:49:6b:ce:d5:70:e4:61:aa:f3:4f:6f:2b:03:d6:00:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
Validity
Not Before: Jun 16 02:01:16 2026 GMT
Not After : Jun 15 02:06:16 2027 GMT
Subject: CN=940EC3F1EE66D064E3E498FE05B3B536B11100A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:c4:a0:6e:49:2e:80:f5:db:51:a9:21:c7:
24:1f:fb:6d:ed:ff:c5:22:33:f0:18:a4:a7:fb:b7:
35:35:9b:3f:f0:d9:6c:6a:da:17:48:95:ee:ab:85:
ee:ef:bc:2d:77:22:9a:76:bf:af:e4:f3:73:ac:b4:
da:30:52:dd:15:45:51:c5:f1:71:6d:fd:e9:c8:41:
a0:53:5c:5e:8d:ba:2f:35:94:00:d6:81:21:91:5c:
26:02:ae:19:1a:03:01:a4:92:fd:e4:06:ae:46:ae:
59:ce:04:b7:3a:c9:88:c3:0f:ac:71:89:81:45:b9:
8e:cf:74:08:e2:76:bd:52:31:9a:11:23:a0:ec:9d:
ba:10:fe:56:61:1f:19:dd:51:5b:c3:e4:54:0d:8d:
c7:2f:30:27:e0:81:9f:39:d1:7d:59:33:ad:6c:0a:
28:4d:ad:54:b1:02:f0:de:af:dd:e0:ab:76:f0:bc:
57:b1:48:80:4b:9a:de:1f:85:d0:cd:fc:e1:64:7c:
db:12:ca:34:59:b9:6b:02:04:27:79:df:1d:30:20:
a5:ce:e3:32:da:45:e2:7b:aa:da:05:71:9e:a9:76:
9e:12:ff:9f:76:b3:ef:32:bc:08:c0:ee:97:bc:d7:
ba:ff:49:ec:d2:73:e6:7e:bd:7a:32:5e:8b:05:ee:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0E:C3:F1:EE:66:D0:64:E3:E4:98:FE:05:B3:B5:36:B1:11:00:A6
X509v3 Authority Key Identifier:
keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3231322e302f32322d3232203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.212.0/22
Signature Algorithm: sha256WithRSAEncryption
02:14:84:26:0b:32:b5:94:05:ed:a8:d9:e8:7b:86:f3:d4:f3:
2f:ec:81:1b:ac:c4:4e:8e:2a:09:52:1b:d9:09:91:7b:67:cd:
03:f8:d0:6f:fe:41:62:5d:4b:4f:c7:ec:5c:82:74:cb:46:42:
a0:61:ec:af:c4:13:a4:27:53:4d:86:2d:ac:a3:67:28:3b:6a:
f6:58:1f:7b:05:63:e1:b5:61:1e:79:c7:3f:d0:c2:10:95:5b:
84:c9:4c:bd:83:ca:02:e1:01:c9:07:96:0c:3c:47:75:3d:05:
59:23:93:90:d6:63:8c:c2:71:88:ad:34:49:87:c1:62:6e:ca:
23:34:a5:d3:b6:27:04:d8:c2:55:71:85:75:a0:78:7d:0b:10:
23:89:5e:c0:61:8f:d6:fc:ec:43:a2:67:3e:1e:86:33:c0:1e:
37:26:62:1f:8a:2b:99:00:00:cb:5d:1b:03:0b:b0:d5:79:c3:
f2:06:ab:a3:08:b3:60:bf:93:ef:a5:57:3f:0e:a4:11:16:53:
14:54:f1:1c:84:4c:ca:1a:e4:85:82:30:59:d3:97:0d:81:05:
43:bf:64:7a:26:cc:78:c3:fb:ba:ad:a4:83:bf:0d:30:e2:ea:
af:7d:0f:77:34:11:74:c5:e5:4f:7a:7d:02:ab:24:a6:5c:d3:
33:8b:20:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:21:41 2026 by rpki-client