
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/32372e302e3136362e302f32332d3233203d3e203633363134.roa
File: 32372e302e3136362e302f32332d3233203d3e203633363134.roa (raw, json)
Hash identifier: ozUNCFnPVmzTNOIyibjsNA5U7OJM6+ITaFZeYJQ0j34=
Subject key identifier: 7C:4E:5F:3B:F3:E0:CE:4D:5C:5C:3C:6C:23:19:19:E2:64:21:BB:2F
Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial: 7656ACCF15C7D593668E05EFACEA2B789C0DF5DD
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/32372e302e3136362e302f32332d3233203d3e203633363134.roa
Signing time: Tue 12 May 2026 09:05:12 +0000
ROA not before: Tue 12 May 2026 09:00:12 +0000
ROA not after: Tue 11 May 2027 09:05:12 +0000
asID: 63614
IP address blocks: 27.0.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:56:ac:cf:15:c7:d5:93:66:8e:05:ef:ac:ea:2b:78:9c:0d:f5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
Validity
Not Before: May 12 09:00:12 2026 GMT
Not After : May 11 09:05:12 2027 GMT
Subject: CN=7C4E5F3BF3E0CE4D5C5C3C6C231919E26421BB2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:59:e9:32:1b:c2:e3:0d:1e:cd:89:f0:18:1d:
3d:4a:b6:45:5e:58:b6:e9:b3:16:ca:9c:d6:6a:6b:
ac:26:00:45:19:00:d0:df:5f:11:e9:a7:41:73:9f:
cd:3b:10:94:ed:ba:3b:84:78:54:35:d8:c3:a3:db:
66:7a:6d:31:84:52:25:60:f2:f3:2f:d4:06:3e:f3:
53:83:37:32:11:3a:e2:9a:9c:5f:36:1c:45:45:ce:
fa:f5:8e:fa:f2:17:65:48:aa:36:bf:2f:df:a9:16:
84:3f:68:60:02:82:cc:7b:52:ed:05:51:2f:a1:21:
67:59:37:f9:b3:34:96:4d:67:a2:07:e8:42:0d:e7:
27:b0:8e:f8:bc:78:ff:99:e1:1f:44:52:10:09:da:
a5:a0:14:a0:91:48:40:56:2a:db:94:0c:62:5f:6e:
bc:5a:8b:24:f0:9a:cc:a6:0d:c7:9f:8a:47:b1:9c:
00:30:09:70:f0:e5:bd:0e:23:44:02:c8:93:c5:f0:
42:db:96:dc:8d:b8:17:07:1e:d9:f7:b9:46:c1:35:
ed:13:02:44:49:1b:74:f7:01:f2:03:4f:10:f3:29:
51:f0:86:4a:cc:3d:42:9e:43:fd:00:18:7d:b8:b8:
c7:e1:f1:ed:85:49:89:b5:2e:1e:7c:07:28:12:a7:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4E:5F:3B:F3:E0:CE:4D:5C:5C:3C:6C:23:19:19:E2:64:21:BB:2F
X509v3 Authority Key Identifier:
keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/32372e302e3136362e302f32332d3233203d3e203633363134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.166.0/23
Signature Algorithm: sha256WithRSAEncryption
62:9f:fc:4b:51:83:47:4a:be:00:86:d4:e9:94:f9:b7:bd:41:
d9:e7:77:0f:15:a5:f9:b4:2f:cb:d0:11:1e:75:23:3f:bc:b4:
14:5a:6d:2a:55:df:fd:3a:a2:17:53:66:e7:5a:5a:a9:d4:86:
8f:8e:a4:e1:c5:5f:23:dc:64:c3:51:cf:fb:5c:a9:63:33:01:
50:2a:92:fb:a7:87:92:ce:36:97:fc:bc:84:f4:95:38:18:b8:
a0:19:40:d2:56:2c:3c:d6:15:d1:35:6c:f8:68:8f:43:3b:56:
09:dd:18:c1:8c:ab:eb:c4:64:83:5c:94:fb:3b:93:70:44:39:
9e:41:cb:a7:09:7d:17:ef:30:09:ab:44:e5:e4:60:5a:7e:9d:
d5:c0:cc:d1:91:22:3a:ac:1e:73:a2:2a:c0:8a:42:2d:42:6d:
d3:25:d8:bc:26:69:94:30:d5:92:99:89:66:6c:3f:32:17:60:
e9:c7:e5:50:b9:d6:2e:2a:91:8e:28:50:b3:4f:9f:7d:4b:70:
e1:f9:4b:c6:20:72:d2:08:c4:2d:94:82:5e:3a:15:ca:9b:f6:
98:84:6b:82:0a:29:64:56:a9:3e:25:2a:32:1e:9e:3f:9a:46:
81:c6:35:83:62:a8:94:1f:40:95:ed:9a:e0:2c:02:15:56:19:
ee:90:9e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:13 2026 by rpki-client