
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136312e36302e302f32342d3234203d3e203137363233.roa
File: 3231312e3136312e36302e302f32342d3234203d3e203137363233.roa (raw, json)
Hash identifier: 5MKNPc+AN89vcsL1wl++nYav/JaW3S3g3YM2XiUGYVE=
Subject key identifier: 26:22:A2:D4:89:4B:AC:DC:DB:80:5F:9D:94:1C:A4:42:A2:F1:D2:69
Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial: 74E2F134BC791721D8779960B47A06AFAD66398C
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136312e36302e302f32342d3234203d3e203137363233.roa
Signing time: Fri 10 Apr 2026 03:00:38 +0000
ROA not before: Fri 10 Apr 2026 02:55:38 +0000
ROA not after: Fri 09 Apr 2027 03:00:38 +0000
asID: 17623
IP address blocks: 211.161.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e2:f1:34:bc:79:17:21:d8:77:99:60:b4:7a:06:af:ad:66:39:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Validity
Not Before: Apr 10 02:55:38 2026 GMT
Not After : Apr 9 03:00:38 2027 GMT
Subject: CN=2622A2D4894BACDCDB805F9D941CA442A2F1D269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:f3:1b:2b:d8:03:b4:6b:13:15:21:c7:22:
0d:44:e2:34:8f:42:51:08:28:b4:d9:38:b0:7b:30:
8b:4d:22:e3:b1:c9:c3:4d:4a:52:8b:71:7e:95:3d:
47:f0:e2:a7:09:67:1a:8d:ef:10:b7:6c:31:f6:6f:
5a:76:33:1c:da:1c:9a:e2:30:75:a7:b4:dd:80:45:
e5:57:04:2b:f4:84:f7:34:3d:be:eb:86:95:43:13:
00:ed:28:7a:d7:d1:6a:39:ca:6d:c5:c2:ce:fc:33:
a8:f7:2e:8a:98:ce:43:10:d1:4f:f8:93:71:7e:6c:
50:32:be:42:c7:5c:f8:5e:b1:b3:da:91:d0:6d:21:
6d:90:2c:97:af:19:67:d3:04:12:1f:c5:9f:4c:52:
f1:09:a1:50:b0:bf:8f:1c:41:1b:c1:e9:cc:bc:ea:
58:30:52:7b:25:e7:c9:6b:a3:62:0c:8f:22:d8:15:
a4:72:75:a6:9a:9d:ee:4e:4d:5e:e0:39:ba:21:68:
10:75:11:b5:b3:3a:a2:7a:62:dc:48:c3:87:a2:65:
8c:b2:2b:ea:c2:96:38:1b:a4:d2:50:ce:ae:71:d1:
06:43:02:94:01:b5:e9:dc:d1:2e:22:c6:a3:d9:d5:
75:a5:97:7e:78:06:b0:61:f1:06:f0:0e:b2:3e:07:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:22:A2:D4:89:4B:AC:DC:DB:80:5F:9D:94:1C:A4:42:A2:F1:D2:69
X509v3 Authority Key Identifier:
keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136312e36302e302f32342d3234203d3e203137363233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.161.60.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:91:7a:2e:9d:2b:9b:6f:8f:2a:1c:66:97:b0:91:45:ea:c1:
cd:2e:b6:8e:5c:3f:2a:f9:23:23:6c:b3:ea:1c:2f:28:5d:81:
60:14:88:8d:cb:23:5f:ab:33:a2:16:86:0e:b1:ab:bd:76:d6:
26:86:46:1f:eb:9e:1a:ce:38:cd:ab:7a:be:b4:cd:7e:11:29:
8f:82:77:88:b1:44:57:61:64:85:8e:04:11:c8:51:76:a4:06:
81:b9:c3:2e:63:56:66:7b:aa:eb:bc:64:35:ce:34:9a:b8:23:
8c:83:e5:9f:bc:ab:76:0c:78:45:f0:eb:48:d4:f2:9a:d2:0e:
f4:57:ed:37:06:b7:2d:7a:db:c0:79:89:cb:04:68:16:b4:af:
7c:59:89:66:f5:6b:14:94:ff:76:29:38:d4:e6:f8:a8:9f:dd:
93:d8:3c:6b:43:a3:05:6d:e3:c4:ac:5b:91:26:97:3a:ab:70:
76:7d:ad:9e:1b:66:d4:94:bf:8f:b0:77:bd:bf:18:2f:b4:ce:
ba:93:82:f5:a7:56:94:7d:bf:41:94:cc:65:49:3a:0d:48:0b:
de:9d:8b:25:7a:46:ca:95:b3:41:37:d6:fd:5f:9b:56:b3:e4:
02:f9:01:24:dd:45:2d:77:41:50:43:e7:ca:2d:b3:ad:b4:90:
ee:79:70:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:31 2026 by rpki-client