
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136312e36312e302f32342d3234203d3e203137363233.roa
File: 3231312e3136312e36312e302f32342d3234203d3e203137363233.roa (raw, json)
Hash identifier: lxUMvOBXQTMKootFwNoAupQ/a6CYF0wAXe/8/lheTg0=
Subject key identifier: 4E:DD:2C:1E:13:5E:84:38:84:7B:4A:4B:1F:ED:11:24:5B:AC:47:2E
Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial: 5607182BD6B1E7790EFCA7E00815F4DB8FD47E07
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136312e36312e302f32342d3234203d3e203137363233.roa
Signing time: Fri 10 Apr 2026 03:00:38 +0000
ROA not before: Fri 10 Apr 2026 02:55:38 +0000
ROA not after: Fri 09 Apr 2027 03:00:38 +0000
asID: 17623
IP address blocks: 211.161.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:07:18:2b:d6:b1:e7:79:0e:fc:a7:e0:08:15:f4:db:8f:d4:7e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Validity
Not Before: Apr 10 02:55:38 2026 GMT
Not After : Apr 9 03:00:38 2027 GMT
Subject: CN=4EDD2C1E135E8438847B4A4B1FED11245BAC472E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:ad:1f:bc:82:aa:8e:9f:69:07:23:a2:08:
b0:f3:b5:ba:10:3e:d5:9b:ba:b9:6e:0d:62:99:30:
23:6e:91:78:27:65:45:fb:e5:bb:2d:7e:c9:e7:5e:
4d:fb:03:e4:7b:b8:1f:38:cc:52:d5:d2:dd:35:4b:
4a:cb:f9:8f:f2:0f:67:27:96:f5:a7:2d:84:05:db:
57:92:a1:ad:c8:b0:ac:f0:8d:06:31:e3:fe:4b:94:
7e:f9:be:4d:34:82:57:b6:d8:db:f7:99:6e:e0:19:
68:fa:b5:3b:ee:48:ef:bf:ea:02:a2:75:37:05:b1:
7d:97:8f:66:e2:40:8e:fa:0b:d6:2a:c5:8b:0a:a7:
fe:e5:8d:36:47:5c:14:cb:73:6b:a2:15:b5:e7:1d:
5f:8a:38:49:73:20:f4:64:ea:1c:ad:c1:5a:07:ce:
42:6d:50:7b:7b:75:26:24:b6:ae:de:5e:42:5b:41:
47:4d:93:32:3f:76:62:2f:f5:61:e4:ce:87:1c:ef:
00:1f:35:6e:ff:75:40:9e:dd:ff:b8:25:8f:cd:9d:
d8:d4:16:fa:96:9a:ce:17:86:64:0c:15:40:64:ec:
42:66:84:fb:cf:0f:29:f0:63:d1:0e:e9:6a:d6:6e:
e9:1f:18:4d:a2:c7:9f:cb:a3:42:cc:b5:d1:95:93:
a9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DD:2C:1E:13:5E:84:38:84:7B:4A:4B:1F:ED:11:24:5B:AC:47:2E
X509v3 Authority Key Identifier:
keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136312e36312e302f32342d3234203d3e203137363233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.161.61.0/24
Signature Algorithm: sha256WithRSAEncryption
00:9a:12:5e:bb:15:35:ad:df:a4:16:e6:e3:d5:c4:f5:9b:93:
26:9c:87:4a:9d:b2:41:49:fb:4c:4b:25:ff:b5:3e:3b:c9:3d:
91:16:64:e3:6a:69:dd:a6:6e:74:c9:00:6e:b1:d2:c4:2d:79:
bf:ce:6e:17:72:33:e0:c4:02:88:20:4c:e6:1a:3c:de:cf:52:
e8:74:a5:01:b7:9e:31:db:55:1f:28:f2:a4:58:19:39:6e:fe:
ae:e0:4c:7a:fc:c8:4b:2b:7b:e9:aa:fa:34:3c:44:94:06:37:
6d:cf:07:c1:ae:f5:90:c6:71:e0:00:ea:18:3b:b5:d2:9a:b5:
98:d1:0f:78:4e:b8:b3:4d:25:c9:aa:35:d5:e0:65:4f:5a:50:
d0:24:53:eb:b3:c6:83:7c:c8:3f:96:cf:c6:13:5f:67:44:aa:
1a:f2:5d:5b:41:b7:93:f6:1c:8c:e9:76:91:78:81:ed:32:85:
62:d5:13:8c:6e:14:03:b1:02:42:a3:64:25:50:78:2b:69:fc:
61:a4:f5:01:8e:58:f2:cf:65:d3:6f:aa:11:8b:94:07:87:1e:
ef:86:85:bd:99:a2:b0:05:69:d9:f2:4a:c4:ab:17:af:4a:1b:
d7:13:7d:d2:db:ca:19:91:c5:ca:9b:78:9f:5e:a4:9f:0a:dc:
9c:65:43:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:25 2026 by rpki-client