
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e31302e302f32332d3233203d3e2030.roa
File: 3232302e3131322e31302e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier: Qa4K55l2TfdDWOryJb9LCImFMpvTV9VRlJJayGSJeGQ=
Subject key identifier: 62:94:66:35:AD:2A:0B:AD:85:F4:0C:19:2C:CB:79:B2:72:A1:BD:6F
Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial: 77A39D51674CBE173898015325223E040B40B504
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e31302e302f32332d3233203d3e2030.roa
Signing time: Fri 10 Apr 2026 03:40:28 +0000
ROA not before: Fri 10 Apr 2026 03:35:28 +0000
ROA not after: Fri 09 Apr 2027 03:40:28 +0000
asID: 0
IP address blocks: 220.112.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a3:9d:51:67:4c:be:17:38:98:01:53:25:22:3e:04:0b:40:b5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Validity
Not Before: Apr 10 03:35:28 2026 GMT
Not After : Apr 9 03:40:28 2027 GMT
Subject: CN=62946635AD2A0BAD85F40C192CCB79B272A1BD6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0d:13:08:f3:09:45:fd:c4:e0:5d:d2:3c:14:
62:64:57:a3:85:ab:a5:2d:c6:c4:95:e0:7c:88:6f:
af:cb:f9:ec:5b:c2:cb:cb:48:d0:b9:ea:39:cf:4d:
56:f4:5f:2a:eb:df:dd:16:c7:11:3a:57:c0:3e:c4:
eb:ac:be:64:14:46:12:ab:7b:85:40:15:df:fc:a3:
66:9b:bf:c3:8a:01:12:83:16:ce:22:12:52:c9:01:
a1:0b:22:9c:4b:99:44:f1:ee:ff:ce:07:a0:8a:58:
40:f2:39:8a:06:ee:db:75:98:7a:fc:be:e7:16:1d:
42:30:37:31:bf:2e:77:a7:42:5b:ab:8d:3d:b1:8f:
4a:be:ca:74:38:aa:6d:35:28:ab:fd:6d:ff:d4:6d:
05:98:92:eb:91:46:8c:1f:8d:da:60:ac:e7:06:ea:
ec:81:c5:22:56:9b:5f:04:58:cf:65:94:d0:e0:00:
34:3b:47:2c:3e:99:04:5d:eb:10:aa:32:e6:51:6a:
6e:b8:ea:f6:0d:ff:e7:8a:44:00:2d:24:3d:5d:ff:
7d:a9:68:7f:96:4c:b3:9f:9d:49:21:3e:25:71:17:
79:78:8a:82:16:e5:50:90:44:08:81:eb:38:e2:ba:
ba:11:1b:bf:fa:94:fa:4d:b2:06:3c:96:f7:88:a1:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:94:66:35:AD:2A:0B:AD:85:F4:0C:19:2C:CB:79:B2:72:A1:BD:6F
X509v3 Authority Key Identifier:
keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e31302e302f32332d3233203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.112.10.0/23
Signature Algorithm: sha256WithRSAEncryption
02:a7:7e:f3:ed:2d:a2:81:44:10:05:40:f7:fa:60:5f:65:65:
3a:c1:81:9b:d6:6c:c3:71:ea:fa:ba:a2:21:ec:a6:35:21:75:
da:2a:56:76:c8:36:37:5f:ab:a1:21:95:e5:14:90:a1:a7:e5:
17:85:a9:01:ba:75:a2:cd:45:8a:b5:99:a6:d6:b9:d7:97:0a:
c6:f4:6a:72:f7:ab:c7:1d:ad:ae:1e:39:7a:9b:30:29:31:4a:
69:15:f2:02:1d:4d:c4:9e:ee:e9:4f:2d:a1:98:88:51:6b:87:
27:4a:43:72:09:4d:a1:fc:ca:13:26:ca:51:93:cb:3b:79:7a:
d1:ca:e0:a3:67:79:32:80:0c:ee:4d:52:e0:e4:86:e7:c5:7e:
56:67:7a:6b:13:5f:83:d0:5f:9a:57:35:7c:2f:0a:b3:69:4e:
cc:02:a6:f6:e1:56:26:90:89:9a:30:07:f0:2d:a3:2a:18:80:
68:2c:c3:77:c9:79:de:65:43:a8:42:98:5e:b7:6d:b9:e1:7d:
b4:b0:c7:07:53:11:f0:93:00:0f:30:0d:86:eb:d1:e2:28:51:
26:6d:9e:af:d7:25:e1:2c:66:6b:6b:67:33:00:7e:2b:2c:c8:
fa:a4:e7:b2:dc:46:25:52:84:4b:60:22:71:f2:63:63:85:16:
e8:b9:fe:6e
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUd6OdUWdMvhc4mAFTJSI+BAtAtQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC
MUE5QTlENTAeFw0yNjA0MTAwMzM1MjhaFw0yNzA0MDkwMzQwMjhaMDMxMTAvBgNV
BAMTKDYyOTQ2NjM1QUQyQTBCQUQ4NUY0MEMxOTJDQ0I3OUIyNzJBMUJENkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2DRMI8wlF/cTgXdI8FGJkV6OF
q6UtxsSV4HyIb6/L+exbwsvLSNC56jnPTVb0Xyrr390WxxE6V8A+xOusvmQURhKr
e4VAFd/8o2abv8OKARKDFs4iElLJAaELIpxLmUTx7v/OB6CKWEDyOYoG7tt1mHr8
vucWHUIwNzG/LnenQlurjT2xj0q+ynQ4qm01KKv9bf/UbQWYkuuRRowfjdpgrOcG
6uyBxSJWm18EWM9llNDgADQ7Ryw+mQRd6xCqMuZRam646vYN/+eKRAAtJD1d/32p
aH+WTLOfnUkhPiVxF3l4ioIW5VCQRAiB6zjiuroRG7/6lPpNsgY8lveIocK1AgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUYpRmNa0qC62F9AwZLMt5snKhvW8wHwYDVR0j
BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2
RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMjMwMmUzMTMx
MzIyZTMxMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdxw
CjANBgkqhkiG9w0BAQsFAAOCAQEAAqd+8+0tooFEEAVA9/pgX2VlOsGBm9Zsw3Hq
+rqiIeymNSF12ipWdsg2N1+roSGV5RSQoaflF4WpAbp1os1FirWZpta515cKxvRq
cverxx2trh45epswKTFKaRXyAh1NxJ7u6U8toZiIUWuHJ0pDcglNofzKEybKUZPL
O3l60crgo2d5MoAM7k1S4OSG58V+Vmd6axNfg9Bfmlc1fC8Ks2lOzAKm9uFWJpCJ
mjAH8C2jKhiAaCzDd8l53mVDqEKYXrdtueF9tLDHB1MR8JMADzANhuvR4ihRJm2e
r9cl4Sxma2tnMwB+KyzI+qTnstxGJVKES2AicfJjY4UW6Ln+bg==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:30 2026 by rpki-client