
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e31362e302f32302d3230203d3e2030.roa
File: 3232302e3131322e31362e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier: p2GAN9B7jtg26g91MT6HxLZgJixO/r+hcbZom6r4U/I=
Subject key identifier: C5:6E:CE:5D:BD:93:3F:B0:33:64:C5:D0:E2:92:DF:0C:3B:76:97:05
Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial: 38517EA28298C3EECE4FCBBEA1F3761B2C171271
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e31362e302f32302d3230203d3e2030.roa
Signing time: Fri 10 Apr 2026 03:40:28 +0000
ROA not before: Fri 10 Apr 2026 03:35:28 +0000
ROA not after: Fri 09 Apr 2027 03:40:28 +0000
asID: 0
IP address blocks: 220.112.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:51:7e:a2:82:98:c3:ee:ce:4f:cb:be:a1:f3:76:1b:2c:17:12:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Validity
Not Before: Apr 10 03:35:28 2026 GMT
Not After : Apr 9 03:40:28 2027 GMT
Subject: CN=C56ECE5DBD933FB03364C5D0E292DF0C3B769705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:48:4e:73:02:46:cc:a5:05:92:92:6f:b6:
ba:85:dc:d3:19:55:f9:0e:1d:f3:cf:b7:ac:7c:22:
2b:76:c0:03:03:cd:51:12:85:ad:1f:52:8e:3c:19:
5f:07:23:28:17:ee:cc:75:7f:67:d4:47:09:24:51:
b9:f6:e1:45:11:a3:9d:b3:3d:88:a9:e4:68:3e:b5:
59:b1:41:59:59:99:23:7a:ed:5e:ab:65:be:5e:1f:
57:36:1c:20:e7:40:30:e6:c4:fa:82:87:87:b0:58:
fc:53:12:6a:2b:71:c5:aa:b3:ee:a5:8c:db:56:ab:
97:a6:72:e2:57:a0:79:8e:61:4a:ce:53:a0:7a:84:
98:c8:c9:99:39:74:76:61:71:dc:bf:8f:fd:b2:4e:
e6:8c:fb:3c:f8:06:a4:3f:de:73:c5:11:63:15:c6:
fa:b2:56:43:cb:de:9a:b1:b4:06:17:ff:ea:33:c1:
a9:1c:fe:3c:59:44:04:e1:bb:6c:21:73:ed:1c:39:
2c:68:8b:31:31:0e:28:91:94:8e:9b:c1:f8:e3:61:
89:47:60:02:fb:1d:ab:6d:f0:0b:0f:d5:2b:8f:60:
92:4e:d5:2a:f2:6b:68:bd:b8:61:48:20:b9:1e:56:
46:a5:11:d3:88:a3:6f:ab:d5:d7:7d:43:1d:fe:a7:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6E:CE:5D:BD:93:3F:B0:33:64:C5:D0:E2:92:DF:0C:3B:76:97:05
X509v3 Authority Key Identifier:
keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e31362e302f32302d3230203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.112.16.0/20
Signature Algorithm: sha256WithRSAEncryption
76:b3:04:d4:a7:e3:33:58:d1:6b:15:43:ac:1d:4a:76:a1:e1:
71:6f:2c:90:f5:98:6b:0c:73:c9:b0:fa:f7:96:71:78:cb:f2:
1c:f4:6d:7a:35:ba:5b:db:bc:d4:c5:01:14:d1:a5:0b:4b:44:
b1:6a:be:94:4b:9c:44:58:82:bd:a6:52:02:ec:71:f0:3c:16:
4c:67:bd:cf:dc:9c:b3:c1:d9:d9:88:66:96:aa:b2:83:c9:b0:
89:18:ed:78:ab:3b:d3:fe:73:0d:24:31:fa:a7:43:cd:ab:6e:
a0:eb:20:b9:f2:21:98:44:cd:7f:ed:fb:62:d2:1e:9e:6b:2f:
28:b9:ca:e2:f0:6f:e6:d3:8c:cc:a8:33:49:ec:59:d3:9f:4a:
38:5c:25:fe:f1:51:1d:12:f1:0e:08:c1:4f:de:85:cd:fd:06:
34:38:54:6e:ee:ef:38:bc:d3:aa:bb:f3:d7:e4:13:02:c0:c5:
76:09:63:1d:fe:df:8f:23:ee:6e:10:2e:60:21:24:53:4b:95:
4e:75:0a:05:93:11:af:de:08:34:83:2a:de:41:49:59:4d:65:
c7:af:19:04:ca:1c:71:fc:78:68:fb:e0:e2:2e:cb:6d:ff:92:
b0:0c:01:01:6d:6e:9c:ef:07:99:6e:30:80:15:b7:d9:d4:6a:
33:6e:37:81
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUOFF+ooKYw+7OT8u+ofN2GywXEnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC
MUE5QTlENTAeFw0yNjA0MTAwMzM1MjhaFw0yNzA0MDkwMzQwMjhaMDMxMTAvBgNV
BAMTKEM1NkVDRTVEQkQ5MzNGQjAzMzY0QzVEMEUyOTJERjBDM0I3Njk3MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV70hOcwJGzKUFkpJvtrqF3NMZ
VfkOHfPPt6x8Iit2wAMDzVESha0fUo48GV8HIygX7sx1f2fURwkkUbn24UURo52z
PYip5Gg+tVmxQVlZmSN67V6rZb5eH1c2HCDnQDDmxPqCh4ewWPxTEmorccWqs+6l
jNtWq5emcuJXoHmOYUrOU6B6hJjIyZk5dHZhcdy/j/2yTuaM+zz4BqQ/3nPFEWMV
xvqyVkPL3pqxtAYX/+ozwakc/jxZRAThu2whc+0cOSxoizExDiiRlI6bwfjjYYlH
YAL7Hatt8AsP1SuPYJJO1Srya2i9uGFIILkeVkalEdOIo2+r1dd9Qx3+pydBAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUxW7OXb2TP7AzZMXQ4pLfDDt2lwUwHwYDVR0j
BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2
RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMjMwMmUzMTMx
MzIyZTMxMzYyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNxw
EDANBgkqhkiG9w0BAQsFAAOCAQEAdrME1KfjM1jRaxVDrB1KdqHhcW8skPWYawxz
ybD695ZxeMvyHPRtejW6W9u81MUBFNGlC0tEsWq+lEucRFiCvaZSAuxx8DwWTGe9
z9ycs8HZ2Yhmlqqyg8mwiRjteKs70/5zDSQx+qdDzatuoOsgufIhmETNf+37YtIe
nmsvKLnK4vBv5tOMzKgzSexZ059KOFwl/vFRHRLxDgjBT96Fzf0GNDhUbu7vOLzT
qrvz1+QTAsDFdgljHf7fjyPubhAuYCEkU0uVTnUKBZMRr94INIMq3kFJWU1lx68Z
BMoccfx4aPvg4i7Lbf+SsAwBAW1unO8HmW4wgBW32dRqM243gQ==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:30 2026 by rpki-client