
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e3139362e302f32342d3234203d3e203137363233.roa
File: 3232302e3131322e3139362e302f32342d3234203d3e203137363233.roa (raw, json)
Hash identifier: cTIFWRNIUfeW/oWFm8G4VaDDahh5ky7IiTCzJDTYYjU=
Subject key identifier: 61:54:CF:95:53:0C:7D:4A:02:A3:16:93:83:2D:A1:50:A5:40:B9:34
Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial: 54C7E75579613E8FBE582D6AB2752E1BCAC6FBBA
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e3139362e302f32342d3234203d3e203137363233.roa
Signing time: Fri 10 Apr 2026 03:00:38 +0000
ROA not before: Fri 10 Apr 2026 02:55:38 +0000
ROA not after: Fri 09 Apr 2027 03:00:38 +0000
asID: 17623
IP address blocks: 220.112.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c7:e7:55:79:61:3e:8f:be:58:2d:6a:b2:75:2e:1b:ca:c6:fb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Validity
Not Before: Apr 10 02:55:38 2026 GMT
Not After : Apr 9 03:00:38 2027 GMT
Subject: CN=6154CF95530C7D4A02A31693832DA150A540B934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:93:30:02:b2:b5:c3:30:14:e5:e3:a5:5d:
4d:f3:f5:b8:4a:a5:8a:e9:3d:a5:1d:05:4e:8c:3b:
f2:fa:2a:75:2d:5e:7a:f1:6e:1e:73:4d:4c:76:d6:
50:14:26:15:39:f6:31:89:c8:db:58:3c:b4:fa:1c:
3a:ee:51:49:76:33:34:ed:a9:e1:7f:24:b9:d3:0f:
60:78:87:08:e6:0c:5c:3b:6c:0a:2a:8e:e4:38:d1:
a7:d4:ff:e9:f6:30:e5:df:c3:65:b2:94:9e:a8:79:
8a:17:57:2b:d6:6b:0e:22:e6:b5:1d:4c:40:12:c3:
1d:1c:8e:bc:b9:0e:2c:b7:f9:b3:bc:56:d2:6f:db:
e4:bd:64:47:bb:eb:b5:8f:be:05:d5:60:ba:16:32:
e5:a6:8b:18:d8:1c:ba:02:67:8b:11:f6:ac:73:87:
ad:a9:fd:89:56:6b:ba:52:b8:97:3b:b1:df:ec:e6:
80:7b:91:1d:1d:60:5c:a3:4c:a3:64:29:08:61:b4:
9f:bd:ce:9f:a9:bd:4a:81:23:bf:fa:cc:90:bb:89:
95:3a:fb:4b:d9:f9:dd:0c:2d:ae:4e:9e:2b:58:8c:
6b:d0:e9:dc:e4:59:7b:88:1a:77:1b:9e:87:65:32:
d7:00:d4:fb:e1:61:26:d6:83:c7:f6:18:24:7e:3f:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:54:CF:95:53:0C:7D:4A:02:A3:16:93:83:2D:A1:50:A5:40:B9:34
X509v3 Authority Key Identifier:
keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e3139362e302f32342d3234203d3e203137363233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.112.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:04:d9:ae:5e:9e:25:fc:25:22:b9:7f:a3:27:56:1e:d6:73:
ba:2d:f1:e8:bf:33:a8:9a:4f:37:5a:68:b4:54:46:a4:80:b7:
85:fd:f4:55:d6:a8:73:ad:fa:0a:61:58:70:ab:11:65:bc:df:
a5:b6:2e:a6:11:85:e5:4e:fb:91:3f:72:67:a3:a1:3b:db:25:
af:a1:38:9f:75:eb:c5:57:7f:c8:6a:28:d7:d7:3f:8e:ef:6c:
7c:8d:ae:89:12:28:0c:96:65:35:82:e6:76:4f:83:be:67:3d:
75:af:d2:fe:8f:c7:c9:d2:4a:52:fd:4c:05:ac:b7:ce:8f:66:
a6:83:b4:0d:ad:d5:eb:60:67:7b:47:b3:77:13:09:29:a5:68:
c7:79:d5:03:a4:d7:22:d7:48:0a:f6:5d:aa:0e:ff:27:e4:40:
84:69:88:7c:52:b4:71:b1:ea:d6:34:ca:a8:da:2a:20:56:e8:
8e:2a:f9:34:02:5b:f4:4c:8f:d6:80:bc:cb:72:43:62:c4:31:
d0:c2:dd:b0:24:7c:99:ab:ae:dd:70:4e:b9:1b:42:0e:88:7a:
d0:d1:0a:b4:9e:42:d4:0d:c8:05:e5:91:7f:da:77:e7:e8:48:
1a:41:5a:e8:83:de:f3:29:0d:68:da:a8:85:0c:86:2e:60:f7:
ea:e8:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:31 2026 by rpki-client