
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e34382e302f32332d3233203d3e2030.roa
File: 3232302e3131322e34382e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier: SGvEe5GK6XIe8JlHMRLT/dlZ5wb6a/xKR16HwjjAmAg=
Subject key identifier: 05:41:0B:BE:55:DB:6A:87:1A:B8:0A:C1:66:1F:41:72:9F:C7:E9:5F
Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial: 71A0446344764E76F716F0AAD09D5BF29DDFF28E
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e34382e302f32332d3233203d3e2030.roa
Signing time: Fri 10 Apr 2026 03:40:29 +0000
ROA not before: Fri 10 Apr 2026 03:35:29 +0000
ROA not after: Fri 09 Apr 2027 03:40:29 +0000
asID: 0
IP address blocks: 220.112.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a0:44:63:44:76:4e:76:f7:16:f0:aa:d0:9d:5b:f2:9d:df:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Validity
Not Before: Apr 10 03:35:29 2026 GMT
Not After : Apr 9 03:40:29 2027 GMT
Subject: CN=05410BBE55DB6A871AB80AC1661F41729FC7E95F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:e1:df:7d:1c:da:22:26:21:fa:73:e1:32:
64:20:ff:bf:6e:15:80:77:06:02:f6:e3:81:80:34:
fb:8d:e8:e1:a5:04:a5:e3:57:76:99:06:46:e2:f4:
d9:3f:0d:61:8a:bd:ed:71:c4:f2:e3:21:df:f5:00:
81:52:08:33:18:18:60:f4:7f:c2:61:d2:9d:ea:da:
8c:e0:5c:0f:11:62:76:3a:67:0a:7a:12:95:d5:2a:
c3:be:7c:7b:f5:33:ad:bc:9d:df:e0:d5:05:73:2f:
a6:a7:c4:ce:21:30:2b:83:b7:a3:2a:93:92:5d:54:
e0:52:f4:13:34:49:23:35:bc:f2:d6:91:39:38:fa:
e2:ee:94:ad:3e:61:c3:9e:7f:ec:ea:25:b3:58:97:
d7:33:7f:85:73:35:9b:e2:37:70:c1:b4:f7:a8:dd:
8b:c5:f4:5f:c4:2a:2d:21:8b:c7:a4:d2:51:f6:bb:
8f:09:13:4e:17:fb:60:7b:8a:91:d4:cf:c2:c3:46:
65:6f:b1:f0:c3:01:99:16:ad:5f:47:cb:93:b0:7c:
9b:cd:9e:b8:ae:be:13:a8:ed:93:08:dc:6c:ce:ac:
35:a9:7b:d3:9d:41:66:48:fc:19:68:7e:1c:f5:2b:
71:88:47:15:bc:06:c8:f0:74:54:2e:55:f4:95:ff:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:41:0B:BE:55:DB:6A:87:1A:B8:0A:C1:66:1F:41:72:9F:C7:E9:5F
X509v3 Authority Key Identifier:
keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e34382e302f32332d3233203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.112.48.0/23
Signature Algorithm: sha256WithRSAEncryption
66:5a:66:0c:29:8a:5a:9c:1e:4e:04:b4:f8:c2:78:3a:ee:5b:
3a:c6:77:fc:63:a6:7c:04:4a:36:fb:8a:6e:79:7f:ac:6b:84:
2c:ef:a6:a0:c3:74:19:b9:fc:29:07:45:9b:b4:e0:26:d0:f3:
3c:3a:44:a9:ad:05:76:29:5c:29:9d:d4:2d:b7:f3:0e:29:06:
6e:63:63:be:d4:d9:28:21:1f:30:0b:14:3c:e4:5b:5e:0e:28:
23:f5:63:0d:5b:29:a1:c5:3f:29:2e:d6:e0:46:35:35:6e:8f:
dd:e4:36:3a:23:22:7b:12:48:86:c9:db:b2:10:f2:f0:96:e4:
62:f6:70:3a:82:00:41:0f:62:22:48:0e:37:fc:f9:24:bd:c6:
13:9f:87:88:a2:29:89:8d:26:87:f5:ce:ea:b6:6b:88:15:34:
f4:0b:1f:3d:a7:5a:85:bc:d5:9a:4f:99:c0:a7:69:d9:5a:24:
9a:d3:b7:3d:2f:4c:78:29:6b:21:fe:66:cd:92:5c:bd:47:cb:
20:f6:57:95:e3:ab:80:59:af:32:2f:c9:bc:7c:44:e6:a4:13:
04:18:39:d3:04:fa:fc:b7:bf:13:5d:05:d9:93:70:8e:34:c3:
9b:bb:d7:48:57:dc:5a:2a:6e:4f:f3:56:64:35:dc:b6:19:43:
57:2b:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:29 2026 by rpki-client