
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35302e302f32342d3234203d3e203137363233.roa
File: 3232302e3131322e35302e302f32342d3234203d3e203137363233.roa (raw, json)
Hash identifier: RdAcPIaf8jHGsiz4xeJL2qvLZNwOIF7FXWkiyIvU8mU=
Subject key identifier: F0:1A:F8:26:5D:A3:76:20:0B:97:50:91:AD:9B:6B:26:7F:18:0C:11
Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial: 6FA47EDB69EDEE73EA3EAC4D6FB5D00249B2DE
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35302e302f32342d3234203d3e203137363233.roa
Signing time: Fri 10 Apr 2026 03:00:39 +0000
ROA not before: Fri 10 Apr 2026 02:55:39 +0000
ROA not after: Fri 09 Apr 2027 03:00:39 +0000
asID: 17623
IP address blocks: 220.112.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a4:7e:db:69:ed:ee:73:ea:3e:ac:4d:6f:b5:d0:02:49:b2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Validity
Not Before: Apr 10 02:55:39 2026 GMT
Not After : Apr 9 03:00:39 2027 GMT
Subject: CN=F01AF8265DA376200B975091AD9B6B267F180C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:46:07:86:fe:cf:97:90:f5:12:84:6b:18:08:
e4:d0:61:eb:c1:08:c8:78:05:0b:ec:cf:71:c4:39:
f6:ed:6c:e6:6c:89:42:a1:e0:c3:34:d4:b6:75:9a:
bb:95:76:94:bd:3a:a2:f3:a8:6f:08:8c:9e:57:5c:
cf:72:62:33:43:42:47:ee:b7:cd:17:72:5c:c7:27:
6b:31:26:b5:17:f2:ef:96:15:ea:5d:0f:ec:20:b0:
02:f2:b8:46:52:1a:25:75:b8:a6:69:77:13:d3:72:
00:13:26:a4:e0:0c:5f:8f:14:6a:f6:c8:12:c2:fa:
f0:9f:c6:73:ec:e8:5c:28:12:83:51:f7:44:1a:64:
5d:c6:8f:f6:bb:64:92:b8:16:f6:e3:b3:e4:1c:5b:
32:b4:43:60:d6:ec:51:1b:5d:e3:4c:3d:2e:a7:47:
b4:ea:f4:37:05:d6:07:dc:87:68:5b:3e:7c:f6:17:
6b:6a:7e:73:9f:48:d8:d6:57:6b:b4:82:cd:00:ce:
4f:fb:6a:f2:22:c5:ad:db:68:32:2b:e6:3c:ae:34:
f9:d8:38:0b:e4:2f:d0:04:61:f9:51:9c:df:78:c3:
d9:5e:d7:0e:72:e8:5d:aa:53:27:6b:52:d5:6c:e7:
8c:a5:21:45:5d:a6:1b:4a:eb:94:98:d9:d8:0e:b5:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1A:F8:26:5D:A3:76:20:0B:97:50:91:AD:9B:6B:26:7F:18:0C:11
X509v3 Authority Key Identifier:
keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35302e302f32342d3234203d3e203137363233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.112.50.0/24
Signature Algorithm: sha256WithRSAEncryption
78:63:53:eb:11:60:7e:24:82:8a:90:14:9f:16:4e:41:dd:2d:
20:e7:22:dd:38:a2:bb:1e:2d:2d:a9:63:3e:85:1f:5b:82:48:
55:4b:75:70:aa:18:be:77:be:10:d4:d7:d0:3f:9d:2e:6a:0d:
47:7c:03:80:34:bf:39:7b:d5:8c:83:8a:95:a4:79:e0:25:2b:
29:f1:0a:65:7d:5d:4a:f6:13:bd:d7:7c:76:a3:bd:80:3b:c8:
8a:bd:7c:55:f8:49:c2:6d:50:75:af:36:17:d6:c8:de:8e:49:
c9:d9:96:3e:06:31:64:d5:41:98:66:94:c7:f1:78:c1:61:fa:
67:38:e8:a3:09:81:a5:fb:49:05:aa:b9:d6:f3:87:ed:84:0c:
67:e9:65:b0:60:2c:8d:08:ec:07:37:57:25:5c:53:c7:11:07:
7b:66:46:6f:cb:d7:c9:e5:9c:f8:e8:84:a2:cb:70:fe:64:ea:
aa:f7:ce:1e:4b:98:b0:8f:da:1d:eb:97:6c:7f:4a:42:15:eb:
f8:7b:e8:98:8d:d8:e2:1e:99:76:9d:06:d2:6d:c6:68:6a:2b:
90:32:e4:f3:de:71:ce:f8:0e:f5:87:3f:8a:0c:12:15:5c:87:
77:e4:6c:48:ce:ee:64:54:0d:13:25:c9:e0:ee:70:1b:bb:8d:
ec:97:fc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:25 2026 by rpki-client