
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35322e302f32342d3234203d3e203137363233.roa
File: 3232302e3131322e35322e302f32342d3234203d3e203137363233.roa (raw, json)
Hash identifier: UUkxY0whFj1kpNbjYdtJpYDJoAp4Ve34SOXVOTsiYFw=
Subject key identifier: DF:61:BD:A9:E9:5C:DB:3A:9F:1D:A5:16:55:AC:84:D2:41:AE:51:2D
Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial: 4183D886C7B3005BBE4B39584FBF5C819A5F8CDE
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35322e302f32342d3234203d3e203137363233.roa
Signing time: Fri 10 Apr 2026 03:00:39 +0000
ROA not before: Fri 10 Apr 2026 02:55:39 +0000
ROA not after: Fri 09 Apr 2027 03:00:39 +0000
asID: 17623
IP address blocks: 220.112.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:83:d8:86:c7:b3:00:5b:be:4b:39:58:4f:bf:5c:81:9a:5f:8c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Validity
Not Before: Apr 10 02:55:39 2026 GMT
Not After : Apr 9 03:00:39 2027 GMT
Subject: CN=DF61BDA9E95CDB3A9F1DA51655AC84D241AE512D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:c2:d8:fe:7b:31:db:4b:5b:22:af:0f:ed:
71:6d:85:3d:ca:f6:c8:3d:74:71:ce:d5:0d:82:98:
28:e8:ba:81:c8:ac:3e:78:ba:e6:da:5c:8e:66:1d:
06:6e:6c:10:89:65:c0:4c:ab:46:63:08:c2:e6:d0:
37:7d:c3:0a:5b:0c:38:f9:84:51:32:b4:e7:14:97:
1e:aa:e4:22:82:7e:12:7a:0f:18:7b:2b:65:cf:8f:
b9:1b:2d:49:25:43:5a:52:8a:51:08:36:8c:11:35:
ea:ac:83:42:2c:32:64:ef:e9:30:e2:9d:c3:19:ac:
1b:a3:da:8a:07:b1:39:05:1b:0e:85:17:ab:7a:b8:
cd:27:5e:52:9a:c5:64:b9:da:69:f7:97:c4:28:95:
b9:9d:ed:13:9e:8d:23:f9:46:0a:a8:7c:5c:eb:03:
51:46:db:44:fd:37:51:84:9f:d7:10:e4:45:6c:88:
91:27:fc:28:38:10:f5:ed:b0:33:52:3a:b1:d1:8f:
ba:fa:b0:c8:77:1e:32:52:5b:d3:66:6b:69:6a:3e:
3f:75:e2:8c:f7:ec:07:4a:af:46:9e:2d:7b:82:b0:
70:96:f7:ec:b7:5d:47:e0:b1:b0:1a:81:bc:82:df:
42:d0:93:27:af:6a:4f:4d:2f:10:f5:c3:c8:6c:21:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:61:BD:A9:E9:5C:DB:3A:9F:1D:A5:16:55:AC:84:D2:41:AE:51:2D
X509v3 Authority Key Identifier:
keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35322e302f32342d3234203d3e203137363233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.112.52.0/24
Signature Algorithm: sha256WithRSAEncryption
31:7c:9a:35:cb:61:fe:18:3f:1a:15:8c:e1:db:60:60:ae:7a:
9b:d6:63:52:ca:ae:ea:c3:af:e2:f9:6a:b7:cc:08:5b:13:71:
2d:00:54:19:b0:9e:7b:a9:0f:a9:8e:86:ea:92:d0:ea:97:18:
21:ea:d8:28:1f:63:22:82:48:61:3c:35:19:50:6d:32:05:1f:
94:39:45:b0:7c:20:c0:0f:26:81:5f:e4:d3:de:6f:d9:a1:40:
8d:19:b3:5f:51:02:4c:c7:97:48:15:54:c2:ad:3b:95:0d:99:
51:99:de:d6:f9:41:8a:e0:5e:6c:7b:c7:25:6e:9f:df:5b:0f:
b1:9c:ef:1a:b0:95:13:20:72:05:97:98:47:a3:e5:b5:11:6d:
6b:06:7c:3f:f2:d7:c2:de:e9:3c:ec:b8:50:78:f3:26:22:b8:
6d:fe:c8:9f:76:c5:2b:d1:8b:c7:0c:17:e5:c0:71:d0:0f:df:
67:60:0f:cf:47:1d:23:56:d7:91:3c:a2:59:5e:b7:92:8a:2c:
7a:30:c5:46:86:60:97:f0:04:85:e5:0e:70:f4:ba:8a:c0:e0:
62:4d:fe:10:80:09:10:b4:41:9c:0d:87:2f:56:fc:3b:f7:3b:
63:43:3a:f0:cc:1d:26:24:3c:e7:74:a1:9b:a2:60:7e:e4:11:
33:19:e5:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:27 2026 by rpki-client