
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35332e302f32342d3234203d3e203137363233.roa
File: 3232302e3131322e35332e302f32342d3234203d3e203137363233.roa (raw, json)
Hash identifier: S7OQ0UytcSCGLommeTE96N7WdtQZVA7DG74hRxU9Ldc=
Subject key identifier: AC:F6:BE:EE:FA:83:6D:9C:E6:6F:51:57:89:C0:21:73:09:84:FF:30
Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial: 50875F77A8783E91B626C569949C0311E4779903
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35332e302f32342d3234203d3e203137363233.roa
Signing time: Fri 10 Apr 2026 03:00:39 +0000
ROA not before: Fri 10 Apr 2026 02:55:39 +0000
ROA not after: Fri 09 Apr 2027 03:00:39 +0000
asID: 17623
IP address blocks: 220.112.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:87:5f:77:a8:78:3e:91:b6:26:c5:69:94:9c:03:11:e4:77:99:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Validity
Not Before: Apr 10 02:55:39 2026 GMT
Not After : Apr 9 03:00:39 2027 GMT
Subject: CN=ACF6BEEEFA836D9CE66F515789C021730984FF30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:f4:3a:92:c4:fb:55:ce:e2:0c:e8:9a:39:
83:df:fa:e3:a4:39:e6:bb:1e:3b:f0:1d:d9:a2:3b:
85:54:f5:5b:09:82:0d:39:07:97:43:75:95:c9:20:
bd:95:b9:87:dc:71:5d:38:c0:af:b2:06:d9:88:91:
de:88:e9:79:1f:e3:ef:f1:76:a4:b0:2f:4a:70:82:
71:2c:e9:50:1b:6b:e5:f7:6a:a6:0c:cd:bf:85:f0:
4c:6f:03:3c:62:0e:49:37:5c:d4:c5:c3:be:be:83:
4c:23:20:4c:3f:c6:e5:fc:2b:e5:ea:2d:e1:14:38:
68:02:98:6b:b4:89:df:0c:06:5a:63:67:86:c4:be:
95:b6:5a:4b:c5:2d:2e:d2:5f:fd:e4:3a:20:bc:93:
80:2e:b5:30:37:8c:d0:64:cd:48:f7:0b:25:c3:bc:
e5:9e:de:b8:e8:8e:46:a1:b1:67:68:96:bb:09:cd:
9a:d4:19:3b:bb:e4:4a:04:1f:82:43:f3:8b:89:29:
44:75:a5:5f:84:c7:20:6b:53:59:2a:49:ed:8a:65:
25:20:34:61:41:8b:e5:b8:5f:af:47:e4:c4:66:c1:
34:99:25:0f:8b:30:0e:43:15:d8:ce:6e:c1:5e:50:
0c:9f:f1:3b:8d:3b:10:79:44:72:9c:25:9e:1d:5e:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F6:BE:EE:FA:83:6D:9C:E6:6F:51:57:89:C0:21:73:09:84:FF:30
X509v3 Authority Key Identifier:
keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35332e302f32342d3234203d3e203137363233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.112.53.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c3:b3:ee:f2:54:e3:a1:83:51:11:2e:0b:d3:7f:bd:88:95:
f9:f8:0e:8f:32:f0:71:c7:26:ab:6a:f5:0f:cd:82:ce:9f:53:
da:9f:3b:06:26:10:92:cd:2e:4c:d7:e1:2a:43:a0:20:dd:49:
43:4f:15:25:39:ab:e9:a8:2e:72:71:c3:82:9b:38:18:12:a3:
98:28:a3:e8:89:a0:98:16:9c:47:15:1b:1d:90:c5:36:f2:8e:
35:48:99:ea:31:c8:39:99:a1:0c:3e:f6:18:2d:ba:f9:71:0c:
0e:25:79:a8:5c:5e:d2:0a:79:45:9c:4e:98:d5:49:f0:c2:af:
21:1b:4b:5a:b7:b9:4d:0c:98:49:4c:ad:f5:ac:3a:f5:5d:a4:
84:63:fb:8d:8b:63:18:7d:44:e4:db:99:7a:e3:0c:35:30:91:
13:62:67:cb:11:6d:7e:2f:5a:8b:b2:27:f4:04:ba:25:71:1b:
89:81:44:bd:3d:f4:ce:25:6d:82:c1:d8:0a:ce:cf:41:8a:98:
cf:59:4f:fb:64:83:68:c5:ed:43:de:fc:51:7a:14:8a:2e:2a:
9c:dd:35:54:2d:f1:ef:a3:92:51:ed:6f:43:50:1e:98:00:00:
31:ee:8e:30:e3:ea:d1:93:02:72:f3:39:28:b3:d3:8f:84:cd:
86:6a:fd:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:21 2026 by rpki-client