
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35342e302f32342d3234203d3e203137363233.roa
File: 3232302e3131322e35342e302f32342d3234203d3e203137363233.roa (raw, json)
Hash identifier: v4mQqK/PoAZn5Uwurax9eF5uOY4KfciVZoZSZaB4ooA=
Subject key identifier: 44:4F:7E:63:BD:97:A2:7E:45:3F:35:09:6C:2E:71:0A:FF:7C:F9:DC
Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial: 68CFBBE8173BDC7BD9AE60E9662E431964BCAEFE
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35342e302f32342d3234203d3e203137363233.roa
Signing time: Fri 10 Apr 2026 03:00:38 +0000
ROA not before: Fri 10 Apr 2026 02:55:38 +0000
ROA not after: Fri 09 Apr 2027 03:00:38 +0000
asID: 17623
IP address blocks: 220.112.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:cf:bb:e8:17:3b:dc:7b:d9:ae:60:e9:66:2e:43:19:64:bc:ae:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Validity
Not Before: Apr 10 02:55:38 2026 GMT
Not After : Apr 9 03:00:38 2027 GMT
Subject: CN=444F7E63BD97A27E453F35096C2E710AFF7CF9DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:2c:e6:1c:b6:55:8f:a9:4a:8d:f0:db:32:
21:c1:00:cd:ec:73:02:39:40:66:78:9d:5d:d2:59:
42:d5:61:ee:7d:6b:29:57:32:92:6e:31:5d:b6:24:
fc:29:d9:37:81:ef:52:a8:dc:63:5a:99:4a:23:a4:
1c:c3:6e:8b:cf:66:d1:74:ab:ee:df:ce:00:29:a9:
d7:e9:00:a3:7a:13:ba:3e:43:da:1d:18:f1:73:00:
4c:c9:ad:64:aa:96:66:92:23:7e:4a:77:a6:2e:d8:
c3:59:10:8c:77:c2:44:f5:7a:40:1f:75:d3:2f:de:
c3:3f:27:81:2d:10:45:21:4d:71:a7:81:b8:fd:89:
32:ae:82:40:a9:7a:20:63:36:c9:87:ff:51:5e:9d:
09:2c:f9:23:c7:f7:f5:27:05:c7:72:66:73:f5:eb:
0d:69:55:dd:d8:49:04:d2:0d:24:f3:5e:81:1c:6f:
85:cd:c8:10:f7:28:3b:af:67:02:c5:5c:84:32:bf:
a1:ba:f0:aa:ed:d6:51:22:1e:98:06:9e:6e:4a:a1:
1a:71:8e:c4:21:f7:88:c4:76:2a:b8:0d:98:f7:2a:
10:fd:d8:eb:94:1b:49:8e:56:e1:4a:f4:b2:16:1a:
0b:e1:10:3e:5e:72:58:8e:ee:48:ac:a3:8e:2d:c6:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4F:7E:63:BD:97:A2:7E:45:3F:35:09:6C:2E:71:0A:FF:7C:F9:DC
X509v3 Authority Key Identifier:
keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35342e302f32342d3234203d3e203137363233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.112.54.0/24
Signature Algorithm: sha256WithRSAEncryption
77:27:49:41:3e:9e:ec:07:1a:7d:b4:2e:b1:b6:fa:13:b2:f3:
e4:66:55:9f:95:81:6b:3c:32:34:9c:49:0b:69:04:e0:6c:b8:
1d:c3:39:40:71:81:8b:c6:6e:22:0f:60:d2:02:20:e1:27:c9:
03:f8:35:31:1e:6a:77:a3:7e:3a:f3:79:1e:47:91:69:46:df:
ef:26:74:83:d3:7f:75:e0:93:5e:29:be:7b:c4:21:ef:58:36:
12:ed:47:c6:e3:a6:a4:7c:1e:bd:6b:4b:05:81:8b:26:5a:bb:
63:f1:77:46:21:04:28:17:db:ff:db:17:29:e5:6b:47:c5:61:
28:f6:8f:b0:43:9a:35:d3:8c:18:6c:2a:53:b7:23:a9:0d:fb:
7b:1f:ce:cb:60:35:bf:cc:d7:e3:c8:67:aa:38:de:30:56:e3:
45:80:89:21:70:63:24:9b:0d:d8:5d:a1:f0:c3:9a:ba:f8:85:
b2:e8:6b:34:2e:2d:af:d1:fb:20:48:44:d8:45:79:7f:18:6c:
0f:1f:5a:b3:28:bb:8b:cb:fb:ef:c8:88:f6:b8:bd:6f:6e:ae:
5a:a3:a6:51:77:6d:59:82:ff:f7:4d:37:ed:c3:0e:03:21:69:
41:ce:ef:58:ed:87:5c:8b:d7:22:6f:1f:01:3a:0e:36:d8:b2:
95:5b:b7:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:32 2026 by rpki-client