
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e382e302f32342d3234203d3e203137363233.roa
File: 3232302e3131322e382e302f32342d3234203d3e203137363233.roa (raw, json)
Hash identifier: Lpr8db3yFrxheuozZP9ka++8H7ohA9tYf6pbr2aLJws=
Subject key identifier: 47:39:56:31:35:FB:3F:3D:A0:4D:39:F5:DE:14:8E:03:79:E9:BE:FD
Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial: 5C15466D355C5B502B8DC0DE6E711DC1114E5E20
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e382e302f32342d3234203d3e203137363233.roa
Signing time: Fri 10 Apr 2026 03:00:38 +0000
ROA not before: Fri 10 Apr 2026 02:55:38 +0000
ROA not after: Fri 09 Apr 2027 03:00:38 +0000
asID: 17623
IP address blocks: 220.112.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:15:46:6d:35:5c:5b:50:2b:8d:c0:de:6e:71:1d:c1:11:4e:5e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Validity
Not Before: Apr 10 02:55:38 2026 GMT
Not After : Apr 9 03:00:38 2027 GMT
Subject: CN=4739563135FB3F3DA04D39F5DE148E0379E9BEFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:76:d0:04:6c:1e:92:d0:16:e1:89:a0:5b:
e4:cc:36:63:60:c3:0e:2d:84:48:c4:6e:7f:e3:2a:
a4:94:7b:09:fe:b3:33:96:37:66:5c:86:6d:3c:a9:
56:5e:5b:de:28:3e:2f:25:a7:2a:68:90:17:ea:4c:
a9:81:c0:0d:e8:06:be:68:51:e9:63:81:2a:fd:c2:
9a:77:cf:f0:1b:e6:d8:33:e4:2c:7b:c9:a4:7c:5f:
be:c1:eb:58:d2:eb:94:6a:bc:37:da:55:ef:b3:ca:
d8:f9:d0:5f:7b:20:ef:48:2c:4d:36:6e:55:29:70:
94:7e:19:94:9d:0a:d3:ef:5e:ee:e7:2a:a5:31:6f:
76:d2:ea:5f:b8:ac:14:42:d3:d0:71:c2:4a:bd:9f:
12:75:89:35:95:2d:cf:84:be:43:74:f5:af:44:64:
4a:b1:40:80:c9:5c:e2:be:76:39:3b:1e:13:6a:30:
e8:34:a1:2a:0f:6a:f8:6c:02:34:a3:7c:f6:7e:53:
7d:0c:fe:bc:ee:54:cc:47:71:87:2e:06:96:ba:ad:
3d:a0:ac:21:59:cf:2d:d3:f7:a4:5a:56:e3:31:e7:
53:6c:c8:ba:26:15:55:c9:c8:91:25:54:12:e3:c9:
d3:80:70:a0:ba:ce:4a:9d:c3:aa:04:e5:a9:dd:3e:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:39:56:31:35:FB:3F:3D:A0:4D:39:F5:DE:14:8E:03:79:E9:BE:FD
X509v3 Authority Key Identifier:
keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e382e302f32342d3234203d3e203137363233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.112.8.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:a7:fb:d3:81:83:1a:02:6b:86:34:7a:d0:9e:e8:6c:6f:fa:
b0:66:02:e1:ad:00:af:1a:ac:ca:b2:dc:1a:ed:d0:87:c0:85:
d5:4a:6b:78:67:c8:97:47:89:38:a4:4a:2f:c9:12:d6:e7:82:
43:5b:21:11:c8:5a:55:6b:74:f3:15:60:33:fe:e5:cc:23:77:
42:bc:83:48:32:5e:72:66:ff:f1:77:37:98:77:80:d6:2f:5f:
80:c1:d4:84:ea:b6:fc:b8:2f:6d:b0:55:5d:24:14:c3:11:f1:
62:e2:c2:dd:27:1b:c1:cc:c4:57:83:75:cd:54:cc:1a:6c:40:
f5:48:8a:44:8a:39:f2:9e:d7:6a:fe:39:5d:65:2d:ec:2d:d2:
f2:4c:f5:da:19:f0:61:84:a0:00:26:d6:a2:9b:bf:1e:be:b0:
b3:29:ac:2f:ca:a5:9c:38:73:17:0c:a3:4a:02:36:f3:d8:9a:
c2:79:12:90:e2:62:b9:71:f7:de:e8:ec:d4:91:03:a1:6f:d8:
9a:3b:2e:49:bf:db:39:9b:59:df:43:74:a2:d4:94:66:ad:ac:
27:a9:35:77:1f:1e:4e:84:3a:c1:ce:f1:ee:a3:6a:31:54:2e:
7f:34:84:df:7e:3a:98:c7:26:cd:02:ca:f7:21:80:40:5a:5b:
c6:a0:4e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:28 2026 by rpki-client