$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3231392e3233322e33322e302f32302d3230203d3e2034383437.roa File: 3231392e3233322e33322e302f32302d3230203d3e2034383437.roa (raw, json) Hash identifier: ahFzTowcg8RurCXrOIyB3W96Jwlje6M6e87CUFLxMk0= Subject key identifier: CC:90:18:00:7B:6E:DB:13:03:54:7D:8B:CD:4A:69:74:48:63:2A:1E Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 1F08D1F2E6BFAA7678AF113325886E2730DBA979 Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3231392e3233322e33322e302f32302d3230203d3e2034383437.roa Signing time: Sun 19 Apr 2026 10:10:53 +0000 ROA not before: Sun 19 Apr 2026 10:05:53 +0000 ROA not after: Sun 18 Apr 2027 10:10:53 +0000 asID: 4847 IP address blocks: 219.232.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 21:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:08:d1:f2:e6:bf:aa:76:78:af:11:33:25:88:6e:27:30:db:a9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Apr 19 10:05:53 2026 GMT Not After : Apr 18 10:10:53 2027 GMT Subject: CN=CC9018007B6EDB1303547D8BCD4A697448632A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:e9:ce:11:82:58:98:2d:58:2a:ed:59:ef: 7e:fc:18:1a:36:69:87:a2:38:f6:2c:98:c0:bb:4e: 6c:9b:b6:34:a0:79:72:b8:cc:ba:aa:eb:c1:c3:b0: 9d:4c:76:61:1b:bb:5a:d2:ac:4e:46:42:aa:aa:29: 1d:46:46:ef:0e:d2:12:a7:b4:76:20:b5:4e:c5:6e: ef:ad:b6:10:15:65:5b:2e:36:41:3e:72:54:a9:67: 58:b1:b9:84:d7:e4:31:4a:92:d8:54:1a:ef:b4:c1: c0:ec:56:4f:c8:8b:00:68:62:26:ca:e5:4c:9d:28: a5:1c:c4:de:ea:e1:ba:94:66:6b:cc:7a:d6:cf:75: 75:80:c3:e1:25:cd:84:f2:c0:3b:de:e9:28:91:2d: 42:e7:fd:f3:10:4b:af:f4:e5:c9:98:75:3f:e5:6a: 67:6f:d8:f4:6c:76:8b:31:db:40:c4:cb:f4:eb:16: fd:de:df:0e:02:04:c0:6c:dc:cf:8e:f2:83:9f:9b: a4:4f:77:9a:92:a6:27:3f:c7:2d:33:68:53:c4:ba: 8f:ae:00:3d:21:d9:22:90:cd:c8:1b:a9:ef:0b:3d: 89:79:3c:66:72:47:f5:59:11:8d:a2:91:fe:44:19: 27:25:56:f5:16:e7:f3:54:f2:bb:21:d7:80:05:b5: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:90:18:00:7B:6E:DB:13:03:54:7D:8B:CD:4A:69:74:48:63:2A:1E X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3231392e3233322e33322e302f32302d3230203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.232.32.0/20 Signature Algorithm: sha256WithRSAEncryption 68:ed:0d:88:6e:1a:1b:5e:49:a5:22:c1:1e:ba:b0:eb:cf:4c: a5:9c:7a:9b:d0:e9:69:1e:17:37:4a:0d:e7:bd:93:ec:56:1e: ae:fc:46:6e:a8:a1:3a:1a:39:1c:7b:54:ad:5e:90:3b:45:b0: 82:30:05:13:de:b6:db:5b:fb:3d:f0:c3:f8:0f:1c:2b:e3:80: 35:17:bd:c8:7f:ff:a6:23:06:4a:cd:ef:aa:bb:93:4a:44:05: 2f:67:fd:05:35:18:fd:b0:33:64:83:09:88:4c:58:45:5b:eb: cb:60:3d:93:10:1c:c6:e8:6b:3c:b8:d2:13:c6:26:b5:30:75: d7:cd:68:29:26:5d:6d:87:f7:4e:5a:af:09:1f:f0:1c:ad:97: 06:06:08:37:5d:dd:f2:d7:d3:4b:89:f2:66:11:b9:12:fb:58: ba:c2:71:ec:77:ab:ec:0a:d4:01:f7:4f:f7:22:9b:c6:db:82: 60:e7:d7:00:b1:75:0a:8c:f9:a0:1c:f8:33:04:ce:f5:c9:5d: 5d:b6:c3:7f:65:ad:ea:11:6f:a3:12:73:ad:e7:fe:bc:1e:2b: 6c:6d:69:27:5e:05:92:90:09:b6:1e:44:97:a9:82:eb:8b:3b: e9:18:88:6d:d9:f5:3d:67:88:99:50:43:1d:b5:5b:a6:ac:71: 7c:5a:e6:87 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUHwjR8ua/qnZ4rxEzJYhuJzDbqXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjA0MTkxMDA1NTNaFw0yNzA0MTgxMDEwNTNaMDMxMTAvBgNV BAMTKENDOTAxODAwN0I2RURCMTMwMzU0N0Q4QkNENEE2OTc0NDg2MzJBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jOnOEYJYmC1YKu1Z7378GBo2 aYeiOPYsmMC7TmybtjSgeXK4zLqq68HDsJ1MdmEbu1rSrE5GQqqqKR1GRu8O0hKn tHYgtU7Fbu+tthAVZVsuNkE+clSpZ1ixuYTX5DFKkthUGu+0wcDsVk/IiwBoYibK 5UydKKUcxN7q4bqUZmvMetbPdXWAw+ElzYTywDve6SiRLULn/fMQS6/05cmYdT/l amdv2PRsdosx20DEy/TrFv3e3w4CBMBs3M+O8oOfm6RPd5qSpic/xy0zaFPEuo+u AD0h2SKQzcgbqe8LPYl5PGZyR/VZEY2ikf5EGSclVvUW5/NU8rsh14AFte6RAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUzJAYAHtu2xMDVH2LzUppdEhjKh4wHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg4NjUxMDE1MTgxMzAzODEwLzAvMzIzMTM5MmUzMjMz MzIyZTMzMzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNvoIDANBgkqhkiG9w0BAQsFAAOCAQEAaO0NiG4aG15JpSLBHrqw689MpZx6 m9DpaR4XN0oN572T7FYervxGbqihOho5HHtUrV6QO0WwgjAFE96221v7PfDD+A8c K+OANRe9yH//piMGSs3vqruTSkQFL2f9BTUY/bAzZIMJiExYRVvry2A9kxAcxuhr PLjSE8YmtTB1181oKSZdbYf3TlqvCR/wHK2XBgYIN13d8tfTS4nyZhG5EvtYusJx 7Her7ArUAfdP9yKbxtuCYOfXALF1Coz5oBz4MwTO9cldXbbDf2Wt6hFvoxJzref+ vB4rbG1pJ14FkpAJth5El6mC64s76RiIbdn1PWeImVBDHbVbpqxxfFrmhw== -----END CERTIFICATE-----Generated at Mon Apr 27 13:45:30 2026 by rpki-client