$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136312e36332e302f32342d3234203d3e2030.roa File: 3231312e3136312e36332e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: B91yHXzWbIFCD6nQax14ON3txzH4+Vg3tiW9CKw8420= Subject key identifier: DB:5E:86:70:07:12:31:88:E1:34:1D:68:40:40:36:1F:09:6F:C7:65 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 70B26EE715C53F28BBFE223DEA1BA0FEF4EB2044 Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136312e36332e302f32342d3234203d3e2030.roa Signing time: Fri 10 Apr 2026 03:40:28 +0000 ROA not before: Fri 10 Apr 2026 03:35:28 +0000 ROA not after: Fri 09 Apr 2027 03:40:28 +0000 asID: 0 IP address blocks: 211.161.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b2:6e:e7:15:c5:3f:28:bb:fe:22:3d:ea:1b:a0:fe:f4:eb:20:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 03:35:28 2026 GMT Not After : Apr 9 03:40:28 2027 GMT Subject: CN=DB5E867007123188E1341D684040361F096FC765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:91:16:89:bd:c2:c9:45:c1:59:e7:54:eb:ac: 6e:ae:fe:d7:a9:dc:d6:f5:35:fb:09:9f:e4:8f:16: e8:62:2d:33:a4:63:d8:f3:4a:74:f1:51:2f:f0:9f: 31:7c:28:67:27:b4:3d:bc:c1:58:10:57:68:65:4c: 58:eb:28:5c:1a:5e:ec:0a:80:bc:b3:78:fb:27:7f: e6:ae:89:87:25:21:99:ac:f7:bb:ad:4a:23:92:17: d5:2a:37:1f:44:7c:4a:89:fe:3c:f0:4e:a4:b3:fe: 4c:5a:0d:f9:b2:fb:62:aa:b2:27:4c:04:02:13:a1: 4e:4f:bf:55:d2:7c:1c:83:66:7d:e8:44:3b:ba:7f: 83:88:70:54:07:f2:c8:d1:85:3e:3d:7c:d1:6d:6a: 72:39:35:6d:30:12:c1:26:26:87:75:49:b3:87:0d: 77:e9:8b:f9:c2:8f:c2:31:f3:9a:b6:a8:16:56:96: ff:29:24:a0:84:70:e1:cf:ad:fd:b2:23:fb:4d:81: 73:a5:50:9c:d7:a8:5e:a3:d0:f7:43:95:14:a9:13: b8:a9:72:4c:09:c8:77:10:7c:0d:3d:2c:a5:92:32: 85:bf:8d:66:9c:a0:7c:6c:4f:2f:ba:da:19:84:e7: 6c:19:ef:e3:23:87:99:01:16:79:66:15:97:4a:70: 02:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5E:86:70:07:12:31:88:E1:34:1D:68:40:40:36:1F:09:6F:C7:65 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136312e36332e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.161.63.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:90:5e:a4:6c:33:73:f7:d3:de:70:e0:3c:e1:05:15:be:43: 75:71:82:ae:76:a1:fa:09:09:c0:1c:f4:76:10:48:b7:b0:10: f8:a1:56:85:67:36:67:c9:c7:ab:ae:99:38:39:f0:97:e6:0d: e9:05:1a:40:10:dd:b5:d1:d4:98:d2:2c:06:0c:0b:5a:41:f2: 15:6e:1a:6f:ed:d5:e3:14:ad:56:2d:2c:38:24:d4:e8:08:c8: 4a:ae:c2:10:16:7b:36:3f:8d:53:c3:a8:99:8f:60:f2:41:6e: 34:10:5e:e3:b4:06:20:96:99:83:d9:6a:07:2b:80:7d:f8:bc: 11:e3:19:82:59:20:bf:8d:33:2b:d0:47:72:09:8f:63:2f:e3: 2e:b1:4d:28:18:7b:6a:bc:7e:ad:12:5f:ac:cd:7e:10:47:23: ed:bd:a6:30:e0:42:75:b3:4f:ed:a5:05:a0:cc:f2:bf:b3:57: ca:7f:56:ea:2d:93:e6:05:74:24:c9:b0:dd:cf:14:1d:56:58: b2:19:c1:65:cc:3a:06:35:59:5d:46:ad:1a:b8:82:b3:27:49: 92:66:3d:5b:48:9f:4a:a3:dd:cd:73:34:3e:7f:85:df:1c:17: 01:02:20:b7:d5:66:f4:3d:30:d4:9b:b9:3f:2f:25:9e:60:eb: f5:a9:6f:ca -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUcLJu5xXFPyi7/iI96hug/vTrIEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMzM1MjhaFw0yNzA0MDkwMzQwMjhaMDMxMTAvBgNV BAMTKERCNUU4NjcwMDcxMjMxODhFMTM0MUQ2ODQwNDAzNjFGMDk2RkM3NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNkRaJvcLJRcFZ51TrrG6u/tep 3Nb1NfsJn+SPFuhiLTOkY9jzSnTxUS/wnzF8KGcntD28wVgQV2hlTFjrKFwaXuwK gLyzePsnf+auiYclIZms97utSiOSF9UqNx9EfEqJ/jzwTqSz/kxaDfmy+2KqsidM BAIToU5Pv1XSfByDZn3oRDu6f4OIcFQH8sjRhT49fNFtanI5NW0wEsEmJod1SbOH DXfpi/nCj8Ix85q2qBZWlv8pJKCEcOHPrf2yI/tNgXOlUJzXqF6j0PdDlRSpE7ip ckwJyHcQfA09LKWSMoW/jWacoHxsTy+62hmE52wZ7+Mjh5kBFnlmFZdKcAK5AgMB AAGjggILMIICBzAdBgNVHQ4EFgQU216GcAcSMYjhNB1oQEA2Hwlvx2UwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMTMxMmUzMTM2 MzEyZTM2MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANOh PzANBgkqhkiG9w0BAQsFAAOCAQEAipBepGwzc/fT3nDgPOEFFb5DdXGCrnah+gkJ wBz0dhBIt7AQ+KFWhWc2Z8nHq66ZODnwl+YN6QUaQBDdtdHUmNIsBgwLWkHyFW4a b+3V4xStVi0sOCTU6AjISq7CEBZ7Nj+NU8OomY9g8kFuNBBe47QGIJaZg9lqByuA ffi8EeMZglkgv40zK9BHcgmPYy/jLrFNKBh7arx+rRJfrM1+EEcj7b2mMOBCdbNP 7aUFoMzyv7NXyn9W6i2T5gV0JMmw3c8UHVZYshnBZcw6BjVZXUatGriCsydJkmY9 W0ifSqPdzXM0Pn+F3xwXAQIgt9Vm9D0w1Ju5Py8lnmDr9alvyg== -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:26 2026 by rpki-client