$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3131362e302f32332d3233203d3e2030.roa File: 3231312e3136322e3131362e302f32332d3233203d3e2030.roa (raw, json) Hash identifier: aBMx32Q79GmZq2H2X+SJiewM0EltL7NkIEZUjra4skA= Subject key identifier: C8:77:16:25:D5:D5:B4:7C:CC:33:2E:16:CF:9E:37:E1:ED:14:26:54 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 5E4CDD86636DC03C90A30F3DBA89B194FC094580 Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3131362e302f32332d3233203d3e2030.roa Signing time: Fri 10 Apr 2026 03:40:28 +0000 ROA not before: Fri 10 Apr 2026 03:35:28 +0000 ROA not after: Fri 09 Apr 2027 03:40:28 +0000 asID: 0 IP address blocks: 211.162.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4c:dd:86:63:6d:c0:3c:90:a3:0f:3d:ba:89:b1:94:fc:09:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 03:35:28 2026 GMT Not After : Apr 9 03:40:28 2027 GMT Subject: CN=C8771625D5D5B47CCC332E16CF9E37E1ED142654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d9:e5:a1:0f:85:a7:39:8e:3e:9f:c8:5a:58: b6:4c:03:f0:dc:5f:08:fe:dc:90:54:f0:81:9b:b2: 21:a0:79:fd:df:29:d0:f6:f9:67:d7:d1:db:55:13: 7c:25:d8:a8:d4:6f:4a:b1:1e:8a:a4:a9:2e:aa:4e: 60:bc:f4:e5:f1:ca:cc:0e:66:06:a3:a6:90:be:6b: 62:ea:f8:9b:cf:2e:2b:54:ea:6b:50:59:cf:40:81: a0:7b:77:94:df:d4:53:7e:4a:f4:8e:1b:af:98:2e: 4d:24:79:8c:eb:95:62:b8:d5:06:5a:1d:bc:78:55: 0b:6c:6d:a0:9c:49:b5:b3:87:66:c3:fc:6d:47:e7: a2:17:aa:c3:84:13:ed:59:39:e7:d6:eb:69:c0:0a: 8a:f7:6d:50:4b:60:4c:5f:b2:ae:1a:c2:97:52:56: 66:2a:75:80:f3:33:97:7e:ab:77:9b:ef:25:fa:8e: 99:09:8d:89:d7:59:5f:f6:30:3e:57:bc:24:cc:29: 3a:44:e4:4f:67:03:e9:2e:aa:02:78:8c:84:92:fd: 96:02:71:21:f8:a1:7a:b0:07:b5:cb:4d:60:81:28: da:18:27:fe:68:e1:93:8e:b7:10:70:7a:ae:d7:b9: 75:4c:db:37:5b:e4:6c:4a:7e:f7:34:bd:50:06:96: 41:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:77:16:25:D5:D5:B4:7C:CC:33:2E:16:CF:9E:37:E1:ED:14:26:54 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3131362e302f32332d3233203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.162.116.0/23 Signature Algorithm: sha256WithRSAEncryption 54:ff:5f:43:e1:21:70:a6:bd:9e:7e:3d:aa:db:69:9e:22:cd: a0:13:36:9c:6a:e9:a3:73:ec:ce:fd:1c:97:91:cc:d6:a2:b6: 26:5a:ba:d6:2f:d8:09:39:95:41:fa:7e:03:71:d3:41:ea:51: cf:16:f2:36:69:0a:cd:60:0e:49:47:cd:3e:09:bd:cc:54:85: ec:df:54:ec:81:04:e1:d9:0d:1b:48:51:fa:aa:58:8c:58:55: 6e:24:f9:51:fc:02:dc:24:b9:f2:9b:f4:68:b2:1f:da:81:2c: 56:ea:0f:70:ba:7d:2e:df:22:00:7f:5a:16:2a:ec:24:6a:0a: af:38:18:df:3e:89:86:1c:de:0f:7f:fa:43:d1:6b:79:10:64: ab:6f:ee:51:51:a7:eb:b0:59:87:ea:47:77:e9:5e:c1:ac:5a: aa:6f:3b:0e:0c:77:aa:5d:ab:e6:5c:8e:45:0d:77:ba:6b:eb: ba:1b:d8:52:bc:9e:d9:d4:06:ed:31:99:c5:14:ec:9a:e8:b4: 54:f7:ff:6c:db:57:58:ef:d7:b1:d1:c1:dc:bf:9a:9d:99:ea: 5b:86:03:5b:21:c9:85:4c:a9:52:01:33:6f:2a:5b:ec:b9:53: f7:fd:dc:34:d9:39:59:ea:8d:03:f1:79:b0:5a:8a:9c:e5:9f: 00:db:1e:a3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUXkzdhmNtwDyQow89uomxlPwJRYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMzM1MjhaFw0yNzA0MDkwMzQwMjhaMDMxMTAvBgNV BAMTKEM4NzcxNjI1RDVENUI0N0NDQzMzMkUxNkNGOUUzN0UxRUQxNDI2NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82eWhD4WnOY4+n8haWLZMA/Dc Xwj+3JBU8IGbsiGgef3fKdD2+WfX0dtVE3wl2KjUb0qxHoqkqS6qTmC89OXxyswO ZgajppC+a2Lq+JvPLitU6mtQWc9AgaB7d5Tf1FN+SvSOG6+YLk0keYzrlWK41QZa Hbx4VQtsbaCcSbWzh2bD/G1H56IXqsOEE+1ZOefW62nACor3bVBLYExfsq4awpdS VmYqdYDzM5d+q3eb7yX6jpkJjYnXWV/2MD5XvCTMKTpE5E9nA+kuqgJ4jISS/ZYC cSH4oXqwB7XLTWCBKNoYJ/5o4ZOOtxBweq7XuXVM2zdb5GxKfvc0vVAGlkHBAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUyHcWJdXVtHzMMy4Wz5434e0UJlQwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMTMxMmUzMTM2 MzIyZTMxMzEzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 06J0MA0GCSqGSIb3DQEBCwUAA4IBAQBU/19D4SFwpr2efj2q22meIs2gEzacaumj c+zO/RyXkczWorYmWrrWL9gJOZVB+n4DcdNB6lHPFvI2aQrNYA5JR80+Cb3MVIXs 31TsgQTh2Q0bSFH6qliMWFVuJPlR/ALcJLnym/Rosh/agSxW6g9wun0u3yIAf1oW KuwkagqvOBjfPomGHN4Pf/pD0Wt5EGSrb+5RUafrsFmH6kd36V7BrFqqbzsODHeq XavmXI5FDXe6a+u6G9hSvJ7Z1AbtMZnFFOya6LRU9/9s21dY79ex0cHcv5qdmepb hgNbIcmFTKlSATNvKlvsuVP3/dw02TlZ6o0D8XmwWoqc5Z8A2x6j -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:27 2026 by rpki-client