$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3131382e302f32342d3234203d3e2030.roa File: 3231312e3136322e3131382e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: p65kizZSvkbH1m+ohJNFFRAgBEyK0UZ93ulMs8AZmJw= Subject key identifier: 9E:25:B8:A1:B1:A4:A9:3E:39:0B:27:69:37:4B:12:00:79:88:E5:E8 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 3871118ABED1D7E0E2B6116DE4682424705D8C76 Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3131382e302f32342d3234203d3e2030.roa Signing time: Fri 10 Apr 2026 03:40:28 +0000 ROA not before: Fri 10 Apr 2026 03:35:28 +0000 ROA not after: Fri 09 Apr 2027 03:40:28 +0000 asID: 0 IP address blocks: 211.162.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:71:11:8a:be:d1:d7:e0:e2:b6:11:6d:e4:68:24:24:70:5d:8c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 03:35:28 2026 GMT Not After : Apr 9 03:40:28 2027 GMT Subject: CN=9E25B8A1B1A4A93E390B2769374B12007988E5E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:66:34:0f:69:14:9f:68:9b:ef:93:63:6d:8b: df:bf:2b:69:d9:ed:43:64:1c:4b:40:f2:71:68:8e: 66:33:e7:d1:91:79:16:5e:08:9a:3b:ca:57:bf:c1: 21:47:f0:13:b5:8e:f3:56:b2:dd:3c:6d:22:ed:28: 25:e8:c2:08:1b:2f:cf:42:97:4e:56:81:c7:11:6c: bb:5d:5d:3b:a6:57:06:c8:7c:73:8e:25:a2:2b:13: 61:04:79:dc:70:6e:c6:3e:7f:79:01:26:2d:12:aa: 72:90:bd:77:8f:48:03:f3:05:a5:de:f6:49:5a:4f: 17:5e:eb:1f:03:71:eb:23:3a:e3:3c:f2:73:e1:77: 61:e3:54:b4:9a:e9:17:d9:b1:76:51:d6:81:8f:79: 99:72:a4:61:8a:ae:61:ac:01:98:ee:aa:c4:72:f5: 2b:a3:72:1b:19:c1:cd:19:a7:df:23:c9:b1:e8:ef: 22:77:10:12:fd:b3:c7:3f:a4:93:58:e6:ea:94:7f: 94:06:8f:85:17:99:19:13:31:59:af:b5:19:22:dd: ce:ba:3a:78:7f:c0:ef:f8:34:ae:85:48:17:44:13: ac:ad:3c:53:fc:b0:3a:b6:30:69:75:95:4a:57:fe: c0:50:f4:66:d4:b7:0f:8b:09:f7:85:0d:5b:df:af: c6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:25:B8:A1:B1:A4:A9:3E:39:0B:27:69:37:4B:12:00:79:88:E5:E8 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3131382e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.162.118.0/24 Signature Algorithm: sha256WithRSAEncryption af:f1:16:85:32:7a:7e:62:41:62:cc:c1:7b:af:ac:6a:59:b2: 98:d1:b3:d3:6f:46:3e:bc:ec:77:da:ea:86:ab:b6:87:78:52: b9:d1:23:b7:7d:6c:6b:0a:da:86:c0:b9:cf:5a:12:b7:f7:01: 95:31:7e:f9:3f:5c:fc:7d:97:f9:c3:b9:6f:bb:a4:2c:79:7d: 8a:a4:9d:9d:34:07:cc:2f:2f:3e:81:8b:d1:6a:09:83:58:29: 64:f1:00:46:e6:40:f3:45:ec:e4:13:e8:f7:1d:f3:1f:07:f1: a5:16:36:2e:ab:bf:33:14:18:ae:d9:be:2b:c1:d2:15:57:be: 14:de:c2:67:c6:f8:a7:93:1c:45:88:17:af:5a:55:2c:cf:7c: 05:ed:c1:02:f4:5b:c0:4f:00:c5:36:d9:d0:47:95:38:5d:76: 00:6a:bd:f1:0a:ca:9d:eb:39:36:1d:11:b4:f0:1f:b8:82:08: 21:7e:7b:db:81:ca:3d:48:ff:a6:a2:75:52:b4:ee:34:f5:fa: 88:cc:36:21:a0:22:e6:0b:b7:f8:67:e6:d0:09:53:f7:95:41: 36:e2:37:c6:ab:a7:b9:75:3a:b1:06:fa:63:5b:01:4c:8d:2b: f4:ba:e8:20:00:54:75:12:f9:27:0e:77:d7:be:d5:d7:54:c2: 5b:c8:b7:0c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUOHERir7R1+DithFt5GgkJHBdjHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMzM1MjhaFw0yNzA0MDkwMzQwMjhaMDMxMTAvBgNV BAMTKDlFMjVCOEExQjFBNEE5M0UzOTBCMjc2OTM3NEIxMjAwNzk4OEU1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZjQPaRSfaJvvk2Nti9+/K2nZ 7UNkHEtA8nFojmYz59GReRZeCJo7yle/wSFH8BO1jvNWst08bSLtKCXowggbL89C l05WgccRbLtdXTumVwbIfHOOJaIrE2EEedxwbsY+f3kBJi0SqnKQvXePSAPzBaXe 9klaTxde6x8DcesjOuM88nPhd2HjVLSa6RfZsXZR1oGPeZlypGGKrmGsAZjuqsRy 9SujchsZwc0Zp98jybHo7yJ3EBL9s8c/pJNY5uqUf5QGj4UXmRkTMVmvtRki3c66 Onh/wO/4NK6FSBdEE6ytPFP8sDq2MGl1lUpX/sBQ9GbUtw+LCfeFDVvfr8ZhAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUniW4obGkqT45CydpN0sSAHmI5egwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMTMxMmUzMTM2 MzIyZTMxMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 06J2MA0GCSqGSIb3DQEBCwUAA4IBAQCv8RaFMnp+YkFizMF7r6xqWbKY0bPTb0Y+ vOx32uqGq7aHeFK50SO3fWxrCtqGwLnPWhK39wGVMX75P1z8fZf5w7lvu6QseX2K pJ2dNAfMLy8+gYvRagmDWClk8QBG5kDzRezkE+j3HfMfB/GlFjYuq78zFBiu2b4r wdIVV74U3sJnxvinkxxFiBevWlUsz3wF7cEC9FvATwDFNtnQR5U4XXYAar3xCsqd 6zk2HRG08B+4ggghfnvbgco9SP+monVStO409fqIzDYhoCLmC7f4Z+bQCVP3lUE2 4jfGq6e5dTqxBvpjWwFMjSv0uuggAFR1EvknDnfXvtXXVMJbyLcM -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:23 2026 by rpki-client