$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3132352e302f32342d3234203d3e203137363233.roa File: 3231312e3136322e3132352e302f32342d3234203d3e203137363233.roa (raw, json) Hash identifier: DAk8lokllPSs1EBm20SkbWLdE3wPJthneKliaYDzTHw= Subject key identifier: CA:05:A6:71:26:92:45:51:1C:39:C0:E2:0F:4A:62:61:84:15:88:78 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 14348267D453EEE1FF9536AAE271ACDA3E8EAD77 Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3132352e302f32342d3234203d3e203137363233.roa Signing time: Fri 10 Apr 2026 03:01:33 +0000 ROA not before: Fri 10 Apr 2026 02:56:33 +0000 ROA not after: Fri 09 Apr 2027 03:01:33 +0000 asID: 17623 IP address blocks: 211.162.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:34:82:67:d4:53:ee:e1:ff:95:36:aa:e2:71:ac:da:3e:8e:ad:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 02:56:33 2026 GMT Not After : Apr 9 03:01:33 2027 GMT Subject: CN=CA05A671269245511C39C0E20F4A626184158878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fe:5a:f9:01:43:72:f8:50:e9:db:4f:11:da: a4:2f:cb:46:a1:f5:25:13:99:4d:99:67:46:e0:16: cd:ff:51:ce:d4:af:bb:b4:51:ab:ae:45:16:44:5a: 98:e5:b3:d3:94:39:d2:fe:a3:8d:b4:a7:11:64:79: 17:a4:3b:e5:5a:a5:b6:61:8f:f8:17:ea:3a:1e:d6: b0:f2:8e:ee:be:a9:7b:d4:8b:2f:41:d9:1b:d9:b0: 27:df:c3:06:d1:c7:b5:22:44:e0:25:3c:c5:18:a7: cf:e3:16:74:24:a9:af:5c:e5:57:3b:5a:f3:e1:ef: 03:65:b1:25:05:ff:96:1a:ea:a3:32:4e:c4:bf:43: 9e:45:65:82:4d:15:b1:da:cb:69:84:e0:27:dc:19: 2a:2e:d9:37:4a:e9:21:b8:5c:07:28:6d:53:91:af: 18:1c:05:71:c2:a4:fa:50:be:de:1d:79:b8:d4:68: 27:a7:58:cf:2d:c0:ab:5a:48:fa:15:48:98:17:e5: be:49:1a:4b:53:4e:04:b7:cc:60:3b:a9:be:48:08: e1:21:c2:c6:d9:16:75:28:b6:b6:b7:0c:ba:f5:33: 04:da:b2:3a:13:0b:ac:1f:2a:e9:a2:03:7a:45:df: f8:18:49:c2:b4:5b:4e:79:43:69:2d:91:96:d0:7a: 3d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:05:A6:71:26:92:45:51:1C:39:C0:E2:0F:4A:62:61:84:15:88:78 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3132352e302f32342d3234203d3e203137363233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.162.125.0/24 Signature Algorithm: sha256WithRSAEncryption 34:c2:38:b7:71:33:ea:63:61:3b:ad:bf:0c:f1:ba:ae:94:50: d2:54:0b:44:b9:f6:dc:2c:c4:4a:73:53:91:a7:b6:87:fe:f7: 0d:69:59:fb:d3:e2:9d:d9:90:29:fb:db:12:76:87:19:26:ec: a7:ac:26:11:b3:73:fc:29:3d:bc:8c:8c:d6:66:7d:39:d8:89: 16:d4:cf:d9:1f:62:d7:25:de:c2:6c:bb:34:c9:f8:82:6d:0f: 7e:44:dd:19:ad:49:87:90:85:f4:eb:e4:94:d4:93:36:19:eb: ac:58:6f:4b:da:18:4a:76:b7:12:05:e5:09:09:d6:de:47:95: 33:d1:bd:61:3f:93:99:dd:b0:d1:4a:be:9b:79:7f:59:46:73: 88:ac:c4:e8:a2:86:cf:e4:63:0e:71:f5:40:d6:2a:f9:7f:bd: 97:d1:40:ea:d2:75:aa:a6:8d:ed:36:7c:7c:be:f9:da:55:4b: cb:86:85:00:55:08:50:23:c1:8c:a8:61:33:a2:0d:3e:2e:a4: 55:6c:ae:a6:ca:10:70:20:b0:20:00:9f:4b:75:6b:3f:6f:0c: a9:9c:87:66:aa:e9:83:4c:c7:5f:58:75:02:6e:dd:0e:23:7d: f6:81:09:ea:3d:bb:8f:f1:ac:21:58:07:83:de:e6:46:a0:07: 5d:9a:f8:0c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFDSCZ9RT7uH/lTaq4nGs2j6OrXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMjU2MzNaFw0yNzA0MDkwMzAxMzNaMDMxMTAvBgNV BAMTKENBMDVBNjcxMjY5MjQ1NTExQzM5QzBFMjBGNEE2MjYxODQxNTg4NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/lr5AUNy+FDp208R2qQvy0ah 9SUTmU2ZZ0bgFs3/Uc7Ur7u0UauuRRZEWpjls9OUOdL+o420pxFkeRekO+VapbZh j/gX6joe1rDyju6+qXvUiy9B2RvZsCffwwbRx7UiROAlPMUYp8/jFnQkqa9c5Vc7 WvPh7wNlsSUF/5Ya6qMyTsS/Q55FZYJNFbHay2mE4CfcGSou2TdK6SG4XAcobVOR rxgcBXHCpPpQvt4debjUaCenWM8twKtaSPoVSJgX5b5JGktTTgS3zGA7qb5ICOEh wsbZFnUotra3DLr1MwTasjoTC6wfKumiA3pF3/gYScK0W055Q2ktkZbQej35AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUygWmcSaSRVEcOcDiD0piYYQViHgwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4MTU5NjkzMjQzMDIzMzcvMC8zMjMxMzEyZTMx MzYzMjJlMzEzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANOifTANBgkqhkiG9w0BAQsFAAOCAQEANMI4t3Ez6mNhO62/DPG6 rpRQ0lQLRLn23CzESnNTkae2h/73DWlZ+9PindmQKfvbEnaHGSbsp6wmEbNz/Ck9 vIyM1mZ9OdiJFtTP2R9i1yXewmy7NMn4gm0PfkTdGa1Jh5CF9OvklNSTNhnrrFhv S9oYSna3EgXlCQnW3keVM9G9YT+Tmd2w0Uq+m3l/WUZziKzE6KKGz+RjDnH1QNYq +X+9l9FA6tJ1qqaN7TZ8fL752lVLy4aFAFUIUCPBjKhhM6INPi6kVWyupsoQcCCw IACfS3VrP28MqZyHZqrpg0zHX1h1Am7dDiN99oEJ6j27j/GsIVgHg97mRqAHXZr4 DA== -----END CERTIFICATE-----Generated at Mon Apr 13 13:56:15 2026 by rpki-client