$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3132362e302f32342d3234203d3e203137363233.roa File: 3231312e3136322e3132362e302f32342d3234203d3e203137363233.roa (raw, json) Hash identifier: 8Z7wTCDHUvrB2zCBq3yqGSueO4mi1I9R9/1+AZx66ig= Subject key identifier: CB:D3:6E:C4:DD:5F:86:FE:AB:25:EE:C5:E2:51:A3:70:E1:7B:E5:DB Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 103BEC6A0A374A1961465012C21696EC17CE5606 Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3132362e302f32342d3234203d3e203137363233.roa Signing time: Fri 10 Apr 2026 03:01:32 +0000 ROA not before: Fri 10 Apr 2026 02:56:32 +0000 ROA not after: Fri 09 Apr 2027 03:01:32 +0000 asID: 17623 IP address blocks: 211.162.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:3b:ec:6a:0a:37:4a:19:61:46:50:12:c2:16:96:ec:17:ce:56:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 02:56:32 2026 GMT Not After : Apr 9 03:01:32 2027 GMT Subject: CN=CBD36EC4DD5F86FEAB25EEC5E251A370E17BE5DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:f5:13:29:54:11:88:23:2a:46:ee:f7:d7: 17:a7:9c:af:d1:c6:72:81:48:18:c6:22:ac:ad:c7: 3a:6a:7b:8f:42:f6:45:61:d7:48:f2:83:3f:87:68: 4c:9d:dc:d3:ef:db:fb:e6:02:b8:ad:95:b2:b0:86: 2b:1d:d5:25:96:5e:fb:b1:88:04:8a:9b:b1:63:d1: 2c:99:ad:b5:1f:98:46:d0:93:ed:c8:ff:36:5b:86: 7d:6e:26:d9:aa:6a:dc:8f:3e:b0:e9:be:e9:e0:49: 63:da:23:1c:a3:bd:0b:de:a4:04:9b:65:a9:7d:3e: 33:9f:f1:87:9f:94:50:87:98:b4:3c:9e:ac:5a:f4: fb:f5:89:e2:df:13:a6:6e:1a:63:57:3e:00:85:60: 14:09:6e:f5:be:ce:50:71:62:17:dc:4e:55:ef:93: 1d:b8:fb:69:a4:2c:9c:cd:f1:cd:9c:14:64:d6:9b: d2:e3:e9:ec:54:f5:74:34:4e:b0:48:b5:fa:14:a7: 34:5a:2c:e5:e4:8a:b9:3d:e1:ac:00:8b:a6:cb:a7: 7f:a0:c0:63:c2:1c:ac:63:4b:4b:05:6f:6c:49:42: 8a:21:60:be:a8:66:d1:e2:bc:5e:e5:4a:82:9d:7d: d8:ab:0a:1a:03:36:87:4a:b2:f8:6f:d5:2d:bc:bf: 77:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D3:6E:C4:DD:5F:86:FE:AB:25:EE:C5:E2:51:A3:70:E1:7B:E5:DB X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3132362e302f32342d3234203d3e203137363233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.162.126.0/24 Signature Algorithm: sha256WithRSAEncryption 69:2b:6d:f2:ae:b7:a3:0c:72:a8:35:52:f9:d0:21:07:5d:80: 52:6b:88:a5:b6:4a:77:1f:43:d7:fe:79:43:63:ad:46:f0:d8: d5:8e:e9:7b:6a:64:96:22:72:69:d3:9a:b9:0d:3b:aa:6d:ff: 01:06:b0:dc:1d:94:f1:28:ed:60:6a:0f:41:cd:df:47:95:bf: c1:e9:81:77:39:08:d5:6f:8f:57:55:43:b9:61:7e:f3:1d:dd: 74:78:36:72:f3:42:aa:ea:cc:97:50:a0:c0:36:1a:41:2b:57: c9:e9:51:47:bd:cd:21:a8:b1:14:e6:81:89:a3:37:b8:5c:59: 09:61:8e:a8:3f:29:6a:af:2b:a5:50:8e:58:a4:6d:5a:37:23: 36:32:40:10:51:0f:b2:97:cd:2d:41:43:fc:be:7a:60:3d:ef: e7:8b:88:84:61:f7:92:f9:9a:09:1f:75:25:d2:86:27:6d:44: de:a6:10:cd:a2:d3:4e:51:74:43:55:55:4a:0b:4e:c0:49:82: 71:4e:23:cc:fa:ec:db:08:ea:7b:c8:1e:16:5b:7a:de:87:93: 21:ab:69:04:ea:16:89:79:0f:ea:fe:4b:07:e7:91:71:a0:eb: 46:4a:d1:b6:53:16:23:69:c7:55:a3:95:ab:d4:61:29:b4:fe: a9:5b:05:f6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEDvsago3ShlhRlASwhaW7BfOVgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMjU2MzJaFw0yNzA0MDkwMzAxMzJaMDMxMTAvBgNV BAMTKENCRDM2RUM0REQ1Rjg2RkVBQjI1RUVDNUUyNTFBMzcwRTE3QkU1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTEfUTKVQRiCMqRu731xennK/R xnKBSBjGIqytxzpqe49C9kVh10jygz+HaEyd3NPv2/vmAritlbKwhisd1SWWXvux iASKm7Fj0SyZrbUfmEbQk+3I/zZbhn1uJtmqatyPPrDpvungSWPaIxyjvQvepASb Zal9PjOf8YeflFCHmLQ8nqxa9Pv1ieLfE6ZuGmNXPgCFYBQJbvW+zlBxYhfcTlXv kx24+2mkLJzN8c2cFGTWm9Lj6exU9XQ0TrBItfoUpzRaLOXkirk94awAi6bLp3+g wGPCHKxjS0sFb2xJQoohYL6oZtHivF7lSoKdfdirChoDNodKsvhv1S28v3cTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUy9NuxN1fhv6rJe7F4lGjcOF75dswHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4MTU5NjkzMjQzMDIzMzcvMC8zMjMxMzEyZTMx MzYzMjJlMzEzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANOifjANBgkqhkiG9w0BAQsFAAOCAQEAaStt8q63owxyqDVS+dAh B12AUmuIpbZKdx9D1/55Q2OtRvDY1Y7pe2pkliJyadOauQ07qm3/AQaw3B2U8Sjt YGoPQc3fR5W/wemBdzkI1W+PV1VDuWF+8x3ddHg2cvNCqurMl1CgwDYaQStXyelR R73NIaixFOaBiaM3uFxZCWGOqD8paq8rpVCOWKRtWjcjNjJAEFEPspfNLUFD/L56 YD3v54uIhGH3kvmaCR91JdKGJ21E3qYQzaLTTlF0Q1VVSgtOwEmCcU4jzPrs2wjq e8geFlt63oeTIatpBOoWiXkP6v5LB+eRcaDrRkrRtlMWI2nHVaOVq9RhKbT+qVsF 9g== -----END CERTIFICATE-----Generated at Mon Apr 13 13:56:12 2026 by rpki-client