$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3139322e302f32322d3232203d3e2030.roa File: 3231312e3136322e3139322e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: SiOGChF4OW2LAaOLmHkrwFKYON1IIfwrmX8rQS8ljog= Subject key identifier: 80:94:90:09:27:68:20:95:53:58:2F:0B:2B:52:A4:C3:31:42:BB:75 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 2D13A4FFFE45603E508624C685DA7EA94703F67C Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3139322e302f32322d3232203d3e2030.roa Signing time: Fri 10 Apr 2026 03:40:28 +0000 ROA not before: Fri 10 Apr 2026 03:35:28 +0000 ROA not after: Fri 09 Apr 2027 03:40:28 +0000 asID: 0 IP address blocks: 211.162.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:13:a4:ff:fe:45:60:3e:50:86:24:c6:85:da:7e:a9:47:03:f6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 03:35:28 2026 GMT Not After : Apr 9 03:40:28 2027 GMT Subject: CN=809490092768209553582F0B2B52A4C33142BB75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d9:88:fd:b9:33:48:3b:a0:7b:e7:d1:e4:c2: b1:a5:2b:c5:57:f0:ac:3b:67:b1:1f:0b:a1:01:1f: 5a:b7:17:cc:4c:50:fb:38:77:a2:49:e7:f7:6e:3b: bd:c1:fc:65:50:bc:b1:f8:c7:61:0e:cb:fe:4d:34: f8:a1:6f:7b:61:22:92:c1:6d:06:85:1a:08:fc:8c: ef:e9:8e:b7:17:22:df:78:77:b0:25:f0:3a:ee:9e: a2:c1:3f:3c:85:7b:39:2b:45:91:08:b2:09:11:58: 81:bd:76:a9:a8:77:38:e3:66:02:75:b7:d2:30:27: 04:15:ca:2e:f4:e2:bc:39:1c:fc:80:bf:da:88:c2: 9f:6e:2b:ed:f0:e8:7e:99:7d:b7:7b:39:27:2a:9c: fd:ab:83:74:39:52:61:d1:dc:14:2b:d9:76:38:93: 7e:fa:a7:88:89:7f:fd:0a:3a:f0:50:94:07:6a:16: 52:9d:c1:f3:5e:26:59:de:f0:24:f4:77:d0:78:e0: 03:77:95:a9:b2:25:1d:08:77:ca:02:75:36:a8:b9: 67:9e:67:67:5a:ca:5b:0b:ef:a1:db:89:3e:b9:0e: 06:5d:39:d6:8c:54:3d:23:74:69:9a:c6:5c:b6:3c: b1:4a:46:8e:c2:50:18:2a:a8:20:fa:3c:1f:a0:ea: 56:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:94:90:09:27:68:20:95:53:58:2F:0B:2B:52:A4:C3:31:42:BB:75 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3139322e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.162.192.0/22 Signature Algorithm: sha256WithRSAEncryption 32:11:da:b2:6e:78:2d:d9:63:4b:24:29:e0:d1:22:5c:2a:f3: c5:a1:e7:75:98:21:40:46:29:96:c9:97:f1:ac:40:b1:06:a9: bf:de:dc:be:a6:ad:db:b2:8c:97:5d:87:f0:13:8e:07:bc:f4: 62:a4:fa:1f:5d:bd:c2:2d:64:3a:3b:8f:88:83:86:68:d3:00: 66:21:2c:1c:39:2e:7b:2c:f6:a4:0d:16:4e:00:d4:ad:fd:52: 84:e5:31:ec:b1:5c:e7:a7:5d:3c:6d:a6:67:9a:09:7f:2c:1c: 45:c5:7d:87:7e:e6:93:18:e2:0f:78:94:f9:f9:96:25:19:b4: 60:37:43:0b:e0:09:30:bd:20:37:95:d3:82:00:45:2a:50:2f: fa:cb:a3:c5:2d:43:b9:9a:77:69:2f:e9:c2:db:7d:e4:a7:12: c0:48:df:62:2d:f8:b4:cf:b0:16:a3:3c:ef:f2:13:bc:8e:82: 14:23:b6:d4:f7:43:bf:9c:e3:b7:bc:75:96:45:2e:65:a5:6b: 77:39:69:81:0a:f2:47:7c:bc:42:78:2d:20:fe:dd:1c:29:ec: 9a:01:99:d1:72:60:e5:e7:29:0c:8a:8f:9c:4f:3e:6c:7a:58: 1d:6f:e4:b6:42:62:89:82:9b:40:f0:51:66:7e:94:96:43:e3: e2:ad:7d:bd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIULROk//5FYD5QhiTGhdp+qUcD9nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMzM1MjhaFw0yNzA0MDkwMzQwMjhaMDMxMTAvBgNV BAMTKDgwOTQ5MDA5Mjc2ODIwOTU1MzU4MkYwQjJCNTJBNEMzMzE0MkJCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2Yj9uTNIO6B759HkwrGlK8VX 8Kw7Z7EfC6EBH1q3F8xMUPs4d6JJ5/duO73B/GVQvLH4x2EOy/5NNPihb3thIpLB bQaFGgj8jO/pjrcXIt94d7Al8DrunqLBPzyFezkrRZEIsgkRWIG9dqmodzjjZgJ1 t9IwJwQVyi704rw5HPyAv9qIwp9uK+3w6H6Zfbd7OScqnP2rg3Q5UmHR3BQr2XY4 k376p4iJf/0KOvBQlAdqFlKdwfNeJlne8CT0d9B44AN3lamyJR0Id8oCdTaouWee Z2daylsL76HbiT65DgZdOdaMVD0jdGmaxly2PLFKRo7CUBgqqCD6PB+g6lY7AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUgJSQCSdoIJVTWC8LK1KkwzFCu3UwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMTMxMmUzMTM2 MzIyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC 06LAMA0GCSqGSIb3DQEBCwUAA4IBAQAyEdqybngt2WNLJCng0SJcKvPFoed1mCFA RimWyZfxrECxBqm/3ty+pq3bsoyXXYfwE44HvPRipPofXb3CLWQ6O4+Ig4Zo0wBm ISwcOS57LPakDRZOANSt/VKE5THssVznp108baZnmgl/LBxFxX2HfuaTGOIPeJT5 +ZYlGbRgN0ML4AkwvSA3ldOCAEUqUC/6y6PFLUO5mndpL+nC233kpxLASN9iLfi0 z7AWozzv8hO8joIUI7bU90O/nOO3vHWWRS5lpWt3OWmBCvJHfLxCeC0g/t0cKeya AZnRcmDl5ykMio+cTz5selgdb+S2QmKJgptA8FFmfpSWQ+PirX29 -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:25 2026 by rpki-client