$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e3139342e302f32342d3234203d3e203137363233.roa File: 3232302e3131322e3139342e302f32342d3234203d3e203137363233.roa (raw, json) Hash identifier: c9fSn4blnHend1PXhV7YRvLW1bPw83R+MCnDjEYQBmE= Subject key identifier: 79:8B:5C:04:39:7A:6B:40:9F:4F:E5:48:AC:0E:74:5D:6F:AE:1B:13 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 426A816DF528DDC32750F9DD6E2B84887062AC97 Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e3139342e302f32342d3234203d3e203137363233.roa Signing time: Fri 10 Apr 2026 03:00:38 +0000 ROA not before: Fri 10 Apr 2026 02:55:38 +0000 ROA not after: Fri 09 Apr 2027 03:00:38 +0000 asID: 17623 IP address blocks: 220.112.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6a:81:6d:f5:28:dd:c3:27:50:f9:dd:6e:2b:84:88:70:62:ac:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 02:55:38 2026 GMT Not After : Apr 9 03:00:38 2027 GMT Subject: CN=798B5C04397A6B409F4FE548AC0E745D6FAE1B13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b9:e3:d3:01:6d:e3:5f:ca:6f:7a:0e:5f:21: 84:f0:e3:bf:2a:3d:ec:db:e0:82:94:4a:51:54:06: 1c:da:c2:c7:c8:b0:a3:b8:9f:e1:46:fd:1b:fe:b9: e6:87:c8:ca:21:40:07:fe:3e:e1:dc:a3:2c:9b:65: 5d:2c:91:4e:22:40:d9:66:45:4a:80:2d:13:2c:54: fd:c1:9a:36:d8:70:8f:31:88:7d:7c:81:37:bf:28: 68:53:16:b0:2b:67:57:85:3c:18:2a:8b:40:72:72: 31:41:ec:0e:44:b5:9f:99:d8:20:11:fe:60:3f:54: 88:01:e9:30:b3:88:9d:c7:d1:84:e9:ee:27:d5:04: 3d:fd:5f:e1:c6:af:bc:20:bc:f7:b8:e3:35:8d:d6: 65:c9:58:be:b5:26:b5:94:ca:56:b0:7d:82:a3:ba: 87:36:3d:6b:c3:3d:52:59:f7:04:7f:26:3e:a9:c1: 23:ff:78:45:74:fd:0e:3a:c0:63:d1:a7:c3:c1:0a: 17:3f:47:11:e8:c5:9a:12:13:28:33:d9:ae:93:ae: ad:93:17:24:8f:6b:b1:46:04:9a:9d:20:80:4f:f5: 7c:07:37:1a:b0:8d:4f:9f:74:19:43:e6:f5:e7:31: 4c:90:d0:23:2f:04:e4:c0:e5:4c:1a:39:d2:92:31: 59:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8B:5C:04:39:7A:6B:40:9F:4F:E5:48:AC:0E:74:5D:6F:AE:1B:13 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e3139342e302f32342d3234203d3e203137363233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.112.194.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:83:92:12:05:64:2b:7d:23:a4:25:14:ca:cd:7b:0a:19:72: ae:e4:96:2d:d0:87:4e:6b:bf:c7:c1:12:4d:d3:18:2e:9f:a0: da:35:8d:1b:18:e4:aa:92:0e:e4:4f:a4:3a:a8:4d:70:4b:c8: bc:a3:e0:e1:3e:6f:a7:54:27:0f:1e:c9:ed:a3:d5:b9:1b:72: 4a:0d:cc:24:36:a9:28:be:9f:e6:5a:33:b9:61:60:4e:4b:75: 39:24:02:26:e3:1a:f7:15:55:ad:d6:75:05:48:de:7b:89:6b: 69:86:9e:cb:e8:10:3c:35:7b:eb:d4:d7:ce:17:ed:2b:fe:8b: 85:b8:94:a8:b4:6c:18:18:9d:9c:9f:f6:4f:86:c4:7f:28:22: a9:8b:02:bf:1c:b9:cc:d3:60:98:41:1d:e3:db:69:63:d8:0e: 6a:b3:78:e1:0b:e3:bb:fd:df:8a:23:28:46:75:41:00:f5:2f: 07:19:dc:8c:ce:bd:94:ea:0b:10:a1:21:37:7b:21:87:97:41: ad:08:2f:27:ae:a4:7b:99:5c:95:35:25:db:a9:66:e9:9d:a4: 6a:bc:6d:6f:41:77:02:be:92:63:52:73:1f:c3:db:f5:16:33: cb:a1:aa:6a:fa:62:a1:85:c6:34:d0:98:06:15:bb:74:36:56: 3b:a6:56:bf -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUQmqBbfUo3cMnUPndbiuEiHBirJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMjU1MzhaFw0yNzA0MDkwMzAwMzhaMDMxMTAvBgNV BAMTKDc5OEI1QzA0Mzk3QTZCNDA5RjRGRTU0OEFDMEU3NDVENkZBRTFCMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZuePTAW3jX8pveg5fIYTw478q Pezb4IKUSlFUBhzawsfIsKO4n+FG/Rv+ueaHyMohQAf+PuHcoyybZV0skU4iQNlm RUqALRMsVP3BmjbYcI8xiH18gTe/KGhTFrArZ1eFPBgqi0BycjFB7A5EtZ+Z2CAR /mA/VIgB6TCziJ3H0YTp7ifVBD39X+HGr7wgvPe44zWN1mXJWL61JrWUylawfYKj uoc2PWvDPVJZ9wR/Jj6pwSP/eEV0/Q46wGPRp8PBChc/RxHoxZoSEygz2a6Trq2T FySPa7FGBJqdIIBP9XwHNxqwjU+fdBlD5vXnMUyQ0CMvBOTA5UwaOdKSMVnBAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUeYtcBDl6a0CfT+VIrA50XW+uGxMwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4MTU5NjkzMjQzMDIzMzcvMC8zMjMyMzAyZTMx MzEzMjJlMzEzOTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANxwwjANBgkqhkiG9w0BAQsFAAOCAQEAi4OSEgVkK30jpCUUys17 ChlyruSWLdCHTmu/x8ESTdMYLp+g2jWNGxjkqpIO5E+kOqhNcEvIvKPg4T5vp1Qn Dx7J7aPVuRtySg3MJDapKL6f5lozuWFgTkt1OSQCJuMa9xVVrdZ1BUjee4lraYae y+gQPDV769TXzhftK/6LhbiUqLRsGBidnJ/2T4bEfygiqYsCvxy5zNNgmEEd49tp Y9gOarN44Qvju/3fiiMoRnVBAPUvBxncjM69lOoLEKEhN3shh5dBrQgvJ66ke5lc lTUl26lm6Z2karxtb0F3Ar6SY1JzH8Pb9RYzy6GqavpioYXGNNCYBhW7dDZWO6ZW vw== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:33 2026 by rpki-client