$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e3232342e302f31392d3139203d3e2030.roa File: 3232302e3131322e3232342e302f31392d3139203d3e2030.roa (raw, json) Hash identifier: MqbSpRrALaEyiV1Ms0YKtGUOW1IEsLjtjmr6u8ifltM= Subject key identifier: 2F:23:CA:D4:E3:AC:86:96:CD:76:73:81:C7:B5:29:E2:32:0B:7B:C9 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 7B734A288E76050951B1B47D021B8CAB4D3DFBCA Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e3232342e302f31392d3139203d3e2030.roa Signing time: Fri 10 Apr 2026 03:42:30 +0000 ROA not before: Fri 10 Apr 2026 03:37:30 +0000 ROA not after: Fri 09 Apr 2027 03:42:30 +0000 asID: 0 IP address blocks: 220.112.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:73:4a:28:8e:76:05:09:51:b1:b4:7d:02:1b:8c:ab:4d:3d:fb:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 03:37:30 2026 GMT Not After : Apr 9 03:42:30 2027 GMT Subject: CN=2F23CAD4E3AC8696CD767381C7B529E2320B7BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c6:9e:38:da:f2:73:35:d8:2c:c9:ce:aa:a6: cd:c1:b2:f2:50:c6:88:a0:b7:ed:1c:c0:c8:6f:e2: 61:ee:d2:46:aa:a2:30:11:d5:c9:8b:3f:33:13:4e: 5f:50:2c:26:a9:02:19:f4:25:7f:bc:24:9e:a9:2b: 34:c8:d1:8a:56:d5:c2:9e:15:c4:fb:f7:fb:bd:85: 26:79:bc:ac:24:6a:12:0e:20:48:2f:9a:7c:5f:c9: f7:11:be:10:2c:7d:59:df:dd:86:4b:41:ae:43:db: 8d:ba:eb:a9:e0:f2:06:b2:83:02:67:a9:88:18:a7: 12:cb:7c:e4:38:4b:e2:46:f7:63:f5:e8:90:20:8f: 4f:52:dd:b4:76:0d:69:15:d8:51:ed:c4:58:90:a6: 45:e9:3f:00:a8:47:04:96:57:cf:d7:69:aa:66:78: 60:58:19:a8:e2:ce:39:72:19:88:dd:b3:6b:a4:62: ce:a1:f8:e4:2d:32:ae:16:6a:2b:a7:79:ea:2b:93: 03:e8:a5:dd:2e:b4:1a:37:03:e8:17:dc:4c:34:56: 9d:ab:41:b2:55:df:1a:10:5e:2f:a8:fc:d1:8e:41: c4:f6:4d:98:46:a4:2f:95:dc:77:7e:21:f4:48:c3: 28:6f:53:fe:f4:9f:ea:c4:63:8f:00:87:8e:ce:e0: d5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:23:CA:D4:E3:AC:86:96:CD:76:73:81:C7:B5:29:E2:32:0B:7B:C9 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e3232342e302f31392d3139203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.112.224.0/19 Signature Algorithm: sha256WithRSAEncryption 10:9c:ba:84:9f:8c:e4:ae:53:2a:50:e1:d9:fa:cb:bd:4d:3b: 96:3a:d8:1f:a9:70:96:91:85:df:2c:d2:1d:2c:bc:1d:ac:fd: 54:03:53:58:2c:a5:a4:75:31:e4:3d:29:c1:2b:5b:32:b3:58: a6:99:89:1d:e2:bb:47:47:33:94:63:43:e3:4b:07:75:f3:2a: 56:35:83:48:a1:e7:ed:a3:84:3c:d8:f6:b9:d8:dd:68:29:08: a8:d1:c2:59:8d:7c:a4:e1:e0:ba:93:fc:8c:04:06:fa:3f:51: 9d:b6:37:a3:0c:0f:ed:36:ef:26:93:05:bf:80:f3:f0:bb:0e: ff:73:f8:e7:a5:ee:91:c6:dc:b0:b2:95:a1:e5:9a:fb:c2:62: 6d:4f:d2:74:df:16:97:04:f5:a0:29:cc:b3:d8:56:92:40:b1: 4f:b6:96:42:72:df:7a:6e:f1:e0:a4:fe:fd:87:d6:59:6f:1b: 4b:59:96:c3:ed:8c:47:c8:b6:fb:c3:b7:43:6b:f1:ee:2e:8d: 33:6c:2f:c8:5e:57:59:7f:1d:d4:08:2a:d0:77:25:b5:8d:9e: 80:34:9b:9d:26:c7:c5:cc:21:ae:85:9f:7a:ac:ef:b9:a4:02: d5:17:97:e0:ea:a1:f1:7a:c0:ab:d4:36:33:25:a0:53:51:6b: 0c:06:83:ed -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUe3NKKI52BQlRsbR9AhuMq009+8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMzM3MzBaFw0yNzA0MDkwMzQyMzBaMDMxMTAvBgNV BAMTKDJGMjNDQUQ0RTNBQzg2OTZDRDc2NzM4MUM3QjUyOUUyMzIwQjdCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTxp442vJzNdgsyc6qps3BsvJQ xoigt+0cwMhv4mHu0kaqojAR1cmLPzMTTl9QLCapAhn0JX+8JJ6pKzTI0YpW1cKe FcT79/u9hSZ5vKwkahIOIEgvmnxfyfcRvhAsfVnf3YZLQa5D242666ng8gaygwJn qYgYpxLLfOQ4S+JG92P16JAgj09S3bR2DWkV2FHtxFiQpkXpPwCoRwSWV8/Xaapm eGBYGajizjlyGYjds2ukYs6h+OQtMq4WaiuneeorkwPopd0utBo3A+gX3Ew0Vp2r QbJV3xoQXi+o/NGOQcT2TZhGpC+V3Hd+IfRIwyhvU/70n+rEY48Ah47O4NXhAgMB AAGjggINMIICCTAdBgNVHQ4EFgQULyPK1OOshpbNdnOBx7Up4jILe8kwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMjMwMmUzMTMx MzIyZTMyMzIzNDJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF 3HDgMA0GCSqGSIb3DQEBCwUAA4IBAQAQnLqEn4zkrlMqUOHZ+su9TTuWOtgfqXCW kYXfLNIdLLwdrP1UA1NYLKWkdTHkPSnBK1sys1immYkd4rtHRzOUY0PjSwd18ypW NYNIoefto4Q82Pa52N1oKQio0cJZjXyk4eC6k/yMBAb6P1GdtjejDA/tNu8mkwW/ gPPwuw7/c/jnpe6RxtywspWh5Zr7wmJtT9J03xaXBPWgKcyz2FaSQLFPtpZCct96 bvHgpP79h9ZZbxtLWZbD7YxHyLb7w7dDa/HuLo0zbC/IXldZfx3UCCrQdyW1jZ6A NJudJsfFzCGuhZ96rO+5pALVF5fg6qHxesCr1DYzJaBTUWsMBoPt -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:31 2026 by rpki-client