$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e33322e302f32312d3231203d3e2030.roa File: 3232302e3131322e33322e302f32312d3231203d3e2030.roa (raw, json) Hash identifier: mF48nWK4I/FXJXWtsc7SwqnDBM8xTpPPqHakkXug0sA= Subject key identifier: FD:B9:AD:9C:EA:24:11:2F:64:DB:6C:D4:15:CC:36:57:65:CE:58:79 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 10B3E92BE194C8FDF9B986BDEDF02B56099CC9F9 Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e33322e302f32312d3231203d3e2030.roa Signing time: Fri 10 Apr 2026 03:40:28 +0000 ROA not before: Fri 10 Apr 2026 03:35:28 +0000 ROA not after: Fri 09 Apr 2027 03:40:28 +0000 asID: 0 IP address blocks: 220.112.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b3:e9:2b:e1:94:c8:fd:f9:b9:86:bd:ed:f0:2b:56:09:9c:c9:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 03:35:28 2026 GMT Not After : Apr 9 03:40:28 2027 GMT Subject: CN=FDB9AD9CEA24112F64DB6CD415CC365765CE5879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:b3:79:f6:4a:77:a8:15:74:94:3e:6e:e5: 3f:13:fb:a2:d4:e1:0a:6e:8c:db:68:ee:87:9e:37: ae:fe:7f:c6:fc:42:0c:99:2a:c2:df:d2:62:3f:79: bf:2d:5c:3a:36:87:46:8d:ba:43:96:b7:4f:d7:f9: 6f:23:15:9a:37:a3:98:00:a4:64:80:de:50:a5:0c: e4:e5:8f:bb:4a:84:f1:a2:cd:18:52:12:aa:ce:6a: 40:ac:da:fa:02:11:a9:56:29:b0:0c:4c:86:42:6b: 9c:5b:09:9c:ef:a0:ca:57:5f:8a:2c:44:0e:ad:6f: 4d:ab:ac:49:74:00:86:90:b6:91:29:78:07:08:86: 46:4c:db:21:91:e5:05:57:cc:0a:48:00:42:45:ea: 8d:f1:ac:e3:c9:96:6a:ee:f3:6b:1b:cc:a8:a9:66: 9d:9a:28:f3:fe:e3:5e:e2:41:1c:38:4b:9a:60:48: 46:16:81:0f:29:f6:d8:88:3b:54:4c:d7:c2:86:a5: c7:9f:7e:e3:f5:fa:67:43:98:3c:44:33:fd:ba:3d: 67:fa:8c:41:1c:ab:9d:7f:54:f6:cf:a9:a0:3d:a8: 67:bd:b2:7d:f5:2b:dc:0f:b6:24:83:1f:28:05:16: b9:64:12:49:51:dc:cb:d8:33:68:82:61:e4:40:30: e5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B9:AD:9C:EA:24:11:2F:64:DB:6C:D4:15:CC:36:57:65:CE:58:79 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e33322e302f32312d3231203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.112.32.0/21 Signature Algorithm: sha256WithRSAEncryption ac:4f:91:aa:9d:62:e6:17:44:64:4b:b7:29:87:2f:25:d7:6e: ac:c3:24:78:2e:2b:7a:ba:69:07:a6:94:b2:18:94:9a:7b:4f: b7:19:a7:e1:db:0e:be:ad:05:58:f6:b5:34:af:77:4c:eb:3f: 6f:12:48:a7:72:19:73:64:25:24:9c:f7:04:ba:65:47:0c:a2: c0:c9:d5:6e:e9:72:25:b3:5c:5f:67:a1:82:57:41:e4:bd:85: 00:0b:82:fe:c2:f1:50:7f:c7:7e:3f:4c:b9:a5:65:e8:57:ea: ba:bc:fa:bd:a7:14:79:4e:bc:49:bb:6c:46:2b:c7:82:93:63: 3b:e1:35:f7:3c:9d:c7:4a:c8:46:77:53:1f:e0:32:41:fe:e7: 78:cf:ae:b4:34:ef:18:03:1d:70:ce:dd:59:95:c1:c0:16:46: 44:bf:ae:70:a4:0e:7c:73:f1:75:a0:78:11:a2:87:f2:c0:73: ad:b6:f8:3e:9d:2b:29:bf:2b:3a:1d:64:16:37:18:dd:eb:4b: 35:b6:dd:ab:42:ad:31:0f:f5:d1:ce:e3:5f:34:8a:cc:e8:0d: b1:e8:84:c5:8a:3d:43:c7:ad:6d:51:ca:6c:e1:d1:60:b8:cc: 07:eb:c1:5f:6a:8a:e9:a0:b7:d3:7a:b9:d4:e2:72:18:a5:7b: 9e:60:7f:5a -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUELPpK+GUyP35uYa97fArVgmcyfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMzM1MjhaFw0yNzA0MDkwMzQwMjhaMDMxMTAvBgNV BAMTKEZEQjlBRDlDRUEyNDExMkY2NERCNkNENDE1Q0MzNjU3NjVDRTU4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+bN59kp3qBV0lD5u5T8T+6LU 4QpujNto7oeeN67+f8b8QgyZKsLf0mI/eb8tXDo2h0aNukOWt0/X+W8jFZo3o5gA pGSA3lClDOTlj7tKhPGizRhSEqrOakCs2voCEalWKbAMTIZCa5xbCZzvoMpXX4os RA6tb02rrEl0AIaQtpEpeAcIhkZM2yGR5QVXzApIAEJF6o3xrOPJlmru82sbzKip Zp2aKPP+417iQRw4S5pgSEYWgQ8p9tiIO1RM18KGpceffuP1+mdDmDxEM/26PWf6 jEEcq51/VPbPqaA9qGe9sn31K9wPtiSDHygFFrlkEklR3MvYM2iCYeRAMOUHAgMB AAGjggILMIICBzAdBgNVHQ4EFgQU/bmtnOokES9k22zUFcw2V2XOWHkwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMjMwMmUzMTMx MzIyZTMzMzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9xw IDANBgkqhkiG9w0BAQsFAAOCAQEArE+Rqp1i5hdEZEu3KYcvJddurMMkeC4rerpp B6aUshiUmntPtxmn4dsOvq0FWPa1NK93TOs/bxJIp3IZc2QlJJz3BLplRwyiwMnV bulyJbNcX2ehgldB5L2FAAuC/sLxUH/Hfj9MuaVl6Ffqurz6vacUeU68SbtsRivH gpNjO+E19zydx0rIRndTH+AyQf7neM+utDTvGAMdcM7dWZXBwBZGRL+ucKQOfHPx daB4EaKH8sBzrbb4Pp0rKb8rOh1kFjcY3etLNbbdq0KtMQ/10c7jXzSKzOgNseiE xYo9Q8etbVHKbOHRYLjMB+vBX2qK6aC303q51OJyGKV7nmB/Wg== -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:25 2026 by rpki-client