$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e342e302f32322d3232203d3e2030.roa File: 3232302e3131322e342e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: QNpxyv4vLCIMZPX5y95O6aCDxhY3vGDqpte2hsIoTPQ= Subject key identifier: 83:59:A4:98:E8:2B:EB:CD:C7:56:1B:6C:E0:C1:4D:2A:1B:B1:CB:D5 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 5146FFCDCD360EA5C17C0DD42738879CE86A4B81 Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e342e302f32322d3232203d3e2030.roa Signing time: Fri 10 Apr 2026 03:40:28 +0000 ROA not before: Fri 10 Apr 2026 03:35:28 +0000 ROA not after: Fri 09 Apr 2027 03:40:28 +0000 asID: 0 IP address blocks: 220.112.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:46:ff:cd:cd:36:0e:a5:c1:7c:0d:d4:27:38:87:9c:e8:6a:4b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 03:35:28 2026 GMT Not After : Apr 9 03:40:28 2027 GMT Subject: CN=8359A498E82BEBCDC7561B6CE0C14D2A1BB1CBD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:32:1a:b1:85:26:1e:20:d3:0e:af:87:42: 8d:9d:dc:e4:84:4e:84:59:3e:cc:58:30:9e:6a:45: f5:e4:f1:80:1b:08:ea:43:e3:13:36:3d:0c:23:97: e3:62:01:aa:2e:be:23:30:0f:81:cd:42:69:58:ff: 87:13:c3:6d:5c:e6:45:44:48:b9:a1:22:4b:a8:f6: 5e:08:23:47:7e:82:e9:80:a1:4c:79:47:00:29:a3: 39:d7:48:68:ee:52:53:ff:9a:d6:6d:0b:a0:bb:25: ca:9b:b3:e8:38:bb:39:fc:03:cf:13:aa:5d:ba:04: 4e:7d:b7:df:cd:d5:a5:6a:49:16:12:77:dc:ac:48: cc:69:4f:b0:1b:e7:5e:59:40:35:17:56:84:8f:61: 6c:89:5c:8a:40:bc:39:fc:ef:0a:91:6f:1d:9c:cb: 90:21:cf:fb:3a:7d:35:61:d2:22:09:0b:d1:71:22: b8:b3:8a:08:8d:80:20:22:f3:56:c9:fe:4b:0b:2e: 01:fd:6c:3e:56:00:a4:28:83:e0:ca:81:0f:3c:0a: 7f:e7:52:90:57:d8:77:5b:5f:ba:e0:34:ee:68:1c: 89:d1:d4:d8:8f:0f:ed:21:19:34:ce:21:98:11:01: 0e:4c:bb:7c:dc:08:13:73:60:34:29:45:6b:38:ab: 9d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:59:A4:98:E8:2B:EB:CD:C7:56:1B:6C:E0:C1:4D:2A:1B:B1:CB:D5 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e342e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.112.4.0/22 Signature Algorithm: sha256WithRSAEncryption 41:85:67:e1:3b:6b:09:9b:51:6c:2f:7b:50:a8:1b:00:46:ea: 46:be:64:00:20:16:fa:85:88:42:f9:97:c4:c3:26:79:94:a5: 4e:cd:dd:24:a0:a6:66:7e:72:e2:44:c9:83:cf:38:72:cb:6c: c7:6e:42:d7:73:f8:13:67:3b:4a:c2:65:c6:c3:63:28:7e:d4: 3d:cb:9e:76:1e:fb:33:ca:44:ae:7e:42:13:df:9f:e0:bc:3f: 97:0c:9a:27:13:77:a3:80:ec:c5:ef:db:12:7e:ce:88:e8:05: 20:a0:56:e4:44:36:f1:cb:20:67:54:27:67:3b:a1:60:52:75: 19:e8:02:59:d0:3f:6a:60:ad:df:97:be:6c:ac:fb:cf:03:bb: c4:e6:cb:90:42:2c:77:17:3a:15:9e:85:e0:15:94:4a:97:e9: 9e:4d:41:0e:3d:f6:eb:03:f9:0a:a8:a1:5f:8f:a0:a9:6c:7a: 15:ef:03:52:b3:bc:03:b6:59:2a:f2:87:bc:2c:ba:87:3a:29: b1:c7:6a:3c:47:25:45:41:d9:7f:ca:3f:d4:dc:67:90:17:b9: 00:ca:1b:45:8a:b6:b9:54:37:06:75:f8:22:c2:18:70:74:ea: ea:25:9c:b0:3a:fb:3e:61:75:c9:f6:78:5d:fb:56:59:a4:4b: 32:16:45:66 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUUUb/zc02DqXBfA3UJziHnOhqS4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMzM1MjhaFw0yNzA0MDkwMzQwMjhaMDMxMTAvBgNV BAMTKDgzNTlBNDk4RTgyQkVCQ0RDNzU2MUI2Q0UwQzE0RDJBMUJCMUNCRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQTIasYUmHiDTDq+HQo2d3OSE ToRZPsxYMJ5qRfXk8YAbCOpD4xM2PQwjl+NiAaouviMwD4HNQmlY/4cTw21c5kVE SLmhIkuo9l4II0d+gumAoUx5RwApoznXSGjuUlP/mtZtC6C7Jcqbs+g4uzn8A88T ql26BE59t9/N1aVqSRYSd9ysSMxpT7Ab515ZQDUXVoSPYWyJXIpAvDn87wqRbx2c y5Ahz/s6fTVh0iIJC9FxIrizigiNgCAi81bJ/ksLLgH9bD5WAKQog+DKgQ88Cn/n UpBX2HdbX7rgNO5oHInR1NiPD+0hGTTOIZgRAQ5Mu3zcCBNzYDQpRWs4q53/AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUg1mkmOgr683HVhts4MFNKhuxy9UwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMjMwMmUzMTMx MzIyZTM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALccAQw DQYJKoZIhvcNAQELBQADggEBAEGFZ+E7awmbUWwve1CoGwBG6ka+ZAAgFvqFiEL5 l8TDJnmUpU7N3SSgpmZ+cuJEyYPPOHLLbMduQtdz+BNnO0rCZcbDYyh+1D3LnnYe +zPKRK5+QhPfn+C8P5cMmicTd6OA7MXv2xJ+zojoBSCgVuRENvHLIGdUJ2c7oWBS dRnoAlnQP2pgrd+Xvmys+88Du8Tmy5BCLHcXOhWeheAVlEqX6Z5NQQ499usD+Qqo oV+PoKlsehXvA1KzvAO2WSryh7wsuoc6KbHHajxHJUVB2X/KP9TcZ5AXuQDKG0WK trlUNwZ1+CLCGHB06uolnLA6+z5hdcn2eF37VlmkSzIWRWY= -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:30 2026 by rpki-client