$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e34302e302f32312d3231203d3e203137363233.roa File: 3232302e3131322e34302e302f32312d3231203d3e203137363233.roa (raw, json) Hash identifier: 5QyNZut6S6CvSgRCfI2boHrFQOParwBm7e3SR2jjxTs= Subject key identifier: 81:C8:20:59:FD:0A:68:5C:44:4D:8E:8D:9A:6C:DD:30:B7:78:53:FD Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 4BC346835E491B705E58EAD32D56DD22A04A6CEF Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e34302e302f32312d3231203d3e203137363233.roa Signing time: Fri 10 Apr 2026 03:00:38 +0000 ROA not before: Fri 10 Apr 2026 02:55:38 +0000 ROA not after: Fri 09 Apr 2027 03:00:38 +0000 asID: 17623 IP address blocks: 220.112.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c3:46:83:5e:49:1b:70:5e:58:ea:d3:2d:56:dd:22:a0:4a:6c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 02:55:38 2026 GMT Not After : Apr 9 03:00:38 2027 GMT Subject: CN=81C82059FD0A685C444D8E8D9A6CDD30B77853FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8e:e4:95:30:23:1b:f4:5c:d9:c7:9f:d1:2d: 6a:3a:26:46:e6:66:23:c2:f0:c5:2c:32:e7:50:09: 2c:59:59:d0:8e:92:d8:b6:f2:79:39:b9:17:3b:a1: a8:40:af:6e:c7:f3:cd:0c:aa:51:ed:32:2f:83:7d: e0:f6:1c:25:00:7a:07:4a:a1:1b:58:98:eb:47:3f: 2f:04:30:03:39:1a:fd:d4:6e:c2:e0:26:3f:fb:9e: 75:61:00:16:14:0a:49:38:b2:8e:a1:0c:86:09:dc: d0:e2:a5:45:36:f3:ef:ac:5c:9b:13:1e:d7:6e:18: ea:8e:2a:9c:6f:b1:24:bd:af:6e:9d:ed:ff:85:5a: 7c:b7:03:b2:0a:01:80:8a:a8:6f:29:8e:83:7a:25: 57:06:6c:72:a3:b2:0f:a6:de:15:d6:b3:c7:7c:7c: 95:99:1f:62:16:e7:6d:3e:f5:5a:ba:40:f6:d1:6d: b5:39:ea:5d:b1:63:33:34:82:3e:42:8b:6b:11:6f: 18:d7:62:81:f4:4f:a2:be:e4:48:54:13:31:f5:01: b7:59:b8:6a:d2:3c:a1:a8:f1:63:3b:cf:41:1e:88: 3b:67:3f:91:23:67:2c:fe:b0:04:a8:ea:a1:42:49: 88:6c:6a:90:ac:8c:03:9e:83:df:27:f2:e2:5f:dd: 70:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C8:20:59:FD:0A:68:5C:44:4D:8E:8D:9A:6C:DD:30:B7:78:53:FD X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e34302e302f32312d3231203d3e203137363233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.112.40.0/21 Signature Algorithm: sha256WithRSAEncryption 05:85:01:68:83:d6:66:7b:23:05:36:eb:a5:07:2e:37:20:90: d2:32:c1:88:65:bd:12:a2:3c:68:ac:ef:b9:ff:80:92:28:07: 00:b6:06:be:72:bf:8a:54:0a:54:b9:b9:d9:46:0e:7b:61:7c: 97:6f:52:b8:ce:63:62:ff:6e:77:11:d0:cf:6b:3b:de:ac:db: a3:13:7c:e3:67:9e:8a:e6:83:9c:af:19:14:c6:ca:e1:c4:95: 4b:77:f3:32:cb:45:31:40:a9:c7:7d:57:09:89:bc:8e:92:13: bd:f9:2b:27:a0:08:0c:a4:8f:86:a7:03:da:50:f6:2f:fb:61: 1d:a8:2d:67:52:e1:96:fa:6a:83:73:be:da:89:6d:09:89:83: 58:53:c9:f8:49:09:60:c4:b1:8f:26:7d:f5:f8:99:ee:5a:6a: 24:4a:d1:e0:19:2f:dc:bd:b0:03:b3:ef:d3:db:32:ae:82:86: a8:f0:14:96:38:7b:51:0b:95:6f:b4:4e:6e:1f:b1:d5:78:25: 9f:9e:82:d4:0c:55:51:0a:66:50:9b:ce:aa:a0:de:4b:a8:60: 4d:10:45:ee:b4:65:2c:f9:df:b7:7d:bd:6a:a1:73:97:fd:4f: 19:f0:25:fa:d5:21:b2:2c:ca:41:2a:7d:bf:61:67:26:54:fd: df:3c:e4:29 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUS8NGg15JG3BeWOrTLVbdIqBKbO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMjU1MzhaFw0yNzA0MDkwMzAwMzhaMDMxMTAvBgNV BAMTKDgxQzgyMDU5RkQwQTY4NUM0NDREOEU4RDlBNkNERDMwQjc3ODUzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjjuSVMCMb9FzZx5/RLWo6Jkbm ZiPC8MUsMudQCSxZWdCOkti28nk5uRc7oahAr27H880MqlHtMi+DfeD2HCUAegdK oRtYmOtHPy8EMAM5Gv3UbsLgJj/7nnVhABYUCkk4so6hDIYJ3NDipUU28++sXJsT HtduGOqOKpxvsSS9r26d7f+FWny3A7IKAYCKqG8pjoN6JVcGbHKjsg+m3hXWs8d8 fJWZH2IW520+9Vq6QPbRbbU56l2xYzM0gj5Ci2sRbxjXYoH0T6K+5EhUEzH1AbdZ uGrSPKGo8WM7z0EeiDtnP5EjZyz+sASo6qFCSYhsapCsjAOeg98n8uJf3XDDAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUgcggWf0KaFxETY6NmmzdMLd4U/0wHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NDgxNTk2OTMyNDMwMjMzNy8wLzMyMzIzMDJlMzEz MTMyMmUzNDMwMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzEzNzM2MzIzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA9xwKDANBgkqhkiG9w0BAQsFAAOCAQEABYUBaIPWZnsjBTbrpQcuNyCQ 0jLBiGW9EqI8aKzvuf+AkigHALYGvnK/ilQKVLm52UYOe2F8l29SuM5jYv9udxHQ z2s73qzboxN842eeiuaDnK8ZFMbK4cSVS3fzMstFMUCpx31XCYm8jpITvfkrJ6AI DKSPhqcD2lD2L/thHagtZ1Lhlvpqg3O+2oltCYmDWFPJ+EkJYMSxjyZ99fiZ7lpq JErR4Bkv3L2wA7Pv09syroKGqPAUljh7UQuVb7RObh+x1Xgln56C1AxVUQpmUJvO qqDeS6hgTRBF7rRlLPnft329aqFzl/1PGfAl+tUhsizKQSp9v2FnJlT93zzkKQ== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:30 2026 by rpki-client