$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35312e302f32342d3234203d3e203137363233.roa File: 3232302e3131322e35312e302f32342d3234203d3e203137363233.roa (raw, json) Hash identifier: vmqmzAwl3xa274OqjmH00n2WFDAciy1H18e75UZC/VY= Subject key identifier: 99:A6:C6:47:8C:85:80:11:05:5A:DD:BA:09:0D:F7:33:87:69:A8:FA Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 28006220396D3503BDD40619C91C2C83F6904FA7 Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35312e302f32342d3234203d3e203137363233.roa Signing time: Fri 10 Apr 2026 03:00:39 +0000 ROA not before: Fri 10 Apr 2026 02:55:39 +0000 ROA not after: Fri 09 Apr 2027 03:00:39 +0000 asID: 17623 IP address blocks: 220.112.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:00:62:20:39:6d:35:03:bd:d4:06:19:c9:1c:2c:83:f6:90:4f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 02:55:39 2026 GMT Not After : Apr 9 03:00:39 2027 GMT Subject: CN=99A6C6478C858011055ADDBA090DF7338769A8FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:dc:0d:1d:68:8b:88:e5:93:e5:88:42:41: 08:6f:ae:65:86:b0:93:fb:ee:a2:c6:ef:37:b4:72: 23:a5:96:73:74:9a:2f:bc:a3:20:9b:1f:23:37:fd: 8e:95:40:40:a7:77:04:79:96:8e:a4:a8:c7:19:c1: 7d:f3:f3:fe:44:07:a7:14:e0:e0:bf:7a:b9:f5:2c: a0:5a:5d:85:1a:56:31:78:e8:7d:74:9e:db:db:f7: 7c:47:0b:35:e8:15:39:bc:1a:69:b9:c4:b4:2c:2a: 0b:c0:78:bc:b3:2e:82:14:06:4a:56:e6:1f:7e:7d: 45:35:d2:59:1a:46:3f:e1:a6:07:cf:7d:c1:1e:47: 79:8e:21:b9:cc:35:8e:b8:ba:60:a2:ae:9f:05:28: 2c:07:6b:d7:ef:c0:25:cc:1a:0d:07:ac:c5:ac:d2: 63:db:9e:d9:e1:6d:e3:f4:30:2e:c1:50:b7:70:bc: ba:8b:0a:59:f2:37:59:29:a6:f5:87:45:11:aa:26: 37:90:ee:24:fe:c5:cb:bb:fd:fe:55:16:70:97:14: 7a:55:ee:71:5c:8b:3a:77:65:07:5d:d5:c5:b0:5c: 4e:76:6b:bb:11:cc:6b:ed:f4:f2:e0:40:94:ce:cc: 30:60:95:83:2b:5c:d7:1e:e3:a5:63:5d:cc:a2:2d: c7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A6:C6:47:8C:85:80:11:05:5A:DD:BA:09:0D:F7:33:87:69:A8:FA X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35312e302f32342d3234203d3e203137363233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.112.51.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:26:e6:a7:38:c1:fb:b1:df:c6:0b:c5:24:6f:83:2b:c9:e1: 20:72:24:12:13:17:99:40:d6:f1:79:e9:65:97:f8:7d:55:e8: 28:67:5a:df:32:f7:32:ae:18:60:17:d2:e0:47:15:b7:4f:c1: 36:88:d7:41:ba:d4:a1:68:0e:b8:fd:c0:34:08:21:f2:94:2d: 2d:83:2a:da:01:b3:3a:f6:94:4e:ca:50:50:2c:fa:59:84:42: ab:92:4d:e4:8b:6a:b9:48:6b:35:e3:96:31:06:8d:6a:0e:b5: 8b:93:dd:19:1b:23:c9:c1:b6:75:71:5d:27:be:09:70:f8:57: 16:88:99:21:b9:d7:31:c9:da:3c:19:4e:6c:91:1e:82:0e:9c: bb:f6:b2:fd:0b:70:2b:3b:f4:3e:b5:21:d0:83:36:a8:f1:c5: ae:3b:70:20:86:30:84:68:cd:06:8f:b8:61:54:89:cb:11:c2: 31:7c:ed:87:24:7a:1d:c3:14:dd:63:1b:8f:f6:1d:82:a6:d5: 68:67:d8:1d:72:ad:5f:f0:0b:92:b1:47:24:4d:06:d5:6d:f8: 3c:16:de:fa:8c:ba:bd:41:77:d9:5f:c3:bf:98:31:96:5a:8e: 87:3f:07:4a:84:e7:f1:35:12:be:78:11:e9:86:dc:14:61:ca: 55:8c:77:f9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKABiIDltNQO91AYZyRwsg/aQT6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMjU1MzlaFw0yNzA0MDkwMzAwMzlaMDMxMTAvBgNV BAMTKDk5QTZDNjQ3OEM4NTgwMTEwNTVBRERCQTA5MERGNzMzODc2OUE4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvFdwNHWiLiOWT5YhCQQhvrmWG sJP77qLG7ze0ciOllnN0mi+8oyCbHyM3/Y6VQECndwR5lo6kqMcZwX3z8/5EB6cU 4OC/ern1LKBaXYUaVjF46H10ntvb93xHCzXoFTm8Gmm5xLQsKgvAeLyzLoIUBkpW 5h9+fUU10lkaRj/hpgfPfcEeR3mOIbnMNY64umCirp8FKCwHa9fvwCXMGg0HrMWs 0mPbntnhbeP0MC7BULdwvLqLClnyN1kppvWHRRGqJjeQ7iT+xcu7/f5VFnCXFHpV 7nFcizp3ZQdd1cWwXE52a7sRzGvt9PLgQJTOzDBglYMrXNce46VjXcyiLccxAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUmabGR4yFgBEFWt26CQ33M4dpqPowHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NDgxNTk2OTMyNDMwMjMzNy8wLzMyMzIzMDJlMzEz MTMyMmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANxwMzANBgkqhkiG9w0BAQsFAAOCAQEAmibmpzjB+7HfxgvFJG+DK8nh IHIkEhMXmUDW8XnpZZf4fVXoKGda3zL3Mq4YYBfS4EcVt0/BNojXQbrUoWgOuP3A NAgh8pQtLYMq2gGzOvaUTspQUCz6WYRCq5JN5ItquUhrNeOWMQaNag61i5PdGRsj ycG2dXFdJ74JcPhXFoiZIbnXMcnaPBlObJEegg6cu/ay/QtwKzv0PrUh0IM2qPHF rjtwIIYwhGjNBo+4YVSJyxHCMXzthyR6HcMU3WMbj/YdgqbVaGfYHXKtX/ALkrFH JE0G1W34PBbe+oy6vUF32V/Dv5gxllqOhz8HSoTn8TUSvngR6YbcFGHKVYx3+Q== -----END CERTIFICATE-----Generated at Mon Apr 13 15:20:47 2026 by rpki-client