$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131332e3135352e302f32342d3234203d3e2030.roa File: 3232302e3131332e3135352e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: Eh7G3s556u3U2L6dK4yIktgXH5+Xm/Quhy7CzPh4EbU= Subject key identifier: 96:98:BC:B6:DE:A7:F2:C3:FD:CA:5A:0B:6D:6B:FD:02:03:38:F2:4E Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 1F5E4E7903C1D9E553A482DD593C2873242E3AE7 Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131332e3135352e302f32342d3234203d3e2030.roa Signing time: Fri 10 Apr 2026 03:42:30 +0000 ROA not before: Fri 10 Apr 2026 03:37:30 +0000 ROA not after: Fri 09 Apr 2027 03:42:30 +0000 asID: 0 IP address blocks: 220.113.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:5e:4e:79:03:c1:d9:e5:53:a4:82:dd:59:3c:28:73:24:2e:3a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 03:37:30 2026 GMT Not After : Apr 9 03:42:30 2027 GMT Subject: CN=9698BCB6DEA7F2C3FDCA5A0B6D6BFD020338F24E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5f:79:52:8e:8b:70:e7:e4:a2:be:03:64:b9: a9:18:3c:95:70:03:0c:40:86:24:b2:e6:88:ce:db: 4f:be:70:10:ec:dc:b8:3f:e6:03:48:b5:7d:a5:d4: 88:96:8b:95:08:50:5e:62:6e:3a:87:6c:69:fc:71: 62:62:e2:6d:97:e0:20:54:0e:33:48:3c:89:85:f2: 01:9f:1a:bf:64:e7:3f:9f:2e:e0:bf:c5:20:c9:05: 06:bf:76:4a:da:1a:73:42:2e:8c:94:c4:76:8c:b2: d3:fb:ae:20:31:1a:86:fe:bb:54:f1:01:22:8b:e3: 48:6b:45:b8:f6:c4:43:34:96:9d:52:62:8a:d5:42: 41:5c:52:6d:28:b1:a3:00:b8:6f:2e:ec:43:45:99: 82:9a:76:cc:c7:a4:33:82:be:cd:ef:03:c1:f3:f9: b1:44:82:01:13:32:f2:a3:06:14:6b:86:e8:f9:e9: 2e:11:dc:a1:7b:1f:13:26:4f:4d:ae:cd:37:47:b1: 3a:e5:e0:39:6d:08:61:d8:a9:8b:36:b9:97:b2:cb: 1b:de:55:26:3e:67:75:82:66:c7:ff:2d:bc:92:94: 68:9e:42:fc:6b:ce:1d:00:84:58:9d:e8:79:d1:4e: 98:97:ea:3f:99:ec:fe:21:2f:72:a6:b6:4a:46:a7: 39:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:98:BC:B6:DE:A7:F2:C3:FD:CA:5A:0B:6D:6B:FD:02:03:38:F2:4E X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131332e3135352e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.113.155.0/24 Signature Algorithm: sha256WithRSAEncryption 82:bd:4c:a2:67:06:6b:7e:27:3f:f3:49:6b:04:46:ef:0a:60: 0e:5f:58:8a:cb:bd:af:2a:ca:2b:e8:96:1e:2f:e5:d5:4a:d7: 70:50:26:0a:8f:9b:98:d8:06:06:e6:61:bc:48:da:db:f8:d1: 84:1a:9f:27:7c:33:97:07:79:40:13:df:0d:6e:a5:91:6a:5f: 10:47:d8:16:ef:e1:41:2b:59:eb:e9:d9:9e:dd:4e:e4:da:b5: 1f:32:75:fe:47:14:19:75:83:da:56:57:44:d4:5c:5d:f4:1a: 00:62:42:e5:33:e3:c5:09:b0:d8:8d:86:33:b2:68:30:4d:fc: 8c:fe:c9:0d:7c:92:bd:38:ab:f4:5c:7b:a1:ef:c1:3a:8a:76: 14:b8:36:84:26:49:14:47:1b:16:da:6d:1b:b6:e2:2e:fe:44: 8c:e3:da:c1:4e:cf:21:d9:c4:65:63:ff:d2:57:c6:48:ee:f7: 05:79:d3:e4:72:e2:db:2e:55:c4:fd:7e:ed:81:59:33:e7:f1: 6e:e6:d8:79:96:d8:77:1f:2b:02:1b:07:d4:dd:25:75:56:d1: 24:9a:48:0f:bf:e6:c9:2e:d0:36:aa:5a:f9:e0:1d:c1:67:8c: 7f:ee:06:cc:d7:64:00:61:85:ae:51:45:06:2f:f1:96:4e:b6: 87:6b:70:79 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUH15OeQPB2eVTpILdWTwocyQuOucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMzM3MzBaFw0yNzA0MDkwMzQyMzBaMDMxMTAvBgNV BAMTKDk2OThCQ0I2REVBN0YyQzNGRENBNUEwQjZENkJGRDAyMDMzOEYyNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjX3lSjotw5+SivgNkuakYPJVw AwxAhiSy5ojO20++cBDs3Lg/5gNItX2l1IiWi5UIUF5ibjqHbGn8cWJi4m2X4CBU DjNIPImF8gGfGr9k5z+fLuC/xSDJBQa/dkraGnNCLoyUxHaMstP7riAxGob+u1Tx ASKL40hrRbj2xEM0lp1SYorVQkFcUm0osaMAuG8u7ENFmYKadszHpDOCvs3vA8Hz +bFEggETMvKjBhRrhuj56S4R3KF7HxMmT02uzTdHsTrl4DltCGHYqYs2uZeyyxve VSY+Z3WCZsf/LbySlGieQvxrzh0AhFid6HnRTpiX6j+Z7P4hL3KmtkpGpzkfAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUlpi8tt6n8sP9yloLbWv9AgM48k4wHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMjMwMmUzMTMx MzMyZTMxMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 3HGbMA0GCSqGSIb3DQEBCwUAA4IBAQCCvUyiZwZrfic/80lrBEbvCmAOX1iKy72v Ksor6JYeL+XVStdwUCYKj5uY2AYG5mG8SNrb+NGEGp8nfDOXB3lAE98NbqWRal8Q R9gW7+FBK1nr6dme3U7k2rUfMnX+RxQZdYPaVldE1Fxd9BoAYkLlM+PFCbDYjYYz smgwTfyM/skNfJK9OKv0XHuh78E6inYUuDaEJkkURxsW2m0btuIu/kSM49rBTs8h 2cRlY//SV8ZI7vcFedPkcuLbLlXE/X7tgVkz5/Fu5th5lth3HysCGwfU3SV1VtEk mkgPv+bJLtA2qlr54B3BZ4x/7gbM12QAYYWuUUUGL/GWTraHa3B5 -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:24 2026 by rpki-client