$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131332e3135362e302f32322d3232203d3e2030.roa File: 3232302e3131332e3135362e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: S9KtFQeOtHyclULvXPBpEnKciot6RXyQ09hDeXdIZmw= Subject key identifier: D3:B7:AD:5B:AA:65:0E:A9:DA:0A:43:CF:E2:AF:FD:94:A9:94:B7:74 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 1563E57354787CF760FA0BE198783F620E97A00B Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131332e3135362e302f32322d3232203d3e2030.roa Signing time: Fri 10 Apr 2026 03:42:30 +0000 ROA not before: Fri 10 Apr 2026 03:37:30 +0000 ROA not after: Fri 09 Apr 2027 03:42:30 +0000 asID: 0 IP address blocks: 220.113.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:63:e5:73:54:78:7c:f7:60:fa:0b:e1:98:78:3f:62:0e:97:a0:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 03:37:30 2026 GMT Not After : Apr 9 03:42:30 2027 GMT Subject: CN=D3B7AD5BAA650EA9DA0A43CFE2AFFD94A994B774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:17:46:06:9c:c3:77:8a:cc:26:48:c3:4f:45: 51:10:cc:68:07:bc:b4:b3:86:9d:5a:7f:bf:93:98: 09:7c:bb:1a:d9:ba:2d:88:86:0a:25:6c:4e:76:e2: c2:28:ad:96:da:fe:eb:97:17:4b:9d:bd:04:76:3a: 04:7c:0c:89:71:f4:52:39:d3:f4:11:2b:98:8c:34: e0:38:d2:1c:8b:ad:02:64:fa:dc:5f:57:7f:e9:e5: 5b:2a:97:ed:3f:8a:6f:3c:ae:5c:03:45:7f:75:74: f7:51:af:78:be:95:95:26:fb:89:0b:21:9d:99:93: b6:1c:51:37:4a:cb:76:57:c1:ea:b8:1a:d6:6b:66: 0b:9a:b9:27:d3:95:11:f5:4b:f0:38:b3:54:ef:e3: fd:27:58:7a:3e:27:76:59:fb:72:44:bb:89:13:b1: 7c:03:99:f5:3a:51:0e:37:27:a2:72:eb:a9:c8:ce: 98:75:ae:ac:33:9d:27:1b:f8:7e:29:74:26:22:72: eb:84:b4:34:63:37:e3:37:4e:26:cd:e8:ed:7a:f4: 6e:05:5e:47:8e:21:f9:4b:e0:8d:87:fd:5a:d7:de: ce:22:77:50:1e:00:a5:0b:63:b7:c5:ca:b6:ad:10: 0a:6c:b9:5e:97:c3:f0:0d:47:de:e7:87:f1:d2:bb: 8b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B7:AD:5B:AA:65:0E:A9:DA:0A:43:CF:E2:AF:FD:94:A9:94:B7:74 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131332e3135362e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.113.156.0/22 Signature Algorithm: sha256WithRSAEncryption 50:f4:b9:c4:c8:9d:f7:0e:0d:06:ae:8e:d6:63:ed:ae:22:97: 49:d7:68:42:a8:e4:4e:bd:40:ef:e5:05:ad:24:f9:60:12:8e: 5b:a5:8c:ce:82:eb:3b:a3:9e:ae:29:2b:11:32:ec:20:32:84: 31:60:2e:84:25:68:44:8e:51:58:3f:bc:1f:13:66:d9:b9:0d: 42:79:1e:58:80:55:63:de:8a:fc:0e:98:6b:28:53:42:93:9d: c8:6b:a9:f6:ce:f4:cf:25:5f:94:c0:c9:68:37:22:58:c6:fa: 20:62:aa:45:a2:40:ad:0d:50:83:80:b1:ee:b6:fa:2c:93:96: f2:8d:8d:7b:e6:82:9d:c0:9c:e0:4b:0c:ba:db:0b:fa:f7:1b: fa:27:2a:fa:7a:a0:11:52:e7:5d:a3:cf:f0:ad:84:2b:4d:26: 85:ed:97:fb:e6:59:78:ee:3b:af:69:78:47:66:50:bc:e3:87: 58:30:0b:0a:6a:99:0f:7c:13:7f:5a:d5:0f:bf:c8:45:48:10: 11:b9:f4:f4:d7:db:b9:63:b8:89:57:95:d1:d0:07:d5:ff:86: f6:66:79:e5:fb:dc:89:14:ff:20:0a:64:14:c0:3b:8f:39:03: 4a:b9:85:05:64:5f:fe:11:fd:42:fc:e1:98:7e:9b:f2:d3:39: eb:d2:6d:e8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUFWPlc1R4fPdg+gvhmHg/Yg6XoAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMzM3MzBaFw0yNzA0MDkwMzQyMzBaMDMxMTAvBgNV BAMTKEQzQjdBRDVCQUE2NTBFQTlEQTBBNDNDRkUyQUZGRDk0QTk5NEI3NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMF0YGnMN3iswmSMNPRVEQzGgH vLSzhp1af7+TmAl8uxrZui2IhgolbE524sIorZba/uuXF0udvQR2OgR8DIlx9FI5 0/QRK5iMNOA40hyLrQJk+txfV3/p5Vsql+0/im88rlwDRX91dPdRr3i+lZUm+4kL IZ2Zk7YcUTdKy3ZXweq4GtZrZguauSfTlRH1S/A4s1Tv4/0nWHo+J3ZZ+3JEu4kT sXwDmfU6UQ43J6Jy66nIzph1rqwznScb+H4pdCYicuuEtDRjN+M3TibN6O169G4F XkeOIflL4I2H/VrX3s4id1AeAKULY7fFyratEApsuV6Xw/ANR97nh/HSu4uJAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU07etW6plDqnaCkPP4q/9lKmUt3QwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMjMwMmUzMTMx MzMyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC 3HGcMA0GCSqGSIb3DQEBCwUAA4IBAQBQ9LnEyJ33Dg0Gro7WY+2uIpdJ12hCqORO vUDv5QWtJPlgEo5bpYzOgus7o56uKSsRMuwgMoQxYC6EJWhEjlFYP7wfE2bZuQ1C eR5YgFVj3or8DphrKFNCk53Ia6n2zvTPJV+UwMloNyJYxvogYqpFokCtDVCDgLHu tvosk5byjY175oKdwJzgSwy62wv69xv6Jyr6eqARUuddo8/wrYQrTSaF7Zf75ll4 7juvaXhHZlC844dYMAsKapkPfBN/WtUPv8hFSBARufT019u5Y7iJV5XR0AfV/4b2 Znnl+9yJFP8gCmQUwDuPOQNKuYUFZF/+Ef1C/OGYfpvy0znr0m3o -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:23 2026 by rpki-client