$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131332e3232342e302f31392d3139203d3e2030.roa File: 3232302e3131332e3232342e302f31392d3139203d3e2030.roa (raw, json) Hash identifier: oPsdrDXXkFdDK6rkCFfavQ9n95HvNvasXv0akbB9Hfc= Subject key identifier: 87:9A:A4:30:29:54:82:29:42:99:A1:16:4E:9D:9C:BA:56:93:15:29 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 75988272D9D7E4A2F2E07099B8A81A1B27C5CD0D Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131332e3232342e302f31392d3139203d3e2030.roa Signing time: Fri 10 Apr 2026 03:42:30 +0000 ROA not before: Fri 10 Apr 2026 03:37:30 +0000 ROA not after: Fri 09 Apr 2027 03:42:30 +0000 asID: 0 IP address blocks: 220.113.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:98:82:72:d9:d7:e4:a2:f2:e0:70:99:b8:a8:1a:1b:27:c5:cd:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 03:37:30 2026 GMT Not After : Apr 9 03:42:30 2027 GMT Subject: CN=879AA430295482294299A1164E9D9CBA56931529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:be:90:a3:38:61:50:20:1d:91:3c:e2:91:d5: b1:9f:1d:48:63:91:ca:c5:cf:ee:d9:71:5c:07:89: a7:71:87:f0:1a:d7:6e:df:af:7a:a2:6f:74:58:3f: 34:ba:ac:8a:1a:6c:0b:ee:a4:18:07:7b:c0:cf:c8: b8:ad:b8:54:ef:93:94:57:74:e8:92:26:1d:e1:09: 3c:d7:f1:57:d4:2b:20:40:ac:7f:e0:c5:fc:28:ae: e0:66:ae:52:04:a4:43:90:cc:68:e9:cf:91:01:a5: 4c:98:0a:b2:76:35:8c:4d:12:71:b7:29:87:05:87: b5:a1:4c:13:8a:64:7e:72:c7:65:dc:f0:af:e0:19: fa:52:e8:85:b0:59:ed:6a:e3:dc:65:b6:21:5c:36: bf:c0:30:3f:f8:7a:c8:e6:0f:7d:30:39:d2:3e:31: 6a:be:15:e8:50:70:7a:8a:9a:bf:d5:00:2a:f4:95: 8f:7e:18:d8:55:11:0d:87:a3:ee:bf:78:bc:23:72: eb:25:8f:5d:f6:d6:b9:e5:41:37:32:fc:c9:b4:e7: b2:b9:a6:62:9a:fe:d6:96:1d:f5:a6:ed:a9:4d:6c: b6:89:c7:4b:84:13:89:1b:f9:01:23:d6:58:3a:e2: 0c:70:25:d2:c9:7e:88:8a:16:2a:48:e3:0f:04:05: b9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9A:A4:30:29:54:82:29:42:99:A1:16:4E:9D:9C:BA:56:93:15:29 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131332e3232342e302f31392d3139203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.113.224.0/19 Signature Algorithm: sha256WithRSAEncryption 4a:b2:0c:eb:06:50:93:47:99:85:4d:0c:b0:bd:c8:7d:ea:16: 98:30:66:9b:a6:9d:c5:9c:e7:5b:96:91:1b:5b:39:7a:b4:b1: 19:cc:73:c6:01:d6:de:2d:7d:75:8e:35:4f:af:a9:d6:07:3c: 75:74:74:b9:df:3d:40:87:1a:07:cb:e0:0e:dc:3a:f1:a1:b8: 23:f0:c4:c7:1c:03:54:07:68:1e:16:56:1d:9a:e7:79:56:1f: 5f:14:03:13:41:dc:d2:bc:0f:ca:aa:01:f3:3a:78:5b:a9:e0: 66:0f:b5:38:e1:89:7e:47:e6:2d:e2:ab:b1:b2:d2:4d:8c:c6: fb:1d:ec:eb:0c:a6:36:67:0f:df:1a:6f:74:a5:54:74:9f:d4: 73:79:f8:58:55:e9:63:0b:08:3e:e0:3e:dc:a1:4d:b9:8b:a4: 05:0c:e8:95:dc:66:05:33:f2:04:92:5c:ee:d8:38:c3:60:8e: a0:5b:c2:95:c5:a1:83:11:42:64:3b:31:e9:b2:d5:d8:98:35: 10:b8:f1:43:30:be:71:24:06:91:4f:7d:8e:63:48:8a:6c:b0: 6e:c8:fe:c5:29:24:13:df:a0:fa:c7:17:5b:27:f0:c8:8c:e2: 92:67:6f:af:a4:1a:f7:c9:08:75:c5:23:15:e0:c1:e8:56:b4: 41:13:c8:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUdZiCctnX5KLy4HCZuKgaGyfFzQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMzM3MzBaFw0yNzA0MDkwMzQyMzBaMDMxMTAvBgNV BAMTKDg3OUFBNDMwMjk1NDgyMjk0Mjk5QTExNjRFOUQ5Q0JBNTY5MzE1MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvpCjOGFQIB2RPOKR1bGfHUhj kcrFz+7ZcVwHiadxh/Aa127fr3qib3RYPzS6rIoabAvupBgHe8DPyLituFTvk5RX dOiSJh3hCTzX8VfUKyBArH/gxfworuBmrlIEpEOQzGjpz5EBpUyYCrJ2NYxNEnG3 KYcFh7WhTBOKZH5yx2Xc8K/gGfpS6IWwWe1q49xltiFcNr/AMD/4esjmD30wOdI+ MWq+FehQcHqKmr/VACr0lY9+GNhVEQ2Ho+6/eLwjcuslj1321rnlQTcy/Mm057K5 pmKa/taWHfWm7alNbLaJx0uEE4kb+QEj1lg64gxwJdLJfoiKFipI4w8EBbmZAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUh5qkMClUgilCmaEWTp2culaTFSkwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMjMwMmUzMTMx MzMyZTMyMzIzNDJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF 3HHgMA0GCSqGSIb3DQEBCwUAA4IBAQBKsgzrBlCTR5mFTQywvch96haYMGabpp3F nOdblpEbWzl6tLEZzHPGAdbeLX11jjVPr6nWBzx1dHS53z1AhxoHy+AO3Drxobgj 8MTHHANUB2geFlYdmud5Vh9fFAMTQdzSvA/KqgHzOnhbqeBmD7U44Yl+R+Yt4qux stJNjMb7HezrDKY2Zw/fGm90pVR0n9RzefhYVeljCwg+4D7coU25i6QFDOiV3GYF M/IEklzu2DjDYI6gW8KVxaGDEUJkOzHpstXYmDUQuPFDML5xJAaRT32OY0iKbLBu yP7FKSQT36D6xxdbJ/DIjOKSZ2+vpBr3yQh1xSMV4MHoVrRBE8hl -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:31 2026 by rpki-client