$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131352e33322e302f31392d3139203d3e2030.roa File: 3232302e3131352e33322e302f31392d3139203d3e2030.roa (raw, json) Hash identifier: mMXRzlYCugwfuO9E/dyqlexMGIr6bR+SIdUOM09nOUM= Subject key identifier: 20:CF:EB:66:E2:97:46:20:39:B4:53:AA:BF:19:4F:79:C7:85:FA:43 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 10E87128F6842C677A3D244EE75929029BCC7B37 Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131352e33322e302f31392d3139203d3e2030.roa Signing time: Fri 10 Apr 2026 03:42:31 +0000 ROA not before: Fri 10 Apr 2026 03:37:31 +0000 ROA not after: Fri 09 Apr 2027 03:42:31 +0000 asID: 0 IP address blocks: 220.115.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e8:71:28:f6:84:2c:67:7a:3d:24:4e:e7:59:29:02:9b:cc:7b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 03:37:31 2026 GMT Not After : Apr 9 03:42:31 2027 GMT Subject: CN=20CFEB66E297462039B453AABF194F79C785FA43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:18:c0:bb:5a:58:1b:22:df:b8:f7:db:80:f9: fb:28:ed:80:f7:e9:93:39:99:f9:f4:db:e5:88:e7: 3b:02:f8:0d:ef:d3:a4:54:e2:c5:b9:d4:a3:8a:59: b7:6c:c4:44:20:5a:2e:28:6a:c6:58:68:40:5d:b9: 2e:94:52:9a:c2:a1:e2:59:99:7b:11:d8:ef:62:af: 5a:66:ba:57:71:07:12:80:cd:34:e4:c9:11:91:1c: 2d:39:0b:f9:dd:a1:a6:89:e4:a4:62:2d:38:00:4f: 21:6e:be:86:d5:d3:d0:1c:c7:6c:06:7b:7f:e1:2f: fa:e0:82:ff:7b:60:f9:a9:c7:59:6a:b5:58:94:3b: 5a:61:b4:92:6c:9b:e3:23:ca:d8:84:82:f5:4e:44: c2:41:d7:13:fe:51:41:fd:47:0e:3a:f2:db:a6:7e: 5e:fb:ff:70:f1:68:8b:b3:be:6b:7c:f3:e7:83:f0: ad:e0:2c:a3:1c:7a:3b:9d:c8:f8:56:fd:11:64:ed: 77:3e:78:2e:9e:2f:ac:78:5b:7c:52:4c:4a:97:89: 79:0d:25:ef:c5:1b:b7:48:09:80:d4:f3:68:6f:ce: 0f:67:f0:1c:b3:10:47:98:5e:f8:f3:d1:0b:6a:00: 2f:77:7c:aa:81:b9:30:c0:02:70:ea:6f:8a:12:a8: 8b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CF:EB:66:E2:97:46:20:39:B4:53:AA:BF:19:4F:79:C7:85:FA:43 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131352e33322e302f31392d3139203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.115.32.0/19 Signature Algorithm: sha256WithRSAEncryption 2a:be:9a:01:55:c0:c5:cf:42:7d:17:b3:dd:6d:f1:0c:ac:0f: 2e:6b:d5:e7:ab:45:7a:8f:67:f2:ab:fc:96:cd:42:bc:b2:73: e5:13:63:28:b2:43:f5:55:1c:b5:b7:3a:32:fd:8e:b0:cf:56: d4:9e:71:54:e5:aa:39:89:c9:6e:4a:0b:d4:db:69:9e:6b:94: 6a:7d:42:19:f2:9a:a6:7c:84:b3:0b:97:3e:d6:3b:81:f8:e6: 78:3e:0e:f0:df:51:78:8c:5b:b6:90:49:59:c6:93:3b:5d:8c: 2c:a3:75:54:d6:ab:fe:9c:7a:5b:80:52:de:b8:0d:b7:e1:25: c7:38:89:9f:1f:db:bd:d6:ad:76:87:5c:8e:f8:c0:74:d8:a8: b6:f7:15:a3:81:fd:ae:6a:19:5e:2b:ce:5a:b1:e2:48:ae:6a: 00:0b:16:b3:8e:14:93:f5:99:f4:76:60:2b:46:b1:a3:d3:44: 82:3e:15:bb:61:9d:06:28:f3:ac:34:f2:e3:2e:38:68:94:b0: a1:59:33:5c:be:8d:57:42:86:70:89:6e:e8:60:a5:35:74:3c: 6c:58:ef:d0:7c:ac:b2:84:42:58:b7:53:a4:e0:f4:08:77:8a: b7:45:35:98:c4:47:8e:8c:6e:9b:bd:c8:7f:e3:6d:ba:8d:e0: 2d:39:78:32 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUEOhxKPaELGd6PSRO51kpApvMezcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMzM3MzFaFw0yNzA0MDkwMzQyMzFaMDMxMTAvBgNV BAMTKDIwQ0ZFQjY2RTI5NzQ2MjAzOUI0NTNBQUJGMTk0Rjc5Qzc4NUZBNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGMC7WlgbIt+499uA+fso7YD3 6ZM5mfn02+WI5zsC+A3v06RU4sW51KOKWbdsxEQgWi4oasZYaEBduS6UUprCoeJZ mXsR2O9ir1pmuldxBxKAzTTkyRGRHC05C/ndoaaJ5KRiLTgATyFuvobV09Acx2wG e3/hL/rggv97YPmpx1lqtViUO1phtJJsm+MjytiEgvVORMJB1xP+UUH9Rw468tum fl77/3DxaIuzvmt88+eD8K3gLKMcejudyPhW/RFk7Xc+eC6eL6x4W3xSTEqXiXkN Je/FG7dICYDU82hvzg9n8ByzEEeYXvjz0QtqAC93fKqBuTDAAnDqb4oSqItlAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUIM/rZuKXRiA5tFOqvxlPeceF+kMwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMjMwMmUzMTMx MzUyZTMzMzIyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdxz IDANBgkqhkiG9w0BAQsFAAOCAQEAKr6aAVXAxc9CfRez3W3xDKwPLmvV56tFeo9n 8qv8ls1CvLJz5RNjKLJD9VUctbc6Mv2OsM9W1J5xVOWqOYnJbkoL1NtpnmuUan1C GfKapnyEswuXPtY7gfjmeD4O8N9ReIxbtpBJWcaTO12MLKN1VNar/px6W4BS3rgN t+ElxziJnx/bvdatdodcjvjAdNiotvcVo4H9rmoZXivOWrHiSK5qAAsWs44Uk/WZ 9HZgK0axo9NEgj4Vu2GdBijzrDTy4y44aJSwoVkzXL6NV0KGcIlu6GClNXQ8bFjv 0HyssoRCWLdTpOD0CHeKt0U1mMRHjoxum73If+Ntuo3gLTl4Mg== -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:26 2026 by rpki-client