$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3139322e302f32312d3231203d3e2034383437.roa File: 3232332e3232332e3139322e302f32312d3231203d3e2034383437.roa (raw, json) Hash identifier: IvtCeTJQM5DVSx49bDpjH8LoMIjH/NPL1aiW20JkiTo= Subject key identifier: 34:DD:C8:01:38:66:5D:44:4A:CC:F2:0D:94:5F:A1:F7:09:D3:9F:EC Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Certificate serial: 0E4AE06E90CA584374FF86409271F21E721D5AEF Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3139322e302f32312d3231203d3e2034383437.roa Signing time: Mon 13 Apr 2026 06:59:35 +0000 ROA not before: Mon 13 Apr 2026 06:54:35 +0000 ROA not after: Mon 12 Apr 2027 06:59:35 +0000 asID: 4847 IP address blocks: 223.223.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4a:e0:6e:90:ca:58:43:74:ff:86:40:92:71:f2:1e:72:1d:5a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Validity Not Before: Apr 13 06:54:35 2026 GMT Not After : Apr 12 06:59:35 2027 GMT Subject: CN=34DDC80138665D444ACCF20D945FA1F709D39FEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:0e:59:03:9a:58:81:91:3f:c0:6c:10:0f: 99:d1:90:d5:02:c6:e9:ec:4b:0c:a3:76:38:04:f7: 82:92:4a:06:0f:06:39:a5:a3:e3:f2:e1:02:9f:de: 3f:3d:02:3a:83:c7:a3:dc:8a:99:ab:03:76:7a:10: b3:ea:67:34:1c:1e:9e:6c:25:35:ad:3a:6c:b7:ec: e4:c3:85:ce:6f:fd:b4:e1:57:57:04:23:2e:43:85: 2a:8e:83:e8:75:6b:9e:17:42:0a:e8:76:10:4e:7f: 84:e7:c1:17:08:18:f9:ca:f8:32:78:48:b5:95:97: cd:7d:dc:42:ee:5d:39:a5:db:51:b9:7d:77:21:14: 90:0e:47:83:71:06:cb:84:d0:0b:67:dc:82:d2:22: e8:1b:7b:81:71:0a:05:45:2f:8a:1c:af:ed:87:dc: 7e:86:9d:90:95:ba:ea:ed:e1:55:b8:58:13:96:1e: 69:58:ee:9d:27:6e:00:76:23:e0:b5:3f:73:39:e0: d1:5d:ef:db:96:2a:f7:4b:9d:ef:2c:67:8f:26:7b: bc:cf:2d:8e:79:f6:ba:40:96:5b:e1:a7:96:e3:4f: 1f:3b:9f:12:d7:0b:4e:2b:73:39:86:19:7e:f0:4e: b8:47:22:b4:de:8e:05:33:ce:d9:60:33:52:84:72: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DD:C8:01:38:66:5D:44:4A:CC:F2:0D:94:5F:A1:F7:09:D3:9F:EC X509v3 Authority Key Identifier: keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3139322e302f32312d3231203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.223.192.0/21 Signature Algorithm: sha256WithRSAEncryption 73:7d:69:0f:28:a1:86:50:51:db:69:3c:4c:d5:fb:4f:54:b0: f1:5b:67:c3:d9:c7:08:03:6b:17:50:26:dc:7f:b2:61:57:d6: 4a:68:c3:ce:05:18:ee:fe:b7:42:34:0d:4f:7e:3b:55:fd:ef: de:6a:96:83:43:82:51:50:ec:d7:7b:47:fc:5e:9b:7d:ab:46: f4:3b:46:77:1b:64:01:2e:be:5f:86:0a:0d:32:5c:7a:08:c1: 4c:9a:c6:77:21:73:5e:60:2f:ca:4f:dd:c9:3f:7d:d0:31:f7: 07:36:5a:a2:54:c4:4f:1d:a9:c0:2b:b9:96:2b:1b:c8:ab:6a: 3c:a2:d8:c9:00:75:eb:12:7a:9e:0b:55:9f:7e:90:0e:62:ef: 02:8a:56:53:16:35:79:f7:ab:bf:e5:97:2f:25:1d:c7:0f:ac: d2:ea:bd:3a:1f:91:f2:bd:31:5e:7a:d1:1f:6f:43:b0:2e:4c: b0:03:0f:3c:77:2e:22:4c:74:40:4c:ff:63:5b:77:a8:9c:85: d2:5f:52:a6:47:21:76:70:e0:3a:48:0b:cb:48:ca:0d:17:11: 6d:a8:62:d3:0a:57:18:9d:56:e0:d3:ae:1c:ee:0b:6b:da:a9: 71:8c:9d:36:02:47:22:b5:41:0e:c6:12:f1:03:24:4a:7d:54: c5:62:89:cc -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUDkrgbpDKWEN0/4ZAknHyHnIdWu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUx RjhFNkNDNjAeFw0yNjA0MTMwNjU0MzVaFw0yNzA0MTIwNjU5MzVaMDMxMTAvBgNV BAMTKDM0RERDODAxMzg2NjVENDQ0QUNDRjIwRDk0NUZBMUY3MDlEMzlGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnwA5ZA5pYgZE/wGwQD5nRkNUC xunsSwyjdjgE94KSSgYPBjmlo+Py4QKf3j89AjqDx6PcipmrA3Z6ELPqZzQcHp5s JTWtOmy37OTDhc5v/bThV1cEIy5DhSqOg+h1a54XQgrodhBOf4TnwRcIGPnK+DJ4 SLWVl8193ELuXTml21G5fXchFJAOR4NxBsuE0Atn3ILSIugbe4FxCgVFL4ocr+2H 3H6GnZCVuurt4VW4WBOWHmlY7p0nbgB2I+C1P3M54NFd79uWKvdLne8sZ48me7zP LY559rpAllvhp5bjTx87nxLXC04rczmGGX7wTrhHIrTejgUzztlgM1KEcnO1AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUNN3IAThmXURKzPINlF+h9wnTn+wwHwYDVR0j BBgwFoAUwsoSA5ooBwsPu+r95//AXh+ObMYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2MzIxNTM3Nzk4OTYzNS8wL0MyQ0ExMjAzOUEyODA3MEIwRkJCRUFGREU3RkZD MDVFMUY4RTZDQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUxRjhFNkNDNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk2MzIxNTM3Nzk4OTYzNS8wLzMyMzIzMzJlMzIz MjMzMmUzMTM5MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA9/fwDANBgkqhkiG9w0BAQsFAAOCAQEAc31pDyihhlBR22k8TNX7T1Sw 8Vtnw9nHCANrF1Am3H+yYVfWSmjDzgUY7v63QjQNT347Vf3v3mqWg0OCUVDs13tH /F6bfatG9DtGdxtkAS6+X4YKDTJcegjBTJrGdyFzXmAvyk/dyT990DH3BzZaolTE Tx2pwCu5lisbyKtqPKLYyQB16xJ6ngtVn36QDmLvAopWUxY1eferv+WXLyUdxw+s 0uq9Oh+R8r0xXnrRH29DsC5MsAMPPHcuIkx0QEz/Y1t3qJyF0l9SpkchdnDgOkgL y0jKDRcRbahi0wpXGJ1W4NOuHO4La9qpcYydNgJHIrVBDsYS8QMkSn1UxWKJzA== -----END CERTIFICATE-----Generated at Mon Apr 13 17:47:49 2026 by rpki-client