$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3132362e302f32332d3233203d3e203137363233.roa File: 3231312e3136322e3132362e302f32332d3233203d3e203137363233.roa (raw, json) Hash identifier: NxsWQdA9pM0Uh7vjZxyr4UKJfrDjnmnJ2spIyzuCbQs= Subject key identifier: F4:D6:D3:30:8D:2F:63:07:B2:59:83:9B:6E:F9:CE:8A:18:62:F0:50 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 23BFD2C0A092FF23E99AF0E59E808F602847DA2B Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3132362e302f32332d3233203d3e203137363233.roa Signing time: Fri 24 Apr 2026 07:04:13 +0000 ROA not before: Fri 24 Apr 2026 06:59:13 +0000 ROA not after: Fri 23 Apr 2027 07:04:13 +0000 asID: 17623 IP address blocks: 211.162.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:bf:d2:c0:a0:92:ff:23:e9:9a:f0:e5:9e:80:8f:60:28:47:da:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 24 06:59:13 2026 GMT Not After : Apr 23 07:04:13 2027 GMT Subject: CN=F4D6D3308D2F6307B259839B6EF9CE8A1862F050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:72:f7:10:66:51:11:49:a2:b3:5e:d8:2d:2e: 42:df:d9:e8:8e:99:9b:7c:64:87:9c:54:74:8e:87: 16:69:71:25:df:25:cf:5c:8a:e9:56:fd:3a:4d:f7: fa:da:01:73:80:53:32:2a:27:cd:cc:01:1d:06:9c: 4c:2f:29:ce:84:6a:5c:56:90:ae:c8:d4:76:0c:56: 37:21:e7:01:bc:4a:2a:f1:56:79:c0:cc:86:db:18: 2f:96:6f:03:f0:e0:6a:a6:a0:7a:41:91:3d:b4:e8: 9a:4c:c8:2a:42:d7:17:ff:b5:e4:5d:8d:75:17:6a: 04:33:b3:90:ac:e8:18:fe:2b:be:16:a3:4d:1c:64: f2:fd:f8:e2:72:28:d9:1f:d9:e7:e1:9f:2b:d7:a5: 5d:5d:2e:59:e2:cb:e1:24:35:bd:58:53:b5:37:97: 3e:ae:39:75:5f:d7:f1:e6:04:f1:da:17:ad:38:f6: a6:03:17:7c:b5:f8:4f:9f:c8:94:9c:63:7b:30:c2: 3f:28:5a:a1:25:74:cb:d9:db:d3:6a:61:3b:e8:23: a1:51:97:8a:7f:c4:b0:7f:d7:eb:c7:db:30:d6:76: 74:8b:bf:c2:79:b9:6d:ff:f5:91:69:8c:2b:e2:87: 19:f1:a8:0e:4d:93:68:e9:93:73:56:f8:07:52:d7: 3e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D6:D3:30:8D:2F:63:07:B2:59:83:9B:6E:F9:CE:8A:18:62:F0:50 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e3132362e302f32332d3233203d3e203137363233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.162.126.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:35:77:5f:99:d2:27:24:69:b2:49:26:53:04:b9:f3:37:43: 84:20:a4:13:4f:6e:0d:d9:d7:c9:91:46:b4:f9:8d:f3:a2:f9: 3b:b0:c4:3e:1e:0a:27:7a:f9:f3:e6:cf:fd:d7:2b:df:a8:ed: 77:9a:05:5a:80:ee:b3:f3:54:e6:3b:dc:42:0a:d5:3f:d0:a4: 41:57:1e:e2:09:4a:37:92:d7:cd:c9:e8:e5:75:72:fa:3a:7b: ab:c4:a2:8f:70:7a:d3:1a:08:59:ab:8f:6e:3a:ad:15:ae:28: 2c:40:92:3e:e4:9b:1e:d1:19:3e:db:a1:06:02:c2:0b:10:11: e7:ff:21:ad:44:63:10:25:3a:2e:7d:ef:81:07:ff:40:43:53: fc:67:ae:d0:62:5c:9c:e0:fb:48:64:a7:b4:4d:cf:3e:f9:c5: b9:e4:d9:21:d5:df:c1:20:a9:f1:2d:3c:ea:b0:ef:6f:58:32: 56:b5:66:39:05:aa:04:22:a9:18:ce:b4:8b:8e:9f:1f:84:60: fe:8c:45:a8:83:7d:c9:de:0b:cf:08:a5:a9:d7:2e:5c:a9:83: e3:6d:bc:a7:d7:7c:21:a0:66:49:7c:25:7a:3e:56:b6:c8:e2: f3:5f:b3:3e:6f:71:e2:ec:3b:45:f0:7b:24:58:24:24:4f:3d: 4b:b6:5a:5d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUI7/SwKCS/yPpmvDlnoCPYChH2iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MjQwNjU5MTNaFw0yNzA0MjMwNzA0MTNaMDMxMTAvBgNV BAMTKEY0RDZEMzMwOEQyRjYzMDdCMjU5ODM5QjZFRjlDRThBMTg2MkYwNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVcvcQZlERSaKzXtgtLkLf2eiO mZt8ZIecVHSOhxZpcSXfJc9ciulW/TpN9/raAXOAUzIqJ83MAR0GnEwvKc6EalxW kK7I1HYMVjch5wG8SirxVnnAzIbbGC+WbwPw4GqmoHpBkT206JpMyCpC1xf/teRd jXUXagQzs5Cs6Bj+K74Wo00cZPL9+OJyKNkf2efhnyvXpV1dLlniy+EkNb1YU7U3 lz6uOXVf1/HmBPHaF6049qYDF3y1+E+fyJScY3swwj8oWqEldMvZ29NqYTvoI6FR l4p/xLB/1+vH2zDWdnSLv8J5uW3/9ZFpjCvihxnxqA5Nk2jpk3NW+AdS1z4jAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU9NbTMI0vYweyWYObbvnOihhi8FAwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4MTU5NjkzMjQzMDIzMzcvMC8zMjMxMzEyZTMx MzYzMjJlMzEzMjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzNzM2MzIzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAdOifjANBgkqhkiG9w0BAQsFAAOCAQEAnDV3X5nSJyRpskkmUwS5 8zdDhCCkE09uDdnXyZFGtPmN86L5O7DEPh4KJ3r58+bP/dcr36jtd5oFWoDus/NU 5jvcQgrVP9CkQVce4glKN5LXzcno5XVy+jp7q8Sij3B60xoIWauPbjqtFa4oLECS PuSbHtEZPtuhBgLCCxAR5/8hrURjECU6Ln3vgQf/QENT/Geu0GJcnOD7SGSntE3P PvnFueTZIdXfwSCp8S086rDvb1gyVrVmOQWqBCKpGM60i46fH4Rg/oxFqIN9yd4L zwilqdcuXKmD4228p9d8IaBmSXwlej5Wtsji81+zPm9x4uw7RfB7JFgkJE89S7Za XQ== -----END CERTIFICATE-----Generated at Wed May 13 13:53:54 2026 by rpki-client