$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131332e3135342e302f32342d3234203d3e203137363233.roa File: 3232302e3131332e3135342e302f32342d3234203d3e203137363233.roa (raw, json) Hash identifier: iYzkGR+ExP4l/2uAzE4i3VXl+ZzaUHTjqNCk5mzqnb4= Subject key identifier: 92:7C:02:D2:AF:1F:2C:1C:12:64:90:4C:65:46:EB:69:9F:AD:1C:82 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 5920433882D6E9B0C4D3F8FD1D0D15C6F84390B5 Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131332e3135342e302f32342d3234203d3e203137363233.roa Signing time: Mon 27 Apr 2026 01:52:12 +0000 ROA not before: Mon 27 Apr 2026 01:47:12 +0000 ROA not after: Mon 26 Apr 2027 01:52:12 +0000 asID: 17623 IP address blocks: 220.113.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:20:43:38:82:d6:e9:b0:c4:d3:f8:fd:1d:0d:15:c6:f8:43:90:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 27 01:47:12 2026 GMT Not After : Apr 26 01:52:12 2027 GMT Subject: CN=927C02D2AF1F2C1C1264904C6546EB699FAD1C82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:74:08:b5:1f:38:47:03:ed:33:4f:81:a1:69: b2:8b:a2:d7:3c:5a:bf:71:ac:2d:98:77:7c:d6:ad: ab:8a:96:23:9b:ea:24:07:4a:0d:13:24:9f:6e:6a: c8:e4:ef:21:b0:9b:a2:aa:53:8c:a0:4b:a9:57:06: ce:37:ee:c9:a8:9c:08:bf:80:a4:73:18:70:d6:aa: 72:c9:ce:8b:e3:b3:63:8e:35:07:58:68:dc:7b:32: cb:04:ee:16:74:ff:d7:f0:e4:49:f6:17:d5:f6:4c: 30:39:47:26:f7:a5:3f:11:7c:d2:95:33:91:24:3f: 67:8a:24:77:1c:51:c9:47:fe:8d:e7:d7:7a:7f:49: 3b:a4:81:00:c5:c1:dc:67:5b:8f:24:aa:41:fc:b2: aa:42:f3:47:36:27:b3:3c:ae:92:60:f5:45:7b:ed: d1:b9:82:c6:92:9c:96:35:7b:e9:3d:f9:98:d6:4d: 4c:2f:9d:44:3c:1a:9b:7a:08:84:93:4e:99:6a:eb: 7b:2a:40:68:04:ee:95:85:6c:74:1a:4d:cd:d0:54: 3e:cf:34:ca:2c:f5:24:c3:6a:fe:e1:3c:32:46:a1: e5:8f:ca:db:e2:f8:4d:21:d9:e0:bc:de:f0:fe:9c: 78:c4:24:be:7d:a6:3e:8f:42:72:d6:a1:2d:d6:75: ee:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7C:02:D2:AF:1F:2C:1C:12:64:90:4C:65:46:EB:69:9F:AD:1C:82 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131332e3135342e302f32342d3234203d3e203137363233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.113.154.0/24 Signature Algorithm: sha256WithRSAEncryption 58:ff:47:9c:a9:23:9d:5b:71:23:24:d2:26:67:70:76:fc:5c: 1e:20:b6:2c:49:d1:64:36:48:08:67:1f:91:65:54:9a:b3:7e: 1a:78:ce:38:ab:40:3b:7a:41:09:5f:69:63:96:f8:7e:82:a6: b8:c6:90:21:a4:4b:d1:48:c6:65:73:2b:9f:dc:ca:43:00:dd: fa:44:b1:16:47:61:fc:f9:28:e9:40:53:e4:50:b4:fb:e1:a1: ee:17:24:1d:44:23:a4:19:78:81:fc:e6:f5:75:78:e2:c8:b1: 0e:37:71:3b:ce:2e:e8:8d:e2:63:26:d8:62:13:b3:f8:0d:06: f1:2d:02:91:1e:e9:f2:11:78:68:b0:36:d6:e3:f3:16:5e:fa: 0f:2b:1b:83:75:2d:6d:65:54:ad:cf:21:75:28:d2:0d:48:b9: 2f:3f:20:6f:37:ca:e7:c7:e3:63:a3:26:eb:07:2f:72:9a:a8: ea:69:df:15:b0:7e:6d:89:6e:6a:f6:91:27:47:9c:f7:30:f9: 27:8f:b0:4d:09:31:b6:cf:f3:94:fa:8a:95:71:48:ab:34:7b: d7:ca:16:dc:63:96:95:04:10:e7:9e:f1:6e:98:00:5a:7d:64: 6c:64:c1:cc:bb:ba:38:00:58:b3:77:a2:1a:90:cd:df:ab:6f: 2f:0e:8f:96 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWSBDOILW6bDE0/j9HQ0VxvhDkLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MjcwMTQ3MTJaFw0yNzA0MjYwMTUyMTJaMDMxMTAvBgNV BAMTKDkyN0MwMkQyQUYxRjJDMUMxMjY0OTA0QzY1NDZFQjY5OUZBRDFDODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjdAi1HzhHA+0zT4GhabKLotc8 Wr9xrC2Yd3zWrauKliOb6iQHSg0TJJ9uasjk7yGwm6KqU4ygS6lXBs437smonAi/ gKRzGHDWqnLJzovjs2OONQdYaNx7MssE7hZ0/9fw5En2F9X2TDA5Ryb3pT8RfNKV M5EkP2eKJHccUclH/o3n13p/STukgQDFwdxnW48kqkH8sqpC80c2J7M8rpJg9UV7 7dG5gsaSnJY1e+k9+ZjWTUwvnUQ8Gpt6CISTTplq63sqQGgE7pWFbHQaTc3QVD7P NMos9STDav7hPDJGoeWPytvi+E0h2eC83vD+nHjEJL59pj6PQnLWoS3Wde69AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUknwC0q8fLBwSZJBMZUbraZ+tHIIwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4MTU5NjkzMjQzMDIzMzcvMC8zMjMyMzAyZTMx MzEzMzJlMzEzNTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANxxmjANBgkqhkiG9w0BAQsFAAOCAQEAWP9HnKkjnVtxIyTSJmdw dvxcHiC2LEnRZDZICGcfkWVUmrN+GnjOOKtAO3pBCV9pY5b4foKmuMaQIaRL0UjG ZXMrn9zKQwDd+kSxFkdh/Pko6UBT5FC0++Gh7hckHUQjpBl4gfzm9XV44sixDjdx O84u6I3iYybYYhOz+A0G8S0CkR7p8hF4aLA21uPzFl76Dysbg3UtbWVUrc8hdSjS DUi5Lz8gbzfK58fjY6Mm6wcvcpqo6mnfFbB+bYluavaRJ0ec9zD5J4+wTQkxts/z lPqKlXFIqzR718oW3GOWlQQQ557xbpgAWn1kbGTBzLu6OABYs3eiGpDN36tvLw6P lg== -----END CERTIFICATE-----Generated at Wed May 13 15:56:55 2026 by rpki-client