$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099898650089291777/0/3231312e3135342e3137362e302f32302d3230203d3e203137383136.roa File: 3231312e3135342e3137362e302f32302d3230203d3e203137383136.roa (raw, json) Hash identifier: 9mhciqlhVNGj1pcFXF1OQGsR962WTBsnthesg/P07WQ= Subject key identifier: A4:ED:09:26:46:05:AC:05:BD:84:81:4F:CC:95:27:06:22:54:BB:AB Certificate issuer: /CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Certificate serial: 6A21A013EDBC0868337EC4201017D13CAC5CCA45 Authority key identifier: 32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/3231312e3135342e3137362e302f32302d3230203d3e203137383136.roa Signing time: Fri 24 Apr 2026 03:37:12 +0000 ROA not before: Fri 24 Apr 2026 03:32:12 +0000 ROA not after: Fri 23 Apr 2027 03:37:12 +0000 asID: 17816 IP address blocks: 211.154.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:21:a0:13:ed:bc:08:68:33:7e:c4:20:10:17:d1:3c:ac:5c:ca:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Validity Not Before: Apr 24 03:32:12 2026 GMT Not After : Apr 23 03:37:12 2027 GMT Subject: CN=A4ED09264605AC05BD84814FCC9527062254BBAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0d:9d:cc:6f:73:dd:24:3e:50:f4:73:8c:c2: 54:81:fa:16:f5:08:b2:bb:c2:ff:5f:bc:69:69:04: 2f:16:e0:31:14:bb:48:ad:0b:86:9d:14:49:9a:d4: fb:d3:f5:fa:d1:94:3f:e3:e8:f6:47:2b:58:42:7b: 23:63:89:9d:28:7b:ce:e7:a8:26:b8:bd:3e:9e:3f: e5:07:a7:91:0c:ec:c4:3b:00:e7:5a:14:05:6e:4b: de:1a:f3:16:2f:f6:9b:e8:48:6b:cb:5f:1b:f9:04: 7e:c9:7e:2c:44:2f:14:4f:28:e8:9f:aa:59:18:05: f8:a5:8f:45:f9:26:d6:1e:8e:f7:17:b0:be:60:19: 35:10:a1:9b:b3:44:8e:1e:f4:1c:87:10:6c:3b:fd: 10:05:f0:40:01:28:0d:73:47:3f:38:a6:51:5e:b1: f9:5c:a7:98:f8:c7:db:da:0c:ae:50:20:21:de:a8: d9:44:84:4e:8a:d3:49:a1:c7:1c:74:19:dc:81:b0: b8:ae:7c:5d:ba:5f:32:6a:37:ca:7c:39:21:42:79: c0:7a:c4:50:69:d0:c6:f7:b4:bc:d3:47:f1:59:53: 1e:3e:f9:3c:0c:df:55:e4:b2:60:7b:e1:15:23:51: 5a:65:66:e9:78:99:b9:5b:aa:a9:9d:e4:2d:95:b8: fd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:ED:09:26:46:05:AC:05:BD:84:81:4F:CC:95:27:06:22:54:BB:AB X509v3 Authority Key Identifier: keyid:32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/3231312e3135342e3137362e302f32302d3230203d3e203137383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.154.176.0/20 Signature Algorithm: sha256WithRSAEncryption 58:5f:2f:a0:e2:f0:c2:4d:3a:c9:d0:18:42:81:25:20:c1:06: f3:f3:a6:3f:0a:03:2e:17:7d:41:aa:e5:4c:8f:55:46:db:99: 82:be:d3:cd:30:e6:14:59:6b:de:b0:93:34:d8:24:8c:b1:8b: 03:a1:2e:a6:88:9d:59:cb:7e:31:7d:8d:68:2a:cb:bf:58:26: 99:d7:1f:9b:f6:02:e6:68:78:c5:40:14:64:28:d9:61:96:9e: 36:a9:02:ce:10:fe:d9:ee:7d:2d:d0:a6:da:93:5b:40:24:c5: 1d:64:95:27:c9:09:7e:e0:46:0f:ad:3b:1e:49:5d:89:b8:5c: 27:74:cd:6d:3c:a1:f5:ec:c2:3b:49:af:da:f3:7e:bf:d2:74: f1:12:15:ba:fb:59:23:62:ae:85:dd:22:40:9a:b4:79:22:dc: cd:2c:bb:23:18:d0:c7:e1:31:2a:96:1f:ee:9f:e2:50:6c:fc: 15:7f:c6:06:08:9a:b7:71:86:c7:aa:88:be:bb:55:0e:f0:1f: d5:49:7d:d0:f8:28:d4:a0:54:45:37:a5:b1:8e:14:e2:a2:c0: 30:5c:c0:e8:87:d1:05:13:18:a1:bd:73:63:d2:41:eb:e0:c0: 8b:2a:63:30:d2:72:37:f7:d4:5e:20:a1:0e:4c:a6:9d:af:9a: 7f:34:bc:ff -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUaiGgE+28CGgzfsQgEBfRPKxcykUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZF NThFQkM1MzAeFw0yNjA0MjQwMzMyMTJaFw0yNzA0MjMwMzM3MTJaMDMxMTAvBgNV BAMTKEE0RUQwOTI2NDYwNUFDMDVCRDg0ODE0RkNDOTUyNzA2MjI1NEJCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4DZ3Mb3PdJD5Q9HOMwlSB+hb1 CLK7wv9fvGlpBC8W4DEUu0itC4adFEma1PvT9frRlD/j6PZHK1hCeyNjiZ0oe87n qCa4vT6eP+UHp5EM7MQ7AOdaFAVuS94a8xYv9pvoSGvLXxv5BH7JfixELxRPKOif qlkYBfilj0X5JtYejvcXsL5gGTUQoZuzRI4e9ByHEGw7/RAF8EABKA1zRz84plFe sflcp5j4x9vaDK5QICHeqNlEhE6K00mhxxx0GdyBsLiufF26XzJqN8p8OSFCecB6 xFBp0Mb3tLzTR/FZUx4++TwM31XksmB74RUjUVplZul4mblbqqmd5C2VuP1jAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUpO0JJkYFrAW9hIFPzJUnBiJUu6swHwYDVR0j BBgwFoAUMqG5ygtOHTRe83VCQHZTxuWOvFMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTI5MTc3Ny8wLzMyQTFCOUNBMEI0RTFEMzQ1RUYzNzU0MjQwNzY1 M0M2RTU4RUJDNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZFNThFQkM1My5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyOTE3NzcvMC8zMjMxMzEyZTMx MzUzNDJlMzEzNzM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM4MzEzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBNOasDANBgkqhkiG9w0BAQsFAAOCAQEAWF8voOLwwk06ydAYQoEl IMEG8/OmPwoDLhd9QarlTI9VRtuZgr7TzTDmFFlr3rCTNNgkjLGLA6EupoidWct+ MX2NaCrLv1gmmdcfm/YC5mh4xUAUZCjZYZaeNqkCzhD+2e59LdCm2pNbQCTFHWSV J8kJfuBGD607HkldibhcJ3TNbTyh9ezCO0mv2vN+v9J08RIVuvtZI2Kuhd0iQJq0 eSLczSy7IxjQx+ExKpYf7p/iUGz8FX/GBgiat3GGx6qIvrtVDvAf1Ul90Pgo1KBU RTelsY4U4qLAMFzA6IfRBRMYob1zY9JB6+DAiypjMNJyN/fUXiChDkymna+afzS8 /w== -----END CERTIFICATE-----Generated at Wed May 13 14:58:59 2026 by rpki-client