$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099898650089291777/0/3231312e3135342e3137362e302f32302d3230203d3e203538383334.roa File: 3231312e3135342e3137362e302f32302d3230203d3e203538383334.roa (raw, json) Hash identifier: OpGVfeYU7LEL5azDcsFR3vJFp24QCQ50RK10N7hSA1A= Subject key identifier: 79:C4:88:C2:3D:74:EB:6A:EF:C1:5A:A8:89:DA:40:90:F8:D3:65:C2 Certificate issuer: /CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Certificate serial: 2A2DF2B5322612FA3186873764E6C1E005A95348 Authority key identifier: 32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/3231312e3135342e3137362e302f32302d3230203d3e203538383334.roa Signing time: Fri 24 Apr 2026 03:34:10 +0000 ROA not before: Fri 24 Apr 2026 03:29:10 +0000 ROA not after: Fri 23 Apr 2027 03:34:10 +0000 asID: 58834 IP address blocks: 211.154.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2d:f2:b5:32:26:12:fa:31:86:87:37:64:e6:c1:e0:05:a9:53:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Validity Not Before: Apr 24 03:29:10 2026 GMT Not After : Apr 23 03:34:10 2027 GMT Subject: CN=79C488C23D74EB6AEFC15AA889DA4090F8D365C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:93:5b:72:83:f3:5c:ef:26:2f:48:5e:13: 99:fc:c9:b6:9b:71:c3:33:f4:4f:70:3f:b9:3d:e7: fb:52:50:f5:37:36:c7:fd:40:11:bc:6c:d5:dd:bf: e2:ae:45:33:30:49:dc:b0:b5:c1:3a:4e:3c:01:61: 13:eb:66:cf:95:00:aa:d3:25:1e:42:5e:a0:5c:42: 8b:46:17:51:cb:9e:c7:1e:1a:2c:8d:12:96:71:8f: d7:18:4b:4e:72:d5:43:be:8c:69:26:af:1b:81:b6: f6:59:18:11:9f:3e:f6:8d:f4:d2:63:0d:82:cf:22: dd:79:15:e2:8f:72:91:27:6a:cf:b4:4d:fd:ff:90: 9d:8e:f9:98:07:3a:de:ac:7c:40:16:66:2f:15:4a: 9c:81:2d:16:5f:84:80:3b:e3:98:dd:4d:2a:0e:4f: e4:cd:9c:47:54:1d:74:38:b2:c5:6c:d3:01:54:8b: 7f:72:23:7b:2a:73:81:40:67:59:c6:39:58:7f:89: 2d:5e:38:32:74:66:7a:c4:03:a4:3a:4b:61:78:e2: 08:f4:bd:51:d2:03:8c:50:eb:68:ae:98:00:5a:15: 26:04:dc:26:f4:0b:23:8a:91:28:e8:d0:a6:c9:50: 3c:24:8c:e2:5e:57:16:75:f2:ed:ba:0d:ea:a0:c5: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C4:88:C2:3D:74:EB:6A:EF:C1:5A:A8:89:DA:40:90:F8:D3:65:C2 X509v3 Authority Key Identifier: keyid:32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/3231312e3135342e3137362e302f32302d3230203d3e203538383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.154.176.0/20 Signature Algorithm: sha256WithRSAEncryption 89:78:65:82:40:9a:a4:a1:ca:d5:22:62:ba:72:05:cd:4c:9d: ca:73:b1:16:9d:85:9d:31:8b:b2:f6:66:c1:94:d5:06:7c:cd: 86:ba:2e:10:45:f0:d8:a5:63:b5:3e:2e:ed:0d:c7:71:e9:be: 06:39:96:78:a4:cf:3d:8e:a2:bd:8c:3a:0f:1a:c8:96:89:04: 4b:92:51:f5:32:f2:d3:1f:94:4d:5b:4a:70:58:1c:ba:87:2e: 67:9c:75:de:65:10:20:0b:8f:61:52:5f:6d:41:c9:50:da:75: d4:70:d2:fe:da:13:4a:a3:87:46:e6:85:c3:29:3b:b4:43:bd: 09:3a:28:cf:f8:c1:f6:5b:7b:92:15:2c:7d:4a:4a:b6:a5:d8: b4:53:4d:20:1b:fe:6f:19:ee:82:59:ce:21:ed:20:35:9e:6f: a4:b6:98:a1:30:b7:d2:bb:3f:42:d7:16:1a:0c:c4:21:db:e5: 3d:c1:61:51:6c:9d:4d:57:c4:d5:fc:40:1a:15:87:8d:a0:30: 1a:08:63:bd:0f:fd:21:31:a1:0e:90:66:d4:92:6b:d9:dc:39: b4:99:7f:16:b7:c4:a4:fd:de:5c:ec:f5:89:4b:35:9d:28:c6: 2f:1d:b0:7c:10:f5:94:c9:17:63:c2:c8:57:3b:4c:62:45:1c: 18:14:72:8b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUKi3ytTImEvoxhoc3ZObB4AWpU0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZF NThFQkM1MzAeFw0yNjA0MjQwMzI5MTBaFw0yNzA0MjMwMzM0MTBaMDMxMTAvBgNV BAMTKDc5QzQ4OEMyM0Q3NEVCNkFFRkMxNUFBODg5REE0MDkwRjhEMzY1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB25NbcoPzXO8mL0heE5n8ybab ccMz9E9wP7k95/tSUPU3Nsf9QBG8bNXdv+KuRTMwSdywtcE6TjwBYRPrZs+VAKrT JR5CXqBcQotGF1HLnsceGiyNEpZxj9cYS05y1UO+jGkmrxuBtvZZGBGfPvaN9NJj DYLPIt15FeKPcpEnas+0Tf3/kJ2O+ZgHOt6sfEAWZi8VSpyBLRZfhIA745jdTSoO T+TNnEdUHXQ4ssVs0wFUi39yI3sqc4FAZ1nGOVh/iS1eODJ0ZnrEA6Q6S2F44gj0 vVHSA4xQ62iumABaFSYE3Cb0CyOKkSjo0KbJUDwkjOJeVxZ18u26DeqgxURjAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUecSIwj1062rvwVqoidpAkPjTZcIwHwYDVR0j BBgwFoAUMqG5ygtOHTRe83VCQHZTxuWOvFMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTI5MTc3Ny8wLzMyQTFCOUNBMEI0RTFEMzQ1RUYzNzU0MjQwNzY1 M0M2RTU4RUJDNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZFNThFQkM1My5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyOTE3NzcvMC8zMjMxMzEyZTMx MzUzNDJlMzEzNzM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzODM4MzMzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBNOasDANBgkqhkiG9w0BAQsFAAOCAQEAiXhlgkCapKHK1SJiunIF zUydynOxFp2FnTGLsvZmwZTVBnzNhrouEEXw2KVjtT4u7Q3Hcem+BjmWeKTPPY6i vYw6DxrIlokES5JR9TLy0x+UTVtKcFgcuocuZ5x13mUQIAuPYVJfbUHJUNp11HDS /toTSqOHRuaFwyk7tEO9CTooz/jB9lt7khUsfUpKtqXYtFNNIBv+bxnuglnOIe0g NZ5vpLaYoTC30rs/QtcWGgzEIdvlPcFhUWydTVfE1fxAGhWHjaAwGghjvQ/9ITGh DpBm1JJr2dw5tJl/FrfEpP3eXOz1iUs1nSjGLx2wfBD1lMkXY8LIVztMYkUcGBRy iw== -----END CERTIFICATE-----Generated at Wed May 13 19:36:25 2026 by rpki-client