$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099898650089291777/0/3231312e3135342e3138342e302f32312d3231203d3e203538383334.roa File: 3231312e3135342e3138342e302f32312d3231203d3e203538383334.roa (raw, json) Hash identifier: y4mypuyrjE5FRM8LG/t2MR96fZhrvQ7pH4jlaPqJt30= Subject key identifier: 6A:F6:CC:4E:5A:8F:4D:AC:48:D6:16:A9:56:7F:38:1D:37:41:31:62 Certificate issuer: /CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Certificate serial: 218D5F3992FD33BAE1E4AD1D7BBA5754B94AF999 Authority key identifier: 32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/3231312e3135342e3138342e302f32312d3231203d3e203538383334.roa Signing time: Fri 24 Apr 2026 03:34:10 +0000 ROA not before: Fri 24 Apr 2026 03:29:10 +0000 ROA not after: Fri 23 Apr 2027 03:34:10 +0000 asID: 58834 IP address blocks: 211.154.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8d:5f:39:92:fd:33:ba:e1:e4:ad:1d:7b:ba:57:54:b9:4a:f9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Validity Not Before: Apr 24 03:29:10 2026 GMT Not After : Apr 23 03:34:10 2027 GMT Subject: CN=6AF6CC4E5A8F4DAC48D616A9567F381D37413162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:41:0c:21:56:19:98:16:5e:fa:64:62:a8:02: 87:5e:7e:10:30:66:0d:b9:1a:70:7c:96:96:df:ea: d5:c4:70:1c:92:30:f6:48:d4:39:95:a5:8d:ab:7b: 79:ff:d7:c0:5f:6d:47:34:3f:fd:bb:8a:e1:ea:69: b0:da:51:40:83:48:7c:0c:86:5d:74:62:9e:3c:52: a3:0f:54:54:73:5d:76:7c:e2:bd:c3:0e:5a:b9:72: a3:50:28:3d:91:fa:8e:6e:e1:6d:e3:b0:d7:a6:fe: 15:60:b9:1c:7f:08:64:c8:be:f3:e3:43:7a:43:0d: 7d:65:c2:2d:d2:ba:5a:98:f8:ba:26:ba:88:aa:bd: 1b:08:4a:11:1c:ab:cc:8f:13:a5:12:ce:15:04:ea: a1:8c:23:a8:3d:96:1e:46:91:39:31:22:29:ff:33: 01:1b:b8:b4:4d:a7:38:aa:a7:e8:30:d2:cd:47:dc: 58:74:63:65:bb:4d:4f:d4:30:d2:9d:50:50:96:38: 68:9c:26:34:02:4e:bd:42:b0:6c:01:b9:d2:c0:64: 53:b6:73:02:54:10:35:b2:34:e3:a0:e8:3f:1c:51: 8b:d7:85:a8:7d:31:22:9f:bf:5f:df:5f:ca:b3:ab: 84:a2:27:bb:ab:f8:9c:71:34:b2:46:f6:76:3c:39: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F6:CC:4E:5A:8F:4D:AC:48:D6:16:A9:56:7F:38:1D:37:41:31:62 X509v3 Authority Key Identifier: keyid:32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/3231312e3135342e3138342e302f32312d3231203d3e203538383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.154.184.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:b4:1b:99:a7:12:8c:53:6d:46:df:fb:80:ec:8d:8f:ca:2c: 11:39:f7:8e:f7:07:67:61:9c:45:f3:e9:d5:91:63:70:0f:a0: 8d:d4:bb:fa:b7:59:ac:4a:fc:8e:55:16:99:d6:c2:21:ab:5d: db:99:fb:b7:db:fc:ea:e1:ca:e1:33:3b:b8:fb:ef:5a:f9:ee: eb:06:aa:22:df:72:48:46:80:2a:8b:ed:84:20:74:bb:b8:45: e9:ad:60:24:62:fe:3e:ff:0b:8a:7d:19:69:d5:b8:a6:ab:06: 76:0e:da:d3:ee:bd:8e:ee:de:b9:b7:7f:a5:9c:62:96:97:f3: 40:1d:20:34:d0:6f:44:8e:10:ac:70:9a:f5:43:02:29:85:3d: d0:97:98:8d:29:e0:64:ab:25:e4:b1:df:42:17:f9:16:d0:50: bf:52:b5:11:fe:c8:2d:c1:42:db:1e:a7:4d:aa:71:a8:1b:59: 87:95:aa:9a:30:bb:f2:8a:e4:0e:02:cc:67:34:a5:6f:81:8d: 56:03:66:cc:e9:7e:42:58:f5:f2:58:b2:9c:ff:62:7c:d0:fa: 6e:79:7d:41:23:66:f2:c9:80:88:2a:6c:73:31:c2:08:28:8a: b0:4d:6f:45:f8:90:ef:0a:1f:d6:6d:9e:bf:d9:66:e5:67:1d: b3:11:b0:a7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIY1fOZL9M7rh5K0de7pXVLlK+ZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZF NThFQkM1MzAeFw0yNjA0MjQwMzI5MTBaFw0yNzA0MjMwMzM0MTBaMDMxMTAvBgNV BAMTKDZBRjZDQzRFNUE4RjREQUM0OEQ2MTZBOTU2N0YzODFEMzc0MTMxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUQQwhVhmYFl76ZGKoAodefhAw Zg25GnB8lpbf6tXEcBySMPZI1DmVpY2re3n/18BfbUc0P/27iuHqabDaUUCDSHwM hl10Yp48UqMPVFRzXXZ84r3DDlq5cqNQKD2R+o5u4W3jsNem/hVguRx/CGTIvvPj Q3pDDX1lwi3SulqY+LomuoiqvRsIShEcq8yPE6USzhUE6qGMI6g9lh5GkTkxIin/ MwEbuLRNpziqp+gw0s1H3Fh0Y2W7TU/UMNKdUFCWOGicJjQCTr1CsGwBudLAZFO2 cwJUEDWyNOOg6D8cUYvXhah9MSKfv1/fX8qzq4SiJ7ur+JxxNLJG9nY8ORY1AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUavbMTlqPTaxI1hapVn84HTdBMWIwHwYDVR0j BBgwFoAUMqG5ygtOHTRe83VCQHZTxuWOvFMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTI5MTc3Ny8wLzMyQTFCOUNBMEI0RTFEMzQ1RUYzNzU0MjQwNzY1 M0M2RTU4RUJDNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZFNThFQkM1My5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyOTE3NzcvMC8zMjMxMzEyZTMx MzUzNDJlMzEzODM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzODM4MzMzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA9OauDANBgkqhkiG9w0BAQsFAAOCAQEAHrQbmacSjFNtRt/7gOyN j8osETn3jvcHZ2GcRfPp1ZFjcA+gjdS7+rdZrEr8jlUWmdbCIatd25n7t9v86uHK 4TM7uPvvWvnu6waqIt9ySEaAKovthCB0u7hF6a1gJGL+Pv8Lin0ZadW4pqsGdg7a 0+69ju7eubd/pZxilpfzQB0gNNBvRI4QrHCa9UMCKYU90JeYjSngZKsl5LHfQhf5 FtBQv1K1Ef7ILcFC2x6nTapxqBtZh5WqmjC78orkDgLMZzSlb4GNVgNmzOl+Qlj1 8liynP9ifND6bnl9QSNm8smAiCpsczHCCCiKsE1vRfiQ7wof1m2ev9lm5WcdsxGw pw== -----END CERTIFICATE-----Generated at Wed May 13 19:36:22 2026 by rpki-client