$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3132382e302f32322d3232203d3e2030.roa File: 32372e35302e3132382e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: x6i24AwJJsQi1lgr8WLwt4l7GV0ZS3/lO7FLLrNvE18= Subject key identifier: EF:B2:C5:E5:FC:3E:5A:61:FC:25:A7:EF:D3:97:A4:22:6E:9E:9E:92 Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Certificate serial: 0D8CF189E02CCD8DC906FC1B6CA37C1B72767FFB Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3132382e302f32322d3232203d3e2030.roa Signing time: Thu 16 Apr 2026 09:28:44 +0000 ROA not before: Thu 16 Apr 2026 09:23:44 +0000 ROA not after: Thu 15 Apr 2027 09:28:44 +0000 asID: 0 IP address blocks: 27.50.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 09:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8c:f1:89:e0:2c:cd:8d:c9:06:fc:1b:6c:a3:7c:1b:72:76:7f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Validity Not Before: Apr 16 09:23:44 2026 GMT Not After : Apr 15 09:28:44 2027 GMT Subject: CN=EFB2C5E5FC3E5A61FC25A7EFD397A4226E9E9E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:06:cd:a3:85:77:49:2b:59:a7:d7:38:25: 06:31:04:50:db:d9:0d:90:54:5e:da:0d:ac:ec:e7: 38:a4:64:15:6e:65:b2:47:8f:b6:e8:2c:07:76:cd: 9f:7a:ca:25:8b:c9:fe:3f:77:38:e8:3a:0a:29:55: 50:36:4f:81:c6:ab:db:28:52:d7:27:f7:60:a2:16: b4:36:fc:60:fb:0c:7a:f5:67:8f:8c:09:7f:69:bb: f6:0d:84:35:ca:2a:82:2b:be:12:c1:1f:cf:77:38: 1b:0e:cd:e8:70:18:32:f6:f5:27:5b:79:c2:6e:40: da:9f:b4:a2:22:00:73:d4:e2:90:3a:f9:54:14:32: f4:2c:06:a1:94:27:87:9b:09:74:80:47:e0:c8:56: 93:3d:5d:00:0e:62:a9:36:8e:b2:08:be:01:cb:ac: 15:73:a8:b2:14:cc:14:a2:4b:15:74:24:6b:e2:73: 6b:72:78:cc:92:db:4d:4c:77:03:77:9f:9b:c6:7d: 44:89:4e:73:f8:1f:a9:e8:61:6b:13:b9:aa:65:a3: 7e:80:8e:46:fd:22:4d:ae:89:4e:8a:11:9a:00:2f: 95:d8:cd:03:7c:3c:14:c7:20:04:9e:bf:a6:17:4e: 0d:c6:f9:a8:c2:93:9c:c8:c6:1b:64:55:af:bf:9a: 8d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B2:C5:E5:FC:3E:5A:61:FC:25:A7:EF:D3:97:A4:22:6E:9E:9E:92 X509v3 Authority Key Identifier: keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3132382e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.50.128.0/22 Signature Algorithm: sha256WithRSAEncryption 40:02:93:80:e5:bc:c6:ae:8f:15:a8:55:73:cf:5b:43:1d:93: 58:8f:79:00:a6:a1:b1:12:ca:aa:27:64:79:a6:cb:65:11:68: d8:67:71:a2:6a:7a:a7:70:44:d2:52:14:c6:54:c6:3a:d4:30: d8:66:46:7b:d5:7b:a6:ee:eb:2b:a5:36:86:01:f8:76:8a:f7: 12:02:20:89:66:c4:63:cf:17:29:e9:89:66:71:46:29:01:f6: 19:17:63:5b:55:ab:a3:b2:f5:64:4c:17:c6:00:3e:d7:3b:ca: ea:cd:15:58:15:86:4b:db:a8:f0:af:69:a8:2a:df:00:90:d8: 07:79:68:b6:55:75:e9:8c:ed:15:0c:2a:32:4e:6f:1d:92:61: c1:87:e5:25:93:f0:0b:64:35:8e:b1:a6:5a:8c:e8:44:a7:11: fb:33:87:cc:7a:7b:90:2a:cd:32:b4:57:bf:ff:42:44:5c:db: bf:28:58:4b:f3:95:79:e7:da:dc:37:b1:18:1a:cf:7d:bc:d2: 7e:07:81:22:6e:45:05:69:99:22:7a:bd:31:a7:2c:df:48:5e: 6e:2c:16:e3:5b:4a:d2:ec:f1:34:4d:3a:8d:98:bc:54:ff:c0: 49:4d:b9:2d:e2:b9:0a:f6:cf:61:13:71:bd:d8:67:17:dd:d9: 45:80:fb:a3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUDYzxieAszY3JBvwbbKN8G3J2f/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2 QTQyNTFEOTAeFw0yNjA0MTYwOTIzNDRaFw0yNzA0MTUwOTI4NDRaMDMxMTAvBgNV BAMTKEVGQjJDNUU1RkMzRTVBNjFGQzI1QTdFRkQzOTdBNDIyNkU5RTlFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GwbNo4V3SStZp9c4JQYxBFDb 2Q2QVF7aDazs5zikZBVuZbJHj7boLAd2zZ96yiWLyf4/dzjoOgopVVA2T4HGq9so Utcn92CiFrQ2/GD7DHr1Z4+MCX9pu/YNhDXKKoIrvhLBH893OBsOzehwGDL29Sdb ecJuQNqftKIiAHPU4pA6+VQUMvQsBqGUJ4ebCXSAR+DIVpM9XQAOYqk2jrIIvgHL rBVzqLIUzBSiSxV0JGvic2tyeMyS201MdwN3n5vGfUSJTnP4H6noYWsTuaplo36A jkb9Ik2uiU6KEZoAL5XYzQN8PBTHIASev6YXTg3G+ajCk5zIxhtkVa+/mo1JAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU77LF5fw+WmH8Jafv05ekIm6enpIwHwYDVR0j BBgwFoAUkAbz7XfIVRpyudIkEJ94L2pCUdkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4NzA1MzY2Njk3NTc0Ny8wLzkwMDZGM0VENzdDODU1MUE3MkI5RDIyNDEwOUY3 ODJGNkE0MjUxRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2QTQyNTFEOS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDg3MDUzNjY2OTc1NzQ3LzAvMzIzNzJlMzUzMDJl MzEzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIbMoAw DQYJKoZIhvcNAQELBQADggEBAEACk4DlvMaujxWoVXPPW0Mdk1iPeQCmobESyqon ZHmmy2URaNhncaJqeqdwRNJSFMZUxjrUMNhmRnvVe6bu6yulNoYB+HaK9xICIIlm xGPPFynpiWZxRikB9hkXY1tVq6Oy9WRMF8YAPtc7yurNFVgVhkvbqPCvaagq3wCQ 2Ad5aLZVdemM7RUMKjJObx2SYcGH5SWT8AtkNY6xplqM6ESnEfszh8x6e5AqzTK0 V7//QkRc278oWEvzlXnn2tw3sRgaz3280n4HgSJuRQVpmSJ6vTGnLN9IXm4sFuNb StLs8TRNOo2YvFT/wElNuS3iuQr2z2ETcb3YZxfd2UWA+6M= -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:42 2026 by rpki-client