$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3133362e302f32312d3231203d3e2030.roa File: 32372e35302e3133362e302f32312d3231203d3e2030.roa (raw, json) Hash identifier: 8yvBpZdPwghm09OameVYGOgErD7A05NEiOdwISfxHPw= Subject key identifier: C4:A7:5F:E9:A4:79:06:FE:71:27:0E:3F:F3:C6:20:7E:FC:33:9F:AC Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Certificate serial: 1356A16A273D271082D337881DC2B3F90A498035 Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3133362e302f32312d3231203d3e2030.roa Signing time: Thu 16 Apr 2026 09:28:44 +0000 ROA not before: Thu 16 Apr 2026 09:23:44 +0000 ROA not after: Thu 15 Apr 2027 09:28:44 +0000 asID: 0 IP address blocks: 27.50.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 09:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:56:a1:6a:27:3d:27:10:82:d3:37:88:1d:c2:b3:f9:0a:49:80:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Validity Not Before: Apr 16 09:23:44 2026 GMT Not After : Apr 15 09:28:44 2027 GMT Subject: CN=C4A75FE9A47906FE71270E3FF3C6207EFC339FAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8f:0f:c1:9f:d4:c2:eb:17:b6:24:53:d8:92: f5:59:9d:a7:aa:61:53:96:3f:32:89:30:58:3d:13: 7e:23:6b:06:2e:09:75:a1:7f:f9:b5:30:2c:a2:d3: 05:ca:ba:ee:3e:5f:bc:14:c7:aa:98:12:4e:16:e4: 84:5d:f3:76:a5:b0:5e:66:c8:52:ba:77:81:a3:3a: cd:fa:4c:89:d9:a3:ce:b3:08:03:40:25:f5:5d:e1: a1:d8:99:f0:9a:54:9e:80:36:b2:d1:a1:e9:5c:13: ce:eb:b7:74:df:3b:aa:2f:92:7d:55:c8:0c:5f:2f: 7c:b8:67:fd:6c:63:79:6d:ca:02:cb:89:4f:86:8d: 79:f1:1b:a6:9a:c0:30:aa:e2:f4:f2:78:2f:24:a5: 2c:7a:da:27:76:04:cf:b9:0b:8d:d8:91:df:6c:1b: a8:79:45:57:12:96:b1:b1:dc:c3:27:1d:46:4e:3e: 6d:31:36:61:68:c3:56:52:84:2b:62:a9:ab:aa:e6: 4e:70:e3:37:18:d6:7e:32:e6:2c:b5:bb:f6:fb:3b: 18:a2:62:b5:8b:56:8d:7b:d9:23:dd:5b:50:42:c4: 7b:5b:d2:cc:03:c7:92:be:14:8b:80:85:fe:94:1b: cd:97:c5:2c:70:eb:13:ef:59:ce:e4:62:7d:33:46: 1b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A7:5F:E9:A4:79:06:FE:71:27:0E:3F:F3:C6:20:7E:FC:33:9F:AC X509v3 Authority Key Identifier: keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3133362e302f32312d3231203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.50.136.0/21 Signature Algorithm: sha256WithRSAEncryption 7c:49:6a:c9:15:1b:4f:42:5e:c9:20:ed:82:be:fa:68:29:2b: c3:6f:1e:9c:0c:df:48:a2:17:93:cc:c6:33:b9:31:21:44:cf: c6:4a:c5:b9:4d:6b:44:ef:43:bc:97:ad:9b:8c:45:75:41:12: f8:3a:c7:54:f3:46:50:e4:a3:a5:8f:19:a2:55:fb:20:ff:53: 08:c2:a3:3c:1e:b8:1e:00:60:aa:00:e7:88:cf:6d:5d:b5:9f: 35:6a:2f:e7:1a:5b:6c:1e:87:78:84:e9:9e:7e:7f:e8:65:58: a0:f5:b8:57:2b:26:25:de:16:73:2f:f4:a0:31:38:cb:71:20: 09:fe:c0:e4:ac:1d:24:ea:46:47:f4:60:e2:93:d2:9f:bf:b7: 7f:4b:6b:5b:83:54:a3:6b:47:dd:46:95:cf:85:6f:8f:c0:3c: 45:4e:0b:e5:19:7a:dd:7b:87:cf:78:3a:cd:b8:a0:09:ba:0a: 4d:32:09:d7:23:72:e6:25:b8:2a:f3:42:4e:ba:09:1d:a3:12: 5c:1c:30:f4:a0:0f:44:6d:ae:ea:7b:1d:2e:5e:c3:33:8d:5c: 0f:bc:8d:72:c4:2c:49:40:c1:ea:71:52:c6:54:07:c3:ae:ef: 69:8e:b2:01:10:09:bd:b0:0a:2d:4f:a7:6b:71:1e:71:1e:e7: 80:9d:84:26 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUE1ahaic9JxCC0zeIHcKz+QpJgDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2 QTQyNTFEOTAeFw0yNjA0MTYwOTIzNDRaFw0yNzA0MTUwOTI4NDRaMDMxMTAvBgNV BAMTKEM0QTc1RkU5QTQ3OTA2RkU3MTI3MEUzRkYzQzYyMDdFRkMzMzlGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjw/Bn9TC6xe2JFPYkvVZnaeq YVOWPzKJMFg9E34jawYuCXWhf/m1MCyi0wXKuu4+X7wUx6qYEk4W5IRd83alsF5m yFK6d4GjOs36TInZo86zCANAJfVd4aHYmfCaVJ6ANrLRoelcE87rt3TfO6ovkn1V yAxfL3y4Z/1sY3ltygLLiU+GjXnxG6aawDCq4vTyeC8kpSx62id2BM+5C43Ykd9s G6h5RVcSlrGx3MMnHUZOPm0xNmFow1ZShCtiqauq5k5w4zcY1n4y5iy1u/b7Oxii YrWLVo172SPdW1BCxHtb0swDx5K+FIuAhf6UG82XxSxw6xPvWc7kYn0zRhtxAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUxKdf6aR5Bv5xJw4/88Ygfvwzn6wwHwYDVR0j BBgwFoAUkAbz7XfIVRpyudIkEJ94L2pCUdkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4NzA1MzY2Njk3NTc0Ny8wLzkwMDZGM0VENzdDODU1MUE3MkI5RDIyNDEwOUY3 ODJGNkE0MjUxRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2QTQyNTFEOS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDg3MDUzNjY2OTc1NzQ3LzAvMzIzNzJlMzUzMDJl MzEzMzM2MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMbMogw DQYJKoZIhvcNAQELBQADggEBAHxJaskVG09CXskg7YK++mgpK8NvHpwM30iiF5PM xjO5MSFEz8ZKxblNa0TvQ7yXrZuMRXVBEvg6x1TzRlDko6WPGaJV+yD/UwjCozwe uB4AYKoA54jPbV21nzVqL+caW2weh3iE6Z5+f+hlWKD1uFcrJiXeFnMv9KAxOMtx IAn+wOSsHSTqRkf0YOKT0p+/t39La1uDVKNrR91Glc+Fb4/APEVOC+UZet17h894 Os24oAm6Ck0yCdcjcuYluCrzQk66CR2jElwcMPSgD0Rtrup7HS5ewzONXA+8jXLE LElAwepxUsZUB8Ou72mOsgEQCb2wCi1Pp2txHnEe54CdhCY= -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:42 2026 by rpki-client