$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3131322e302f32322d3234203d3e20313531333030.roa File: 34332e3232362e3131322e302f32322d3234203d3e20313531333030.roa (raw, json) Hash identifier: BlCQ3MiMqlvuA4NUGf4vVAwvMXBQMuoMTvjIf587tXI= Subject key identifier: 9E:2C:EE:58:74:4D:2A:30:07:12:C3:47:89:DD:07:47:F1:E4:2D:DC Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 6E4A5876B2DC3767A297DC7B54E6EA7BB1516096 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3131322e302f32322d3234203d3e20313531333030.roa Signing time: Mon 20 Apr 2026 06:34:33 +0000 ROA not before: Mon 20 Apr 2026 06:29:33 +0000 ROA not after: Mon 19 Apr 2027 06:34:33 +0000 asID: 151300 IP address blocks: 43.226.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:4a:58:76:b2:dc:37:67:a2:97:dc:7b:54:e6:ea:7b:b1:51:60:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:29:33 2026 GMT Not After : Apr 19 06:34:33 2027 GMT Subject: CN=9E2CEE58744D2A300712C34789DD0747F1E42DDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:3f:2a:a1:c4:04:87:90:66:58:d6:5f:1c: b5:fd:bf:f7:9e:ce:f3:44:53:3c:15:51:8e:c3:4c: 2f:0c:97:33:45:78:b8:8c:e4:63:bd:5d:d3:13:5a: 1b:ff:6c:ee:c9:87:ea:05:9a:da:74:80:70:4f:ff: 73:2f:a9:f9:09:14:1f:66:b5:9f:49:09:80:33:70: b1:25:30:ff:20:be:ca:2a:ac:7c:d7:b0:96:15:3d: f1:f4:ca:ea:0f:5f:3b:20:b9:22:a0:e2:2e:86:fe: 4d:04:58:ff:d5:ac:99:c1:e3:eb:97:9c:46:e4:2a: 14:d3:aa:a2:b6:fc:bd:93:0b:8f:22:e7:e3:47:68: 8b:fa:75:83:84:c0:39:a6:86:8f:51:6a:83:10:34: a5:8c:cd:00:c6:0d:e6:d5:3e:a6:a6:41:ae:3d:94: 27:e1:90:1f:f0:11:a0:80:d0:18:2e:9e:7f:a4:00: a9:9d:2c:95:9e:e4:5d:91:2c:8f:0e:0a:7d:dd:46: a8:be:d9:a0:c1:e3:2c:a5:20:c3:d9:5b:e4:98:52: 2e:e1:42:50:35:03:73:72:21:57:38:a7:f7:b6:c5: 36:da:d9:ef:e6:8f:0b:4d:57:67:ec:86:e8:1d:18: a2:30:81:e1:27:97:18:81:e2:97:c9:5b:fe:2d:4b: e8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2C:EE:58:74:4D:2A:30:07:12:C3:47:89:DD:07:47:F1:E4:2D:DC X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3131322e302f32322d3234203d3e20313531333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.112.0/22 Signature Algorithm: sha256WithRSAEncryption 75:dd:e5:9d:33:93:e4:a2:8a:e9:c7:a8:e0:51:30:d3:ae:85: 69:21:20:4f:00:f5:2b:61:e6:81:38:35:ba:49:8a:49:69:de: 05:3a:0c:ac:22:2b:27:48:45:5b:eb:51:18:d5:9c:ae:32:c5: 9e:ac:2d:c0:d2:e6:ef:5a:3d:37:7c:7e:cf:42:2b:f9:6a:c7: 64:bb:ec:0b:cd:6c:d7:1e:1f:a9:65:71:6a:c8:c7:46:a5:f8: 04:4e:8d:38:e5:e4:3e:de:17:33:fd:c2:68:2e:1c:ad:dc:56: 8c:ac:a9:77:55:21:9d:c0:5b:cb:a5:eb:cf:7b:a5:74:8e:e1: c1:de:13:17:cb:e5:22:0e:b3:ec:8f:9c:3f:c9:8e:53:7f:9c: dc:93:03:c7:91:68:ab:ac:a6:b4:84:07:b2:a8:fe:c7:6b:43: 5b:05:fd:08:df:d0:89:34:03:92:d8:4f:03:69:06:7c:21:da: be:87:be:2d:d0:92:c4:08:1a:23:32:a4:56:f5:ec:43:25:26: 93:d3:4f:f5:f2:d9:f1:43:74:cb:dd:c4:c8:96:74:c7:c9:cc: 04:e5:39:93:6a:9f:5c:60:4c:02:59:b3:74:e8:9f:c2:d1:18: a9:d8:3f:74:b0:87:a0:db:18:52:71:d2:d5:d0:c8:d5:d7:7b: 71:05:c2:d4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUbkpYdrLcN2eil9x7VObqe7FRYJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjI5MzNaFw0yNzA0MTkwNjM0MzNaMDMxMTAvBgNV BAMTKDlFMkNFRTU4NzQ0RDJBMzAwNzEyQzM0Nzg5REQwNzQ3RjFFNDJEREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mT8qocQEh5BmWNZfHLX9v/ee zvNEUzwVUY7DTC8MlzNFeLiM5GO9XdMTWhv/bO7Jh+oFmtp0gHBP/3MvqfkJFB9m tZ9JCYAzcLElMP8gvsoqrHzXsJYVPfH0yuoPXzsguSKg4i6G/k0EWP/VrJnB4+uX nEbkKhTTqqK2/L2TC48i5+NHaIv6dYOEwDmmho9RaoMQNKWMzQDGDebVPqamQa49 lCfhkB/wEaCA0Bgunn+kAKmdLJWe5F2RLI8OCn3dRqi+2aDB4yylIMPZW+SYUi7h QlA1A3NyIVc4p/e2xTba2e/mjwtNV2fshugdGKIwgeEnlxiB4pfJW/4tS+gLAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUnizuWHRNKjAHEsNHid0HR/HkLdwwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC8zNDMzMmUzMjMy MzYyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzMTMzMzAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAivicDANBgkqhkiG9w0BAQsFAAOCAQEAdd3lnTOT5KKK6ceo4FEw 066FaSEgTwD1K2HmgTg1ukmKSWneBToMrCIrJ0hFW+tRGNWcrjLFnqwtwNLm71o9 N3x+z0Ir+WrHZLvsC81s1x4fqWVxasjHRqX4BE6NOOXkPt4XM/3CaC4crdxWjKyp d1UhncBby6Xrz3uldI7hwd4TF8vlIg6z7I+cP8mOU3+c3JMDx5Foq6ymtIQHsqj+ x2tDWwX9CN/QiTQDkthPA2kGfCHavoe+LdCSxAgaIzKkVvXsQyUmk9NP9fLZ8UN0 y93EyJZ0x8nMBOU5k2qfXGBMAlmzdOifwtEYqdg/dLCHoNsYUnHS1dDI1dd7cQXC 1A== -----END CERTIFICATE-----Generated at Wed Apr 22 04:05:07 2026 by rpki-client