$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3131322e302f32322d3234203d3e20313533393131.roa File: 34332e3232362e3131322e302f32322d3234203d3e20313533393131.roa (raw, json) Hash identifier: 73mi8qjvHF1qfkuEGJrr152J/slEbCeNCY7gCX01czE= Subject key identifier: CB:2E:F7:A8:08:C5:83:6A:76:95:9F:B8:1D:59:61:B3:4E:86:38:2F Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 4BE6144F64EF560A64F0AC7C16388C8CC66EFA4C Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3131322e302f32322d3234203d3e20313533393131.roa Signing time: Mon 20 Apr 2026 06:34:33 +0000 ROA not before: Mon 20 Apr 2026 06:29:33 +0000 ROA not after: Mon 19 Apr 2027 06:34:33 +0000 asID: 153911 IP address blocks: 43.226.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e6:14:4f:64:ef:56:0a:64:f0:ac:7c:16:38:8c:8c:c6:6e:fa:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:29:33 2026 GMT Not After : Apr 19 06:34:33 2027 GMT Subject: CN=CB2EF7A808C5836A76959FB81D5961B34E86382F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bf:e9:ab:dc:d1:10:46:78:42:88:51:91:f0: 42:04:84:87:b2:16:8d:c2:e6:15:76:dc:19:82:82: 72:32:2f:84:5b:3c:42:9f:3f:5a:39:8e:68:19:17: 16:9e:00:14:4a:54:fd:e9:28:4e:0f:a9:39:17:bf: 8c:77:d1:04:60:c9:7c:59:01:1f:aa:72:f4:ba:da: 7e:c3:18:c1:27:20:8d:61:29:e9:c4:27:bf:10:ea: e8:db:19:98:1c:a2:ee:d2:90:e8:83:3e:61:1e:18: 94:87:06:42:d4:b1:a1:e9:b4:df:a0:da:ab:42:5c: 2b:bb:cb:c2:2c:2c:6b:5b:89:6a:fc:0b:bc:9b:ea: 2d:2a:5f:48:6c:58:8a:18:98:6c:26:31:76:4f:90: ba:a6:84:06:3d:cb:1d:4e:7f:4c:02:4d:57:58:09: c1:e1:c5:b1:87:72:0e:c3:76:44:8e:54:0c:3e:b8: 0a:76:e1:d1:2b:2e:25:1e:48:63:69:21:de:64:36: 40:5e:a0:3a:a3:19:28:9b:17:58:d7:81:e6:9f:be: 3d:95:0e:f3:6e:81:65:2a:1a:3c:d8:6a:06:83:56: 98:7e:9b:aa:2a:90:69:99:ae:fe:a8:37:60:9a:fb: f7:4e:7a:d9:61:04:03:fb:f7:06:86:ac:fe:27:5f: b8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2E:F7:A8:08:C5:83:6A:76:95:9F:B8:1D:59:61:B3:4E:86:38:2F X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3131322e302f32322d3234203d3e20313533393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.112.0/22 Signature Algorithm: sha256WithRSAEncryption 63:87:1d:60:91:95:8e:09:9b:1d:d6:c7:89:eb:9d:f6:b8:f4: 3b:a5:87:d7:fe:a8:e2:71:e8:f9:b9:36:7b:5b:ac:8c:a9:ef: a5:a5:64:5f:09:2f:c1:05:2d:73:58:a2:47:86:37:cb:7d:27: 4c:b6:72:c2:4a:b2:36:12:98:68:d6:14:c0:29:5e:89:e6:61: d9:5e:61:a2:8c:13:ce:05:6a:8d:5a:34:b9:7b:fd:fa:5d:0c: d4:1b:a9:6e:38:75:c5:92:78:9b:42:55:57:8b:f4:8b:41:89: 48:af:fd:fb:cc:ed:0b:fc:f4:b6:49:8b:97:64:45:f3:ab:fa: 2e:08:43:7c:f5:65:27:c0:8b:20:9b:e7:32:6a:98:4e:17:af: ee:1e:1e:99:a2:7d:3c:c0:9e:ca:d7:89:6c:1d:0f:7f:a4:01: a6:4c:4b:24:2d:55:a1:87:25:bc:a1:5e:d5:ee:5c:b8:bd:07: 2f:33:67:7c:9d:63:aa:24:8a:3e:e9:16:91:3e:63:22:c4:44: 89:89:61:80:39:be:4a:66:f0:0e:63:ce:e8:c5:2b:34:57:df: 44:7f:0b:d2:e0:49:b3:3b:ee:12:7c:c4:f4:d7:0f:8e:2d:05: a1:ee:cc:22:c7:26:85:d4:68:55:14:c7:f7:59:82:e4:09:0a: 0b:8b:7c:46 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUS+YUT2TvVgpk8Kx8FjiMjMZu+kwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjI5MzNaFw0yNzA0MTkwNjM0MzNaMDMxMTAvBgNV BAMTKENCMkVGN0E4MDhDNTgzNkE3Njk1OUZCODFENTk2MUIzNEU4NjM4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrv+mr3NEQRnhCiFGR8EIEhIey Fo3C5hV23BmCgnIyL4RbPEKfP1o5jmgZFxaeABRKVP3pKE4PqTkXv4x30QRgyXxZ AR+qcvS62n7DGMEnII1hKenEJ78Q6ujbGZgcou7SkOiDPmEeGJSHBkLUsaHptN+g 2qtCXCu7y8IsLGtbiWr8C7yb6i0qX0hsWIoYmGwmMXZPkLqmhAY9yx1Of0wCTVdY CcHhxbGHcg7DdkSOVAw+uAp24dErLiUeSGNpId5kNkBeoDqjGSibF1jXgeafvj2V DvNugWUqGjzYagaDVph+m6oqkGmZrv6oN2Ca+/dOetlhBAP79waGrP4nX7hNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUyy73qAjFg2p2lZ+4HVlhs06GOC8wHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC8zNDMzMmUzMjMy MzYyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzMzM5MzEzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAivicDANBgkqhkiG9w0BAQsFAAOCAQEAY4cdYJGVjgmbHdbHieud 9rj0O6WH1/6o4nHo+bk2e1usjKnvpaVkXwkvwQUtc1iiR4Y3y30nTLZywkqyNhKY aNYUwCleieZh2V5hoowTzgVqjVo0uXv9+l0M1Bupbjh1xZJ4m0JVV4v0i0GJSK/9 +8ztC/z0tkmLl2RF86v6LghDfPVlJ8CLIJvnMmqYThev7h4emaJ9PMCeyteJbB0P f6QBpkxLJC1VoYclvKFe1e5cuL0HLzNnfJ1jqiSKPukWkT5jIsREiYlhgDm+Smbw DmPO6MUrNFffRH8L0uBJszvuEnzE9NcPji0Foe7MIscmhdRoVRTH91mC5AkKC4t8 Rg== -----END CERTIFICATE-----Generated at Wed Apr 22 04:05:11 2026 by rpki-client