$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e20313331343833.roa File: 34332e3232362e3132382e302f32302d3234203d3e20313331343833.roa (raw, json) Hash identifier: qnU02w5AE86HoKDfNe69Wf3BlPoypQRguCQKwGyyqfI= Subject key identifier: A0:73:AC:89:6A:32:20:B0:C7:D7:98:04:3C:9E:61:81:D8:36:D5:C8 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 5937A1EBFEC4FB034CC99375179EC18ECD128323 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e20313331343833.roa Signing time: Mon 20 Apr 2026 09:10:50 +0000 ROA not before: Mon 20 Apr 2026 09:05:50 +0000 ROA not after: Mon 19 Apr 2027 09:10:50 +0000 asID: 131483 IP address blocks: 43.226.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:37:a1:eb:fe:c4:fb:03:4c:c9:93:75:17:9e:c1:8e:cd:12:83:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 09:05:50 2026 GMT Not After : Apr 19 09:10:50 2027 GMT Subject: CN=A073AC896A3220B0C7D798043C9E6181D836D5C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:fe:5b:04:89:89:18:71:7d:d3:90:0c:6c: 6e:bc:92:f0:2d:7d:8c:95:e2:93:e8:56:9a:39:d2: a5:16:e8:1f:10:15:47:b2:9a:d0:54:d9:ab:01:99: e8:a6:9f:df:33:04:58:8f:05:01:8b:04:14:e2:34: 1a:b6:a7:43:3b:4a:24:af:34:28:af:de:25:7d:93: 69:2d:c8:79:ac:2f:1f:9f:44:04:cf:a2:72:13:86: 0c:f9:2c:e4:41:20:f8:c3:90:c7:ae:84:d3:1b:dc: f8:1c:e0:68:c5:0d:49:67:93:26:71:c1:89:8f:58: f2:45:55:6d:66:9f:e6:bd:c2:a5:27:e7:05:63:d2: bc:71:05:1c:a2:8c:9a:e2:8c:76:e1:74:a3:c1:51: b2:5b:d6:e7:5f:5a:ea:15:16:0f:2d:ee:36:cb:28: 2b:60:23:db:24:62:7a:ae:d3:70:29:f5:e1:7b:72: 37:ae:18:45:e9:d9:1e:ce:59:cd:f1:85:74:05:3b: 01:5e:f9:fb:eb:b1:1a:a2:6c:84:18:a0:89:da:c3: a5:f4:0d:d2:3d:5c:12:a0:42:7b:e1:63:a0:e1:72: b3:a4:23:39:69:de:08:2f:64:cc:d6:1f:da:b2:74: 4e:08:f6:a3:c5:9a:64:05:e7:a0:48:43:dd:e4:46: 8d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:73:AC:89:6A:32:20:B0:C7:D7:98:04:3C:9E:61:81:D8:36:D5:C8 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e20313331343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.128.0/20 Signature Algorithm: sha256WithRSAEncryption 43:62:9c:fc:53:b9:d9:11:d9:9e:2f:7e:18:29:67:35:ee:36: 61:7c:ae:b3:b4:23:72:03:a5:44:28:dd:79:69:36:5b:cd:48: 13:79:aa:31:c5:66:8e:38:a3:70:c7:98:29:9c:7c:70:1b:0e: 6c:5d:58:1f:f2:55:99:bd:03:bc:f0:f1:6c:cc:b3:23:f7:6f: 37:28:15:d1:00:ef:9e:f6:58:2f:66:f6:f9:4e:0f:f5:24:80: 87:6a:43:87:fb:a2:a8:77:96:e8:eb:ac:73:95:f6:f1:0e:d0: 54:8b:c0:a6:9f:3e:25:10:52:8b:59:f2:ee:f9:77:e0:77:a6: 4f:0f:fc:4f:49:dc:79:e1:77:9f:01:75:79:16:03:a0:2b:78: 66:7a:18:17:e9:1a:05:aa:12:e8:64:d4:b0:9f:f6:e0:61:70: 01:31:a1:6f:cc:8a:ae:64:07:b1:84:07:3b:5b:42:f1:40:b9: a3:03:65:9c:f4:4b:14:17:3a:a1:65:d2:ff:c6:a4:43:28:a3: 06:76:f5:27:dd:3a:a3:e0:52:e9:8b:12:f1:8d:4d:cf:e2:23: 4e:21:d2:2b:a9:1c:5d:0a:58:cc:7e:07:13:4a:2b:1b:4e:45: 42:ce:b1:09:b2:04:b9:a2:9d:7d:c5:dd:e5:23:81:52:89:44: a9:7d:6a:d1 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWTeh6/7E+wNMyZN1F57Bjs0SgyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwOTA1NTBaFw0yNzA0MTkwOTEwNTBaMDMxMTAvBgNV BAMTKEEwNzNBQzg5NkEzMjIwQjBDN0Q3OTgwNDNDOUU2MTgxRDgzNkQ1QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Lf5bBImJGHF905AMbG68kvAt fYyV4pPoVpo50qUW6B8QFUeymtBU2asBmeimn98zBFiPBQGLBBTiNBq2p0M7SiSv NCiv3iV9k2ktyHmsLx+fRATPonIThgz5LORBIPjDkMeuhNMb3Pgc4GjFDUlnkyZx wYmPWPJFVW1mn+a9wqUn5wVj0rxxBRyijJrijHbhdKPBUbJb1udfWuoVFg8t7jbL KCtgI9skYnqu03Ap9eF7cjeuGEXp2R7OWc3xhXQFOwFe+fvrsRqibIQYoInaw6X0 DdI9XBKgQnvhY6DhcrOkIzlp3ggvZMzWH9qydE4I9qPFmmQF56BIQ93kRo1ZAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUoHOsiWoyILDH15gEPJ5hgdg21cgwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC8zNDMzMmUzMjMy MzYyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzMzMTM0MzgzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBCvigDANBgkqhkiG9w0BAQsFAAOCAQEAQ2Kc/FO52RHZni9+GCln Ne42YXyus7QjcgOlRCjdeWk2W81IE3mqMcVmjjijcMeYKZx8cBsObF1YH/JVmb0D vPDxbMyzI/dvNygV0QDvnvZYL2b2+U4P9SSAh2pDh/uiqHeW6Ousc5X28Q7QVIvA pp8+JRBSi1ny7vl34HemTw/8T0nceeF3nwF1eRYDoCt4ZnoYF+kaBaoS6GTUsJ/2 4GFwATGhb8yKrmQHsYQHO1tC8UC5owNlnPRLFBc6oWXS/8akQyijBnb1J906o+BS 6YsS8Y1Nz+IjTiHSK6kcXQpYzH4HE0orG05FQs6xCbIEuaKdfcXd5SOBUolEqX1q 0Q== -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:54 2026 by rpki-client