$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e20313531333030.roa File: 34332e3232362e3132382e302f32302d3234203d3e20313531333030.roa (raw, json) Hash identifier: 3n6BtBg1oiq2iOTYs4QBfvmB/a+UVMO+HnrOvs2ghgY= Subject key identifier: CC:73:D8:3F:A6:01:FA:05:E5:76:8D:F7:8D:81:1A:B1:CC:B4:AE:EB Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 092CDABB8E012250F413AFFE7BABB9E3840BA162 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e20313531333030.roa Signing time: Mon 20 Apr 2026 06:40:11 +0000 ROA not before: Mon 20 Apr 2026 06:35:11 +0000 ROA not after: Mon 19 Apr 2027 06:40:11 +0000 asID: 151300 IP address blocks: 43.226.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2c:da:bb:8e:01:22:50:f4:13:af:fe:7b:ab:b9:e3:84:0b:a1:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:35:11 2026 GMT Not After : Apr 19 06:40:11 2027 GMT Subject: CN=CC73D83FA601FA05E5768DF78D811AB1CCB4AEEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:bd:b9:58:61:9d:d6:73:17:48:2f:97:1f: 5d:33:5f:03:d2:f4:97:f7:5c:66:d7:de:ce:49:a3: 77:51:50:03:0f:ab:b3:67:01:d4:a4:13:58:af:53: 63:ae:3f:1f:52:7a:3d:72:bd:68:9d:a2:b0:b8:2b: 9d:91:31:0f:e5:a7:08:4b:0e:06:db:d8:67:55:bf: 2f:7b:c7:50:22:b7:4e:e8:d6:0a:79:c2:f0:e8:10: 3d:26:9e:30:48:89:22:4e:5d:a9:37:1b:14:9c:7e: 1d:4f:8d:96:1e:72:b2:04:d8:e5:4b:cb:6b:23:7d: 08:14:ca:93:64:78:8e:e5:ce:6c:85:78:08:c9:33: 11:29:cd:3d:c8:b4:d5:c2:d8:c8:45:b0:64:24:20: 10:4f:10:35:fa:54:4c:9d:11:e5:ae:ec:e8:8b:c6: 18:19:e9:c5:42:11:44:ef:9d:1c:94:26:32:9d:aa: f3:1e:09:e7:98:53:a9:a1:c7:72:74:8b:35:06:dd: e7:a5:ba:ff:86:b3:ed:3d:85:08:93:f6:27:cb:2c: d2:fb:0e:9b:92:a2:33:10:80:69:81:e0:ac:4e:ee: 9b:03:2e:5d:27:4d:fd:3c:90:42:54:c9:a2:48:26: 09:35:9e:f5:2d:ab:20:f2:1d:ed:5b:f4:3b:bb:9d: fe:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:73:D8:3F:A6:01:FA:05:E5:76:8D:F7:8D:81:1A:B1:CC:B4:AE:EB X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e20313531333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.128.0/20 Signature Algorithm: sha256WithRSAEncryption 9e:2c:78:26:89:ab:44:f6:cf:aa:a5:86:e8:ac:35:64:5e:93: f9:d2:18:96:03:28:d6:4f:48:96:d4:44:4a:93:50:cb:7a:02: cb:8d:23:ad:80:0d:c8:02:87:e1:66:c7:38:12:64:98:6d:e9: 19:87:ec:52:be:27:f4:ac:d9:6b:97:d6:27:cf:0d:64:ce:91: f9:46:fb:86:b7:57:d8:37:9b:f4:5b:41:88:05:4a:f0:68:cf: 06:f2:1b:05:b1:cf:a9:76:16:c2:24:77:df:30:a2:0a:b5:23: 74:c5:7b:de:3b:02:37:66:6c:4b:97:d4:ec:82:7e:13:2c:50: 0f:5a:a7:32:2c:68:83:83:d2:79:8a:32:ea:32:b1:4b:5f:89: 69:6a:a4:5b:d9:8b:1a:5f:c4:e5:24:22:94:4d:a4:fe:27:ef: cf:2b:1e:d3:4d:d8:d1:f3:bc:9f:a4:4d:b4:c0:78:ab:45:5e: 1f:3c:37:29:06:0a:51:11:b3:d3:ab:24:2b:88:1d:4c:be:cb: 5c:46:d1:22:7a:85:12:15:85:94:68:8e:6d:44:30:34:24:a5: 9e:14:e0:ac:69:fa:6e:e5:81:26:34:08:23:02:7b:bf:c5:2f: c7:f5:7f:0e:26:77:e0:41:c0:ba:e6:00:40:23:61:87:65:ed: db:37:0c:77 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCSzau44BIlD0E6/+e6u544QLoWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjM1MTFaFw0yNzA0MTkwNjQwMTFaMDMxMTAvBgNV BAMTKENDNzNEODNGQTYwMUZBMDVFNTc2OERGNzhEODExQUIxQ0NCNEFFRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlr25WGGd1nMXSC+XH10zXwPS 9Jf3XGbX3s5Jo3dRUAMPq7NnAdSkE1ivU2OuPx9Sej1yvWidorC4K52RMQ/lpwhL Dgbb2GdVvy97x1Ait07o1gp5wvDoED0mnjBIiSJOXak3GxScfh1PjZYecrIE2OVL y2sjfQgUypNkeI7lzmyFeAjJMxEpzT3ItNXC2MhFsGQkIBBPEDX6VEydEeWu7OiL xhgZ6cVCEUTvnRyUJjKdqvMeCeeYU6mhx3J0izUG3eeluv+Gs+09hQiT9ifLLNL7 DpuSojMQgGmB4KxO7psDLl0nTf08kEJUyaJIJgk1nvUtqyDyHe1b9Du7nf5XAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUzHPYP6YB+gXldo33jYEascy0ruswHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC8zNDMzMmUzMjMy MzYyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzUzMTMzMzAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBCvigDANBgkqhkiG9w0BAQsFAAOCAQEAnix4JomrRPbPqqWG6Kw1 ZF6T+dIYlgMo1k9IltRESpNQy3oCy40jrYANyAKH4WbHOBJkmG3pGYfsUr4n9KzZ a5fWJ88NZM6R+Ub7hrdX2Deb9FtBiAVK8GjPBvIbBbHPqXYWwiR33zCiCrUjdMV7 3jsCN2ZsS5fU7IJ+EyxQD1qnMixog4PSeYoy6jKxS1+JaWqkW9mLGl/E5SQilE2k /ifvzyse003Y0fO8n6RNtMB4q0VeHzw3KQYKURGz06skK4gdTL7LXEbRInqFEhWF lGiObUQwNCSlnhTgrGn6buWBJjQIIwJ7v8Uvx/V/DiZ34EHAuuYAQCNhh2Xt2zcM dw== -----END CERTIFICATE-----Generated at Wed Apr 22 04:05:13 2026 by rpki-client