$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e20313533393131.roa File: 34332e3232362e3132382e302f32302d3234203d3e20313533393131.roa (raw, json) Hash identifier: 7ZWlRxIXGsKVc08rmLsO/+3Ss68GAkzsPbSvxHGqBPk= Subject key identifier: 25:18:EA:69:81:26:ED:F3:1F:09:3F:0D:BE:67:11:3D:D5:33:95:50 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 15AAE827DD7082793FC20B17C5213E77B447B532 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e20313533393131.roa Signing time: Mon 20 Apr 2026 06:40:11 +0000 ROA not before: Mon 20 Apr 2026 06:35:11 +0000 ROA not after: Mon 19 Apr 2027 06:40:11 +0000 asID: 153911 IP address blocks: 43.226.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:aa:e8:27:dd:70:82:79:3f:c2:0b:17:c5:21:3e:77:b4:47:b5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:35:11 2026 GMT Not After : Apr 19 06:40:11 2027 GMT Subject: CN=2518EA698126EDF31F093F0DBE67113DD5339550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:51:6f:40:37:2b:3f:ee:05:7e:73:b9:a8: 0b:70:cd:c7:2c:e1:c3:b4:3e:46:bb:77:41:6a:c2: 58:92:11:92:22:ae:9d:f2:43:6f:6a:50:4c:6f:67: c6:b7:38:36:15:29:98:50:17:43:2b:8e:37:20:3a: 7b:31:a7:42:84:00:7d:83:6b:b8:32:da:c7:a1:c1: 88:e8:5b:e1:c8:c7:ca:1d:33:c9:9c:77:6a:fd:d6: eb:0d:86:ef:bf:f7:4c:6b:c1:b0:8f:15:c5:7d:e1: 5c:77:84:39:a1:11:c5:87:c8:a0:96:dc:e6:4d:1d: c9:99:41:89:f0:4a:b6:66:e0:37:f8:a0:d1:94:81: 29:06:82:88:b7:3f:92:d2:20:be:18:bd:e5:75:83: 72:73:e0:1b:e1:7a:3f:f9:a9:1c:39:01:f4:fe:29: c4:03:76:bb:23:f8:97:74:6a:b8:10:c1:e3:99:03: 6e:f7:d4:9b:23:71:67:88:83:6d:31:31:9a:f7:96: 15:82:5a:c3:d1:5a:12:1d:a2:6f:79:b2:7c:91:a2: 5d:b2:dd:2e:e6:28:4f:e1:52:5b:71:a8:e9:8a:e7: 5d:3b:f7:b6:9e:14:e5:9a:da:b8:fd:b4:b9:3a:37: ab:33:48:12:c2:5d:b0:31:20:7e:ac:c9:c2:ec:b1: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:18:EA:69:81:26:ED:F3:1F:09:3F:0D:BE:67:11:3D:D5:33:95:50 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e20313533393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.128.0/20 Signature Algorithm: sha256WithRSAEncryption 6d:7b:83:23:cf:e6:29:6b:84:67:4f:b2:c1:a1:4c:a2:59:03: 80:20:2c:1b:7b:3d:0e:75:7a:b9:55:3e:fd:07:8b:1b:34:d6: 1a:fe:05:75:99:eb:06:ed:d3:2e:34:c1:32:5a:e9:8a:a1:93: f5:94:e2:ad:47:28:a6:73:24:47:55:e5:89:31:82:71:05:12: 31:70:27:70:64:7f:ae:f6:6b:bd:83:c5:bc:fa:59:4d:f0:fe: e4:d1:98:05:33:de:d8:fd:cb:c1:a3:31:d1:37:9f:c6:ca:c9: 25:d2:0a:0b:7d:e3:05:7f:5a:2d:1c:28:5f:78:20:00:63:e5: a2:ae:7d:d6:70:05:05:96:b4:c7:fb:a0:87:16:e6:79:11:1f: 44:2c:ba:2f:82:12:3d:ac:e4:60:be:75:6a:b9:b1:41:ca:bd: 10:55:27:65:83:ea:81:c1:c5:c1:77:96:d6:06:d1:4e:5d:82: 81:a9:d7:3c:d8:76:ea:53:97:26:23:f2:1c:01:f0:58:93:5c: 65:69:9f:f7:e7:5e:d6:03:a1:d7:83:ed:29:58:0c:b7:e4:bf: 37:5a:99:fc:48:0e:d8:5e:f2:8d:36:55:9b:d3:89:c7:13:89: 9e:02:58:8f:03:68:5c:55:cf:35:b5:5b:22:f1:30:c7:b0:6e: 7e:f0:be:92 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFaroJ91wgnk/wgsXxSE+d7RHtTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjM1MTFaFw0yNzA0MTkwNjQwMTFaMDMxMTAvBgNV BAMTKDI1MThFQTY5ODEyNkVERjMxRjA5M0YwREJFNjcxMTNERDUzMzk1NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRuVFvQDcrP+4FfnO5qAtwzccs 4cO0Pka7d0FqwliSEZIirp3yQ29qUExvZ8a3ODYVKZhQF0MrjjcgOnsxp0KEAH2D a7gy2sehwYjoW+HIx8odM8mcd2r91usNhu+/90xrwbCPFcV94Vx3hDmhEcWHyKCW 3OZNHcmZQYnwSrZm4Df4oNGUgSkGgoi3P5LSIL4YveV1g3Jz4Bvhej/5qRw5AfT+ KcQDdrsj+Jd0argQweOZA2731JsjcWeIg20xMZr3lhWCWsPRWhIdom95snyRol2y 3S7mKE/hUltxqOmK510797aeFOWa2rj9tLk6N6szSBLCXbAxIH6sycLssVTXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUJRjqaYEm7fMfCT8NvmcRPdUzlVAwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC8zNDMzMmUzMjMy MzYyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzUzMzM5MzEzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBCvigDANBgkqhkiG9w0BAQsFAAOCAQEAbXuDI8/mKWuEZ0+ywaFM olkDgCAsG3s9DnV6uVU+/QeLGzTWGv4FdZnrBu3TLjTBMlrpiqGT9ZTirUcopnMk R1XliTGCcQUSMXAncGR/rvZrvYPFvPpZTfD+5NGYBTPe2P3LwaMx0TefxsrJJdIK C33jBX9aLRwoX3ggAGPloq591nAFBZa0x/ughxbmeREfRCy6L4ISPazkYL51armx Qcq9EFUnZYPqgcHFwXeW1gbRTl2CganXPNh26lOXJiPyHAHwWJNcZWmf9+de1gOh 14PtKVgMt+S/N1qZ/EgO2F7yjTZVm9OJxxOJngJYjwNoXFXPNbVbIvEwx7BufvC+ kg== -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:56 2026 by rpki-client