$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e2034383337.roa File: 34332e3232362e3132382e302f32302d3234203d3e2034383337.roa (raw, json) Hash identifier: dQAeQkciJYOSMHIeTU/DUM7Pby4L4oxLYBVtvYoIYpY= Subject key identifier: 74:18:6D:BE:F2:74:7A:5C:30:71:44:F6:3B:BA:E3:CD:95:39:5A:BD Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 7D94445AE0A7C60D0DFBA7F399F29785E335F27A Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e2034383337.roa Signing time: Mon 20 Apr 2026 06:40:11 +0000 ROA not before: Mon 20 Apr 2026 06:35:11 +0000 ROA not after: Mon 19 Apr 2027 06:40:11 +0000 asID: 4837 IP address blocks: 43.226.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:94:44:5a:e0:a7:c6:0d:0d:fb:a7:f3:99:f2:97:85:e3:35:f2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:35:11 2026 GMT Not After : Apr 19 06:40:11 2027 GMT Subject: CN=74186DBEF2747A5C307144F63BBAE3CD95395ABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:31:f4:19:6d:82:20:9a:ac:c6:6e:0b:d4: 2a:9e:6c:e8:63:42:2a:54:c5:e9:8d:2f:77:7b:62: 11:dc:f2:97:d6:86:53:55:ad:c9:cd:6e:d4:2c:70: 5d:fb:82:5b:21:94:6d:26:2b:52:a6:24:9b:7f:ea: 70:9a:98:c5:c6:cf:d4:70:35:46:f5:15:f3:6b:88: e4:80:c6:79:b5:0f:59:ac:eb:83:63:a4:3e:ba:24: 86:1e:2f:ae:ed:2f:25:db:69:0c:39:79:ae:00:c4: ec:6d:84:b3:94:6d:d4:24:c0:4b:ca:89:02:25:87: 27:f2:9e:04:bf:c1:f7:3a:f7:53:10:23:ea:dd:05: 6a:22:2d:a8:a6:3c:9b:b7:72:f3:ff:e1:a5:94:6a: 24:2d:0c:5f:d2:60:04:8f:b6:ec:0e:3a:d2:17:97: 56:ca:3c:ca:23:81:2b:c3:b4:f3:77:7d:f9:36:e5: 8b:e4:ca:68:de:c4:da:2d:2a:b9:38:be:6a:b1:c5: 0b:9e:67:e3:1b:31:b4:3e:e4:a9:a8:ea:76:b6:45: 1a:6f:1f:02:cf:61:2f:34:0d:e4:21:27:a9:4b:b5: 07:31:c5:9c:f2:4a:b3:ac:7c:48:a9:0a:e6:8b:88: 69:86:e2:af:11:69:79:d1:6f:c7:4a:03:f9:3f:6f: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:18:6D:BE:F2:74:7A:5C:30:71:44:F6:3B:BA:E3:CD:95:39:5A:BD X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.128.0/20 Signature Algorithm: sha256WithRSAEncryption 4e:de:41:c0:0b:53:d0:80:68:33:f9:01:22:cc:7b:8e:68:7f: 80:34:82:d1:90:14:55:a4:2b:fc:bd:36:0d:b2:c7:02:59:1d: 14:2e:28:25:9c:f2:0c:10:23:0c:af:67:49:1b:13:78:c1:45: 55:c9:08:6f:39:8d:b6:8b:74:80:7d:8a:8f:62:8d:01:05:28: 9f:3a:95:a9:65:81:a9:85:fe:8a:2c:34:e2:c8:3c:ac:ca:41: b2:c8:af:ca:cf:1c:c4:ec:a8:28:0c:8d:39:16:11:63:64:36: dc:9f:cc:8f:df:99:5f:ca:4b:58:c2:5b:d9:20:be:f8:bb:1f: a1:fa:c1:a5:ef:9d:9a:ea:c8:9c:0d:54:75:ea:17:4d:6f:77: ab:4e:af:46:f7:06:a9:1a:27:27:2a:cf:76:2c:9b:df:1b:2d: 43:50:06:fc:15:4a:b8:72:2d:07:71:2d:31:58:03:a8:ba:74: 4b:28:e6:7e:49:ba:57:97:c3:a0:da:11:7a:38:ab:b3:6a:df: 59:c0:b0:89:4e:ec:1f:36:ca:7c:67:f8:4f:eb:5e:ca:73:75: 2c:c1:45:f3:c9:56:56:46:51:d6:0b:f3:bc:fa:1f:f2:04:59: ac:97:78:cf:4c:d5:dd:9a:9f:f3:51:78:ee:5b:18:df:f0:30: 63:b4:b6:17 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUfZREWuCnxg0N+6fzmfKXheM18nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjM1MTFaFw0yNzA0MTkwNjQwMTFaMDMxMTAvBgNV BAMTKDc0MTg2REJFRjI3NDdBNUMzMDcxNDRGNjNCQkFFM0NEOTUzOTVBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27jH0GW2CIJqsxm4L1CqebOhj QipUxemNL3d7YhHc8pfWhlNVrcnNbtQscF37glshlG0mK1KmJJt/6nCamMXGz9Rw NUb1FfNriOSAxnm1D1ms64NjpD66JIYeL67tLyXbaQw5ea4AxOxthLOUbdQkwEvK iQIlhyfyngS/wfc691MQI+rdBWoiLaimPJu3cvP/4aWUaiQtDF/SYASPtuwOOtIX l1bKPMojgSvDtPN3ffk25YvkymjexNotKrk4vmqxxQueZ+MbMbQ+5Kmo6na2RRpv HwLPYS80DeQhJ6lLtQcxxZzySrOsfEipCuaLiGmG4q8RaXnRb8dKA/k/b1bHAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUdBhtvvJ0elwwcUT2O7rjzZU5Wr0wHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4NDkwNDk2NjE3MDIxNDQyLzAvMzQzMzJlMzIzMjM2 MmUzMTMyMzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBCvigDANBgkqhkiG9w0BAQsFAAOCAQEATt5BwAtT0IBoM/kBIsx7jmh/gDSC 0ZAUVaQr/L02DbLHAlkdFC4oJZzyDBAjDK9nSRsTeMFFVckIbzmNtot0gH2Kj2KN AQUonzqVqWWBqYX+iiw04sg8rMpBssivys8cxOyoKAyNORYRY2Q23J/Mj9+ZX8pL WMJb2SC++LsfofrBpe+dmurInA1UdeoXTW93q06vRvcGqRonJyrPdiyb3xstQ1AG /BVKuHItB3EtMVgDqLp0Syjmfkm6V5fDoNoRejirs2rfWcCwiU7sHzbKfGf4T+te ynN1LMFF88lWVkZR1gvzvPof8gRZrJd4z0zV3Zqf81F47lsY3/AwY7S2Fw== -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:04 2026 by rpki-client