$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e203536303436.roa File: 34332e3232362e3132382e302f32302d3234203d3e203536303436.roa (raw, json) Hash identifier: SeBE/51Bf2AsA6+2WbMolfHDIB5GsqIHfRn6OPg+ol8= Subject key identifier: B4:62:01:04:31:EA:77:15:B8:F9:71:8C:7D:AC:21:C7:08:30:D0:0A Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 2513C115606E770594FDDEC74FC058E330EEF3B5 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e203536303436.roa Signing time: Mon 20 Apr 2026 06:40:11 +0000 ROA not before: Mon 20 Apr 2026 06:35:11 +0000 ROA not after: Mon 19 Apr 2027 06:40:11 +0000 asID: 56046 IP address blocks: 43.226.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:13:c1:15:60:6e:77:05:94:fd:de:c7:4f:c0:58:e3:30:ee:f3:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:35:11 2026 GMT Not After : Apr 19 06:40:11 2027 GMT Subject: CN=B462010431EA7715B8F9718C7DAC21C70830D00A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:e4:8c:71:85:a2:70:df:dc:ad:f9:1e:b0: f4:f1:3c:82:8a:29:82:0d:d6:a8:9e:e0:5a:73:62: 6c:06:c1:f5:8d:3a:17:00:5d:83:ff:48:ec:6e:1f: cb:36:55:ac:4f:67:8c:ed:0f:96:c5:50:42:7b:13: f3:5a:ad:5b:eb:e2:d0:a7:2b:65:da:37:28:14:41: 17:ee:f5:c1:c9:8d:00:44:12:21:e1:2c:ef:f9:0a: 9a:5e:0a:68:0a:26:71:84:98:8f:8f:de:be:c8:47: 13:db:1b:ac:22:18:5a:21:88:00:d6:da:66:a3:6e: 5f:d7:eb:a8:d4:45:94:ca:dc:1b:6d:2b:a6:04:fe: 44:4e:99:14:f3:43:a7:25:b2:9b:c3:46:29:f6:80: 64:c5:8d:74:ac:9c:c0:28:7a:62:ea:d9:01:94:4d: 84:c9:45:60:1e:e4:ee:5e:c7:7d:8b:0b:6c:2c:ab: 15:a6:2e:0c:63:6a:8a:db:ac:be:95:19:fe:05:36: af:b5:70:a6:2d:04:bc:16:91:fd:0c:19:f3:98:78: 3c:e7:33:e1:64:d5:f3:6b:67:4a:e0:d2:80:92:1f: d8:89:d8:1c:32:4b:7a:19:f8:89:2a:03:46:08:7a: d5:54:d7:d1:26:e0:66:7f:5f:db:2c:19:e3:94:f3: a8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:62:01:04:31:EA:77:15:B8:F9:71:8C:7D:AC:21:C7:08:30:D0:0A X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e3132382e302f32302d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.128.0/20 Signature Algorithm: sha256WithRSAEncryption 4a:0b:5a:43:37:e5:47:f7:21:18:e0:16:3c:1f:7d:05:e7:38: 10:4f:e4:01:5d:05:d3:5e:aa:97:fe:35:04:64:13:d7:6e:96: e9:24:39:d9:e2:17:0b:00:8e:04:47:13:08:64:50:7b:49:5a: f5:d7:7b:01:20:eb:68:22:78:cc:ec:26:46:84:f4:20:c0:6b: f0:f7:2d:a4:11:be:d2:6d:d0:15:99:87:f0:e7:e3:8e:7f:1a: d8:23:71:5c:2d:5f:31:13:34:d2:b8:d9:cb:3f:10:31:53:39: eb:a9:f5:9a:4b:f9:10:91:3a:63:76:4b:b3:e1:4a:fd:87:63: cf:e8:36:f7:02:62:6b:fe:19:6f:d5:b1:9b:e3:90:78:e9:92: 0e:8b:f2:44:19:e8:98:1c:61:a3:0a:28:61:f8:80:85:bb:ce: 19:72:d3:3a:37:a5:bf:76:d6:03:a5:1a:79:93:e4:1e:23:1a: 0a:a1:0b:3b:eb:fd:80:1a:25:94:be:81:28:87:17:e0:62:21: fa:4b:41:25:25:c2:47:36:0d:54:bd:57:8c:fb:9e:5f:42:40: 52:ae:90:c3:b1:2a:19:ac:ca:46:52:26:47:67:c8:69:ca:4c: 9b:9a:d6:13:d7:7b:47:af:17:b9:03:ad:d6:cc:a9:fa:d1:fa: ef:06:46:c3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJRPBFWBudwWU/d7HT8BY4zDu87UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjM1MTFaFw0yNzA0MTkwNjQwMTFaMDMxMTAvBgNV BAMTKEI0NjIwMTA0MzFFQTc3MTVCOEY5NzE4QzdEQUMyMUM3MDgzMEQwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpk+SMcYWicN/crfkesPTxPIKK KYIN1qie4FpzYmwGwfWNOhcAXYP/SOxuH8s2VaxPZ4ztD5bFUEJ7E/NarVvr4tCn K2XaNygUQRfu9cHJjQBEEiHhLO/5CppeCmgKJnGEmI+P3r7IRxPbG6wiGFohiADW 2majbl/X66jURZTK3BttK6YE/kROmRTzQ6clspvDRin2gGTFjXSsnMAoemLq2QGU TYTJRWAe5O5ex32LC2wsqxWmLgxjaorbrL6VGf4FNq+1cKYtBLwWkf0MGfOYeDzn M+Fk1fNrZ0rg0oCSH9iJ2BwyS3oZ+IkqA0YIetVU19Em4GZ/X9ssGeOU86hpAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUtGIBBDHqdxW4+XGMfawhxwgw0AowHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzM0MzMyZTMyMzIz NjJlMzEzMjM4MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBCvigDANBgkqhkiG9w0BAQsFAAOCAQEASgtaQzflR/chGOAWPB99Bec4 EE/kAV0F016ql/41BGQT126W6SQ52eIXCwCOBEcTCGRQe0la9dd7ASDraCJ4zOwm RoT0IMBr8PctpBG+0m3QFZmH8Ofjjn8a2CNxXC1fMRM00rjZyz8QMVM566n1mkv5 EJE6Y3ZLs+FK/Ydjz+g29wJia/4Zb9Wxm+OQeOmSDovyRBnomBxhowooYfiAhbvO GXLTOjelv3bWA6UaeZPkHiMaCqELO+v9gBollL6BKIcX4GIh+ktBJSXCRzYNVL1X jPueX0JAUq6Qw7EqGazKRlImR2fIacpMm5rWE9d7R68XuQOt1syp+tH67wZGww== -----END CERTIFICATE-----Generated at Tue Apr 21 22:52:29 2026 by rpki-client