$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e34382e302f32342d3234203d3e203233363530.roa File: 34332e3232362e34382e302f32342d3234203d3e203233363530.roa (raw, json) Hash identifier: McxwB+FwUnqbGATFpNFs3SqgKkmIRq0frIBmfzwtSiM= Subject key identifier: BE:35:E8:E7:3C:87:2E:3A:2A:1E:52:0D:46:98:09:83:59:96:A9:97 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 185EF19DCE313080B0AECE099994A4622FE963DB Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e34382e302f32342d3234203d3e203233363530.roa Signing time: Mon 20 Apr 2026 06:45:42 +0000 ROA not before: Mon 20 Apr 2026 06:40:42 +0000 ROA not after: Mon 19 Apr 2027 06:45:42 +0000 asID: 23650 IP address blocks: 43.226.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:5e:f1:9d:ce:31:30:80:b0:ae:ce:09:99:94:a4:62:2f:e9:63:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:40:42 2026 GMT Not After : Apr 19 06:45:42 2027 GMT Subject: CN=BE35E8E73C872E3A2A1E520D469809835996A997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:95:87:fd:5b:d4:00:99:bf:ba:63:77:c8:2a: 42:6f:63:53:ae:d0:3c:61:69:b5:cf:de:28:95:9a: a4:1a:73:db:4b:c4:87:62:23:b1:09:97:bf:1a:c7: ff:79:e0:10:27:40:a4:45:1f:f1:1f:c4:af:0d:13: 80:0f:7c:61:1a:ff:4e:74:f2:4b:15:92:b8:3e:0d: 4c:b4:11:4b:99:6c:42:80:22:29:7c:1d:64:c6:26: 8c:23:f2:97:49:a1:b6:44:2d:68:83:0a:13:c4:cd: 04:43:04:72:70:3a:16:b2:d8:41:3c:35:69:29:cf: bc:82:d6:63:9b:99:22:db:c0:ca:95:6f:af:41:41: 15:ea:b9:97:4b:43:aa:bb:4a:c2:2b:4e:cf:89:56: 14:bf:ea:93:6b:82:07:94:28:25:87:55:ad:25:b0: 5c:cc:45:ea:b0:b8:26:9d:ae:4b:d0:cc:b7:c0:f4: 91:5d:96:db:51:90:fc:f3:af:6e:4c:65:23:0d:0f: 7c:86:d0:63:29:16:a2:92:ce:0b:f6:cb:a2:92:64: 05:e4:20:74:10:d5:33:31:af:2e:d7:ba:75:e3:59: 0a:c5:a6:03:f5:68:90:f9:15:f1:17:97:2e:ca:fc: 4f:29:2b:03:5c:bd:45:fb:b6:32:c4:31:27:43:b3: cd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:35:E8:E7:3C:87:2E:3A:2A:1E:52:0D:46:98:09:83:59:96:A9:97 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e34382e302f32342d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.48.0/24 Signature Algorithm: sha256WithRSAEncryption 35:23:ce:31:bd:f8:2f:df:dd:65:29:db:5c:14:89:fd:f8:ee: 69:43:a2:a2:e4:e3:78:e4:40:11:fe:a3:f9:de:4d:41:80:05: df:fa:a4:15:a3:69:8a:fa:d5:74:40:72:6f:c2:4f:fe:61:7d: ed:0a:23:3d:46:a9:12:03:25:0a:c7:af:86:5b:84:31:4d:5c: 73:92:6c:56:0b:8a:d5:b2:01:e4:9e:45:16:bf:89:b6:55:8a: 87:dd:03:aa:82:ac:73:a5:d5:44:ff:42:8e:b8:5e:1f:7a:b9: 91:82:32:f5:3b:0d:96:b3:0f:4c:d3:96:24:2d:2e:72:aa:30: 84:ae:53:56:03:9d:85:32:b8:dc:a6:37:df:c9:34:ef:04:b3: 15:34:1e:71:cc:a2:c9:79:8c:95:16:e9:06:72:dd:78:4b:26: 7c:b1:9f:14:73:9f:a8:b0:05:1b:bd:0d:85:eb:52:99:96:af: a9:00:4f:d9:01:22:be:67:34:e8:3d:7a:da:b3:86:1b:c7:d5: 80:72:0e:aa:5d:2f:a7:7f:38:84:62:5f:81:23:6e:7b:d5:99: 6d:6c:30:a3:eb:cd:b0:81:db:97:34:1c:f5:a7:ab:5c:09:b9: 25:0d:51:f5:43:8a:ea:28:c9:dc:16:41:5b:8a:c5:f3:1b:9c: c3:bf:9e:1a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUGF7xnc4xMICwrs4JmZSkYi/pY9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjQwNDJaFw0yNzA0MTkwNjQ1NDJaMDMxMTAvBgNV BAMTKEJFMzVFOEU3M0M4NzJFM0EyQTFFNTIwRDQ2OTgwOTgzNTk5NkE5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtlYf9W9QAmb+6Y3fIKkJvY1Ou 0DxhabXP3iiVmqQac9tLxIdiI7EJl78ax/954BAnQKRFH/EfxK8NE4APfGEa/050 8ksVkrg+DUy0EUuZbEKAIil8HWTGJowj8pdJobZELWiDChPEzQRDBHJwOhay2EE8 NWkpz7yC1mObmSLbwMqVb69BQRXquZdLQ6q7SsIrTs+JVhS/6pNrggeUKCWHVa0l sFzMReqwuCadrkvQzLfA9JFdlttRkPzzr25MZSMND3yG0GMpFqKSzgv2y6KSZAXk IHQQ1TMxry7XunXjWQrFpgP1aJD5FfEXly7K/E8pKwNcvUX7tjLEMSdDs82FAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUvjXo5zyHLjoqHlINRpgJg1mWqZcwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4NDkwNDk2NjE3MDIxNDQyLzAvMzQzMzJlMzIzMjM2 MmUzNDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACviMDANBgkqhkiG9w0BAQsFAAOCAQEANSPOMb34L9/dZSnbXBSJ/fjuaUOi ouTjeORAEf6j+d5NQYAF3/qkFaNpivrVdEByb8JP/mF97QojPUapEgMlCsevhluE MU1cc5JsVguK1bIB5J5FFr+JtlWKh90DqoKsc6XVRP9CjrheH3q5kYIy9TsNlrMP TNOWJC0ucqowhK5TVgOdhTK43KY338k07wSzFTQeccyiyXmMlRbpBnLdeEsmfLGf FHOfqLAFG70NhetSmZavqQBP2QEivmc06D162rOGG8fVgHIOql0vp384hGJfgSNu e9WZbWwwo+vNsIHblzQc9aerXAm5JQ1R9UOK6ijJ3BZBW4rF8xucw7+eGg== -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:56 2026 by rpki-client