
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35322e302f32342d3234203d3e20313531333030.roa
File: 34332e3232362e35322e302f32342d3234203d3e20313531333030.roa (raw, json)
Hash identifier: RcbS8d2lJ2JKCDumGE3OXX8oyt3EH1F4GaqBcgum+U0=
Subject key identifier: 76:1C:FB:26:58:2B:7C:2D:C2:21:59:D1:A1:76:B1:EC:BC:7D:AB:38
Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Certificate serial: 39BC9EF0C817B28CD2A0CCC2BF0EC332C1649BD6
Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35322e302f32342d3234203d3e20313531333030.roa
Signing time: Mon 20 Apr 2026 06:47:30 +0000
ROA not before: Mon 20 Apr 2026 06:42:30 +0000
ROA not after: Mon 19 Apr 2027 06:47:30 +0000
asID: 151300
IP address blocks: 43.226.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:bc:9e:f0:c8:17:b2:8c:d2:a0:cc:c2:bf:0e:c3:32:c1:64:9b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Validity
Not Before: Apr 20 06:42:30 2026 GMT
Not After : Apr 19 06:47:30 2027 GMT
Subject: CN=761CFB26582B7C2DC22159D1A176B1ECBC7DAB38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:d1:dd:0f:17:16:a7:35:a3:c7:52:0f:67:
ee:8a:b0:4b:6b:8b:34:02:ac:29:c6:01:a2:47:83:
af:5a:a0:f7:5f:f0:cf:a1:90:e9:fa:07:de:57:ac:
e7:d8:82:8e:7c:a3:0a:ad:56:e7:58:6d:c6:61:54:
e0:70:15:74:6f:b7:55:66:36:06:33:2a:8a:65:2e:
f9:f6:68:c6:d3:de:31:e1:5f:81:77:1f:ea:25:47:
be:52:12:15:69:36:f3:bd:cb:fa:cc:69:6e:cd:a3:
4e:f2:07:3f:84:04:6a:2e:8a:91:d1:22:21:bf:00:
3d:57:f5:c5:0b:91:91:78:bd:31:d1:bc:13:c9:28:
4d:3b:6e:a9:6f:a9:39:d8:9e:5d:bf:7f:da:ae:34:
da:85:87:ee:99:9f:d6:f2:ff:29:a8:a3:5d:57:44:
4f:96:0c:69:36:7d:29:d1:c6:e2:18:04:00:8f:67:
95:7b:d6:cd:94:16:7e:43:47:bb:bd:97:4f:b0:a1:
13:fe:1b:63:70:d4:e9:d8:89:a4:75:6c:e9:6e:dc:
b5:c3:42:04:41:e0:d1:d9:e7:ae:41:22:70:a4:d5:
b2:a1:8a:02:52:96:7f:64:83:bd:af:a2:61:09:44:
b7:87:5b:a7:f5:8c:3d:32:e9:46:53:5b:29:2f:4e:
f2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1C:FB:26:58:2B:7C:2D:C2:21:59:D1:A1:76:B1:EC:BC:7D:AB:38
X509v3 Authority Key Identifier:
keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35322e302f32342d3234203d3e20313531333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.52.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a5:9a:42:b5:62:6d:3e:00:9e:ec:db:75:e6:60:1c:c9:f0:
73:07:23:78:c5:f0:f4:0a:0b:a2:cb:87:64:30:18:ec:6d:85:
13:4c:96:2e:a6:f5:53:6a:a4:5c:9f:5f:d3:80:f6:92:08:c6:
26:22:59:84:01:e3:b4:1c:57:f5:28:f8:2d:3e:c4:80:e9:a7:
02:b2:2b:1d:c7:f8:f3:70:15:d0:53:ac:a0:a3:f3:54:e4:48:
e7:88:8f:6d:7c:9f:25:2d:44:ed:11:70:3a:11:9f:0a:30:e4:
d3:18:75:67:2c:ce:d3:85:d2:a1:1c:ed:23:9b:a4:8b:00:47:
53:9c:bd:23:73:60:75:d3:cf:aa:d0:0c:01:3a:c0:f3:44:8d:
22:22:33:46:a3:a2:e9:07:ec:26:38:ae:9d:f9:be:1b:e0:b8:
e4:b9:46:50:da:0a:47:8b:b3:67:a1:de:73:d4:c9:96:9b:5d:
d2:03:74:66:25:42:2e:62:1c:11:31:03:d4:a8:bc:62:5c:c7:
85:fb:12:e5:bc:99:15:26:bd:2a:5c:f3:d1:f3:18:78:89:40:
d3:30:17:c9:36:81:16:75:e8:25:86:5e:37:69:4f:6a:e7:4b:
9e:77:f4:3e:2b:00:88:c8:00:49:65:4e:ee:5d:19:c1:37:30:
bc:d7:7b:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 22 04:05:11 2026 by rpki-client