$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35352e302f32342d3234203d3e20313531333030.roa File: 34332e3232362e35352e302f32342d3234203d3e20313531333030.roa (raw, json) Hash identifier: 5UDrscGzw7Jo6J7Hg1u3IXFGldO1rREmCZrNJATtK8U= Subject key identifier: D4:96:D5:75:5C:E8:42:97:9B:04:E8:16:89:4B:D1:D7:6E:4F:5C:F0 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 2CDF1D28F0B1E77C45101B122E2E101605663ADC Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35352e302f32342d3234203d3e20313531333030.roa Signing time: Mon 20 Apr 2026 06:49:21 +0000 ROA not before: Mon 20 Apr 2026 06:44:21 +0000 ROA not after: Mon 19 Apr 2027 06:49:21 +0000 asID: 151300 IP address blocks: 43.226.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:df:1d:28:f0:b1:e7:7c:45:10:1b:12:2e:2e:10:16:05:66:3a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:44:21 2026 GMT Not After : Apr 19 06:49:21 2027 GMT Subject: CN=D496D5755CE842979B04E816894BD1D76E4F5CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:6c:15:7e:1c:48:bc:18:21:b1:d6:2c:76: 56:b5:a2:8e:18:28:9d:12:54:4e:ec:a5:c5:a6:a6: 6c:83:61:f2:ca:9e:38:c8:32:27:ea:4e:32:9e:d0: d6:98:1a:cd:98:e1:17:5f:a1:23:1d:d0:20:1f:fc: 67:83:c2:31:ad:d3:8b:28:3f:76:98:35:6a:1a:e4: 14:6d:23:64:ad:e0:e8:ff:f7:f0:fc:ea:dc:48:88: 10:69:56:78:0b:08:99:bc:1e:c4:e8:d2:2d:14:a7: f4:3e:5d:57:c4:69:03:44:82:0d:2f:a5:be:6d:8c: 27:4c:ea:b4:14:28:e5:8d:70:66:70:19:6e:58:9f: fa:44:fb:9f:56:6d:70:8c:5d:a4:0e:58:36:80:a9: dd:e1:fe:27:31:f5:b9:8e:00:1d:03:28:d2:01:4c: 89:1a:42:1e:98:dc:84:32:64:41:a3:6a:de:6e:fe: 3a:4c:c3:03:8f:b6:5d:9d:7d:dd:42:d9:45:b8:9d: b4:ee:59:6f:12:0e:03:36:16:9d:6a:12:74:61:09: b8:c9:89:d3:7d:87:a8:9a:b2:39:af:33:ef:c7:42: 48:11:c8:be:11:23:06:56:25:cd:a7:ac:65:6c:2d: ec:81:9b:d1:5a:2e:a0:cf:9a:51:a0:14:89:fc:df: ec:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:96:D5:75:5C:E8:42:97:9B:04:E8:16:89:4B:D1:D7:6E:4F:5C:F0 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35352e302f32342d3234203d3e20313531333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.55.0/24 Signature Algorithm: sha256WithRSAEncryption 22:5a:4f:20:a0:82:f5:a0:a1:57:63:d6:b9:8a:ac:8f:bd:f9: f0:a0:0c:0c:3e:32:3a:e2:03:4e:2c:3b:e1:cb:50:56:3b:0a: d5:21:63:43:e1:93:b0:76:c3:18:21:ae:08:0f:f7:06:5d:c4: 42:8f:d2:3a:01:02:b8:5a:9b:12:0c:70:ae:97:fc:ee:4d:e4: 9b:aa:51:6e:85:e7:ac:aa:5e:ad:7e:eb:15:ae:d2:2c:23:f5: 8a:89:2b:6a:a4:11:75:29:d0:ff:07:2d:31:73:d6:1c:ca:b8: 00:cd:f9:14:27:f1:06:b5:38:49:d1:e9:64:83:3b:54:f1:68: 8e:32:53:eb:4a:55:62:b5:63:be:26:e0:1d:e4:53:ec:28:a9: cf:39:80:3f:be:5e:c2:10:92:d8:18:ab:7f:2a:c4:3a:eb:bf: 75:dd:87:cd:5b:dd:1d:47:48:cb:76:aa:e5:1e:a0:00:09:4c: b2:17:4d:ba:de:15:3c:ee:f9:22:94:ce:68:83:06:bc:4a:1e: 8b:11:de:6b:b7:6a:d5:f4:0d:48:b8:b6:d0:52:c1:52:e1:f0: 12:e0:fb:0c:43:f3:0e:80:fc:f7:76:4e:a0:33:fa:93:4e:96: 61:fa:ec:77:e6:da:f5:1c:a4:82:b2:12:50:f5:03:f5:a8:a6: 9b:0e:16:e3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIULN8dKPCx53xFEBsSLi4QFgVmOtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjQ0MjFaFw0yNzA0MTkwNjQ5MjFaMDMxMTAvBgNV BAMTKEQ0OTZENTc1NUNFODQyOTc5QjA0RTgxNjg5NEJEMUQ3NkU0RjVDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+w2wVfhxIvBghsdYsdla1oo4Y KJ0SVE7spcWmpmyDYfLKnjjIMifqTjKe0NaYGs2Y4RdfoSMd0CAf/GeDwjGt04so P3aYNWoa5BRtI2St4Oj/9/D86txIiBBpVngLCJm8HsTo0i0Up/Q+XVfEaQNEgg0v pb5tjCdM6rQUKOWNcGZwGW5Yn/pE+59WbXCMXaQOWDaAqd3h/icx9bmOAB0DKNIB TIkaQh6Y3IQyZEGjat5u/jpMwwOPtl2dfd1C2UW4nbTuWW8SDgM2Fp1qEnRhCbjJ idN9h6iasjmvM+/HQkgRyL4RIwZWJc2nrGVsLeyBm9FaLqDPmlGgFIn83+wRAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU1JbVdVzoQpebBOgWiUvR125PXPAwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzM0MzMyZTMyMzIz NjJlMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMzMzAzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACviNzANBgkqhkiG9w0BAQsFAAOCAQEAIlpPIKCC9aChV2PWuYqsj735 8KAMDD4yOuIDTiw74ctQVjsK1SFjQ+GTsHbDGCGuCA/3Bl3EQo/SOgECuFqbEgxw rpf87k3km6pRboXnrKperX7rFa7SLCP1iokraqQRdSnQ/wctMXPWHMq4AM35FCfx BrU4SdHpZIM7VPFojjJT60pVYrVjvibgHeRT7CipzzmAP75ewhCS2BirfyrEOuu/ dd2HzVvdHUdIy3aq5R6gAAlMshdNut4VPO75IpTOaIMGvEoeixHea7dq1fQNSLi2 0FLBUuHwEuD7DEPzDoD893ZOoDP6k06WYfrsd+ba9RykgrISUPUD9aimmw4W4w== -----END CERTIFICATE-----Generated at Wed Apr 22 04:05:13 2026 by rpki-client