
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35352e302f32342d3234203d3e20313533393131.roa
File: 34332e3232362e35352e302f32342d3234203d3e20313533393131.roa (raw, json)
Hash identifier: HJydmlENw5J0ok/WegymJKPj8QxSC40sy4TfsheVPzg=
Subject key identifier: 62:B0:E1:7D:5E:35:1D:0C:5F:06:82:CD:92:96:58:81:9A:17:8B:51
Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Certificate serial: 22898C3821D708AD9B5B8B4A7A9C3AB976F0B45A
Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35352e302f32342d3234203d3e20313533393131.roa
Signing time: Mon 20 Apr 2026 06:49:22 +0000
ROA not before: Mon 20 Apr 2026 06:44:22 +0000
ROA not after: Mon 19 Apr 2027 06:49:22 +0000
asID: 153911
IP address blocks: 43.226.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:89:8c:38:21:d7:08:ad:9b:5b:8b:4a:7a:9c:3a:b9:76:f0:b4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Validity
Not Before: Apr 20 06:44:22 2026 GMT
Not After : Apr 19 06:49:22 2027 GMT
Subject: CN=62B0E17D5E351D0C5F0682CD929658819A178B51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c7:8c:c4:8d:fb:49:d0:b8:64:5d:27:b2:76:
fb:67:41:b8:98:3a:d9:df:9c:c9:65:43:73:e8:9f:
b8:dc:ff:67:a4:19:77:bb:ee:45:52:51:de:dd:e7:
96:9c:d4:ed:0d:4e:f5:d1:c5:a8:8f:c2:cc:04:e0:
bb:25:34:68:58:ef:45:74:fc:b8:63:0e:65:92:72:
4f:af:a3:90:85:5c:41:97:5b:71:37:81:44:9a:06:
f7:9e:97:93:36:91:91:06:d0:49:78:df:b1:ca:71:
6c:f7:b8:54:37:e7:f4:d4:59:8b:6a:90:c8:fd:9a:
ff:21:f0:6a:d3:e6:81:de:91:21:e3:68:be:a8:b5:
0d:61:3b:79:83:7d:16:95:c4:30:53:26:76:ca:ce:
b4:cd:17:47:e1:a7:2e:d8:66:1a:ea:e9:62:71:ee:
c1:5e:ae:6c:16:05:e0:af:c8:1d:b4:a3:4d:f0:cc:
34:3c:f7:f6:c3:a3:a9:52:ae:04:9a:72:27:c4:c1:
66:8d:98:f1:b2:f1:5d:97:ec:63:f0:91:a0:40:de:
be:e0:0f:2c:cf:7b:63:18:d1:69:61:af:d0:e4:d1:
af:c2:a4:ed:52:0e:46:2b:41:4a:73:10:d5:dc:fe:
d9:47:71:b0:fc:ec:09:d6:a2:f2:31:cc:a7:f8:16:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B0:E1:7D:5E:35:1D:0C:5F:06:82:CD:92:96:58:81:9A:17:8B:51
X509v3 Authority Key Identifier:
keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35352e302f32342d3234203d3e20313533393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.55.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6c:4d:fe:42:0e:c2:14:8e:53:5d:58:0a:42:14:21:a7:d3:
9f:86:1e:66:27:da:bc:59:b0:20:6a:ae:e3:ff:70:ab:94:41:
40:8e:03:18:ab:5f:b0:f3:af:f3:4f:be:91:b4:77:3d:bb:87:
bb:ae:80:06:c9:25:18:dc:bc:f2:e0:1f:96:c8:cc:48:f0:dc:
e9:ee:e3:d1:f5:04:d0:3e:e5:cc:4c:bb:5c:14:3f:ff:3a:9e:
46:5b:37:7b:21:a0:01:2d:52:1f:43:0f:38:e8:da:dd:38:fb:
fd:e4:8b:ca:9d:31:cb:92:3a:55:50:fd:5a:45:9c:83:4e:8f:
e0:ae:bf:89:ff:49:24:a6:77:90:bf:d4:66:5a:e5:4d:64:3a:
37:a4:95:14:e7:3c:ad:a6:91:02:be:45:c1:e1:fa:5c:7c:85:
d5:a0:48:83:92:5d:6b:a1:38:8b:28:b1:62:93:4b:58:f6:36:
33:96:92:be:9f:cd:1a:5b:9f:de:cc:3d:ff:30:fe:95:37:a3:
e7:82:19:ea:35:c6:ed:9d:b6:3e:c1:f1:d5:2a:1a:8c:b3:e3:
73:72:40:b0:87:d6:63:2d:f9:10:15:16:48:3e:4d:32:7a:eb:
b5:3f:be:b6:c1:3e:94:30:7e:c9:c4:49:45:0f:24:12:c2:bc:
9f:1d:8e:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 22 04:04:55 2026 by rpki-client