$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35352e302f32342d3234203d3e203233363530.roa File: 34332e3232362e35352e302f32342d3234203d3e203233363530.roa (raw, json) Hash identifier: miOoI3Bd3PcpAgWOY/8yOZOFTNIX3a4S3Ymnmfg009I= Subject key identifier: C5:85:90:C8:37:0F:B0:9B:36:01:6B:E0:AF:07:E2:FF:8A:42:13:DD Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 466A42D8AF732DAC96D9262AEFCD02242AE08819 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35352e302f32342d3234203d3e203233363530.roa Signing time: Mon 20 Apr 2026 06:49:21 +0000 ROA not before: Mon 20 Apr 2026 06:44:21 +0000 ROA not after: Mon 19 Apr 2027 06:49:21 +0000 asID: 23650 IP address blocks: 43.226.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:6a:42:d8:af:73:2d:ac:96:d9:26:2a:ef:cd:02:24:2a:e0:88:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:44:21 2026 GMT Not After : Apr 19 06:49:21 2027 GMT Subject: CN=C58590C8370FB09B36016BE0AF07E2FF8A4213DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:85:9a:18:f0:68:52:06:86:3a:9d:c6:14: 2d:cd:54:0c:68:28:e6:79:b5:01:28:09:3c:4e:fa: fe:48:ba:52:c7:2b:1e:a6:57:c0:f3:b8:31:97:bf: 1c:97:a1:e9:b2:c2:a9:4e:3e:7a:f4:71:91:62:08: 30:cb:c1:69:3b:12:fb:61:6b:71:bd:5d:1d:b8:f2: 8d:60:64:f0:53:da:a5:3d:4c:81:0b:5d:f4:53:59: ba:4f:dd:0d:8e:75:23:0a:87:fb:48:87:fb:4b:a6: 22:01:00:fc:87:32:75:ba:f1:67:88:2c:5b:0a:f7: 23:67:02:8e:e0:f2:d4:d6:ec:25:24:2f:c4:8b:9a: 46:06:46:15:d6:2b:de:90:16:e3:65:0b:4b:65:7b: 31:c7:bb:65:c7:2f:59:89:77:ae:14:a1:aa:01:e4: ef:b8:78:7a:49:13:fd:a8:89:8a:c6:97:4c:2a:c8: 26:42:78:0b:67:74:d4:9b:43:27:47:5c:a5:b4:48: 19:df:eb:f9:50:83:26:eb:6a:9d:1b:ad:24:3f:a6: 6c:48:14:b5:ea:4f:af:82:37:5a:85:35:33:61:e9: 5c:c0:6f:a3:74:bf:cf:39:c0:ba:d0:01:cf:86:7b: 62:75:10:3e:cb:d0:93:b6:54:dd:c2:31:bb:1f:e6: 1e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:85:90:C8:37:0F:B0:9B:36:01:6B:E0:AF:07:E2:FF:8A:42:13:DD X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35352e302f32342d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.55.0/24 Signature Algorithm: sha256WithRSAEncryption 86:ef:a9:25:2c:d1:28:f6:1b:c0:f9:1c:f6:aa:e3:49:5f:db: 92:c1:0f:3b:54:e3:50:86:ba:2b:d8:ad:aa:91:bc:ef:4f:45: af:8b:11:93:ba:d3:61:07:08:67:42:c9:86:10:90:f1:3c:e9: d4:12:ae:29:e7:9a:ee:a0:c0:c5:83:e2:3d:3b:99:b9:33:08: c7:63:eb:df:3b:6c:c6:3f:dc:f5:f1:20:55:a2:d4:ef:d6:6e: 5b:d9:22:c0:12:f4:4a:96:f6:62:68:fd:14:6e:bd:1a:4c:0e: b7:dd:79:d8:93:b2:c7:bb:42:ae:59:c1:92:8c:3f:38:c9:14: 3b:b0:c9:be:92:07:c9:37:8d:36:97:9e:46:72:3e:f0:a9:69: b6:73:ec:41:6f:d1:87:a2:b3:39:91:71:3e:3a:f2:5b:20:4f: 73:33:46:dc:41:d4:54:02:49:40:c9:08:c7:14:f5:2b:f7:2c: 0a:71:be:a1:be:8b:e5:c2:5c:9e:0f:05:38:07:d4:8b:69:ad: c2:ea:25:42:3d:49:96:14:bc:3b:f4:0c:b7:3d:45:77:6b:41: dd:46:03:4a:75:02:c5:6c:28:63:cc:31:c9:e2:09:44:1d:81: ce:5f:85:c8:61:6e:c3:37:45:9d:e2:9b:f4:bf:cb:d1:a5:1c: 00:cc:a3:b0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIURmpC2K9zLayW2SYq780CJCrgiBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjQ0MjFaFw0yNzA0MTkwNjQ5MjFaMDMxMTAvBgNV BAMTKEM1ODU5MEM4MzcwRkIwOUIzNjAxNkJFMEFGMDdFMkZGOEE0MjEzREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kIWaGPBoUgaGOp3GFC3NVAxo KOZ5tQEoCTxO+v5IulLHKx6mV8DzuDGXvxyXoemywqlOPnr0cZFiCDDLwWk7Evth a3G9XR248o1gZPBT2qU9TIELXfRTWbpP3Q2OdSMKh/tIh/tLpiIBAPyHMnW68WeI LFsK9yNnAo7g8tTW7CUkL8SLmkYGRhXWK96QFuNlC0tlezHHu2XHL1mJd64UoaoB 5O+4eHpJE/2oiYrGl0wqyCZCeAtndNSbQydHXKW0SBnf6/lQgybrap0brSQ/pmxI FLXqT6+CN1qFNTNh6VzAb6N0v885wLrQAc+Ge2J1ED7L0JO2VN3CMbsf5h6xAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUxYWQyDcPsJs2AWvgrwfi/4pCE90wHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4NDkwNDk2NjE3MDIxNDQyLzAvMzQzMzJlMzIzMjM2 MmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACviNzANBgkqhkiG9w0BAQsFAAOCAQEAhu+pJSzRKPYbwPkc9qrjSV/bksEP O1TjUIa6K9itqpG8709Fr4sRk7rTYQcIZ0LJhhCQ8Tzp1BKuKeea7qDAxYPiPTuZ uTMIx2Pr3ztsxj/c9fEgVaLU79ZuW9kiwBL0Spb2Ymj9FG69GkwOt9152JOyx7tC rlnBkow/OMkUO7DJvpIHyTeNNpeeRnI+8KlptnPsQW/Rh6KzOZFxPjryWyBPczNG 3EHUVAJJQMkIxxT1K/csCnG+ob6L5cJcng8FOAfUi2mtwuolQj1JlhS8O/QMtz1F d2tB3UYDSnUCxWwoY8wxyeIJRB2Bzl+FyGFuwzdFneKb9L/L0aUcAMyjsA== -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:57 2026 by rpki-client