$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35352e302f32342d3234203d3e2034383337.roa File: 34332e3232362e35352e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: kmOEwF9u0TDzajT/xC6xxF92Qd6dP1mNTgcUTnLbA8w= Subject key identifier: 54:8D:2A:DB:2A:E6:2B:11:7F:CF:63:16:84:43:3F:FB:F3:90:0A:B1 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 321CF302F9E0365416A3260EF7812F56ADE5516F Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35352e302f32342d3234203d3e2034383337.roa Signing time: Mon 20 Apr 2026 06:49:21 +0000 ROA not before: Mon 20 Apr 2026 06:44:21 +0000 ROA not after: Mon 19 Apr 2027 06:49:21 +0000 asID: 4837 IP address blocks: 43.226.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1c:f3:02:f9:e0:36:54:16:a3:26:0e:f7:81:2f:56:ad:e5:51:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:44:21 2026 GMT Not After : Apr 19 06:49:21 2027 GMT Subject: CN=548D2ADB2AE62B117FCF631684433FFBF3900AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:fe:2a:12:76:f5:45:08:3d:c2:93:40:1a: 74:34:38:b2:3d:98:be:39:09:d5:ad:cb:f5:18:e9: 5a:27:92:bf:57:eb:1a:09:80:63:74:06:bc:6a:53: 3b:bf:84:44:dc:ba:a2:6e:df:7f:16:48:8d:82:a4: c1:17:c9:a0:63:63:4e:d9:bf:ef:aa:12:7e:f0:0e: e1:56:50:8e:26:d6:f2:69:4c:ce:5f:e3:fa:ac:fd: 12:cc:77:8d:e8:d2:b9:4f:7f:1d:b9:06:51:b1:71: 11:aa:3a:79:36:c9:14:dd:82:3e:d3:9e:d0:75:e2: 07:e7:15:35:ec:c5:e7:f4:90:6a:d8:a6:a1:b3:cb: 18:9a:30:40:4c:be:2d:0b:8e:0f:a2:16:6c:a9:2b: 73:2f:5e:30:12:5b:59:d5:47:b7:82:69:8d:2b:b0: f5:7c:e8:b5:96:7f:fa:5f:7e:37:b1:f8:20:0c:f6: 4b:76:78:ea:5b:4c:f8:45:72:e3:bd:86:fe:6a:f1: eb:e6:e6:f1:46:eb:15:73:95:4a:06:70:4e:c9:73: 11:38:c1:e4:10:3c:00:6d:c5:eb:9f:b1:80:a9:f8: 14:b6:73:ca:c5:ec:57:fb:a5:2b:21:a0:62:22:9a: f5:fe:9e:a2:58:b3:ea:25:fb:e9:a3:f5:61:60:f5: 9c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8D:2A:DB:2A:E6:2B:11:7F:CF:63:16:84:43:3F:FB:F3:90:0A:B1 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35352e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.55.0/24 Signature Algorithm: sha256WithRSAEncryption 74:51:20:08:ea:11:2a:5e:b3:c2:6b:62:06:73:26:18:2d:6b: 7b:5c:ab:a0:82:19:f2:b2:64:28:2b:43:e1:c4:87:f2:90:61: 35:8a:93:04:d2:c6:f8:bb:da:7b:af:9b:7f:fb:3c:50:09:ee: a5:1f:dd:4a:8d:fe:17:bf:e6:38:a7:4d:d9:fa:4f:13:8e:34: 82:e1:05:3c:6e:c9:45:cc:b1:b6:fe:76:ed:9f:0d:db:c3:47: fc:7e:da:9f:fe:32:0c:ac:24:11:6b:30:c2:de:0c:4b:46:94: 8a:e9:37:57:b5:1a:a8:ca:c2:68:3e:b1:b5:d1:81:51:86:8e: bb:96:5d:13:02:45:3a:85:aa:f9:dd:b0:31:d9:17:12:5d:7b: ce:55:0d:96:ee:b5:9e:d4:5c:38:e5:11:52:2c:7e:a7:92:34: 0b:10:a1:2b:8e:f5:57:67:dc:d8:a9:ca:c2:11:23:27:34:60: 70:26:db:7d:c1:d8:16:64:00:80:90:5d:00:4f:7b:c3:e3:76: a9:a7:42:da:fe:30:c9:36:3a:d1:9a:1c:67:fa:ef:d4:22:e4: fa:b7:e5:54:58:06:8b:63:1c:64:6f:66:ca:83:c1:7a:e8:5a: 37:42:20:2b:c0:44:d6:52:3b:d7:4a:04:c7:d9:f8:bb:3a:ad: 90:29:0b:06 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUMhzzAvngNlQWoyYO94EvVq3lUW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjQ0MjFaFw0yNzA0MTkwNjQ5MjFaMDMxMTAvBgNV BAMTKDU0OEQyQURCMkFFNjJCMTE3RkNGNjMxNjg0NDMzRkZCRjM5MDBBQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxI/4qEnb1RQg9wpNAGnQ0OLI9 mL45CdWty/UY6Vonkr9X6xoJgGN0BrxqUzu/hETcuqJu338WSI2CpMEXyaBjY07Z v++qEn7wDuFWUI4m1vJpTM5f4/qs/RLMd43o0rlPfx25BlGxcRGqOnk2yRTdgj7T ntB14gfnFTXsxef0kGrYpqGzyxiaMEBMvi0Ljg+iFmypK3MvXjASW1nVR7eCaY0r sPV86LWWf/pffjex+CAM9kt2eOpbTPhFcuO9hv5q8evm5vFG6xVzlUoGcE7JcxE4 weQQPABtxeufsYCp+BS2c8rF7Ff7pSshoGIimvX+nqJYs+ol++mj9WFg9ZxLAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUVI0q2yrmKxF/z2MWhEM/+/OQCrEwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4NDkwNDk2NjE3MDIxNDQyLzAvMzQzMzJlMzIzMjM2 MmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr4jcwDQYJKoZIhvcNAQELBQADggEBAHRRIAjqESpes8JrYgZzJhgta3tcq6CC GfKyZCgrQ+HEh/KQYTWKkwTSxvi72nuvm3/7PFAJ7qUf3UqN/he/5jinTdn6TxOO NILhBTxuyUXMsbb+du2fDdvDR/x+2p/+MgysJBFrMMLeDEtGlIrpN1e1GqjKwmg+ sbXRgVGGjruWXRMCRTqFqvndsDHZFxJde85VDZbutZ7UXDjlEVIsfqeSNAsQoSuO 9Vdn3NipysIRIyc0YHAm233B2BZkAICQXQBPe8PjdqmnQtr+MMk2OtGaHGf679Qi 5Pq35VRYBotjHGRvZsqDwXroWjdCICvARNZSO9dKBMfZ+Ls6rZApCwY= -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:03 2026 by rpki-client