
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35362e302f32312d3234203d3e2034383337.roa
File: 34332e3232362e35362e302f32312d3234203d3e2034383337.roa (raw, json)
Hash identifier: jhpzywUwXPmxtw5HaT7U40LtxFtDBNoWOlL1HzInOXY=
Subject key identifier: 76:01:D9:16:FE:F1:29:00:FA:16:EB:F5:AD:4A:07:0C:B5:45:B8:67
Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Certificate serial: 494B4A546DC71149A4FAC25B9B310E1EC6F581B3
Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35362e302f32312d3234203d3e2034383337.roa
Signing time: Mon 20 Apr 2026 06:46:26 +0000
ROA not before: Mon 20 Apr 2026 06:41:26 +0000
ROA not after: Mon 19 Apr 2027 06:46:26 +0000
asID: 4837
IP address blocks: 43.226.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:4b:4a:54:6d:c7:11:49:a4:fa:c2:5b:9b:31:0e:1e:c6:f5:81:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Validity
Not Before: Apr 20 06:41:26 2026 GMT
Not After : Apr 19 06:46:26 2027 GMT
Subject: CN=7601D916FEF12900FA16EBF5AD4A070CB545B867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:8a:8e:f2:fd:9a:07:43:a5:6e:15:5f:2f:
f7:ac:a1:0f:96:ba:27:84:ad:27:91:53:8a:21:cf:
a6:70:5f:8d:54:a9:b9:bc:73:51:a8:5e:0d:dc:d6:
f8:02:46:f1:c9:6a:b1:5b:46:97:43:7f:d1:60:10:
90:16:ea:78:db:83:0d:a7:6d:fd:cf:9c:5a:fb:b7:
6e:da:16:0c:0e:a8:93:6c:fd:2b:b9:ec:11:c0:68:
76:5a:a2:30:e9:80:77:4c:85:21:6e:86:45:2c:60:
7a:af:f1:6f:55:46:e6:0b:38:92:54:20:61:c4:28:
1d:49:b9:aa:67:24:0c:9a:cb:cd:6e:9d:f8:1a:f1:
fd:f3:1c:38:69:b9:63:bd:fe:11:50:de:40:f2:e6:
b4:3e:aa:ca:37:39:59:b1:59:d2:d9:bd:b6:3b:69:
34:15:30:e8:55:18:fa:ba:34:3b:3e:50:b9:c4:eb:
dd:ec:54:25:55:15:b4:bd:f2:6a:68:dd:71:d4:83:
57:5f:60:92:fd:b0:9c:9c:73:80:41:c9:4e:29:64:
11:c5:3e:de:ed:57:9f:cd:be:36:7b:b5:26:22:8e:
db:4a:f9:7c:85:f4:6d:24:3f:aa:01:b0:a9:3b:12:
1d:09:5b:dd:5d:8d:e8:0c:09:ed:0d:78:3f:ad:db:
5e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:01:D9:16:FE:F1:29:00:FA:16:EB:F5:AD:4A:07:0C:B5:45:B8:67
X509v3 Authority Key Identifier:
keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35362e302f32312d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.56.0/21
Signature Algorithm: sha256WithRSAEncryption
63:5d:e2:7d:cb:e0:61:28:1b:02:62:ab:78:2c:d0:9d:2f:b7:
9a:98:b5:ef:c7:3f:a0:bd:e0:b3:cd:66:d0:99:3c:f2:f4:c6:
8b:0f:30:a0:66:ca:8c:65:dd:e7:fe:34:6c:6d:77:fe:03:04:
f7:83:81:a8:f8:42:00:27:f3:51:c6:a8:b3:31:5e:ed:c7:df:
bd:7f:c0:62:d9:ed:ab:5b:5c:64:bf:65:eb:39:b6:33:c6:9d:
61:c0:66:51:2f:3d:65:2a:bc:a5:0a:24:4f:95:1f:7b:79:de:
56:11:e1:88:e9:f1:6b:10:51:b5:df:b7:eb:fd:74:7a:5d:e5:
a9:64:5e:78:96:b6:29:1c:4e:3d:93:2d:fd:e1:28:9c:a2:72:
22:07:fb:00:cf:76:a1:71:f4:67:10:c3:12:f3:52:20:27:b0:
77:95:9f:29:8f:a2:32:92:1e:a4:cb:ea:04:67:ed:ae:26:97:
19:85:93:46:dc:29:a1:f3:dc:52:b1:64:36:a7:c2:3e:85:14:
dd:99:46:e2:13:b3:56:36:42:35:05:ec:08:44:8a:73:c3:b5:
d6:bb:51:a6:03:3d:f7:a6:e2:47:27:ca:b2:03:70:fc:78:de:
25:17:45:38:52:62:19:53:69:44:4a:38:a6:0e:ae:2a:0b:2e:
0c:81:cd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:04:03 2026 by rpki-client