$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e37382e302f32332d3234203d3e20313331343833.roa File: 34332e3232362e37382e302f32332d3234203d3e20313331343833.roa (raw, json) Hash identifier: EFRph6t8bbcgjR22lPbjJhdy+Y0A23GoWLrS0VOBJPI= Subject key identifier: 65:98:C0:52:10:40:0C:5A:C6:E1:98:C5:A9:0F:0C:CE:62:69:66:04 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 7741CE86A91A2289EDE1506B3923E664C999A852 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e37382e302f32332d3234203d3e20313331343833.roa Signing time: Mon 20 Apr 2026 09:10:50 +0000 ROA not before: Mon 20 Apr 2026 09:05:50 +0000 ROA not after: Mon 19 Apr 2027 09:10:50 +0000 asID: 131483 IP address blocks: 43.226.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:41:ce:86:a9:1a:22:89:ed:e1:50:6b:39:23:e6:64:c9:99:a8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 09:05:50 2026 GMT Not After : Apr 19 09:10:50 2027 GMT Subject: CN=6598C05210400C5AC6E198C5A90F0CCE62696604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a3:aa:0c:fe:87:d4:a1:72:66:4a:e7:53:f4: c3:56:d8:9a:fe:bb:08:91:b9:78:b4:85:87:4a:73: 55:a6:b1:99:a3:da:e4:08:d1:c0:58:fb:85:d6:53: a8:ed:08:d2:0c:db:4c:e9:9f:3f:f5:30:92:bd:6d: 06:3c:66:5f:c2:c9:a0:8c:9d:0a:db:e0:60:a5:e4: 5d:5e:2b:42:78:18:a6:d4:74:f1:59:fa:80:32:6a: f7:ff:6f:f2:ff:ac:4a:fd:19:22:39:e4:86:6f:a9: e3:24:48:5b:22:3c:65:6d:4d:f3:19:5b:74:f7:cd: 1c:74:e3:6a:fb:0c:c7:7e:74:94:86:af:8e:67:33: 5e:c4:77:a2:68:d1:e5:4d:78:1f:c3:c2:e1:69:ff: 7c:a2:16:f3:8c:76:8a:9f:90:f1:84:4f:79:2c:a3: e6:59:cb:aa:e5:2c:08:d4:8c:3a:75:37:36:9d:63: 39:91:a2:38:81:1c:d4:10:ae:e5:0b:55:79:04:c9: b6:51:2d:f9:01:be:fa:ef:60:ec:b0:11:91:3f:9b: 7f:94:4e:7b:80:42:07:2f:11:e5:71:a8:4a:09:12: 68:ec:11:37:0c:31:b1:9b:99:a1:54:7c:93:97:a8: 41:bc:85:8f:da:25:08:bc:41:49:8b:8e:e6:55:2d: 3e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:98:C0:52:10:40:0C:5A:C6:E1:98:C5:A9:0F:0C:CE:62:69:66:04 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e37382e302f32332d3234203d3e20313331343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.78.0/23 Signature Algorithm: sha256WithRSAEncryption 12:e9:e5:1e:ce:3d:50:1a:f6:0b:01:66:40:1f:ba:c7:a3:05: 12:2c:05:13:ff:8c:85:15:fc:2e:b9:c0:56:29:f3:d4:6b:40: fb:31:13:91:6c:67:99:ab:6a:e8:24:29:d9:f1:d4:4a:e4:27: 91:71:df:5a:05:9c:81:9f:3d:1e:b0:69:b1:d1:c4:ea:40:94: e8:38:d2:89:cd:14:71:b6:37:3d:e1:6e:eb:68:b1:22:63:cf: 97:6c:36:5f:7d:62:bd:3f:4e:e4:09:f5:5f:2b:1b:79:42:ab: ac:c1:2b:6c:ea:ec:05:b2:f2:bb:f5:8e:68:73:8e:e8:d4:1a: a6:b3:e3:80:ed:fa:11:d2:11:fa:a0:e8:23:7a:b2:ce:02:c7: fc:71:0b:59:13:48:3f:38:a4:ed:ff:34:4c:f6:c8:c8:19:58: ae:59:25:ee:02:ab:17:61:a8:5b:96:07:c2:55:8e:d5:71:48: ad:b1:b5:e3:2f:ee:6d:08:23:81:1a:39:f6:77:08:4d:2d:a3: 2a:8d:83:a6:c7:b4:8e:44:da:e7:0c:81:b6:0c:3c:f9:08:87: e0:e8:00:5f:82:c7:a7:51:9e:b7:5f:ae:54:03:d6:7a:56:12: 48:13:2c:fb:c7:38:24:99:d5:53:e2:1e:15:7a:27:3e:3c:5f: 91:1e:df:7b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUd0HOhqkaIont4VBrOSPmZMmZqFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwOTA1NTBaFw0yNzA0MTkwOTEwNTBaMDMxMTAvBgNV BAMTKDY1OThDMDUyMTA0MDBDNUFDNkUxOThDNUE5MEYwQ0NFNjI2OTY2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbo6oM/ofUoXJmSudT9MNW2Jr+ uwiRuXi0hYdKc1WmsZmj2uQI0cBY+4XWU6jtCNIM20zpnz/1MJK9bQY8Zl/CyaCM nQrb4GCl5F1eK0J4GKbUdPFZ+oAyavf/b/L/rEr9GSI55IZvqeMkSFsiPGVtTfMZ W3T3zRx042r7DMd+dJSGr45nM17Ed6Jo0eVNeB/DwuFp/3yiFvOMdoqfkPGET3ks o+ZZy6rlLAjUjDp1NzadYzmRojiBHNQQruULVXkEybZRLfkBvvrvYOywEZE/m3+U TnuAQgcvEeVxqEoJEmjsETcMMbGbmaFUfJOXqEG8hY/aJQi8QUmLjuZVLT4pAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUZZjAUhBADFrG4ZjFqQ8MzmJpZgQwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzM0MzMyZTMyMzIz NjJlMzczODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzMTM0MzgzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEASviTjANBgkqhkiG9w0BAQsFAAOCAQEAEunlHs49UBr2CwFmQB+6x6MF EiwFE/+MhRX8LrnAVinz1GtA+zETkWxnmatq6CQp2fHUSuQnkXHfWgWcgZ89HrBp sdHE6kCU6DjSic0UcbY3PeFu62ixImPPl2w2X31ivT9O5An1XysbeUKrrMErbOrs BbLyu/WOaHOO6NQaprPjgO36EdIR+qDoI3qyzgLH/HELWRNIPzik7f80TPbIyBlY rlkl7gKrF2GoW5YHwlWO1XFIrbG14y/ubQgjgRo59ncITS2jKo2Dpse0jkTa5wyB tgw8+QiH4OgAX4LHp1Get1+uVAPWelYSSBMs+8c4JJnVU+IeFXonPjxfkR7few== -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:55 2026 by rpki-client