$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e37382e302f32332d3234203d3e20313533393131.roa File: 34332e3232362e37382e302f32332d3234203d3e20313533393131.roa (raw, json) Hash identifier: 9H5MB1/Ra6uqpW4VJRHXbt9oVwCla10Ron6u9nB4zeA= Subject key identifier: 2F:4C:1A:A3:E5:B2:32:1A:FE:6F:0E:82:7F:DF:62:41:A2:D5:EF:9A Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 440EEE41720AD232AE0804C5C87531D443A7F1CB Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e37382e302f32332d3234203d3e20313533393131.roa Signing time: Mon 20 Apr 2026 06:44:39 +0000 ROA not before: Mon 20 Apr 2026 06:39:39 +0000 ROA not after: Mon 19 Apr 2027 06:44:39 +0000 asID: 153911 IP address blocks: 43.226.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0e:ee:41:72:0a:d2:32:ae:08:04:c5:c8:75:31:d4:43:a7:f1:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:39:39 2026 GMT Not After : Apr 19 06:44:39 2027 GMT Subject: CN=2F4C1AA3E5B2321AFE6F0E827FDF6241A2D5EF9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:fe:7f:06:58:4b:cc:ae:1c:e8:4b:f6:0b: 97:a1:43:35:5a:c8:16:bd:17:c3:9d:71:88:0e:15: 3f:2f:fb:81:07:ba:57:c0:60:b1:e7:1e:4e:81:28: 73:6e:36:db:e7:46:45:db:61:9e:58:4b:c3:6b:b7: b5:57:84:5f:f9:a9:8d:19:b1:cc:1e:fd:1f:87:c9: de:55:5d:de:42:02:96:12:1a:7e:dc:9f:10:a5:c7: 9f:11:7c:3d:dc:c8:fc:66:ad:17:24:5e:bb:c3:63: 52:d6:7b:15:19:4b:23:34:8a:5d:a2:9f:ba:41:80: 13:6b:7d:b9:b2:54:66:cf:9a:c4:01:0d:22:ce:7a: bb:50:a8:61:bc:1f:cf:d6:ad:ae:0a:ee:31:76:08: b7:d7:66:57:f3:cd:9c:f6:69:07:6c:09:f6:90:db: b6:9a:24:08:ce:91:cd:78:8f:cc:e7:70:97:f3:a2: b1:b4:29:d2:0c:08:7b:a7:2a:34:2d:fe:1e:e1:2e: 89:c8:bc:c6:9b:5f:db:29:c9:a4:f2:a5:3a:aa:f2: 19:89:10:28:4d:f8:81:c9:02:bd:24:2e:e0:73:d4: 88:f9:e7:28:a9:c1:80:f6:35:0a:f8:1d:7a:b5:ce: 51:65:90:ba:88:a5:74:ee:61:d8:83:b8:be:75:14: 4b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4C:1A:A3:E5:B2:32:1A:FE:6F:0E:82:7F:DF:62:41:A2:D5:EF:9A X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e37382e302f32332d3234203d3e20313533393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.78.0/23 Signature Algorithm: sha256WithRSAEncryption 59:30:2a:a2:cc:c2:ec:43:b8:8c:95:9f:65:f6:bf:c6:98:fb: 52:c1:66:dd:18:0c:a3:c8:66:e3:cd:b0:4c:ab:eb:bc:da:a8: 3a:c9:21:e3:6f:66:bf:0c:3a:5b:dc:08:43:7f:96:12:b8:84: 78:79:58:18:64:22:da:34:75:cc:89:22:1b:9f:51:bb:19:12: 64:f1:e1:70:b9:8b:d8:7f:3b:3f:b1:b4:75:6a:88:cc:ce:f9: aa:60:b9:8f:8b:aa:4f:fc:94:a9:00:d7:55:51:9d:df:2b:c1: bd:b6:6e:f8:92:0a:31:51:af:fb:f1:5d:58:1b:61:cb:53:29: 06:a2:4b:3d:0a:c4:07:62:28:34:c7:78:4a:fd:32:e7:16:3f: 42:df:c5:9c:f3:0b:63:02:68:36:e0:3a:54:46:48:5a:a2:12: f5:f5:3a:11:ee:da:ed:34:8f:f2:92:1a:28:cd:ba:7c:51:6b: 40:b1:4d:c4:b6:df:0b:cd:49:b9:c0:0d:cf:d8:88:11:f4:58: fa:d5:84:3a:41:b6:ad:c4:9b:a1:18:47:68:f4:3a:a1:60:73: d4:db:3f:ff:3f:ff:00:ca:e0:dc:68:60:45:80:1b:21:74:72: 5f:c2:b3:88:8c:d6:61:a7:04:66:84:2a:bd:9b:ca:97:70:cf: 8d:7f:a6:73 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIURA7uQXIK0jKuCATFyHUx1EOn8cswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjM5MzlaFw0yNzA0MTkwNjQ0MzlaMDMxMTAvBgNV BAMTKDJGNEMxQUEzRTVCMjMyMUFGRTZGMEU4MjdGREY2MjQxQTJENUVGOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Yf5/BlhLzK4c6Ev2C5ehQzVa yBa9F8OdcYgOFT8v+4EHulfAYLHnHk6BKHNuNtvnRkXbYZ5YS8Nrt7VXhF/5qY0Z scwe/R+Hyd5VXd5CApYSGn7cnxClx58RfD3cyPxmrRckXrvDY1LWexUZSyM0il2i n7pBgBNrfbmyVGbPmsQBDSLOertQqGG8H8/Wra4K7jF2CLfXZlfzzZz2aQdsCfaQ 27aaJAjOkc14j8zncJfzorG0KdIMCHunKjQt/h7hLonIvMabX9spyaTypTqq8hmJ EChN+IHJAr0kLuBz1Ij55yipwYD2NQr4HXq1zlFlkLqIpXTuYdiDuL51FEvjAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUL0wao+WyMhr+bw6Cf99iQaLV75owHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzM0MzMyZTMyMzIz NjJlMzczODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMzM5MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEASviTjANBgkqhkiG9w0BAQsFAAOCAQEAWTAqoszC7EO4jJWfZfa/xpj7 UsFm3RgMo8hm482wTKvrvNqoOskh429mvww6W9wIQ3+WEriEeHlYGGQi2jR1zIki G59RuxkSZPHhcLmL2H87P7G0dWqIzM75qmC5j4uqT/yUqQDXVVGd3yvBvbZu+JIK MVGv+/FdWBthy1MpBqJLPQrEB2IoNMd4Sv0y5xY/Qt/FnPMLYwJoNuA6VEZIWqIS 9fU6Ee7a7TSP8pIaKM26fFFrQLFNxLbfC81JucANz9iIEfRY+tWEOkG2rcSboRhH aPQ6oWBz1Ns//z//AMrg3GhgRYAbIXRyX8KziIzWYacEZoQqvZvKl3DPjX+mcw== -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:57 2026 by rpki-client