$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e37382e302f32332d3234203d3e203233363530.roa File: 34332e3232362e37382e302f32332d3234203d3e203233363530.roa (raw, json) Hash identifier: yn+FDklQh29e3YXCaIsui0XrZisrmICKNDe974gc9j0= Subject key identifier: A1:CA:74:EF:81:5F:25:20:7A:62:B8:29:D8:3C:3F:E6:09:A1:10:A4 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 50566BA58C734A4294ABA013EF6C54B10AE93843 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e37382e302f32332d3234203d3e203233363530.roa Signing time: Mon 20 Apr 2026 06:44:39 +0000 ROA not before: Mon 20 Apr 2026 06:39:39 +0000 ROA not after: Mon 19 Apr 2027 06:44:39 +0000 asID: 23650 IP address blocks: 43.226.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:56:6b:a5:8c:73:4a:42:94:ab:a0:13:ef:6c:54:b1:0a:e9:38:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:39:39 2026 GMT Not After : Apr 19 06:44:39 2027 GMT Subject: CN=A1CA74EF815F25207A62B829D83C3FE609A110A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:95:ee:a3:9a:5b:fd:d3:17:7d:f2:c1:64: 31:b9:3e:13:d3:a5:ef:21:42:9b:38:86:08:e9:24: 9e:f5:29:12:8c:55:80:2b:73:a2:83:aa:fc:78:99: 10:fb:17:ae:60:fb:49:b6:99:26:1a:e0:12:66:a2: f0:0f:d5:96:2c:72:48:ae:88:7b:6c:84:24:6b:42: 61:79:73:f8:e3:c7:b6:52:aa:7d:79:d7:11:5d:98: 14:c3:28:80:78:02:ec:38:fc:a4:23:01:8e:6f:2d: a6:f9:3c:a6:e9:6d:58:83:f4:a3:e6:37:c2:2b:ad: 32:d3:a7:1d:78:8c:3b:d4:3c:2b:f2:93:65:93:cb: 0f:32:04:80:bd:bc:ec:32:ee:6c:30:44:28:0c:5f: 69:96:09:45:dd:d5:ca:93:1e:d5:e3:e8:36:30:8b: 69:df:4c:d3:b0:22:14:cf:a6:03:10:0d:2b:67:aa: 65:63:d9:09:ae:ee:b1:94:81:04:93:c5:f8:8c:2c: ad:98:5f:0b:1d:d5:29:6a:82:84:c4:be:91:83:ad: bc:c3:45:94:dc:1c:25:44:16:88:19:2d:ca:95:57: f1:72:b1:3f:80:f1:cf:06:2b:62:0d:0c:ee:bd:f2: fc:de:38:9d:fc:f2:d0:64:d3:37:85:03:b1:19:23: 86:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CA:74:EF:81:5F:25:20:7A:62:B8:29:D8:3C:3F:E6:09:A1:10:A4 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e37382e302f32332d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.78.0/23 Signature Algorithm: sha256WithRSAEncryption 69:ff:49:74:8d:66:3b:d5:79:98:41:6f:27:c0:17:74:68:22: 51:bb:bb:a5:bd:db:3d:02:4a:14:74:f8:6a:cb:a2:5c:3f:3c: 69:1e:ba:02:f2:3b:d4:6f:31:ca:f5:ce:5c:65:69:fd:43:bb: c3:90:4f:8f:a4:24:cd:04:e0:d1:ac:19:91:3d:4b:c1:77:9c: 87:3f:89:e5:24:7a:38:d7:31:93:1d:b2:f1:88:eb:bd:9d:13: c4:c5:a4:06:0f:65:10:c6:44:64:02:bb:04:fe:f3:f8:e7:8b: 3f:88:2c:d1:a2:0d:32:4a:64:4e:d8:01:6f:11:5f:10:a1:01: 61:cf:73:a3:ea:0a:c5:a2:90:5c:bf:37:32:20:33:c3:99:af: 56:14:5f:87:bd:1c:a1:6d:61:31:ba:41:ad:d2:1b:d6:ed:a7: aa:3d:e2:e2:f4:b2:f6:92:3b:85:07:35:2e:12:13:b3:76:b2: 53:ec:f5:48:44:04:51:fa:8d:75:14:3e:9c:3a:d5:10:2f:84: 3b:49:09:12:0a:d6:1e:bd:7d:af:2d:d0:70:8a:a8:e9:6c:40: ba:f7:ef:79:88:85:d5:87:af:13:63:ac:b0:35:b0:df:3d:59: 94:94:56:79:8f:b2:28:e6:8b:9b:27:3e:95:b1:e5:2a:83:8a: 27:5d:47:cd -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUUFZrpYxzSkKUq6AT72xUsQrpOEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjM5MzlaFw0yNzA0MTkwNjQ0MzlaMDMxMTAvBgNV BAMTKEExQ0E3NEVGODE1RjI1MjA3QTYyQjgyOUQ4M0MzRkU2MDlBMTEwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkT5Xuo5pb/dMXffLBZDG5PhPT pe8hQps4hgjpJJ71KRKMVYArc6KDqvx4mRD7F65g+0m2mSYa4BJmovAP1ZYsckiu iHtshCRrQmF5c/jjx7ZSqn151xFdmBTDKIB4Auw4/KQjAY5vLab5PKbpbViD9KPm N8IrrTLTpx14jDvUPCvyk2WTyw8yBIC9vOwy7mwwRCgMX2mWCUXd1cqTHtXj6DYw i2nfTNOwIhTPpgMQDStnqmVj2Qmu7rGUgQSTxfiMLK2YXwsd1SlqgoTEvpGDrbzD RZTcHCVEFogZLcqVV/FysT+A8c8GK2INDO698vzeOJ388tBk0zeFA7EZI4YdAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUocp074FfJSB6Yrgp2Dw/5gmhEKQwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4NDkwNDk2NjE3MDIxNDQyLzAvMzQzMzJlMzIzMjM2 MmUzNzM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEASviTjANBgkqhkiG9w0BAQsFAAOCAQEAaf9JdI1mO9V5mEFvJ8AXdGgiUbu7 pb3bPQJKFHT4asuiXD88aR66AvI71G8xyvXOXGVp/UO7w5BPj6QkzQTg0awZkT1L wXechz+J5SR6ONcxkx2y8YjrvZ0TxMWkBg9lEMZEZAK7BP7z+OeLP4gs0aINMkpk TtgBbxFfEKEBYc9zo+oKxaKQXL83MiAzw5mvVhRfh70coW1hMbpBrdIb1u2nqj3i 4vSy9pI7hQc1LhITs3ayU+z1SEQEUfqNdRQ+nDrVEC+EO0kJEgrWHr19ry3QcIqo 6WxAuvfveYiF1YevE2OssDWw3z1ZlJRWeY+yKOaLmyc+lbHlKoOKJ11HzQ== -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:58 2026 by rpki-client