$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e35362e302f32312d3234203d3e20313533393131.roa File: 34332e3232372e35362e302f32312d3234203d3e20313533393131.roa (raw, json) Hash identifier: gceLMhoL5ZG4ZbQV1DGEqnHQHLhQzyoUyVwFKxGy4Rw= Subject key identifier: C1:34:84:75:D6:11:19:35:EC:77:7A:EA:50:7E:F7:1D:AA:D4:A5:D8 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 01A5B6AB7B7FEF56C9089607B54D800347F6D73C Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e35362e302f32312d3234203d3e20313533393131.roa Signing time: Mon 20 Apr 2026 06:50:07 +0000 ROA not before: Mon 20 Apr 2026 06:45:07 +0000 ROA not after: Mon 19 Apr 2027 06:50:07 +0000 asID: 153911 IP address blocks: 43.227.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a5:b6:ab:7b:7f:ef:56:c9:08:96:07:b5:4d:80:03:47:f6:d7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:45:07 2026 GMT Not After : Apr 19 06:50:07 2027 GMT Subject: CN=C1348475D6111935EC777AEA507EF71DAAD4A5D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:d3:d5:9b:2a:71:b2:68:b1:13:8f:3d:58: 77:c9:c0:7a:de:9c:f8:0a:66:49:03:c5:8d:fa:83: 93:2f:41:7e:57:3c:28:ad:7a:c6:01:20:22:4c:dd: 6e:55:f8:a9:dd:c0:d1:10:ed:89:6d:c7:37:a4:0a: a3:9c:34:69:d6:4b:2d:6b:bb:1c:3a:56:ad:23:bf: c5:cf:e8:e4:1d:b6:f9:8b:c4:78:7d:42:13:d2:ba: cc:6a:97:c1:0e:dc:a5:b8:63:68:fa:cb:af:5c:d9: 4a:39:af:94:f0:cc:80:39:5a:ad:b4:11:1e:14:0b: 71:2b:80:7c:f7:9a:63:9b:86:36:61:0c:ee:49:48: 84:53:22:32:b8:71:f0:89:f3:83:45:7e:6b:f4:42: 73:8d:7b:64:e7:9e:ab:c2:f2:e3:02:27:67:e2:99: b3:ef:68:41:40:b3:d2:15:16:ea:7a:75:1b:45:7d: 84:ed:e6:28:3e:05:b7:0e:2b:d9:69:e7:7f:f1:52: 02:dd:98:15:f8:24:58:c3:2d:79:98:df:ba:d3:3f: 7a:a8:b2:17:c9:e8:84:22:f6:8a:17:b8:bb:a4:d1: 46:cb:24:20:b4:38:e5:5b:dc:2b:2f:dd:4c:b9:9d: 41:fb:e5:c7:de:09:96:c6:99:f0:7c:de:f4:9e:2a: 95:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:34:84:75:D6:11:19:35:EC:77:7A:EA:50:7E:F7:1D:AA:D4:A5:D8 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e35362e302f32312d3234203d3e20313533393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.56.0/21 Signature Algorithm: sha256WithRSAEncryption 34:4b:1b:38:70:5a:47:ab:53:6c:00:d7:40:d2:14:94:de:00: 75:c5:06:65:fd:3f:bb:9a:e2:32:85:9f:6c:50:f0:a1:3e:17: 51:f1:48:fe:bd:e5:93:b3:6f:78:11:c4:d8:70:e9:a6:57:0e: 48:40:4e:50:a5:71:0d:46:47:53:12:39:5f:a0:f1:c2:c3:64: 0f:9d:4a:24:e0:e0:d2:73:09:ef:e5:8c:40:2b:ef:6e:1d:32: 42:fb:3a:56:83:c1:0d:16:d7:d2:4c:4c:47:2b:35:aa:3a:d0: 59:fe:ea:6c:f7:ff:e2:76:2f:7a:d7:0c:b0:af:a7:ca:78:a6: b3:32:72:03:42:02:64:f5:35:32:01:ca:53:d3:c1:d0:35:9b: fc:1a:6f:6e:5a:e0:97:fd:ff:77:5b:06:d1:d2:f8:cd:bd:24: 26:15:fb:10:0c:82:14:7f:cc:28:1a:8a:63:c7:a5:6a:82:1a: 0b:95:e1:de:0a:6a:2b:c9:cd:4a:06:21:54:89:31:94:9a:8e: 56:4c:0d:fd:b7:50:d8:1c:e1:23:ae:52:81:4e:b2:49:7c:09: eb:f8:98:00:2a:8d:2a:7a:5c:2c:1d:48:71:24:ca:9a:9f:76: f8:cf:b6:50:ae:99:20:ad:cf:c7:b6:06:5f:cd:16:84:3f:f4: 88:3b:64:5e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAaW2q3t/71bJCJYHtU2AA0f21zwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjQ1MDdaFw0yNzA0MTkwNjUwMDdaMDMxMTAvBgNV BAMTKEMxMzQ4NDc1RDYxMTE5MzVFQzc3N0FFQTUwN0VGNzFEQUFENEE1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEudPVmypxsmixE489WHfJwHre nPgKZkkDxY36g5MvQX5XPCitesYBICJM3W5V+KndwNEQ7YltxzekCqOcNGnWSy1r uxw6Vq0jv8XP6OQdtvmLxHh9QhPSusxql8EO3KW4Y2j6y69c2Uo5r5TwzIA5Wq20 ER4UC3ErgHz3mmObhjZhDO5JSIRTIjK4cfCJ84NFfmv0QnONe2TnnqvC8uMCJ2fi mbPvaEFAs9IVFup6dRtFfYTt5ig+BbcOK9lp53/xUgLdmBX4JFjDLXmY37rTP3qo shfJ6IQi9ooXuLuk0UbLJCC0OOVb3Csv3Uy5nUH75cfeCZbGmfB83vSeKpWBAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUwTSEddYRGTXsd3rqUH73HarUpdgwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzM0MzMyZTMyMzIz NzJlMzUzNjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzUzMzM5MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAyvjODANBgkqhkiG9w0BAQsFAAOCAQEANEsbOHBaR6tTbADXQNIUlN4A dcUGZf0/u5riMoWfbFDwoT4XUfFI/r3lk7NveBHE2HDpplcOSEBOUKVxDUZHUxI5 X6DxwsNkD51KJODg0nMJ7+WMQCvvbh0yQvs6VoPBDRbX0kxMRys1qjrQWf7qbPf/ 4nYvetcMsK+nynimszJyA0ICZPU1MgHKU9PB0DWb/Bpvblrgl/3/d1sG0dL4zb0k JhX7EAyCFH/MKBqKY8elaoIaC5Xh3gpqK8nNSgYhVIkxlJqOVkwN/bdQ2BzhI65S gU6ySXwJ6/iYACqNKnpcLB1IcSTKmp92+M+2UK6ZIK3Px7YGX80WhD/0iDtkXg== -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:56 2026 by rpki-client