$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e35362e302f32312d3234203d3e2034383337.roa File: 34332e3232372e35362e302f32312d3234203d3e2034383337.roa (raw, json) Hash identifier: 2wsHa7di2LhZcRCTo/tlQScOc+2vDoCaD8zUoityd9w= Subject key identifier: 1C:6E:AB:FA:35:4F:A5:DF:29:9C:49:8D:98:BC:04:A5:F7:E2:5B:E2 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 4E604E5DC28B5ED064B629AEF5E5F7F600AD43D9 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e35362e302f32312d3234203d3e2034383337.roa Signing time: Mon 20 Apr 2026 06:50:06 +0000 ROA not before: Mon 20 Apr 2026 06:45:06 +0000 ROA not after: Mon 19 Apr 2027 06:50:06 +0000 asID: 4837 IP address blocks: 43.227.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:60:4e:5d:c2:8b:5e:d0:64:b6:29:ae:f5:e5:f7:f6:00:ad:43:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:45:06 2026 GMT Not After : Apr 19 06:50:06 2027 GMT Subject: CN=1C6EABFA354FA5DF299C498D98BC04A5F7E25BE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:91:41:cd:92:56:83:2a:f6:ee:ac:9c:0f:b9: bc:ed:42:3a:d6:7c:83:f6:b8:6f:16:eb:a4:40:34: 7c:20:94:be:9a:cd:ac:56:95:e8:ca:af:3f:64:2d: 69:8f:9a:41:96:63:ad:f6:9e:36:d0:16:d6:fd:a9: c4:6f:5b:90:c7:1b:40:8f:e0:0d:ff:d9:a6:10:c5: 02:36:83:b4:a9:36:ca:cf:41:44:fc:11:9c:43:5c: 3c:5e:ce:3f:9f:75:98:b8:db:76:95:37:d6:6b:fe: d3:e6:15:d5:ab:77:1b:c8:58:2a:45:11:60:13:00: 2f:b1:b6:20:eb:75:6a:bf:e1:97:c4:42:1e:de:b4: d9:f0:27:83:7d:19:dc:a3:ba:77:f7:81:19:3a:f3: d9:0e:cf:b3:84:55:c1:36:33:5e:03:a8:b3:34:e3: ba:d8:72:47:ea:0c:03:50:db:0c:b0:57:3f:35:cd: 7c:83:f3:a9:fb:7b:3f:71:f1:80:2f:d5:3b:68:b5: 81:58:06:bc:41:d1:e8:b4:36:6b:f4:31:81:8e:94: 46:cb:76:c3:48:b8:f6:66:d1:61:58:f9:3e:d5:15: f9:e7:f0:69:35:90:69:d0:ce:3e:7b:d4:8a:6b:20: 82:6c:3f:f4:cc:d9:40:fc:f0:44:76:66:36:58:bc: a9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6E:AB:FA:35:4F:A5:DF:29:9C:49:8D:98:BC:04:A5:F7:E2:5B:E2 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e35362e302f32312d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.56.0/21 Signature Algorithm: sha256WithRSAEncryption ac:a3:7b:cf:2d:e2:d1:c1:85:e6:76:97:8b:39:05:60:50:29: 2a:0f:77:cd:b2:e9:58:45:7d:f4:37:50:d8:61:51:93:fa:ed: db:99:04:44:96:ef:4b:14:33:c5:5b:87:35:05:81:ae:3e:e2: fb:d6:4f:1d:e6:45:96:8a:95:7e:f8:9e:2b:3f:a0:8f:40:f1: a6:d7:78:68:20:2c:41:8b:e7:2a:5d:19:34:91:97:f2:12:93: bc:b1:62:9b:bc:f0:75:47:f5:21:8b:aa:94:7b:59:83:b9:86: f7:a2:3b:76:03:bb:da:87:f8:27:48:24:13:a1:ad:ea:4d:bc: e9:9c:b9:6d:85:07:4c:c9:dc:a6:19:bc:11:7b:d4:b6:11:6e: 00:b8:a3:cb:2b:1e:e6:23:b8:05:bd:5c:53:45:9b:b0:83:11: ab:8c:ec:8c:e9:2e:92:b3:f3:48:4e:e3:5b:57:25:e1:75:9d: ba:e2:76:93:b5:01:43:d9:99:5a:93:9c:49:b5:c4:f0:03:91: af:00:8a:af:fc:60:2e:da:69:2c:1e:14:b4:1c:0f:cd:f2:59: 27:76:a1:c3:cf:2b:2e:a9:3a:b8:0d:31:1b:6a:cf:0e:c4:cd: 5f:92:12:f2:e3:95:40:28:39:21:98:ef:c0:6a:5d:9d:b7:4e: eb:d3:9e:47 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUTmBOXcKLXtBktimu9eX39gCtQ9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjQ1MDZaFw0yNzA0MTkwNjUwMDZaMDMxMTAvBgNV BAMTKDFDNkVBQkZBMzU0RkE1REYyOTlDNDk4RDk4QkMwNEE1RjdFMjVCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmkUHNklaDKvburJwPubztQjrW fIP2uG8W66RANHwglL6azaxWlejKrz9kLWmPmkGWY632njbQFtb9qcRvW5DHG0CP 4A3/2aYQxQI2g7SpNsrPQUT8EZxDXDxezj+fdZi423aVN9Zr/tPmFdWrdxvIWCpF EWATAC+xtiDrdWq/4ZfEQh7etNnwJ4N9Gdyjunf3gRk689kOz7OEVcE2M14DqLM0 47rYckfqDANQ2wywVz81zXyD86n7ez9x8YAv1TtotYFYBrxB0ei0Nmv0MYGOlEbL dsNIuPZm0WFY+T7VFfnn8Gk1kGnQzj571IprIIJsP/TM2UD88ER2ZjZYvKn9AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUHG6r+jVPpd8pnEmNmLwEpffiW+IwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4NDkwNDk2NjE3MDIxNDQyLzAvMzQzMzJlMzIzMjM3 MmUzNTM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAMr4zgwDQYJKoZIhvcNAQELBQADggEBAKyje88t4tHBheZ2l4s5BWBQKSoPd82y 6VhFffQ3UNhhUZP67duZBESW70sUM8VbhzUFga4+4vvWTx3mRZaKlX74nis/oI9A 8abXeGggLEGL5ypdGTSRl/ISk7yxYpu88HVH9SGLqpR7WYO5hveiO3YDu9qH+CdI JBOhrepNvOmcuW2FB0zJ3KYZvBF71LYRbgC4o8srHuYjuAW9XFNFm7CDEauM7Izp LpKz80hO41tXJeF1nbridpO1AUPZmVqTnEm1xPADka8Aiq/8YC7aaSweFLQcD83y WSd2ocPPKy6pOrgNMRtqzw7EzV+SEvLjlUAoOSGY78BqXZ23TuvTnkc= -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:04 2026 by rpki-client