
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e36392e302f32342d3234203d3e203233363530.roa
File: 34332e3232372e36392e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier: R7S/EZiXw4O60T+sHOE+MumFK4m669MclRrl9n0bI90=
Subject key identifier: 0A:D7:77:84:79:74:31:A4:F2:96:D3:64:C0:AD:B7:41:8B:38:D0:26
Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Certificate serial: 7C13898C03353872C84E2F6037ED7EDAE9B11F4F
Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e36392e302f32342d3234203d3e203233363530.roa
Signing time: Mon 20 Apr 2026 06:43:00 +0000
ROA not before: Mon 20 Apr 2026 06:38:00 +0000
ROA not after: Mon 19 Apr 2027 06:43:00 +0000
asID: 23650
IP address blocks: 43.227.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:13:89:8c:03:35:38:72:c8:4e:2f:60:37:ed:7e:da:e9:b1:1f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Validity
Not Before: Apr 20 06:38:00 2026 GMT
Not After : Apr 19 06:43:00 2027 GMT
Subject: CN=0AD77784797431A4F296D364C0ADB7418B38D026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:0d:62:90:b9:0f:eb:39:64:b9:d2:19:2a:
bd:fd:f0:fa:71:06:59:90:17:6e:b1:7c:47:5b:6d:
1d:65:a1:f2:22:5d:02:33:ae:17:7b:26:53:a4:c4:
21:8b:ef:45:cc:eb:b7:c2:f5:70:db:78:be:d3:cd:
03:ce:ab:bc:2e:09:be:99:8d:41:e9:1b:09:e8:bd:
3e:6b:8b:73:c2:84:bb:a7:47:94:4c:ef:cb:dc:48:
8d:c6:ff:4c:44:b0:d4:fd:a7:82:05:5c:80:12:94:
27:cf:d6:48:7f:25:03:3e:8f:db:73:5d:53:ef:9a:
52:bd:19:69:13:6a:4c:a1:d1:3f:fa:69:e0:bc:29:
88:d0:cb:01:95:68:23:e5:89:89:54:ab:ce:ff:e4:
a1:4e:ff:0a:04:18:f2:8d:46:93:4c:2e:e3:8f:a0:
60:ff:88:96:cd:b0:34:0e:38:a1:30:98:79:40:c5:
b2:30:a0:08:83:03:e2:45:b3:51:d2:31:60:fd:3b:
45:46:f8:58:bf:b1:79:34:fa:2b:11:1d:e3:0d:23:
42:7b:ce:54:6a:cf:c0:2a:c3:8e:d7:66:0c:75:24:
db:73:ae:b1:09:1f:b6:ee:42:e2:1e:e5:81:88:26:
97:09:c2:4e:46:71:c4:59:56:ef:f0:67:fa:f0:4e:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D7:77:84:79:74:31:A4:F2:96:D3:64:C0:AD:B7:41:8B:38:D0:26
X509v3 Authority Key Identifier:
keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e36392e302f32342d3234203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.227.69.0/24
Signature Algorithm: sha256WithRSAEncryption
23:1d:5c:25:6a:df:a8:71:06:ce:d8:05:14:3c:1a:ed:c0:11:
df:e9:00:dd:f4:a6:da:04:5f:4e:e8:84:c7:0d:31:65:cb:d7:
0e:4c:9e:50:41:59:5b:f8:c7:97:fb:3e:10:c7:77:82:46:fd:
ce:8e:1d:48:9e:3f:6a:c5:9b:23:af:de:df:9b:cb:bc:f0:ce:
a2:3e:ec:ce:10:54:1f:ef:2b:97:02:43:80:92:64:8a:70:08:
27:7b:0d:54:77:fd:1d:0a:03:88:97:f7:d7:57:33:48:79:b4:
53:30:e5:8a:a0:e1:4b:f7:60:0a:98:60:1b:fd:5d:17:eb:d6:
7c:0e:50:48:a1:4e:de:84:e7:74:e9:39:04:fc:70:2e:d7:5f:
b1:70:72:44:ab:d0:ac:85:03:9a:01:6e:3d:18:77:48:c0:78:
cd:76:0f:2c:f5:6b:bb:b8:96:4c:7c:9b:8b:71:f5:1a:67:b7:
3d:a4:fe:f2:cf:b4:c3:ea:79:95:9f:65:95:63:5c:68:0d:70:
04:a3:34:cb:b3:4c:fd:c7:90:59:e5:c1:c8:c9:ef:2a:ce:77:
f0:58:ff:b9:e9:a6:7e:73:41:2d:98:3a:c9:e4:f4:1b:65:e3:
d0:34:8e:d3:56:28:8d:8c:d3:24:bf:d2:7b:e8:14:84:5b:a0:
eb:c1:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:04:56 2026 by rpki-client