$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e36392e302f32342d3234203d3e203536303436.roa File: 34332e3232372e36392e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: peO0SWG0B83AmeOYAFB1qK0tRK+ayvtupkFzSB7iLoU= Subject key identifier: E1:44:BD:B5:62:EA:0C:90:2D:BF:90:EE:08:79:0C:94:CC:66:A3:BC Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 2522F73BAECC153AE1AE166382D82915A0C4BDA0 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e36392e302f32342d3234203d3e203536303436.roa Signing time: Mon 20 Apr 2026 06:43:00 +0000 ROA not before: Mon 20 Apr 2026 06:38:00 +0000 ROA not after: Mon 19 Apr 2027 06:43:00 +0000 asID: 56046 IP address blocks: 43.227.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:22:f7:3b:ae:cc:15:3a:e1:ae:16:63:82:d8:29:15:a0:c4:bd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:38:00 2026 GMT Not After : Apr 19 06:43:00 2027 GMT Subject: CN=E144BDB562EA0C902DBF90EE08790C94CC66A3BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ad:d4:52:ab:0b:79:1b:ab:11:ac:76:c2:d4: 5b:9c:2f:b7:ed:a4:9e:00:6e:2b:69:06:c9:08:b1: 7a:d9:90:1a:5f:47:75:11:7b:43:3c:c4:0b:31:e5: 8e:20:5b:eb:d2:ab:b0:03:06:0f:a6:c4:50:2e:0d: 14:50:74:23:ba:f3:7f:18:6c:f4:a7:11:65:7d:14: 68:7b:cf:56:fc:65:c2:7a:fa:e3:b6:2e:d1:8d:f4: a5:ff:f0:e6:e0:2a:a8:64:fe:f2:2a:62:a0:e3:b5: a0:25:f5:f9:35:2c:f1:e4:a9:c2:1b:24:6c:08:e5: 0f:7e:67:3d:8c:86:a3:17:c4:b7:05:bb:12:22:a5: f4:29:f4:c9:7e:bd:97:42:5d:ef:19:32:68:46:0e: ea:cf:73:fc:55:0c:2e:ad:8e:4b:c8:a7:bb:ec:22: cc:f9:ca:2c:68:c3:25:30:f3:9d:55:92:18:7f:0b: b5:26:b1:7c:af:58:9f:81:77:30:ea:25:b4:3b:71: d3:ae:0b:52:be:d1:17:69:d9:43:ed:18:81:8b:5d: 41:ea:32:1e:89:09:50:c5:b5:af:d1:ff:d0:f3:71: af:72:c3:95:fa:50:2d:ac:9e:17:31:cc:f0:65:77: a4:74:11:24:3c:01:c8:a5:aa:6a:44:f9:c0:b1:7a: 08:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:44:BD:B5:62:EA:0C:90:2D:BF:90:EE:08:79:0C:94:CC:66:A3:BC X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e36392e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.69.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:24:3d:94:b1:8c:5c:66:f7:b8:6e:1e:fe:3d:6a:cd:5d:14: 68:b0:d6:eb:f0:c8:9c:27:87:87:10:1e:48:59:35:26:65:ec: ff:4a:57:ab:71:78:ad:7b:10:af:d0:bf:c3:ff:4e:4a:82:d9: 61:ee:88:d4:e0:63:71:84:fa:0c:8b:1c:28:37:6d:fa:cf:98: ec:c9:d4:63:2a:ba:b3:87:d4:d9:41:3b:9d:77:75:00:4c:80: 62:d5:92:49:79:f7:49:52:88:68:74:1f:ee:10:7d:12:2f:95: 8c:3b:1e:cf:c3:f0:cc:ff:0c:43:97:71:ea:07:e8:17:bc:80: 7e:06:c6:91:8a:ef:01:15:0b:eb:59:33:32:fc:06:27:38:b4: f4:31:af:56:d3:e4:23:7c:4f:80:2a:a6:67:b8:57:a1:3e:c2: cd:f1:a7:20:64:7f:42:a7:94:ad:bc:4b:f9:6c:1b:ee:d9:11: 71:e6:10:3d:70:2f:0e:0c:c4:bc:56:8a:83:22:d7:af:4d:84: 76:d3:eb:b6:a7:3f:10:7f:db:9b:a1:c3:55:17:5d:1f:3d:1f: 1f:16:cb:13:1e:70:e0:92:68:44:50:6f:e9:d5:8a:c2:a2:ec: 58:bd:4d:43:d1:08:c5:59:f2:db:fa:12:d9:ae:08:90:d4:40: 81:d4:97:27 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUJSL3O67MFTrhrhZjgtgpFaDEvaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjM4MDBaFw0yNzA0MTkwNjQzMDBaMDMxMTAvBgNV BAMTKEUxNDRCREI1NjJFQTBDOTAyREJGOTBFRTA4NzkwQzk0Q0M2NkEzQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDordRSqwt5G6sRrHbC1FucL7ft pJ4AbitpBskIsXrZkBpfR3URe0M8xAsx5Y4gW+vSq7ADBg+mxFAuDRRQdCO6838Y bPSnEWV9FGh7z1b8ZcJ6+uO2LtGN9KX/8ObgKqhk/vIqYqDjtaAl9fk1LPHkqcIb JGwI5Q9+Zz2MhqMXxLcFuxIipfQp9Ml+vZdCXe8ZMmhGDurPc/xVDC6tjkvIp7vs Isz5yixowyUw851Vkhh/C7UmsXyvWJ+BdzDqJbQ7cdOuC1K+0Rdp2UPtGIGLXUHq Mh6JCVDFta/R/9Dzca9yw5X6UC2snhcxzPBld6R0ESQ8AcilqmpE+cCxegibAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU4US9tWLqDJAtv5DuCHkMlMxmo7wwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4NDkwNDk2NjE3MDIxNDQyLzAvMzQzMzJlMzIzMjM3 MmUzNjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACvjRTANBgkqhkiG9w0BAQsFAAOCAQEAaiQ9lLGMXGb3uG4e/j1qzV0UaLDW 6/DInCeHhxAeSFk1JmXs/0pXq3F4rXsQr9C/w/9OSoLZYe6I1OBjcYT6DIscKDdt +s+Y7MnUYyq6s4fU2UE7nXd1AEyAYtWSSXn3SVKIaHQf7hB9Ei+VjDsez8PwzP8M Q5dx6gfoF7yAfgbGkYrvARUL61kzMvwGJzi09DGvVtPkI3xPgCqmZ7hXoT7CzfGn IGR/QqeUrbxL+Wwb7tkRceYQPXAvDgzEvFaKgyLXr02EdtPrtqc/EH/bm6HDVRdd Hz0fHxbLEx5w4JJoRFBv6dWKwqLsWL1NQ9EIxVny2/oS2a4IkNRAgdSXJw== -----END CERTIFICATE-----Generated at Tue Apr 21 22:52:28 2026 by rpki-client