$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e37302e302f32332d3234203d3e20313331343833.roa File: 34332e3232372e37302e302f32332d3234203d3e20313331343833.roa (raw, json) Hash identifier: fvqxOV/+htbqay6E9XcmNDbRTpi47jzDf8d46ZKaWm4= Subject key identifier: F2:DB:91:9C:53:8C:49:86:69:ED:47:8E:49:FF:26:4F:E8:83:F7:96 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 71ACF16D245B2B3E75C231309DEBDB19D177944B Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e37302e302f32332d3234203d3e20313331343833.roa Signing time: Mon 20 Apr 2026 09:10:50 +0000 ROA not before: Mon 20 Apr 2026 09:05:50 +0000 ROA not after: Mon 19 Apr 2027 09:10:50 +0000 asID: 131483 IP address blocks: 43.227.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ac:f1:6d:24:5b:2b:3e:75:c2:31:30:9d:eb:db:19:d1:77:94:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 09:05:50 2026 GMT Not After : Apr 19 09:10:50 2027 GMT Subject: CN=F2DB919C538C498669ED478E49FF264FE883F796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e2:9d:3f:d3:b2:84:59:a2:d9:00:99:e2:d6: 6f:25:85:47:f8:cd:d3:6c:b6:8f:04:33:0c:17:69: 64:93:6d:6e:5e:09:d8:ab:c8:ab:21:c5:a6:69:ef: a2:d3:58:8c:c4:fb:42:a2:ec:fa:b7:d9:f5:3d:3f: ac:c0:b0:82:fa:f6:df:46:ed:2c:f0:bd:83:b4:fa: 12:b1:02:0e:80:18:78:db:b9:c8:7d:80:84:e2:7d: 28:cd:a5:e0:3c:94:75:7b:e1:df:65:98:c1:8e:f0: 88:9b:c6:a5:e9:dc:45:15:1d:2b:12:f8:aa:8b:42: 39:a2:2b:83:a5:57:5e:17:c0:f9:b1:55:57:df:ff: 66:33:ff:9b:40:d7:a7:69:8d:1a:97:ed:2a:33:fa: d8:04:2d:30:07:38:55:bd:23:9c:bc:4a:40:20:74: 25:c4:d2:5f:ee:71:5b:ce:2c:11:c1:6a:c6:57:4a: 19:de:ae:b0:11:24:f0:49:06:cd:b1:98:e6:19:56: a4:2d:98:d2:56:41:86:03:43:40:79:80:89:e0:c1: 1f:5a:49:e7:1e:6c:ce:17:1d:d4:ad:07:81:9d:ae: c2:09:31:93:fd:e3:bd:97:66:db:cd:74:3b:f7:c5: 3f:f1:b3:c6:67:6c:eb:28:bd:d0:a6:59:5e:91:66: 31:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DB:91:9C:53:8C:49:86:69:ED:47:8E:49:FF:26:4F:E8:83:F7:96 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e37302e302f32332d3234203d3e20313331343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.70.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:d8:44:f8:aa:d1:2c:a4:6c:c4:51:21:a7:fd:9d:c5:f9:ed: a4:68:76:fc:5f:05:ab:ba:8b:b0:14:7e:f5:3f:b7:f0:82:b5: b9:b1:01:74:63:06:0e:17:a6:aa:1d:8f:e9:cb:99:11:e4:21: f1:27:d8:d9:7b:7f:32:28:6e:55:87:d6:d7:ec:14:81:ee:bf: 46:46:30:c1:3f:fb:34:5c:14:f7:6f:bf:fb:98:ac:15:87:c7: fd:c1:24:6b:6d:89:98:46:bb:dc:88:60:23:90:5e:7a:77:e1: e2:74:7e:86:3a:ed:e9:44:de:68:ea:63:ae:e8:ab:5c:6d:a1: 78:19:2e:e0:bc:82:f9:89:fc:9a:1f:6a:6f:72:05:16:20:e2: 1d:39:3f:06:ed:a6:be:3a:02:7e:77:33:06:2e:92:21:f9:db: 8a:e1:68:86:f9:4c:3e:59:a1:73:75:02:e2:f4:42:5f:a4:69: 7e:f1:06:6c:77:2b:f3:40:98:a8:a4:d0:1f:4f:82:35:a9:36: ee:17:c3:e0:03:62:8d:a3:2f:9e:cd:c0:da:40:5a:40:58:c3: d0:06:a0:70:22:bf:50:f4:d7:0a:65:07:26:d9:3d:48:a1:0d: df:6d:8c:21:ff:7a:e8:99:2a:86:81:ef:67:a8:ac:2b:50:f0: 7d:42:94:75 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUcazxbSRbKz51wjEwnevbGdF3lEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwOTA1NTBaFw0yNzA0MTkwOTEwNTBaMDMxMTAvBgNV BAMTKEYyREI5MTlDNTM4QzQ5ODY2OUVENDc4RTQ5RkYyNjRGRTg4M0Y3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4p0/07KEWaLZAJni1m8lhUf4 zdNsto8EMwwXaWSTbW5eCdiryKshxaZp76LTWIzE+0Ki7Pq32fU9P6zAsIL69t9G 7SzwvYO0+hKxAg6AGHjbuch9gITifSjNpeA8lHV74d9lmMGO8IibxqXp3EUVHSsS +KqLQjmiK4OlV14XwPmxVVff/2Yz/5tA16dpjRqX7Soz+tgELTAHOFW9I5y8SkAg dCXE0l/ucVvOLBHBasZXShnerrARJPBJBs2xmOYZVqQtmNJWQYYDQ0B5gIngwR9a SecebM4XHdStB4GdrsIJMZP9472XZtvNdDv3xT/xs8ZnbOsovdCmWV6RZjF9AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU8tuRnFOMSYZp7UeOSf8mT+iD95YwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzM0MzMyZTMyMzIz NzJlMzczMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzMTM0MzgzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEASvjRjANBgkqhkiG9w0BAQsFAAOCAQEAT9hE+KrRLKRsxFEhp/2dxfnt pGh2/F8Fq7qLsBR+9T+38IK1ubEBdGMGDhemqh2P6cuZEeQh8SfY2Xt/MihuVYfW 1+wUge6/RkYwwT/7NFwU92+/+5isFYfH/cEka22JmEa73IhgI5Beenfh4nR+hjrt 6UTeaOpjruirXG2heBku4LyC+Yn8mh9qb3IFFiDiHTk/Bu2mvjoCfnczBi6SIfnb iuFohvlMPlmhc3UC4vRCX6RpfvEGbHcr80CYqKTQH0+CNak27hfD4ANijaMvns3A 2kBaQFjD0AagcCK/UPTXCmUHJtk9SKEN322MIf966JkqhoHvZ6isK1DwfUKUdQ== -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:57 2026 by rpki-client