$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e37302e302f32332d3234203d3e20313533393131.roa File: 34332e3232372e37302e302f32332d3234203d3e20313533393131.roa (raw, json) Hash identifier: EsTC2nIbkTSeC8JT//YRWESUkGk3sNj5hkJBMOvZ650= Subject key identifier: 34:D3:A5:43:50:3F:16:B3:48:9B:F3:F7:C1:1F:7E:24:B3:96:01:E7 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 72B51DE3BD34937A13CEDD5D63C798F3C1299AF6 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e37302e302f32332d3234203d3e20313533393131.roa Signing time: Mon 20 Apr 2026 06:43:50 +0000 ROA not before: Mon 20 Apr 2026 06:38:50 +0000 ROA not after: Mon 19 Apr 2027 06:43:50 +0000 asID: 153911 IP address blocks: 43.227.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b5:1d:e3:bd:34:93:7a:13:ce:dd:5d:63:c7:98:f3:c1:29:9a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:38:50 2026 GMT Not After : Apr 19 06:43:50 2027 GMT Subject: CN=34D3A543503F16B3489BF3F7C11F7E24B39601E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:a4:03:37:11:2d:84:15:c4:e4:ea:f6:2e: 4a:d1:2c:69:48:24:85:3c:2d:16:92:f4:bd:bd:e5: b7:83:90:be:84:4f:1a:da:6a:fc:00:a0:7d:16:60: b1:af:b9:16:05:27:b2:94:f7:c1:34:7a:18:46:4a: 22:93:74:f2:29:2e:30:94:8d:24:59:20:b7:1c:0b: fe:b4:55:bf:85:5e:60:57:ae:69:e5:54:6e:80:d2: 6e:cb:15:e9:8d:e4:18:dd:b4:61:d7:f1:f4:07:b0: 8b:d4:5b:9a:b0:7f:0f:fc:c9:33:09:db:7c:7e:5c: f6:33:46:95:49:3d:96:b2:2b:a1:d3:c9:9d:e9:45: c4:14:18:fc:17:a7:95:26:2d:cf:2e:b0:a4:b7:a9: b0:8d:2e:a0:21:9a:72:48:24:e2:b1:42:af:d9:f7: f9:3a:ca:22:c8:37:2b:04:e8:2b:1c:e0:04:20:2d: 59:15:36:2a:64:ec:6a:20:6a:78:e2:35:42:df:32: 64:84:a7:90:27:9a:a2:3c:d9:5b:af:62:5f:b0:cd: 18:88:25:5b:fe:2c:63:77:18:98:85:3a:07:5d:8d: aa:74:6d:ea:6c:16:4b:4b:5e:ca:63:18:ba:ff:7c: a9:ef:37:36:af:e4:ee:94:f1:49:73:5b:d5:f2:0a: eb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D3:A5:43:50:3F:16:B3:48:9B:F3:F7:C1:1F:7E:24:B3:96:01:E7 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232372e37302e302f32332d3234203d3e20313533393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.70.0/23 Signature Algorithm: sha256WithRSAEncryption 56:b2:50:dc:7c:ba:de:5f:e2:2f:3b:eb:0c:5f:86:0a:8a:62: af:de:2d:0b:75:ea:58:70:b3:1a:c8:be:e8:d4:fb:7e:74:8a: 02:93:a5:df:ef:1d:94:bd:ca:94:57:35:bf:0d:13:a1:1a:f3: 14:4c:0f:89:f7:de:d5:b7:b6:df:78:b7:dd:88:36:68:2b:3b: 54:c1:9e:2b:ff:87:f1:6b:cf:08:60:73:29:13:4e:08:92:34: cf:f9:d5:c6:1d:d6:0f:e9:80:fa:11:95:0e:e4:3d:e4:86:14: a8:cb:a7:79:f2:bc:85:1d:8d:36:aa:b4:6a:df:0b:15:0c:3b: 2b:12:a0:af:f4:ff:32:48:b4:9b:07:5f:c3:40:a0:c8:f0:8e: ef:27:3e:e7:e0:46:b1:3b:4b:48:62:1a:af:41:30:52:e8:e9: 65:12:27:cf:cc:78:42:c7:7c:a0:34:03:5a:3d:9c:93:b6:09: f6:a9:1f:21:c0:ca:68:82:f6:69:4a:d7:c9:bd:b4:a0:66:ed: de:06:9f:c3:2a:e1:4c:b2:d9:cc:0c:e2:16:13:84:01:9b:db: 96:ba:8b:6c:a9:f5:f9:b8:44:fa:6b:7c:53:a5:2a:a0:9f:b8: 76:b6:3a:a0:24:24:4d:ba:7b:36:98:b0:f3:79:ff:0a:44:dd: 72:36:5d:e8 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUcrUd4700k3oTzt1dY8eY88EpmvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjM4NTBaFw0yNzA0MTkwNjQzNTBaMDMxMTAvBgNV BAMTKDM0RDNBNTQzNTAzRjE2QjM0ODlCRjNGN0MxMUY3RTI0QjM5NjAxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrKQDNxEthBXE5Or2LkrRLGlI JIU8LRaS9L295beDkL6ETxraavwAoH0WYLGvuRYFJ7KU98E0ehhGSiKTdPIpLjCU jSRZILccC/60Vb+FXmBXrmnlVG6A0m7LFemN5BjdtGHX8fQHsIvUW5qwfw/8yTMJ 23x+XPYzRpVJPZayK6HTyZ3pRcQUGPwXp5UmLc8usKS3qbCNLqAhmnJIJOKxQq/Z 9/k6yiLINysE6Csc4AQgLVkVNipk7GoganjiNULfMmSEp5AnmqI82VuvYl+wzRiI JVv+LGN3GJiFOgddjap0bepsFktLXspjGLr/fKnvNzav5O6U8UlzW9XyCuuXAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUNNOlQ1A/FrNIm/P3wR9+JLOWAecwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzM0MzMyZTMyMzIz NzJlMzczMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMzM5MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEASvjRjANBgkqhkiG9w0BAQsFAAOCAQEAVrJQ3Hy63l/iLzvrDF+GCopi r94tC3XqWHCzGsi+6NT7fnSKApOl3+8dlL3KlFc1vw0ToRrzFEwPiffe1be233i3 3Yg2aCs7VMGeK/+H8WvPCGBzKRNOCJI0z/nVxh3WD+mA+hGVDuQ95IYUqMunefK8 hR2NNqq0at8LFQw7KxKgr/T/Mki0mwdfw0CgyPCO7yc+5+BGsTtLSGIar0EwUujp ZRInz8x4Qsd8oDQDWj2ck7YJ9qkfIcDKaIL2aUrXyb20oGbt3gafwyrhTLLZzAzi FhOEAZvblrqLbKn1+bhE+mt8U6UqoJ+4drY6oCQkTbp7Npiw83n/CkTdcjZd6A== -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:59 2026 by rpki-client