$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3130342e302f32322d3234203d3e20313531333030.roa File: 34332e3234382e3130342e302f32322d3234203d3e20313531333030.roa (raw, json) Hash identifier: Y39THmJqGUbbO2V90xuoiMKvsk0dMdRJ+1oBoW7ENxs= Subject key identifier: 84:2C:35:28:35:27:64:74:2E:E9:F3:06:B0:29:DD:0A:78:FC:D1:3B Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 4F8BEC8388C2E947CF5AAB671FFCBA4CE651F751 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3130342e302f32322d3234203d3e20313531333030.roa Signing time: Mon 20 Apr 2026 06:35:31 +0000 ROA not before: Mon 20 Apr 2026 06:30:31 +0000 ROA not after: Mon 19 Apr 2027 06:35:31 +0000 asID: 151300 IP address blocks: 43.248.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8b:ec:83:88:c2:e9:47:cf:5a:ab:67:1f:fc:ba:4c:e6:51:f7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:30:31 2026 GMT Not After : Apr 19 06:35:31 2027 GMT Subject: CN=842C3528352764742EE9F306B029DD0A78FCD13B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:ab:bd:68:88:36:94:03:ab:f0:8d:55:fb: 1f:aa:eb:f8:c9:01:35:3c:46:43:1a:d3:6a:4b:f1: 3d:7e:e0:27:a6:58:26:ee:49:ea:da:df:66:be:7e: 82:96:eb:7d:0e:2e:3b:ad:83:27:1a:f1:c7:23:97: d0:c0:a7:70:b4:28:1d:3b:de:bc:94:2a:85:e8:8c: 8b:94:cf:d4:c6:af:96:73:43:33:7a:cb:71:b2:15: 11:b7:cc:5f:6f:b8:8d:e0:fe:44:a3:3d:37:b8:9e: 3e:b5:55:46:47:2d:a6:90:89:bd:cb:d6:bb:1d:20: bb:f6:17:fb:07:ca:7a:a5:7e:fc:60:aa:ed:ad:9f: 2d:6b:5e:99:d5:19:04:4a:06:cc:04:c9:31:00:ff: d4:db:8d:32:bf:ae:3e:23:89:00:fc:0a:5c:a2:b6: 4d:58:72:da:41:04:e8:35:27:28:82:52:27:48:f3: 74:1a:f8:e5:13:7e:31:2e:62:f8:96:6c:99:da:c9: bd:0b:9a:33:f1:73:90:24:5d:91:db:50:19:11:09: bd:25:ac:2d:8e:a1:27:a2:f2:4e:9c:95:e0:7e:3b: 18:45:07:ed:cf:d6:ae:81:64:89:c4:c9:ce:d0:01: 59:d4:d1:50:9f:51:27:0d:bc:d0:c3:5a:a0:7c:ce: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2C:35:28:35:27:64:74:2E:E9:F3:06:B0:29:DD:0A:78:FC:D1:3B X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3130342e302f32322d3234203d3e20313531333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.104.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:d7:b4:1c:0c:86:91:b2:59:ba:a9:b9:70:51:4b:5a:21:3b: bc:49:70:81:f2:9b:5f:13:31:d1:b7:28:23:b8:1e:9e:9c:bc: a6:f4:a0:72:d3:f0:5c:0d:e0:4a:e8:5d:1f:4d:19:e8:e1:7a: 2d:41:d3:92:db:a2:71:d2:07:fd:27:f7:80:67:af:3b:22:e0: 7e:b7:6e:1c:84:50:cc:22:22:ce:e2:cb:b4:0c:82:c2:7a:42: 4c:45:10:f2:8e:93:c3:03:57:64:9f:2b:47:de:1f:8f:09:35: 13:74:32:c5:8d:d4:9d:16:55:ff:d9:00:03:27:4a:57:01:66: e7:5c:44:9a:23:43:10:88:22:4b:db:21:b0:d5:f9:34:82:ab: 57:0c:d4:3e:0a:29:50:eb:d9:02:17:a6:38:47:87:34:7c:a3: 17:c3:e7:52:38:8a:20:41:61:2c:b1:03:d7:12:34:9e:6a:37: 78:60:3d:b8:97:9d:cb:c5:c8:ee:79:fe:4d:93:91:d9:5d:d8: be:ba:cf:e6:ce:f7:d4:11:82:40:83:18:06:74:c3:aa:96:07: 52:1f:1d:8c:0f:d7:ca:11:82:84:d1:41:d2:d8:4c:b1:71:f8: 64:ea:01:3f:26:2f:d2:fa:1b:a1:1e:94:7b:27:71:ed:39:76: da:e0:c7:f9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUT4vsg4jC6UfPWqtnH/y6TOZR91EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjMwMzFaFw0yNzA0MTkwNjM1MzFaMDMxMTAvBgNV BAMTKDg0MkMzNTI4MzUyNzY0NzQyRUU5RjMwNkIwMjlERDBBNzhGQ0QxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLSau9aIg2lAOr8I1V+x+q6/jJ ATU8RkMa02pL8T1+4CemWCbuSera32a+foKW630OLjutgyca8ccjl9DAp3C0KB07 3ryUKoXojIuUz9TGr5ZzQzN6y3GyFRG3zF9vuI3g/kSjPTe4nj61VUZHLaaQib3L 1rsdILv2F/sHynqlfvxgqu2tny1rXpnVGQRKBswEyTEA/9TbjTK/rj4jiQD8Clyi tk1YctpBBOg1JyiCUidI83Qa+OUTfjEuYviWbJnayb0LmjPxc5AkXZHbUBkRCb0l rC2OoSei8k6cleB+OxhFB+3P1q6BZInEyc7QAVnU0VCfUScNvNDDWqB8zrGRAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUhCw1KDUnZHQu6fMGsCndCnj80TswHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC8zNDMzMmUzMjM0 MzgyZTMxMzAzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzMTMzMzAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAiv4aDANBgkqhkiG9w0BAQsFAAOCAQEATNe0HAyGkbJZuqm5cFFL WiE7vElwgfKbXxMx0bcoI7genpy8pvSgctPwXA3gSuhdH00Z6OF6LUHTktuicdIH /Sf3gGevOyLgfrduHIRQzCIizuLLtAyCwnpCTEUQ8o6TwwNXZJ8rR94fjwk1E3Qy xY3UnRZV/9kAAydKVwFm51xEmiNDEIgiS9shsNX5NIKrVwzUPgopUOvZAhemOEeH NHyjF8PnUjiKIEFhLLED1xI0nmo3eGA9uJedy8XI7nn+TZOR2V3YvrrP5s731BGC QIMYBnTDqpYHUh8djA/XyhGChNFB0thMsXH4ZOoBPyYv0voboR6Ueydx7Tl22uDH +Q== -----END CERTIFICATE-----Generated at Wed Apr 22 04:05:08 2026 by rpki-client