$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3130342e302f32322d3234203d3e2034383337.roa File: 34332e3234382e3130342e302f32322d3234203d3e2034383337.roa (raw, json) Hash identifier: vsiDsDnaOmiJRL6zrddqcSU1+/pRGpC6sqX35eFMcvA= Subject key identifier: 21:12:D6:90:2E:A5:F9:F8:2F:3F:98:23:B4:6C:EA:E7:7B:C0:F6:8F Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 60BBA73E79503532BD01B5B06DBBD36B1EFB9DD7 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3130342e302f32322d3234203d3e2034383337.roa Signing time: Mon 20 Apr 2026 06:35:31 +0000 ROA not before: Mon 20 Apr 2026 06:30:31 +0000 ROA not after: Mon 19 Apr 2027 06:35:31 +0000 asID: 4837 IP address blocks: 43.248.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:bb:a7:3e:79:50:35:32:bd:01:b5:b0:6d:bb:d3:6b:1e:fb:9d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:30:31 2026 GMT Not After : Apr 19 06:35:31 2027 GMT Subject: CN=2112D6902EA5F9F82F3F9823B46CEAE77BC0F68F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d3:7b:fa:e6:f9:e5:11:fc:cd:cf:79:69:62: 3f:cf:95:6b:d7:95:d0:3c:72:cc:f9:89:21:53:c5: 07:39:7e:f1:92:5f:03:0f:8c:b0:d1:66:8a:2d:06: 84:e3:32:83:5a:3c:c0:05:11:c5:ac:f9:7c:b8:4d: be:88:22:bc:22:db:d3:54:7e:61:76:ce:72:b7:55: 5a:09:8d:7d:28:81:fa:0a:a8:3d:93:00:e0:dc:b2: ca:ef:a0:f9:ba:df:cf:d3:ba:e3:0e:66:cc:c3:08: cc:5d:b4:37:a6:13:1f:1f:3d:09:23:94:56:39:8a: 86:a7:01:2c:9e:3c:38:e6:86:c7:63:c7:66:68:b6: cd:f7:97:65:25:78:17:b4:74:db:6c:d5:16:6f:22: a4:69:64:74:f3:39:d5:bc:31:33:f3:f1:1e:7f:db: d4:22:8d:a7:78:e9:62:0b:b0:6b:f5:6b:83:88:a4: 82:61:30:1d:89:de:c1:2c:b2:ee:77:4d:91:ae:77: c0:5d:9a:e5:80:5c:2b:eb:62:df:6b:d5:52:1a:e5: d3:b2:40:ec:b3:c4:44:12:94:f4:e5:31:bc:83:90: 5c:0e:e9:03:72:79:d4:3c:0c:0f:05:d8:7b:a3:74: ea:0d:fd:8b:ea:82:60:73:30:9d:a8:12:70:6c:60: a6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:12:D6:90:2E:A5:F9:F8:2F:3F:98:23:B4:6C:EA:E7:7B:C0:F6:8F X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3130342e302f32322d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.104.0/22 Signature Algorithm: sha256WithRSAEncryption 22:39:2b:56:92:93:44:7d:97:d3:d9:26:65:b4:20:88:31:27: ed:70:ef:03:6a:21:2b:98:a9:f3:e0:40:fb:6f:78:e0:67:fa: 64:c6:0b:a3:92:38:6f:5e:41:69:6f:2b:79:31:b0:d1:fa:a9: a5:ca:55:8e:e4:c1:74:86:94:13:a1:5a:23:fe:e8:90:a6:dd: 46:4b:56:2e:8e:b1:ed:2b:c9:d2:d0:6a:3f:53:bd:d4:74:fe: fe:c2:0e:98:32:9d:86:83:28:a3:74:8f:43:f9:8e:b7:ff:d3: e4:05:b2:09:6e:c4:54:b7:3c:6a:39:a4:19:43:cb:d7:fa:5f: c6:1a:d2:b8:a5:92:99:8a:12:28:eb:d2:16:b0:7c:f2:91:e5: 78:0b:30:5c:e9:39:fc:ca:7d:0d:39:83:db:b4:38:87:31:cc: 85:25:ed:f1:f9:1f:c4:c7:61:1f:76:ed:25:7b:e1:e4:1f:a9: 4f:51:3f:05:0e:8b:fb:9c:b2:da:43:0f:88:f0:d0:c6:e5:b7: ea:5a:2f:2f:79:c6:74:6f:15:f0:cf:dc:b0:99:5d:29:9f:8e: 47:8d:59:e3:51:a9:df:51:9d:8c:1f:0c:84:e9:48:35:f0:a8: 27:33:bc:51:16:86:c5:d1:64:d9:2c:9e:f3:f1:d1:bb:f9:86: 91:9d:28:81 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUYLunPnlQNTK9AbWwbbvTax77ndcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjMwMzFaFw0yNzA0MTkwNjM1MzFaMDMxMTAvBgNV BAMTKDIxMTJENjkwMkVBNUY5RjgyRjNGOTgyM0I0NkNFQUU3N0JDMEY2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc03v65vnlEfzNz3lpYj/PlWvX ldA8csz5iSFTxQc5fvGSXwMPjLDRZootBoTjMoNaPMAFEcWs+Xy4Tb6IIrwi29NU fmF2znK3VVoJjX0ogfoKqD2TAODcssrvoPm638/TuuMOZszDCMxdtDemEx8fPQkj lFY5ioanASyePDjmhsdjx2Zots33l2UleBe0dNts1RZvIqRpZHTzOdW8MTPz8R5/ 29Qijad46WILsGv1a4OIpIJhMB2J3sEssu53TZGud8BdmuWAXCvrYt9r1VIa5dOy QOyzxEQSlPTlMbyDkFwO6QNyedQ8DA8F2HujdOoN/YvqgmBzMJ2oEnBsYKbdAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUIRLWkC6l+fgvP5gjtGzq53vA9o8wHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4NDkwNDk2NjE3MDIxNDQyLzAvMzQzMzJlMzIzNDM4 MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv4aDANBgkqhkiG9w0BAQsFAAOCAQEAIjkrVpKTRH2X09kmZbQgiDEn7XDv A2ohK5ip8+BA+2944Gf6ZMYLo5I4b15BaW8reTGw0fqppcpVjuTBdIaUE6FaI/7o kKbdRktWLo6x7SvJ0tBqP1O91HT+/sIOmDKdhoMoo3SPQ/mOt//T5AWyCW7EVLc8 ajmkGUPL1/pfxhrSuKWSmYoSKOvSFrB88pHleAswXOk5/Mp9DTmD27Q4hzHMhSXt 8fkfxMdhH3btJXvh5B+pT1E/BQ6L+5yy2kMPiPDQxuW36lovL3nGdG8V8M/csJld KZ+OR41Z41Gp31GdjB8MhOlINfCoJzO8URaGxdFk2Sye8/HRu/mGkZ0ogQ== -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:56 2026 by rpki-client