$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3132302e302f32312d3234203d3e20313531333030.roa File: 34332e3234382e3132302e302f32312d3234203d3e20313531333030.roa (raw, json) Hash identifier: ryJbWr9Snvs63i6R+eGG0AjGaFG/JyjiAO7SPfC8Fe0= Subject key identifier: 6E:B2:BC:E7:35:08:A5:CE:FF:1C:42:4D:42:ED:28:05:86:D5:77:90 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 2CB8D6AB2F20628A747201A6B136DA12E0F10975 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3132302e302f32312d3234203d3e20313531333030.roa Signing time: Mon 20 Apr 2026 06:37:22 +0000 ROA not before: Mon 20 Apr 2026 06:32:22 +0000 ROA not after: Mon 19 Apr 2027 06:37:22 +0000 asID: 151300 IP address blocks: 43.248.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b8:d6:ab:2f:20:62:8a:74:72:01:a6:b1:36:da:12:e0:f1:09:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:32:22 2026 GMT Not After : Apr 19 06:37:22 2027 GMT Subject: CN=6EB2BCE73508A5CEFF1C424D42ED280586D57790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:4b:7f:17:44:a7:f9:f6:cc:b3:c8:9b:e6: f4:8d:a2:97:47:69:2c:4a:65:5f:73:a6:f0:b6:6e: 0f:90:0a:dc:8a:50:34:47:70:1c:ef:51:39:a5:52: 2c:ee:72:3e:b7:25:af:f8:04:e6:8f:d5:8c:d3:b1: 6d:26:aa:45:d9:bb:55:6b:ba:13:be:c3:79:1b:da: d7:a5:66:7a:5b:b4:1b:63:d8:6a:78:2b:c1:bf:4f: cd:f1:09:90:c7:20:78:cc:ed:54:52:d5:24:e0:54: c7:36:59:cb:4d:e6:2b:b8:45:14:64:8f:0b:ea:09: 4f:33:66:a6:5e:ed:c3:1b:2a:69:79:56:0c:2c:50: b4:30:d2:b4:7a:5f:37:36:4c:b5:4b:a2:42:38:eb: 8e:f1:e2:b7:c5:d8:ad:f3:54:ee:28:16:ce:84:30: cd:49:4b:18:08:d0:13:d9:27:26:6f:20:6a:13:a0: ad:a9:f9:0c:6b:dc:6d:63:3a:a2:9e:2f:ab:72:b8: f5:be:e8:c1:e3:45:4d:ba:88:4f:48:77:df:6c:c3: 93:cd:d6:08:cc:b3:fc:a2:24:06:fd:68:07:07:4e: de:54:62:2e:03:e4:2a:be:8e:8c:71:43:69:3d:ec: d4:2c:6a:ac:a2:82:fa:b7:9c:47:af:0b:d3:33:18: 45:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B2:BC:E7:35:08:A5:CE:FF:1C:42:4D:42:ED:28:05:86:D5:77:90 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3132302e302f32312d3234203d3e20313531333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.120.0/21 Signature Algorithm: sha256WithRSAEncryption 60:03:28:ec:64:11:5c:a1:fc:31:aa:64:78:67:91:a2:f5:cb: d8:d9:d8:c0:b8:72:d9:b2:76:6b:11:d5:d6:0c:5c:fe:d1:b6: 78:ff:6c:cf:0f:25:d6:d7:2e:39:d3:14:33:ee:ce:77:0d:b3: a4:7c:86:5b:36:1a:a6:0b:38:18:74:d9:aa:66:13:1d:f0:f9: 0a:2f:9b:a1:d5:8d:df:73:12:ed:ca:d5:64:38:26:3f:55:cc: 0d:ee:df:66:07:9e:ed:a2:ad:2b:28:52:a3:f2:2c:b7:f9:9f: a3:4f:92:c4:62:70:4d:c0:2c:eb:a5:8b:47:c4:da:d4:38:8d: 07:d4:e3:2e:fe:0f:c5:8f:47:5a:24:73:30:d7:7a:ef:22:72: 0e:76:69:fc:75:2c:74:09:60:46:a3:6e:3e:4d:05:c6:d0:e8: cd:88:23:9d:51:2b:de:cd:8a:ab:93:f2:af:44:79:63:2d:a8: 9d:3f:a4:01:f5:3c:fc:09:56:e1:61:65:de:41:ce:7b:9a:35: 52:4c:d0:39:75:57:30:65:a5:d5:fd:28:64:dc:4f:10:27:2c: f0:6b:8a:35:2f:6b:86:51:66:22:c2:70:4e:9f:37:a1:6f:1f: e8:08:c4:54:90:74:fa:98:ee:db:32:cb:e8:8a:1b:76:4f:8d: f6:92:d3:55 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIULLjWqy8gYop0cgGmsTbaEuDxCXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjMyMjJaFw0yNzA0MTkwNjM3MjJaMDMxMTAvBgNV BAMTKDZFQjJCQ0U3MzUwOEE1Q0VGRjFDNDI0RDQyRUQyODA1ODZENTc3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3EUt/F0Sn+fbMs8ib5vSNopdH aSxKZV9zpvC2bg+QCtyKUDRHcBzvUTmlUizucj63Ja/4BOaP1YzTsW0mqkXZu1Vr uhO+w3kb2telZnpbtBtj2Gp4K8G/T83xCZDHIHjM7VRS1STgVMc2WctN5iu4RRRk jwvqCU8zZqZe7cMbKml5VgwsULQw0rR6Xzc2TLVLokI4647x4rfF2K3zVO4oFs6E MM1JSxgI0BPZJyZvIGoToK2p+Qxr3G1jOqKeL6tyuPW+6MHjRU26iE9Id99sw5PN 1gjMs/yiJAb9aAcHTt5UYi4D5Cq+joxxQ2k97NQsaqyigvq3nEevC9MzGEXdAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUbrK85zUIpc7/HEJNQu0oBYbVd5AwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC8zNDMzMmUzMjM0 MzgyZTMxMzIzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzUzMTMzMzAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAyv4eDANBgkqhkiG9w0BAQsFAAOCAQEAYAMo7GQRXKH8MapkeGeR ovXL2NnYwLhy2bJ2axHV1gxc/tG2eP9szw8l1tcuOdMUM+7Odw2zpHyGWzYapgs4 GHTZqmYTHfD5Ci+bodWN33MS7crVZDgmP1XMDe7fZgee7aKtKyhSo/Ist/mfo0+S xGJwTcAs66WLR8Ta1DiNB9TjLv4PxY9HWiRzMNd67yJyDnZp/HUsdAlgRqNuPk0F xtDozYgjnVEr3s2Kq5Pyr0R5Yy2onT+kAfU8/AlW4WFl3kHOe5o1UkzQOXVXMGWl 1f0oZNxPECcs8GuKNS9rhlFmIsJwTp83oW8f6AjEVJB0+pju2zLL6Iobdk+N9pLT VQ== -----END CERTIFICATE-----Generated at Wed Apr 22 04:05:09 2026 by rpki-client