$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3132302e302f32312d3234203d3e20313533393131.roa File: 34332e3234382e3132302e302f32312d3234203d3e20313533393131.roa (raw, json) Hash identifier: L9mHdKGHm+RWqaRJg3Sei1pG2dmNKhLIu0vMnvXvetM= Subject key identifier: 55:06:12:43:1B:A9:45:C1:98:60:AE:56:D7:66:CE:99:5F:34:61:8B Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 1159ABC1339274D18E1C497CDFE9E531CCE8B591 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3132302e302f32312d3234203d3e20313533393131.roa Signing time: Mon 20 Apr 2026 06:37:22 +0000 ROA not before: Mon 20 Apr 2026 06:32:22 +0000 ROA not after: Mon 19 Apr 2027 06:37:22 +0000 asID: 153911 IP address blocks: 43.248.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:59:ab:c1:33:92:74:d1:8e:1c:49:7c:df:e9:e5:31:cc:e8:b5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:32:22 2026 GMT Not After : Apr 19 06:37:22 2027 GMT Subject: CN=550612431BA945C19860AE56D766CE995F34618B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:84:54:94:5d:e3:19:9a:68:1b:ef:ea:b4: 3c:2a:b9:75:24:44:d8:6d:e8:56:2b:3c:07:1c:5c: 03:d0:26:af:aa:d6:8e:72:69:8e:f5:09:24:8b:f1: 6b:63:49:b3:da:5a:6a:b6:32:dc:e6:fe:e4:b4:86: bb:a9:fd:bf:af:fc:83:f9:71:4a:6a:68:f9:db:79: 23:62:19:b1:ad:b5:c6:92:e4:3a:79:c0:48:3c:c4: 61:10:f3:a8:45:9e:68:63:b3:2d:12:df:a3:a0:05: fc:d9:26:e1:b0:bf:b4:c8:50:08:70:15:aa:3e:db: 3f:b6:d2:c8:d2:db:35:e3:e1:37:3b:31:dc:e8:8f: 53:36:a3:93:7f:28:39:bf:17:bc:9c:73:20:5a:51: b6:9b:f9:ed:2a:9e:1a:5f:62:83:04:df:b6:50:f9: f2:5d:7f:aa:dd:ad:6b:af:ac:b3:07:ee:0a:61:50: df:6d:a1:68:d6:59:26:12:c4:68:2b:35:29:82:66: cb:d3:ac:58:73:89:43:40:b9:c1:19:4e:81:17:89: 5c:e7:ff:e7:52:41:fa:20:e6:14:73:b9:d3:f1:05: 92:54:7d:cb:fb:75:1a:bf:04:63:40:e8:0c:cf:4c: f7:c6:38:3d:50:8e:3c:02:a4:bd:27:81:31:fc:07: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:06:12:43:1B:A9:45:C1:98:60:AE:56:D7:66:CE:99:5F:34:61:8B X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3132302e302f32312d3234203d3e20313533393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.120.0/21 Signature Algorithm: sha256WithRSAEncryption 4a:27:a3:c6:6b:df:c1:b4:0f:cf:a8:dc:f4:df:67:09:c1:ee: 57:88:a6:63:3a:21:c6:66:63:b9:e3:65:cc:59:f0:01:ce:32: 18:11:1c:50:fb:60:35:04:64:d4:98:92:6e:95:87:73:a9:19: 24:6e:3b:d6:2d:a6:8f:cf:4c:d5:ee:51:53:35:ea:db:2b:4d: 8b:e3:f8:1b:16:98:ba:4e:19:05:18:be:07:d7:39:50:1d:a5: a7:94:75:9e:fb:7b:e6:5c:b2:fe:9e:2f:fa:57:f5:e7:b9:ab: 2f:40:1f:19:94:6a:10:13:5b:7a:10:64:ab:9c:50:e5:d7:f5: 1d:36:fc:08:1d:c6:4d:0b:53:c5:80:cc:94:e0:86:42:35:ed: fd:6f:7d:1a:d3:ab:67:96:7a:58:ff:51:9b:df:51:a4:e0:25: 6a:60:99:bd:87:4b:1d:f7:75:8c:a7:70:4c:14:ac:90:05:ad: c8:bf:7d:14:cf:da:77:a0:01:ae:01:e1:c6:c6:2f:0e:43:2e: 5c:18:5f:fc:05:0f:39:6b:0d:eb:ab:47:a8:64:34:19:23:2b: 37:5b:9d:6f:5d:1a:b3:34:a1:f6:6c:f7:d3:2a:b5:b4:ab:fe: dc:4c:9f:6e:fe:59:ad:d3:87:6d:14:8a:d9:a1:25:a3:fb:b2: 1b:a7:e5:a1 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEVmrwTOSdNGOHEl83+nlMczotZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjMyMjJaFw0yNzA0MTkwNjM3MjJaMDMxMTAvBgNV BAMTKDU1MDYxMjQzMUJBOTQ1QzE5ODYwQUU1NkQ3NjZDRTk5NUYzNDYxOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1YRUlF3jGZpoG+/qtDwquXUk RNht6FYrPAccXAPQJq+q1o5yaY71CSSL8WtjSbPaWmq2Mtzm/uS0hrup/b+v/IP5 cUpqaPnbeSNiGbGttcaS5Dp5wEg8xGEQ86hFnmhjsy0S36OgBfzZJuGwv7TIUAhw Fao+2z+20sjS2zXj4Tc7Mdzoj1M2o5N/KDm/F7yccyBaUbab+e0qnhpfYoME37ZQ +fJdf6rdrWuvrLMH7gphUN9toWjWWSYSxGgrNSmCZsvTrFhziUNAucEZToEXiVzn /+dSQfog5hRzudPxBZJUfcv7dRq/BGNA6AzPTPfGOD1QjjwCpL0ngTH8B9A/AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUVQYSQxupRcGYYK5W12bOmV80YYswHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC8zNDMzMmUzMjM0 MzgyZTMxMzIzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzUzMzM5MzEzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAyv4eDANBgkqhkiG9w0BAQsFAAOCAQEASiejxmvfwbQPz6jc9N9n CcHuV4imYzohxmZjueNlzFnwAc4yGBEcUPtgNQRk1JiSbpWHc6kZJG471i2mj89M 1e5RUzXq2ytNi+P4GxaYuk4ZBRi+B9c5UB2lp5R1nvt75lyy/p4v+lf157mrL0Af GZRqEBNbehBkq5xQ5df1HTb8CB3GTQtTxYDMlOCGQjXt/W99GtOrZ5Z6WP9Rm99R pOAlamCZvYdLHfd1jKdwTBSskAWtyL99FM/ad6ABrgHhxsYvDkMuXBhf/AUPOWsN 66tHqGQ0GSMrN1udb10aszSh9mz30yq1tKv+3Eyfbv5ZrdOHbRSK2aElo/uyG6fl oQ== -----END CERTIFICATE-----Generated at Wed Apr 22 04:05:15 2026 by rpki-client