$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3132302e302f32312d3234203d3e203233363530.roa File: 34332e3234382e3132302e302f32312d3234203d3e203233363530.roa (raw, json) Hash identifier: RJVKcj24ZyKNGyVh3xv9QIxIg/1br21bsZuxF+WRuqY= Subject key identifier: 04:F0:0D:91:CA:5B:96:37:48:3D:1C:92:A1:DD:43:A5:C7:B1:FE:7C Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 023C2F590996DBEDB8553C5C6E102D2E9FBDFC3E Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3132302e302f32312d3234203d3e203233363530.roa Signing time: Mon 20 Apr 2026 06:37:22 +0000 ROA not before: Mon 20 Apr 2026 06:32:22 +0000 ROA not after: Mon 19 Apr 2027 06:37:22 +0000 asID: 23650 IP address blocks: 43.248.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3c:2f:59:09:96:db:ed:b8:55:3c:5c:6e:10:2d:2e:9f:bd:fc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:32:22 2026 GMT Not After : Apr 19 06:37:22 2027 GMT Subject: CN=04F00D91CA5B9637483D1C92A1DD43A5C7B1FE7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:96:da:e4:3d:0f:ed:24:70:4e:fe:b4:6c: 81:2d:20:30:d2:11:7e:22:7f:d3:c1:53:95:26:9e: d9:d6:4a:ba:ac:b0:a6:58:a0:67:45:f7:d6:be:e4: 2d:2f:de:79:18:68:7d:10:ff:e7:64:17:aa:94:ce: 0b:d4:80:ca:8c:ce:18:07:af:e5:f6:a8:92:79:e8: 90:1f:0e:0d:07:96:ad:d2:26:8b:ba:69:cb:3b:18: 61:ac:cd:6f:27:33:ae:6b:85:5b:8e:8e:44:ba:a3: c6:3e:cf:e1:51:b4:92:4b:1b:b9:69:95:60:f9:74: 28:fa:5b:7d:00:76:7c:f2:91:ea:6e:0d:37:3b:ad: 76:83:83:e9:fa:34:3c:d6:cf:cf:f7:53:ff:08:3b: e0:d0:9d:da:e5:3d:ad:95:83:89:b8:e0:44:7a:be: c7:19:d6:00:c6:28:de:83:b8:b7:58:c6:03:13:17: cf:5d:e1:6b:42:72:d0:4a:e4:78:be:37:4c:41:09: ef:76:ff:92:3f:51:f9:b4:1a:9a:85:87:a9:38:5b: 1b:de:f4:1f:3c:e5:f9:a3:b4:2a:3b:28:aa:fd:89: 2e:4b:1b:7c:02:67:f8:70:0b:5a:c1:c6:fd:6e:50: eb:5f:38:f9:4a:61:ca:ff:9f:c7:87:64:5e:c6:16: 88:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F0:0D:91:CA:5B:96:37:48:3D:1C:92:A1:DD:43:A5:C7:B1:FE:7C X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3132302e302f32312d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.120.0/21 Signature Algorithm: sha256WithRSAEncryption 4a:56:5e:a8:27:07:72:94:d4:d1:0a:66:a0:c5:2c:82:00:6b: f8:1e:de:5a:6e:aa:19:bc:56:86:a7:2c:d9:8f:56:e9:ab:30: ff:b7:71:dd:fb:55:d6:de:04:e2:0d:94:10:40:4f:67:72:54: f3:95:34:4e:5a:bb:b8:d0:86:80:e0:3d:bc:1d:b1:33:82:e7: b5:27:d4:68:6f:e4:67:d1:ba:2e:96:c3:8d:ac:49:95:20:6e: 26:4a:d1:be:1f:6c:4d:af:c8:14:3c:70:97:84:84:0b:bb:03: 9d:bf:79:cf:15:4f:34:9b:4f:48:f0:03:e0:19:14:70:00:cb: 77:cd:08:52:56:20:64:e9:d5:68:3b:21:28:cd:6f:9a:9c:32: ed:78:c8:c8:27:d9:c9:05:62:ef:a4:ac:ae:14:ff:c7:c3:be: a2:ba:10:62:27:9e:e2:da:eb:85:ec:11:1f:a7:f9:b7:83:96: 90:cb:21:b0:b6:4c:0c:93:40:af:84:47:83:53:3b:58:18:23: e3:e9:ef:23:5c:da:e0:ca:f6:95:e0:c7:ae:44:35:06:27:c2: 6e:95:7d:5b:16:d7:b5:71:b7:d9:de:8c:bb:c6:49:dc:d3:3b: 6e:b8:15:d2:79:be:00:c0:fb:87:6c:b9:4d:64:ef:db:fe:0c: cf:c4:aa:f9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAjwvWQmW2+24VTxcbhAtLp+9/D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjMyMjJaFw0yNzA0MTkwNjM3MjJaMDMxMTAvBgNV BAMTKDA0RjAwRDkxQ0E1Qjk2Mzc0ODNEMUM5MkExREQ0M0E1QzdCMUZFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKZba5D0P7SRwTv60bIEtIDDS EX4if9PBU5UmntnWSrqssKZYoGdF99a+5C0v3nkYaH0Q/+dkF6qUzgvUgMqMzhgH r+X2qJJ56JAfDg0Hlq3SJou6acs7GGGszW8nM65rhVuOjkS6o8Y+z+FRtJJLG7lp lWD5dCj6W30AdnzykepuDTc7rXaDg+n6NDzWz8/3U/8IO+DQndrlPa2Vg4m44ER6 vscZ1gDGKN6DuLdYxgMTF89d4WtCctBK5Hi+N0xBCe92/5I/Ufm0GpqFh6k4Wxve 9B885fmjtCo7KKr9iS5LG3wCZ/hwC1rBxv1uUOtfOPlKYcr/n8eHZF7GFogHAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUBPANkcpbljdIPRySod1Dpcex/nwwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzM0MzMyZTMyMzQz ODJlMzEzMjMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAyv4eDANBgkqhkiG9w0BAQsFAAOCAQEASlZeqCcHcpTU0QpmoMUsggBr +B7eWm6qGbxWhqcs2Y9W6asw/7dx3ftV1t4E4g2UEEBPZ3JU85U0Tlq7uNCGgOA9 vB2xM4LntSfUaG/kZ9G6LpbDjaxJlSBuJkrRvh9sTa/IFDxwl4SEC7sDnb95zxVP NJtPSPAD4BkUcADLd80IUlYgZOnVaDshKM1vmpwy7XjIyCfZyQVi76SsrhT/x8O+ oroQYiee4trrhewRH6f5t4OWkMshsLZMDJNAr4RHg1M7WBgj4+nvI1za4Mr2leDH rkQ1BifCbpV9WxbXtXG32d6Mu8ZJ3NM7brgV0nm+AMD7h2y5TWTv2/4Mz8Sq+Q== -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:53 2026 by rpki-client