$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3134342e302f32322d3234203d3e203536303436.roa File: 34332e3234382e3134342e302f32322d3234203d3e203536303436.roa (raw, json) Hash identifier: yL+N44fdwACVlG/6i0Y9Jm/s29chWlpL7JX2r0rUOiI= Subject key identifier: 05:76:1B:CA:B3:9D:97:98:A7:58:36:37:3F:19:BB:43:39:B9:31:29 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 3A512F454373CDE2092C902387ACDA43AD0932F1 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3134342e302f32322d3234203d3e203536303436.roa Signing time: Mon 20 Apr 2026 06:40:58 +0000 ROA not before: Mon 20 Apr 2026 06:35:58 +0000 ROA not after: Mon 19 Apr 2027 06:40:58 +0000 asID: 56046 IP address blocks: 43.248.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:51:2f:45:43:73:cd:e2:09:2c:90:23:87:ac:da:43:ad:09:32:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:35:58 2026 GMT Not After : Apr 19 06:40:58 2027 GMT Subject: CN=05761BCAB39D9798A75836373F19BB4339B93129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:bf:3e:12:70:49:4e:38:89:2b:5c:d1:04: 89:c1:16:1f:71:b0:b8:e1:28:bf:88:c4:96:95:5b: 1d:88:7f:6d:53:80:32:50:b1:e3:09:c2:68:fd:cd: 2f:30:4b:60:aa:2c:52:ee:29:4d:cd:05:06:6a:bd: 2f:bc:ae:38:c1:9e:c8:a3:ac:36:b4:a7:f6:52:8b: 27:44:d3:01:1a:cf:ca:22:0e:4d:dd:fe:b8:e8:71: 03:d4:95:9d:f5:9c:9c:bd:3c:85:09:d4:4e:aa:1d: c9:25:3c:fd:d7:7a:db:09:6b:d5:10:4c:c0:f1:e8: 53:3d:53:8c:50:50:dc:58:78:15:88:3c:33:bb:be: b8:9b:dc:2c:14:06:86:93:8a:d9:8b:30:92:55:44: cb:ef:ca:bf:83:ed:87:8f:24:04:5e:c8:9a:65:ec: 8f:f3:28:80:f8:c9:ae:45:37:1b:d6:8e:43:12:dd: bf:1a:b7:8f:eb:cb:e4:7d:39:8c:c3:a3:87:05:63: 21:3a:cf:62:6f:c2:af:36:af:07:43:0a:d1:ed:58: 42:f2:bf:7a:23:8a:01:86:42:db:40:74:cc:53:2b: 0c:e2:40:22:ac:ae:f6:aa:3d:2d:95:00:c1:b2:2a: 12:30:f2:6f:ee:ee:de:25:a4:d9:12:cc:44:86:71: f8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:76:1B:CA:B3:9D:97:98:A7:58:36:37:3F:19:BB:43:39:B9:31:29 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3134342e302f32322d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.144.0/22 Signature Algorithm: sha256WithRSAEncryption 46:5c:ac:38:bc:df:30:3f:34:bd:d9:1b:3d:60:16:59:54:0c: e7:6b:01:dc:d1:8f:a1:1e:8f:e5:4b:94:1b:04:ba:15:f5:53: 61:dd:46:95:a4:de:3b:8c:d7:f0:23:79:5b:be:fe:d5:38:4c: e0:09:93:48:9b:f1:1c:ab:bd:07:d2:85:cb:20:b9:d5:37:60: de:79:83:0a:e1:fe:01:97:ef:ba:df:38:45:85:c6:b6:7c:6b: 85:cd:7f:6b:ec:55:4e:e5:59:40:fc:b1:20:a9:b6:2c:a6:5d: 97:07:62:3f:b0:7b:15:f7:92:66:3d:1c:7c:b7:ea:0d:6d:c7: 03:d2:b8:52:bf:59:55:98:a3:ad:fb:f4:03:39:c0:84:56:01: 7f:cf:68:59:c1:f7:a1:74:e6:1f:be:0b:b9:51:4b:d3:47:79: b8:d9:86:bb:4d:5b:25:a5:4e:c7:5b:5b:29:29:cf:01:15:6f: be:36:58:49:d9:3d:54:ff:9d:2c:de:a4:a4:e6:df:b3:38:65: e4:c5:55:78:98:be:82:f4:6a:f6:3e:88:44:88:1f:53:fa:fd: c0:b6:ae:c4:f6:cd:f0:9a:df:9e:d8:9c:36:48:bb:47:6d:3c: c0:e5:d8:ee:84:af:2f:76:4d:73:ff:eb:84:9d:bc:62:9b:e3: aa:23:5c:f3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOlEvRUNzzeIJLJAjh6zaQ60JMvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjM1NThaFw0yNzA0MTkwNjQwNThaMDMxMTAvBgNV BAMTKDA1NzYxQkNBQjM5RDk3OThBNzU4MzYzNzNGMTlCQjQzMzlCOTMxMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5L78+EnBJTjiJK1zRBInBFh9x sLjhKL+IxJaVWx2If21TgDJQseMJwmj9zS8wS2CqLFLuKU3NBQZqvS+8rjjBnsij rDa0p/ZSiydE0wEaz8oiDk3d/rjocQPUlZ31nJy9PIUJ1E6qHcklPP3XetsJa9UQ TMDx6FM9U4xQUNxYeBWIPDO7vrib3CwUBoaTitmLMJJVRMvvyr+D7YePJAReyJpl 7I/zKID4ya5FNxvWjkMS3b8at4/ry+R9OYzDo4cFYyE6z2Jvwq82rwdDCtHtWELy v3ojigGGQttAdMxTKwziQCKsrvaqPS2VAMGyKhIw8m/u7t4lpNkSzESGcfjhAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUBXYbyrOdl5inWDY3Pxm7Qzm5MSkwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzM0MzMyZTMyMzQz ODJlMzEzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiv4kDANBgkqhkiG9w0BAQsFAAOCAQEARlysOLzfMD80vdkbPWAWWVQM 52sB3NGPoR6P5UuUGwS6FfVTYd1GlaTeO4zX8CN5W77+1ThM4AmTSJvxHKu9B9KF yyC51Tdg3nmDCuH+AZfvut84RYXGtnxrhc1/a+xVTuVZQPyxIKm2LKZdlwdiP7B7 FfeSZj0cfLfqDW3HA9K4Ur9ZVZijrfv0AznAhFYBf89oWcH3oXTmH74LuVFL00d5 uNmGu01bJaVOx1tbKSnPARVvvjZYSdk9VP+dLN6kpObfszhl5MVVeJi+gvRq9j6I RIgfU/r9wLauxPbN8JrfnticNki7R208wOXY7oSvL3ZNc//rhJ28YpvjqiNc8w== -----END CERTIFICATE-----Generated at Tue Apr 21 22:52:24 2026 by rpki-client