$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3230382e302f32322d3234203d3e20313531333030.roa File: 34332e3234382e3230382e302f32322d3234203d3e20313531333030.roa (raw, json) Hash identifier: UhHv0MrZsVuIA87AV5SW76/t4OFvvA0aku6WD9tjKb8= Subject key identifier: 72:56:C7:CD:D7:04:53:71:96:20:92:4C:A3:A7:B4:E3:6A:16:04:CC Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 52C8DF3BE9D07BDA576FE99D9F8CBE9A9B2F986E Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3230382e302f32322d3234203d3e20313531333030.roa Signing time: Mon 20 Apr 2026 06:41:39 +0000 ROA not before: Mon 20 Apr 2026 06:36:39 +0000 ROA not after: Mon 19 Apr 2027 06:41:39 +0000 asID: 151300 IP address blocks: 43.248.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c8:df:3b:e9:d0:7b:da:57:6f:e9:9d:9f:8c:be:9a:9b:2f:98:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:36:39 2026 GMT Not After : Apr 19 06:41:39 2027 GMT Subject: CN=7256C7CDD70453719620924CA3A7B4E36A1604CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:99:8a:3f:c9:a7:3b:e9:c1:73:a5:ee:d6: 43:42:5f:71:ba:2c:50:7b:64:d2:91:7d:39:e7:1d: fd:b4:94:d5:03:00:3e:26:97:40:ad:b2:35:da:15: 69:c8:c1:99:40:4b:d2:23:21:88:54:1b:09:bc:9d: ea:e3:65:9c:4f:4c:e5:87:f8:cf:88:0e:cc:2c:d8: b3:0a:ab:67:2b:4a:89:0c:21:9f:9c:82:dd:bc:dc: b4:da:44:b2:30:a5:8a:2b:3a:c7:d7:79:7d:d6:72: 04:07:a3:0f:3b:23:f2:b9:0e:8b:60:5b:c6:97:9b: f1:80:c2:93:bd:29:86:0c:a3:19:6d:fe:88:64:22: 39:27:d7:dc:f0:9a:53:0b:c8:6f:62:9a:86:a2:c5: aa:14:85:d4:b3:bf:f3:48:47:af:b6:61:19:6f:e8: 8b:fe:04:94:29:e2:2a:56:a8:59:7c:10:43:ef:79: 0b:19:96:59:71:65:c2:b5:58:45:15:36:6f:70:9e: bf:06:1d:a5:f2:93:8d:73:79:0b:87:a0:ee:84:ad: 57:26:c2:06:2f:b7:61:aa:af:91:65:f7:e2:65:88: 73:22:17:a8:6e:ff:c4:02:0c:a1:a3:eb:dd:95:ae: 0a:0a:d6:4f:fd:50:69:8b:97:8f:e3:52:f4:7e:ed: 17:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:56:C7:CD:D7:04:53:71:96:20:92:4C:A3:A7:B4:E3:6A:16:04:CC X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3230382e302f32322d3234203d3e20313531333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.208.0/22 Signature Algorithm: sha256WithRSAEncryption 21:d3:d1:33:6c:86:1c:54:39:3e:25:21:2e:9c:44:11:40:f4: b8:0b:38:27:84:1f:c4:e8:5e:7d:ec:8b:76:f6:64:16:ee:2e: 54:f6:6c:53:d4:6e:2d:04:7d:47:1c:d5:70:c8:f4:3b:1e:1f: 63:d8:f1:1a:c5:c0:e3:e1:e2:f3:fc:a3:bc:cb:b8:d1:a5:d5: 4d:18:19:25:ff:bf:69:05:d2:34:b7:a2:72:4a:c1:1d:7a:6e: 20:f0:14:9e:f8:0c:09:1c:90:89:05:9a:b1:ed:67:46:29:d3: 3b:0e:08:10:68:7e:b6:69:ed:ae:55:c5:1f:fd:9b:56:1f:b4: 2c:d6:f2:9d:84:69:3d:f2:ad:a7:0c:8d:9f:36:83:04:9f:2b: d1:14:dd:fa:01:7c:2f:14:3b:9d:ae:ed:46:a5:3a:e9:85:73: f8:3b:d2:68:78:a3:28:74:48:64:ec:d9:82:df:70:fb:81:3c: 24:d6:20:db:67:52:04:9c:cc:99:59:72:78:61:7c:76:44:f8: 49:cb:6a:d6:23:02:a7:a8:a6:19:d7:a6:92:da:83:7d:f1:00: 26:16:62:3a:c1:7a:82:40:11:d0:c1:ee:61:8b:6a:b1:17:85: fc:f1:73:92:14:f5:f6:e9:e0:e1:db:ef:e6:50:e1:d2:62:76: 11:97:b0:a4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUUsjfO+nQe9pXb+mdn4y+mpsvmG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjM2MzlaFw0yNzA0MTkwNjQxMzlaMDMxMTAvBgNV BAMTKDcyNTZDN0NERDcwNDUzNzE5NjIwOTI0Q0EzQTdCNEUzNkExNjA0Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7YpmKP8mnO+nBc6Xu1kNCX3G6 LFB7ZNKRfTnnHf20lNUDAD4ml0CtsjXaFWnIwZlAS9IjIYhUGwm8nerjZZxPTOWH +M+IDsws2LMKq2crSokMIZ+cgt283LTaRLIwpYorOsfXeX3WcgQHow87I/K5Dotg W8aXm/GAwpO9KYYMoxlt/ohkIjkn19zwmlMLyG9imoaixaoUhdSzv/NIR6+2YRlv 6Iv+BJQp4ipWqFl8EEPveQsZlllxZcK1WEUVNm9wnr8GHaXyk41zeQuHoO6ErVcm wgYvt2Gqr5Fl9+JliHMiF6hu/8QCDKGj692VrgoK1k/9UGmLl4/jUvR+7RfdAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUclbHzdcEU3GWIJJMo6e042oWBMwwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC8zNDMzMmUzMjM0 MzgyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzMTMzMzAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAiv40DANBgkqhkiG9w0BAQsFAAOCAQEAIdPRM2yGHFQ5PiUhLpxE EUD0uAs4J4QfxOhefeyLdvZkFu4uVPZsU9RuLQR9RxzVcMj0Ox4fY9jxGsXA4+Hi 8/yjvMu40aXVTRgZJf+/aQXSNLeickrBHXpuIPAUnvgMCRyQiQWase1nRinTOw4I EGh+tmntrlXFH/2bVh+0LNbynYRpPfKtpwyNnzaDBJ8r0RTd+gF8LxQ7na7tRqU6 6YVz+DvSaHijKHRIZOzZgt9w+4E8JNYg22dSBJzMmVlyeGF8dkT4Sctq1iMCp6im GdemktqDffEAJhZiOsF6gkAR0MHuYYtqsReF/PFzkhT19ung4dvv5lDh0mJ2EZew pA== -----END CERTIFICATE-----Generated at Wed Apr 22 04:05:08 2026 by rpki-client