$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3230382e302f32322d3234203d3e20313533393131.roa File: 34332e3234382e3230382e302f32322d3234203d3e20313533393131.roa (raw, json) Hash identifier: BH8veTBUk73/H6wWt7gmp5JBrw4l4urmM5w9KT0gtAg= Subject key identifier: 27:E2:7D:C7:06:0D:52:F8:57:CF:C4:32:2C:26:0D:3E:23:27:AC:12 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 72E96B837FC5FB30F904D8DBF4C5B4B2F55BF110 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3230382e302f32322d3234203d3e20313533393131.roa Signing time: Mon 20 Apr 2026 06:41:39 +0000 ROA not before: Mon 20 Apr 2026 06:36:39 +0000 ROA not after: Mon 19 Apr 2027 06:41:39 +0000 asID: 153911 IP address blocks: 43.248.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e9:6b:83:7f:c5:fb:30:f9:04:d8:db:f4:c5:b4:b2:f5:5b:f1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:36:39 2026 GMT Not After : Apr 19 06:41:39 2027 GMT Subject: CN=27E27DC7060D52F857CFC4322C260D3E2327AC12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:6e:ed:34:51:dd:63:64:79:55:9d:9c:53: 4e:40:43:92:0a:6f:97:99:9f:7e:e3:3a:a5:a0:18: b9:e4:02:4d:1f:ed:00:c8:f9:1c:46:35:f0:72:03: 6d:8e:09:f4:47:71:f4:91:ed:67:e8:c4:26:c7:18: fc:07:94:f8:9f:6e:20:2d:d6:19:cb:35:92:a0:8b: 8a:42:f3:c7:d6:bf:d6:ec:cf:b8:de:db:7e:f2:5c: 2b:0c:24:c7:10:54:54:a6:ed:d2:78:75:cb:96:a3: 69:33:50:f3:f5:28:0f:fa:08:92:08:cf:c0:89:af: 98:dd:c3:ce:3a:10:1d:0f:93:db:e1:3e:c7:38:53: cc:1d:98:55:3a:ed:6b:45:5e:58:3d:7c:ce:4f:ac: ac:fa:ff:1b:6d:94:78:6a:4a:4a:05:bb:42:e1:db: 58:45:08:dc:c5:6c:00:5c:3c:f8:c2:a3:17:f1:4f: 90:43:af:39:a5:93:80:1c:f1:11:45:69:fd:5c:6f: 3a:16:de:70:58:93:fd:e9:50:9a:5c:72:97:f2:1e: 6c:ad:5d:6c:93:97:e9:d8:bb:1e:0f:01:6f:03:58: ca:c1:3a:a7:71:c3:c5:56:e0:ff:82:0e:7f:84:ba: 5e:b0:65:02:fa:c6:b9:84:36:9c:3c:2f:77:63:05: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E2:7D:C7:06:0D:52:F8:57:CF:C4:32:2C:26:0D:3E:23:27:AC:12 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3230382e302f32322d3234203d3e20313533393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.208.0/22 Signature Algorithm: sha256WithRSAEncryption 61:53:f2:24:4a:40:99:66:87:93:a4:b8:db:e2:c8:04:f0:ac: e1:0b:e1:94:38:6b:a3:a7:21:9b:8d:31:c7:07:76:bb:46:bb: 0d:18:f1:06:94:35:1b:6c:51:6f:8a:af:02:73:ca:fd:4d:a3: eb:b6:24:a5:3e:61:df:a9:9d:5f:70:7b:dd:8e:0e:f1:cb:f5: 7d:5a:72:2f:98:77:ee:53:eb:ef:e7:a6:c1:0f:f6:de:63:6a: 5f:5f:5e:14:d6:31:bb:c0:72:39:25:2b:68:60:e1:dd:37:e6: eb:85:2b:a4:24:6f:5a:b6:01:dc:32:9d:3a:77:3a:92:0f:d8: 09:4e:a6:83:be:cd:2d:c0:f7:fe:4f:c8:34:be:c4:79:0a:79: 14:a9:c7:27:cb:6f:56:83:58:c3:c7:51:b1:d8:19:7b:5d:63: 53:be:2a:e8:6d:e1:f9:9d:6a:30:c9:03:13:d4:96:b3:e6:05: 5a:27:aa:ef:98:9a:90:56:6e:f8:9c:f3:24:12:bc:36:24:04: c4:90:e1:1d:bc:d3:0b:88:c1:0d:69:68:8b:18:22:a8:5a:47: 47:a4:0e:c0:3b:e8:96:14:77:68:60:39:ca:f5:be:0f:37:60: ee:87:fe:8d:dc:a8:ec:5e:2d:cd:1e:4a:f6:e6:07:44:a1:b0: 91:e7:13:19 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUculrg3/F+zD5BNjb9MW0svVb8RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjM2MzlaFw0yNzA0MTkwNjQxMzlaMDMxMTAvBgNV BAMTKDI3RTI3REM3MDYwRDUyRjg1N0NGQzQzMjJDMjYwRDNFMjMyN0FDMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9G7tNFHdY2R5VZ2cU05AQ5IK b5eZn37jOqWgGLnkAk0f7QDI+RxGNfByA22OCfRHcfSR7WfoxCbHGPwHlPifbiAt 1hnLNZKgi4pC88fWv9bsz7je237yXCsMJMcQVFSm7dJ4dcuWo2kzUPP1KA/6CJII z8CJr5jdw846EB0Pk9vhPsc4U8wdmFU67WtFXlg9fM5PrKz6/xttlHhqSkoFu0Lh 21hFCNzFbABcPPjCoxfxT5BDrzmlk4Ac8RFFaf1cbzoW3nBYk/3pUJpccpfyHmyt XWyTl+nYux4PAW8DWMrBOqdxw8VW4P+CDn+Eul6wZQL6xrmENpw8L3djBS+nAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUJ+J9xwYNUvhXz8QyLCYNPiMnrBIwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC8zNDMzMmUzMjM0 MzgyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzMzM5MzEzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAiv40DANBgkqhkiG9w0BAQsFAAOCAQEAYVPyJEpAmWaHk6S42+LI BPCs4QvhlDhro6chm40xxwd2u0a7DRjxBpQ1G2xRb4qvAnPK/U2j67YkpT5h36md X3B73Y4O8cv1fVpyL5h37lPr7+emwQ/23mNqX19eFNYxu8ByOSUraGDh3Tfm64Ur pCRvWrYB3DKdOnc6kg/YCU6mg77NLcD3/k/INL7EeQp5FKnHJ8tvVoNYw8dRsdgZ e11jU74q6G3h+Z1qMMkDE9SWs+YFWieq75iakFZu+JzzJBK8NiQExJDhHbzTC4jB DWloixgiqFpHR6QOwDvolhR3aGA5yvW+Dzdg7of+jdyo7F4tzR5K9uYHRKGwkecT GQ== -----END CERTIFICATE-----Generated at Wed Apr 22 04:05:11 2026 by rpki-client