$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3230382e302f32322d3234203d3e2034383337.roa File: 34332e3234382e3230382e302f32322d3234203d3e2034383337.roa (raw, json) Hash identifier: 4pL2Dzu+mZK/x16YhX7RsmPUF9bOS8vIQKrUk0Dnwdc= Subject key identifier: 17:BB:0D:61:CC:66:54:EF:1E:6A:15:DC:3B:A4:B7:42:3A:FD:A8:D0 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 0C02F729DB143D41828C7DF544190EEFED20A9C1 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3230382e302f32322d3234203d3e2034383337.roa Signing time: Mon 20 Apr 2026 06:41:39 +0000 ROA not before: Mon 20 Apr 2026 06:36:39 +0000 ROA not after: Mon 19 Apr 2027 06:41:39 +0000 asID: 4837 IP address blocks: 43.248.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:02:f7:29:db:14:3d:41:82:8c:7d:f5:44:19:0e:ef:ed:20:a9:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:36:39 2026 GMT Not After : Apr 19 06:41:39 2027 GMT Subject: CN=17BB0D61CC6654EF1E6A15DC3BA4B7423AFDA8D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9c:c3:df:9e:f5:61:f1:77:43:2b:74:5a:a9: ab:75:d5:7f:e7:79:45:5b:77:b9:f3:20:e0:18:f1: 8a:0a:c9:5f:cc:9a:e1:03:c8:53:d1:ae:fb:40:22: f3:31:78:e5:63:51:7a:6d:8b:00:41:64:c8:1a:a2: 0b:4b:5d:33:05:2d:d3:89:f8:c7:c9:c3:e2:3c:c4: 21:e4:c9:d4:3e:82:15:15:80:4e:07:0e:71:16:a5: 33:e3:e6:c6:c7:22:d3:e5:70:b3:73:b2:a4:53:b0: 3b:95:77:5c:bd:86:05:be:b2:eb:1d:c0:9e:c6:26: 24:2a:ee:3c:5a:2f:9e:8a:ea:f5:38:03:d0:e9:c7: bb:15:82:79:46:0b:ac:ff:dc:7c:fd:88:48:80:34: e0:29:36:93:d7:7a:67:17:ec:a5:39:61:f6:1e:93: cc:6a:99:de:c3:26:ae:a2:6f:24:e5:64:d6:63:32: 0c:7a:fa:ab:3c:3a:76:61:9d:88:19:64:45:85:94: fd:a8:c0:ff:7d:d4:a5:7e:b3:ef:e2:4a:d0:59:c2: 53:05:fa:13:ba:7b:4b:9c:11:68:89:f5:c3:be:77: a7:1e:cb:45:18:81:0f:b8:05:7d:6f:a1:c7:ba:dc: b7:eb:1c:16:ce:00:6e:e5:b8:ab:bf:b3:1d:93:ad: 67:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BB:0D:61:CC:66:54:EF:1E:6A:15:DC:3B:A4:B7:42:3A:FD:A8:D0 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3230382e302f32322d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.208.0/22 Signature Algorithm: sha256WithRSAEncryption 16:20:ac:37:b3:c5:72:0e:53:64:6e:95:90:17:40:d9:e6:66: 9c:18:4e:23:fb:0d:c9:33:0d:b6:b5:c0:df:38:93:3e:ac:f0: 71:e2:00:3a:15:02:ca:3a:1c:e9:bf:8d:18:ee:95:5b:21:ac: 1d:4b:85:1c:fc:c3:63:70:cb:08:7f:3f:d9:a9:56:39:96:74: b2:d1:f3:0f:1f:a6:ed:07:39:11:13:69:33:3f:3b:c2:74:d7: 99:31:c4:df:2a:34:30:2f:03:17:a9:39:08:e1:d0:b3:e4:9c: 94:08:90:b9:34:1e:5c:3b:bb:4e:4e:4b:0a:0d:8c:78:eb:55: 21:b3:f4:86:5c:49:60:82:06:6c:80:fd:26:d3:a0:1d:bc:06: 88:f8:d6:90:48:0f:97:96:87:99:5f:9b:90:25:a1:9e:dd:6f: ce:35:f6:c9:6b:1f:da:36:db:e6:81:99:97:38:4e:3e:d4:2b: 3a:30:da:71:87:bf:55:32:95:10:9e:0f:7c:14:7a:77:68:5a: 8f:3e:c4:ab:23:76:ad:f1:9c:92:0c:9c:3b:6c:34:73:84:d3: 8b:f7:b6:9e:5f:32:20:55:7f:d2:9c:95:b0:4d:9b:02:dc:12: 68:32:14:c3:02:ea:b0:37:c3:48:2e:0f:62:3f:2f:9d:f5:34: 54:7b:2d:e5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUDAL3KdsUPUGCjH31RBkO7+0gqcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjM2MzlaFw0yNzA0MTkwNjQxMzlaMDMxMTAvBgNV BAMTKDE3QkIwRDYxQ0M2NjU0RUYxRTZBMTVEQzNCQTRCNzQyM0FGREE4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdnMPfnvVh8XdDK3Raqat11X/n eUVbd7nzIOAY8YoKyV/MmuEDyFPRrvtAIvMxeOVjUXptiwBBZMgaogtLXTMFLdOJ +MfJw+I8xCHkydQ+ghUVgE4HDnEWpTPj5sbHItPlcLNzsqRTsDuVd1y9hgW+susd wJ7GJiQq7jxaL56K6vU4A9Dpx7sVgnlGC6z/3Hz9iEiANOApNpPXemcX7KU5YfYe k8xqmd7DJq6ibyTlZNZjMgx6+qs8OnZhnYgZZEWFlP2owP991KV+s+/iStBZwlMF +hO6e0ucEWiJ9cO+d6cey0UYgQ+4BX1voce63LfrHBbOAG7luKu/sx2TrWehAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUF7sNYcxmVO8eahXcO6S3Qjr9qNAwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4NDkwNDk2NjE3MDIxNDQyLzAvMzQzMzJlMzIzNDM4 MmUzMjMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv40DANBgkqhkiG9w0BAQsFAAOCAQEAFiCsN7PFcg5TZG6VkBdA2eZmnBhO I/sNyTMNtrXA3ziTPqzwceIAOhUCyjoc6b+NGO6VWyGsHUuFHPzDY3DLCH8/2alW OZZ0stHzDx+m7Qc5ERNpMz87wnTXmTHE3yo0MC8DF6k5COHQs+SclAiQuTQeXDu7 Tk5LCg2MeOtVIbP0hlxJYIIGbID9JtOgHbwGiPjWkEgPl5aHmV+bkCWhnt1vzjX2 yWsf2jbb5oGZlzhOPtQrOjDacYe/VTKVEJ4PfBR6d2hajz7EqyN2rfGckgycO2w0 c4TTi/e2nl8yIFV/0pyVsE2bAtwSaDIUwwLqsDfDSC4PYj8vnfU0VHst5Q== -----END CERTIFICATE-----Generated at Wed Apr 22 04:04:56 2026 by rpki-client