$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3230382e302f32322d3234203d3e203536303436.roa File: 34332e3234382e3230382e302f32322d3234203d3e203536303436.roa (raw, json) Hash identifier: dVsUW/6s/uTfof3lNxyFU2MszjCv8a2Xrhg3j+krCeE= Subject key identifier: 50:FC:6D:8A:F2:5D:0F:9E:AA:40:CD:3A:02:26:50:36:6F:F5:B3:8B Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 7786D81CA67CACEE86982B73B2FC41D6A308FAD5 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3230382e302f32322d3234203d3e203536303436.roa Signing time: Mon 20 Apr 2026 06:41:39 +0000 ROA not before: Mon 20 Apr 2026 06:36:39 +0000 ROA not after: Mon 19 Apr 2027 06:41:39 +0000 asID: 56046 IP address blocks: 43.248.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:86:d8:1c:a6:7c:ac:ee:86:98:2b:73:b2:fc:41:d6:a3:08:fa:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:36:39 2026 GMT Not After : Apr 19 06:41:39 2027 GMT Subject: CN=50FC6D8AF25D0F9EAA40CD3A022650366FF5B38B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5e:f6:f5:f6:ca:2a:1f:b5:cc:5b:0b:2f:c2: 9c:e6:0d:01:a6:2d:7b:e6:1f:0d:5d:78:3f:c8:88: f3:28:97:fb:3b:97:2e:9f:2c:5b:21:ff:73:78:8b: 6f:32:fb:e5:3a:af:fc:e4:1d:09:13:42:a5:59:5e: 55:4c:c5:95:9f:13:c8:5b:cd:53:4d:45:b8:76:50: cd:e6:dd:2d:94:63:1b:83:4d:71:d2:59:73:e1:8f: 81:32:4b:15:a0:71:c5:f1:9c:76:47:7d:45:b6:eb: b6:42:96:6d:40:6d:84:85:f6:29:67:c1:24:8f:18: 9a:a2:94:77:b4:68:ea:20:05:2d:47:e6:37:c7:91: 86:65:d5:f3:be:19:55:8b:a5:f7:8b:fc:e2:7d:00: 5e:8f:86:d2:f2:88:10:08:64:04:d4:28:06:dd:3d: 51:53:68:aa:3a:9a:89:f6:12:7b:96:75:3d:a4:48: 54:27:0e:3f:02:7f:46:e6:b1:a7:d2:52:11:ef:42: 9c:21:1f:0c:64:c3:03:04:4e:01:01:29:2a:e5:bb: d8:b5:da:56:3e:6f:bd:ad:b3:d7:e0:2b:c4:57:fc: 60:1c:b6:11:16:5c:54:ac:f7:3b:39:c6:bb:bf:08: 3b:9f:c6:5f:c3:51:75:e4:eb:d6:54:b5:16:2e:e7: b6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FC:6D:8A:F2:5D:0F:9E:AA:40:CD:3A:02:26:50:36:6F:F5:B3:8B X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3234382e3230382e302f32322d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.208.0/22 Signature Algorithm: sha256WithRSAEncryption 71:6e:f5:64:68:4d:ff:0b:79:8f:cb:07:e8:43:0d:f0:54:ce: 63:52:c7:3f:8a:89:d6:c7:c0:2e:37:89:78:35:c2:2e:0e:6a: d7:e6:98:56:a0:7f:52:92:b8:8e:1f:f2:ec:29:97:f7:e6:a3: 67:fb:12:98:16:e1:77:96:ad:79:6c:cd:c1:18:ae:8f:33:23: b0:f2:ff:1e:17:da:88:79:89:af:8f:3e:12:8b:29:da:8a:11: db:24:ca:26:e0:3a:a8:fb:96:93:b2:4b:af:76:89:0e:6a:c9: b7:e0:03:de:a0:ed:04:67:9b:0a:63:0f:17:b3:81:88:f2:c2: 91:9f:0b:9c:a5:9e:0a:6c:60:d2:3f:db:9c:16:72:13:f5:c0: 53:bf:e7:73:94:c0:26:4a:5a:8a:62:94:d6:d6:9f:ec:58:a7: ad:b2:56:a7:0b:c7:c5:0e:b5:6e:16:e4:3f:75:d6:08:24:e6: 36:9f:f5:5b:51:6b:e6:85:56:61:26:89:ba:29:88:a6:bc:2f: 90:28:69:69:d0:f2:43:65:77:f6:f0:1b:fc:36:f6:97:dd:78: ab:36:42:7f:cf:32:9b:bc:54:c9:34:b6:44:f3:07:9a:e0:a8: 1b:fe:d3:17:58:46:24:19:2a:78:44:0b:5b:54:58:12:ef:3c: 59:eb:31:9c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUd4bYHKZ8rO6GmCtzsvxB1qMI+tUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjM2MzlaFw0yNzA0MTkwNjQxMzlaMDMxMTAvBgNV BAMTKDUwRkM2RDhBRjI1RDBGOUVBQTQwQ0QzQTAyMjY1MDM2NkZGNUIzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNXvb19soqH7XMWwsvwpzmDQGm LXvmHw1deD/IiPMol/s7ly6fLFsh/3N4i28y++U6r/zkHQkTQqVZXlVMxZWfE8hb zVNNRbh2UM3m3S2UYxuDTXHSWXPhj4EySxWgccXxnHZHfUW267ZClm1AbYSF9iln wSSPGJqilHe0aOogBS1H5jfHkYZl1fO+GVWLpfeL/OJ9AF6PhtLyiBAIZATUKAbd PVFTaKo6mon2EnuWdT2kSFQnDj8Cf0bmsafSUhHvQpwhHwxkwwMETgEBKSrlu9i1 2lY+b72ts9fgK8RX/GActhEWXFSs9zs5xru/CDufxl/DUXXk69ZUtRYu57bjAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUUPxtivJdD56qQM06AiZQNm/1s4swHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzM0MzMyZTMyMzQz ODJlMzIzMDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiv40DANBgkqhkiG9w0BAQsFAAOCAQEAcW71ZGhN/wt5j8sH6EMN8FTO Y1LHP4qJ1sfALjeJeDXCLg5q1+aYVqB/UpK4jh/y7CmX9+ajZ/sSmBbhd5ateWzN wRiujzMjsPL/HhfaiHmJr48+Eosp2ooR2yTKJuA6qPuWk7JLr3aJDmrJt+AD3qDt BGebCmMPF7OBiPLCkZ8LnKWeCmxg0j/bnBZyE/XAU7/nc5TAJkpaimKU1taf7Fin rbJWpwvHxQ61bhbkP3XWCCTmNp/1W1Fr5oVWYSaJuimIprwvkChpadDyQ2V39vAb /Db2l914qzZCf88ym7xUyTS2RPMHmuCoG/7TF1hGJBkqeEQLW1RYEu88WesxnA== -----END CERTIFICATE-----Generated at Tue Apr 21 22:52:25 2026 by rpki-client