$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e2034313334.roa File: 34332e3234302e302e302f32322d3234203d3e2034313334.roa (raw, json) Hash identifier: kXHpQYoN3lkNVc6zXAK8dXuapRm1J7u1PsvQERShTUw= Subject key identifier: 88:32:0B:C6:42:05:4B:22:AF:15:66:B0:F1:B3:67:C8:F6:D0:86:50 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 7A7E585E2CB0590AEA0E6F77C8A41D8B7F30C6EF Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e2034313334.roa Signing time: Mon 28 Sep 2026 01:00:41 +0000 ROA not before: Mon 28 Sep 2026 00:55:41 +0000 ROA not after: Mon 27 Sep 2027 01:00:41 +0000 asID: 4134 IP address blocks: 43.240.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:7e:58:5e:2c:b0:59:0a:ea:0e:6f:77:c8:a4:1d:8b:7f:30:c6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:41 2026 GMT Not After : Sep 27 01:00:41 2027 GMT Subject: CN=88320BC642054B22AF1566B0F1B367C8F6D08650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8e:a2:27:fc:b7:87:f1:3b:04:fe:6a:39:76: 3d:01:da:08:9f:6d:c6:1b:7a:0c:16:bb:2f:3f:f4: 57:91:b8:ea:3e:8b:df:ab:1c:d5:a3:a7:60:46:34: c5:9c:25:6f:ff:cc:70:a8:d5:fe:1a:3a:6d:e2:32: 25:c0:b8:05:37:1a:67:4b:dd:fe:85:d4:0b:bb:41: 01:23:12:93:1f:55:84:24:54:80:33:0e:f7:3c:94: fb:1f:15:f5:0b:83:90:ee:62:be:fe:23:bf:fe:b6: 06:3a:ef:b8:99:f9:91:3f:e7:8b:c5:2b:b1:0a:44: af:c1:1f:80:da:99:39:34:14:57:0b:41:e2:e6:41: 78:79:4c:3f:13:eb:48:2e:68:10:18:b3:de:40:d5: ae:de:cc:79:99:4a:03:28:bc:f4:0c:30:d6:13:ff: 9f:59:f4:98:bb:d6:cb:44:da:5b:94:ad:ee:e9:6e: f0:52:2d:a1:58:b1:c7:f7:f5:ba:fb:18:48:00:10: 72:8f:04:b1:7f:51:11:90:74:51:d8:f8:f9:3f:5b: 8d:ef:c7:fd:94:24:19:2d:a3:b1:97:e6:2e:46:61: 1f:b5:86:61:33:74:e6:c6:b7:15:a7:f6:61:5a:e3: c4:d4:dc:5d:1d:83:6b:3f:e4:cf:3c:ba:72:4e:b0: cd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:32:0B:C6:42:05:4B:22:AF:15:66:B0:F1:B3:67:C8:F6:D0:86:50 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:1f:52:0d:ef:00:f2:f5:b9:9e:40:ab:8e:4c:19:d8:02:ea: 75:82:37:8f:d3:a2:e4:07:f9:a1:8f:91:92:67:6e:50:e5:77: 60:31:bb:21:da:ea:fe:8c:98:28:a0:88:78:ef:93:17:2a:00: 3e:08:53:e6:e2:80:79:29:52:3a:34:01:b1:4b:c6:1d:3a:b0: 1e:5a:74:86:ec:b6:e9:a7:99:c9:12:f4:45:62:46:3c:94:ac: d0:a0:f0:30:da:4f:a2:4a:96:c7:41:7a:c6:14:3b:54:cd:f3: 0e:4d:fc:14:87:23:55:8c:3c:af:35:b6:ca:51:7a:c5:12:7e: 60:af:6c:db:bb:2e:63:09:de:d4:3b:e7:f4:12:50:a0:bb:44: b1:e4:f8:3b:6b:2e:c5:7d:e0:90:6d:a4:e6:6b:53:29:53:3b: 70:87:df:2f:84:98:b0:0a:6a:3d:20:24:98:c1:03:94:d8:8b: 85:48:08:07:81:3a:03:95:b9:cc:ad:bd:29:03:66:3c:9d:ed: ca:5b:18:94:17:3a:d5:be:ed:eb:35:59:93:c4:12:08:45:75: 8a:1c:92:f6:b8:2b:8e:a2:ca:6f:bd:32:1d:34:c8:95:c9:e6: 02:6c:7f:d4:71:1e:d2:93:af:3e:ce:49:16:f4:f7:dd:f3:50: 00:d1:3c:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUen5YXiywWQrqDm93yKQdi38wxu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1NDFaFw0yNzA5MjcwMTAwNDFaMDMxMTAvBgNV BAMTKDg4MzIwQkM2NDIwNTRCMjJBRjE1NjZCMEYxQjM2N0M4RjZEMDg2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMjqIn/LeH8TsE/mo5dj0B2gif bcYbegwWuy8/9FeRuOo+i9+rHNWjp2BGNMWcJW//zHCo1f4aOm3iMiXAuAU3GmdL 3f6F1Au7QQEjEpMfVYQkVIAzDvc8lPsfFfULg5DuYr7+I7/+tgY677iZ+ZE/54vF K7EKRK/BH4DamTk0FFcLQeLmQXh5TD8T60guaBAYs95A1a7ezHmZSgMovPQMMNYT /59Z9Ji71stE2luUre7pbvBSLaFYscf39br7GEgAEHKPBLF/URGQdFHY+Pk/W43v x/2UJBkto7GX5i5GYR+1hmEzdObGtxWn9mFa48TU3F0dg2s/5M88unJOsM3JAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUiDILxkIFSyKvFWaw8bNnyPbQhlAwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM0MzEzMzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC K/AAMA0GCSqGSIb3DQEBCwUAA4IBAQBuH1IN7wDy9bmeQKuOTBnYAup1gjeP06Lk B/mhj5GSZ25Q5XdgMbsh2ur+jJgooIh475MXKgA+CFPm4oB5KVI6NAGxS8YdOrAe WnSG7Lbpp5nJEvRFYkY8lKzQoPAw2k+iSpbHQXrGFDtUzfMOTfwUhyNVjDyvNbbK UXrFEn5gr2zbuy5jCd7UO+f0ElCgu0Sx5Pg7ay7FfeCQbaTma1MpUztwh98vhJiw Cmo9ICSYwQOU2IuFSAgHgToDlbnMrb0pA2Y8ne3KWxiUFzrVvu3rNVmTxBIIRXWK HJL2uCuOospvvTIdNMiVyeYCbH/UcR7Sk68+zkkW9Pfd81AA0Tws -----END CERTIFICATE-----Generated at Fri Oct 9 17:41:00 2026 by rpki-client