$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e2034383337.roa File: 34332e3234302e302e302f32322d3234203d3e2034383337.roa (raw, json) Hash identifier: NJNwQJ3KcoSXzByfJf2cUzZ9GCGW1551fq2xH/O9eAc= Subject key identifier: 7F:49:FB:1A:77:28:39:51:36:51:F7:8E:0F:CE:7C:52:3A:83:2D:E6 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 68F3ABBFF36DE7E47DBC08213472880BAA6BC4D0 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e2034383337.roa Signing time: Mon 28 Sep 2026 01:00:38 +0000 ROA not before: Mon 28 Sep 2026 00:55:38 +0000 ROA not after: Mon 27 Sep 2027 01:00:38 +0000 asID: 4837 IP address blocks: 43.240.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f3:ab:bf:f3:6d:e7:e4:7d:bc:08:21:34:72:88:0b:aa:6b:c4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:38 2026 GMT Not After : Sep 27 01:00:38 2027 GMT Subject: CN=7F49FB1A772839513651F78E0FCE7C523A832DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cb:d9:46:c5:04:ff:9f:80:e8:da:06:d7:43: 8b:46:de:e4:71:a9:85:ab:82:92:b2:52:8e:0e:ef: b3:72:92:d0:57:f1:0f:da:f2:ab:f7:10:3b:6c:11: e9:d0:b0:f8:b4:1e:ee:87:9e:c0:0d:a5:f2:24:00: 88:2e:9b:c4:1a:50:00:ea:97:2a:8d:2f:6a:55:7f: 41:3e:02:5e:e6:54:45:93:b7:10:5e:c3:f8:93:69: a6:6f:14:e0:a6:4c:24:8a:64:29:55:bd:1d:b4:65: 58:c3:8c:bf:f4:df:7f:60:65:cf:f5:8d:73:cc:50: 1c:57:bc:b1:c3:af:f2:db:d3:18:e3:8d:66:ab:03: 31:ae:dc:7e:44:95:10:53:ee:e3:ec:99:f1:b2:3b: 3f:e5:cf:bb:8b:b7:cc:2d:d4:ad:0c:65:5d:d8:31: 4f:72:e5:1e:24:26:a3:8f:16:b8:01:5a:53:aa:60: 48:de:3b:2a:0d:13:f8:37:fb:af:f6:2c:74:0c:d5: 84:97:53:1c:cf:48:31:2b:4e:75:2a:5f:f8:68:47: f0:1b:f8:f2:e3:4a:89:49:9d:47:d2:87:fd:7c:5d: 48:bd:7d:fb:86:e4:3a:88:a3:b8:1e:79:1d:b9:0e: 7e:a3:5f:ee:43:04:33:5e:00:f7:be:4f:84:00:b7: 4c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:49:FB:1A:77:28:39:51:36:51:F7:8E:0F:CE:7C:52:3A:83:2D:E6 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:93:cb:15:2d:23:b6:b2:22:52:75:ad:0d:d2:2b:40:c4:dc: dc:7d:d4:d2:f2:9c:a4:9d:ab:5c:9e:80:26:28:15:86:3c:55: 21:9a:49:b5:69:dd:81:a7:01:12:a6:a3:d5:43:d4:e9:37:a3: 94:36:37:51:54:88:2f:cd:d0:32:12:1b:9f:13:86:58:99:31: af:18:ab:fa:c5:46:43:c4:1a:1a:fa:50:8c:65:e0:cc:c7:66: c2:b6:4f:32:da:c4:61:c8:aa:93:de:85:b3:1b:02:f6:cc:30: 69:47:74:3f:50:54:52:77:06:3e:bc:9a:ec:ff:84:60:60:55: 21:68:35:d4:ea:2a:77:2b:21:c9:1f:22:64:32:ce:aa:81:b1: 1f:f8:69:71:f1:51:9b:f8:be:7b:c7:dc:3b:7d:34:74:a2:9f: f3:40:17:86:e9:d9:b1:91:e4:6f:3a:6b:18:b2:3e:e3:24:9f: 64:34:b6:1b:5c:50:f5:d6:a1:11:49:ec:7e:0a:a1:4f:43:cc: b2:0c:b9:fa:36:8c:fe:d0:a2:a9:f3:b7:0c:97:04:bf:2a:0a: 17:e0:96:14:c1:20:0e:1c:82:4d:b2:ff:b6:50:43:79:e9:bc: a6:47:21:34:70:0a:c5:ed:e4:c7:92:7e:8d:b4:1d:70:e4:fb: ee:ed:c3:e9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUaPOrv/Nt5+R9vAghNHKIC6prxNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzhaFw0yNzA5MjcwMTAwMzhaMDMxMTAvBgNV BAMTKDdGNDlGQjFBNzcyODM5NTEzNjUxRjc4RTBGQ0U3QzUyM0E4MzJERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdy9lGxQT/n4Do2gbXQ4tG3uRx qYWrgpKyUo4O77NyktBX8Q/a8qv3EDtsEenQsPi0Hu6HnsANpfIkAIgum8QaUADq lyqNL2pVf0E+Al7mVEWTtxBew/iTaaZvFOCmTCSKZClVvR20ZVjDjL/0339gZc/1 jXPMUBxXvLHDr/Lb0xjjjWarAzGu3H5ElRBT7uPsmfGyOz/lz7uLt8wt1K0MZV3Y MU9y5R4kJqOPFrgBWlOqYEjeOyoNE/g3+6/2LHQM1YSXUxzPSDErTnUqX/hoR/Ab +PLjSolJnUfSh/18XUi9ffuG5DqIo7geeR25Dn6jX+5DBDNeAPe+T4QAt0z7AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUf0n7GncoOVE2UfeOD858UjqDLeYwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC K/AAMA0GCSqGSIb3DQEBCwUAA4IBAQBuk8sVLSO2siJSda0N0itAxNzcfdTS8pyk natcnoAmKBWGPFUhmkm1ad2BpwESpqPVQ9TpN6OUNjdRVIgvzdAyEhufE4ZYmTGv GKv6xUZDxBoa+lCMZeDMx2bCtk8y2sRhyKqT3oWzGwL2zDBpR3Q/UFRSdwY+vJrs /4RgYFUhaDXU6ip3KyHJHyJkMs6qgbEf+Glx8VGb+L57x9w7fTR0op/zQBeG6dmx keRvOmsYsj7jJJ9kNLYbXFD11qERSex+CqFPQ8yyDLn6Noz+0KKp87cMlwS/KgoX 4JYUwSAOHIJNsv+2UEN56bymRyE0cArF7eTHkn6NtB1w5Pvu7cPp -----END CERTIFICATE-----Generated at Fri Oct 9 17:40:56 2026 by rpki-client