$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e203536303436.roa File: 34332e3234302e302e302f32322d3234203d3e203536303436.roa (raw, json) Hash identifier: Og5yu8BltvInjc2xjtZd9UjVs6nXJYBchNMmgxWoNrs= Subject key identifier: 07:29:21:12:30:A5:CC:CE:EC:E3:3E:F7:2A:53:6A:C0:B1:18:5A:D1 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 12FB969FF27A3A3E4AA8E9EE5FFE2A745097BBB6 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e203536303436.roa Signing time: Mon 28 Sep 2026 01:00:35 +0000 ROA not before: Mon 28 Sep 2026 00:55:35 +0000 ROA not after: Mon 27 Sep 2027 01:00:35 +0000 asID: 56046 IP address blocks: 43.240.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:fb:96:9f:f2:7a:3a:3e:4a:a8:e9:ee:5f:fe:2a:74:50:97:bb:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:35 2026 GMT Not After : Sep 27 01:00:35 2027 GMT Subject: CN=0729211230A5CCCEECE33EF72A536AC0B1185AD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:39:8b:39:aa:99:83:e4:d7:7b:27:e4:af: 0b:53:12:f9:5d:fc:3e:1a:d2:2c:e6:31:1b:22:32: 52:71:e5:4e:44:76:9a:d9:7e:70:3a:32:40:30:2b: 1c:12:ba:74:b2:a3:17:ca:10:03:59:ca:96:0c:ef: 92:ba:94:4c:4f:b9:43:b5:02:99:1b:2a:00:45:c4: 95:2c:71:32:3c:a4:28:b2:85:05:2a:a7:29:08:ab: 1a:f2:18:c3:10:8a:b1:98:61:0e:0a:4f:f8:4a:04: fa:77:1a:d5:04:ce:dd:81:e8:3a:ca:9f:8b:5e:3e: 07:22:fe:4a:a8:81:fa:83:47:05:6b:0e:48:8c:05: bc:a2:2c:15:f1:fc:c6:8b:ac:59:18:51:02:8d:1a: c6:02:05:d7:78:dd:9b:88:5a:e8:b7:b1:e3:2c:34: 20:d4:e0:79:b1:09:d1:65:c5:3e:c3:1e:61:a5:ce: 10:75:ce:ba:17:31:ce:58:a4:98:97:22:ad:67:1d: 16:b2:0d:5c:24:93:dc:54:88:f3:62:86:43:18:71: 83:02:dd:3d:5e:78:95:9c:9e:08:50:df:64:bd:48: b3:f6:2f:3b:99:f5:fd:65:79:75:2d:91:d9:45:83: b7:3a:1f:a1:f1:60:60:6a:31:56:fe:81:17:90:49: 8d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:29:21:12:30:A5:CC:CE:EC:E3:3E:F7:2A:53:6A:C0:B1:18:5A:D1 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:da:61:54:e2:3c:82:f1:e8:b9:08:3f:d8:da:7e:c6:91:ac: bb:0f:6b:68:a0:73:23:fb:4b:a5:fb:1e:d5:eb:6f:36:89:a5: fd:34:0d:14:27:ce:9e:30:a6:e5:43:39:8b:d9:8a:ec:63:3e: 19:44:78:85:74:c9:1a:88:b1:30:28:eb:30:d3:61:23:00:79: 19:e0:e6:a4:5b:24:3f:a6:46:91:07:06:c2:48:d8:4f:78:19: 9c:6f:43:c8:74:b8:86:03:d0:14:ab:01:99:e1:cd:46:9e:ed: 46:be:64:eb:35:cd:d2:10:f6:f3:74:9d:f4:34:02:a3:80:7d: 62:b7:2a:e7:4e:b5:ae:02:34:46:f0:61:e4:d4:ac:1d:a2:3e: ce:7e:1c:82:72:ef:f5:0b:24:5b:ad:cb:df:0b:5f:b7:0f:19: fc:00:71:7e:33:b0:44:57:cb:38:2d:aa:5c:17:89:c4:e2:9e: f3:cc:b1:18:a5:af:05:9d:87:3f:60:a3:3b:62:2d:32:df:1c: 58:44:e7:55:35:61:49:be:2b:7d:7f:ec:03:6a:81:00:44:9e: c4:43:b5:cd:b6:71:b7:c9:1d:a8:c4:81:f9:22:eb:c2:32:16: 8a:42:3c:06:42:1f:b0:b8:0b:c4:8d:78:21:83:d1:f9:e2:b9: 0e:ba:87:42 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUEvuWn/J6Oj5KqOnuX/4qdFCXu7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzVaFw0yNzA5MjcwMTAwMzVaMDMxMTAvBgNV BAMTKDA3MjkyMTEyMzBBNUNDQ0VFQ0UzM0VGNzJBNTM2QUMwQjExODVBRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KDmLOaqZg+TXeyfkrwtTEvld /D4a0izmMRsiMlJx5U5EdprZfnA6MkAwKxwSunSyoxfKEANZypYM75K6lExPuUO1 ApkbKgBFxJUscTI8pCiyhQUqpykIqxryGMMQirGYYQ4KT/hKBPp3GtUEzt2B6DrK n4tePgci/kqogfqDRwVrDkiMBbyiLBXx/MaLrFkYUQKNGsYCBdd43ZuIWui3seMs NCDU4HmxCdFlxT7DHmGlzhB1zroXMc5YpJiXIq1nHRayDVwkk9xUiPNihkMYcYMC 3T1eeJWcnghQ32S9SLP2LzuZ9f1leXUtkdlFg7c6H6HxYGBqMVb+gReQSY17AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUBykhEjClzM7s4z73KlNqwLEYWtEwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzYzMDM0MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr8AAwDQYJKoZIhvcNAQELBQADggEBAE3aYVTiPILx6LkIP9jafsaRrLsPa2ig cyP7S6X7HtXrbzaJpf00DRQnzp4wpuVDOYvZiuxjPhlEeIV0yRqIsTAo6zDTYSMA eRng5qRbJD+mRpEHBsJI2E94GZxvQ8h0uIYD0BSrAZnhzUae7Ua+ZOs1zdIQ9vN0 nfQ0AqOAfWK3KudOta4CNEbwYeTUrB2iPs5+HIJy7/ULJFuty98LX7cPGfwAcX4z sERXyzgtqlwXicTinvPMsRilrwWdhz9goztiLTLfHFhE51U1YUm+K31/7ANqgQBE nsRDtc22cbfJHajEgfki68IyFopCPAZCH7C4C8SNeCGD0fniuQ66h0I= -----END CERTIFICATE-----Generated at Fri Oct 9 20:29:52 2026 by rpki-client