$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32342d3234203d3e2034313334.roa File: 34332e3234302e302e302f32342d3234203d3e2034313334.roa (raw, json) Hash identifier: cyTZ5aVDTk//6Iq9t2SMNo/G0XxXdWZyiQo6IJsZ1Bk= Subject key identifier: 94:35:CB:D6:4C:D4:C3:1E:B5:11:D1:A5:5A:3C:12:96:A2:47:E1:3D Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 2011A0DF9883EA6A54E4864675F0A931FF6BD8DB Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32342d3234203d3e2034313334.roa Signing time: Tue 28 Apr 2026 00:57:27 +0000 ROA not before: Tue 28 Apr 2026 00:52:27 +0000 ROA not after: Tue 27 Apr 2027 00:57:27 +0000 asID: 4134 IP address blocks: 43.240.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:11:a0:df:98:83:ea:6a:54:e4:86:46:75:f0:a9:31:ff:6b:d8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 28 00:52:27 2026 GMT Not After : Apr 27 00:57:27 2027 GMT Subject: CN=9435CBD64CD4C31EB511D1A55A3C1296A247E13D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:03:f5:c9:89:53:f0:be:01:b2:dc:d2:1a: b2:b7:05:b5:d8:9a:14:86:cc:16:34:0d:4e:65:dc: 24:15:c2:5d:99:05:fa:58:64:cc:ef:4c:4c:c1:cb: 03:38:20:07:56:d6:f4:bf:be:78:f7:b9:4f:fe:8e: 77:fe:95:f9:ed:10:c7:40:33:59:31:50:b5:21:32: 8b:be:f8:f4:67:98:56:e8:4e:ff:45:e2:c6:fc:2c: ca:6f:0e:b0:61:da:8d:93:e9:25:e8:a0:6c:ee:89: a5:2f:56:5f:ff:0a:96:5e:ae:52:4a:f9:e3:48:22: c0:c2:00:9e:a9:e2:80:fa:bd:1e:53:bc:9f:52:d8: fb:e6:32:58:5a:80:1e:99:4e:b1:b9:ec:49:27:31: 54:ad:fc:5b:a8:9e:86:02:f9:95:36:dd:74:9c:b5: 19:2f:48:75:b8:50:bb:69:b4:21:ad:f8:35:30:91: b4:3d:87:ff:28:60:04:fd:59:db:97:ad:6e:13:d4: 7e:bd:4a:70:81:17:59:1f:01:9c:3c:43:b9:86:29: 42:08:4c:8b:bb:c6:75:7b:8c:05:1f:5a:ab:f3:a9: 12:19:99:2a:25:01:31:4d:33:a4:a3:63:35:05:a7: 15:7c:b0:56:19:31:68:6d:78:05:58:7d:71:de:09: f4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:35:CB:D6:4C:D4:C3:1E:B5:11:D1:A5:5A:3C:12:96:A2:47:E1:3D X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32342d3234203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/24 Signature Algorithm: sha256WithRSAEncryption 54:71:96:82:55:31:4c:9c:6d:f4:df:c7:d8:8a:a7:a8:cb:33: 32:bb:b6:e1:f9:5d:0c:60:fd:ad:d5:b5:52:c7:64:a6:51:02: f9:d8:f3:03:21:d8:45:20:21:39:58:a1:d8:0f:3a:ba:a1:a5: b8:e1:b9:69:73:b9:7b:75:92:8b:42:55:c4:0b:ec:55:33:f6: f1:a7:c4:63:df:52:42:d6:7c:82:28:7f:39:b1:31:82:1c:7a: 82:fd:43:2d:a4:9c:47:3f:a6:58:c8:2a:c9:28:01:1f:eb:46: db:d5:ab:41:67:0a:bc:ac:4f:84:43:a2:45:0a:29:37:ff:db: 3a:9f:2e:3c:8a:c9:af:28:b9:54:89:2a:0c:9f:38:a8:1a:46: 84:de:bd:da:d7:ec:2e:a2:7e:ca:43:09:7d:0f:32:80:e4:fe: 54:09:f5:8f:d7:33:49:aa:07:b6:2c:42:d9:da:44:0b:e1:3a: 37:b4:dd:17:73:3c:c8:07:91:0c:76:08:c7:27:6b:4d:8e:bf: 90:64:39:07:d7:78:9d:80:63:10:49:50:e6:fe:5f:64:75:5c: 1f:ed:9c:92:37:c0:b0:57:08:e2:d1:1d:0a:8a:c8:bb:30:be: 65:1b:e7:0f:76:51:54:d8:c1:a2:ad:33:81:af:c0:e9:0b:d3: e2:17:a3:80 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUIBGg35iD6mpU5IZGdfCpMf9r2NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MjgwMDUyMjdaFw0yNzA0MjcwMDU3MjdaMDMxMTAvBgNV BAMTKDk0MzVDQkQ2NENENEMzMUVCNTExRDFBNTVBM0MxMjk2QTI0N0UxM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BgP1yYlT8L4BstzSGrK3BbXY mhSGzBY0DU5l3CQVwl2ZBfpYZMzvTEzBywM4IAdW1vS/vnj3uU/+jnf+lfntEMdA M1kxULUhMou++PRnmFboTv9F4sb8LMpvDrBh2o2T6SXooGzuiaUvVl//CpZerlJK +eNIIsDCAJ6p4oD6vR5TvJ9S2PvmMlhagB6ZTrG57EknMVSt/FuonoYC+ZU23XSc tRkvSHW4ULtptCGt+DUwkbQ9h/8oYAT9WduXrW4T1H69SnCBF1kfAZw8Q7mGKUII TIu7xnV7jAUfWqvzqRIZmSolATFNM6SjYzUFpxV8sFYZMWhteAVYfXHeCfQZAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUlDXL1kzUwx61EdGlWjwSlqJH4T0wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzEzMzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA K/AAMA0GCSqGSIb3DQEBCwUAA4IBAQBUcZaCVTFMnG3038fYiqeoyzMyu7bh+V0M YP2t1bVSx2SmUQL52PMDIdhFICE5WKHYDzq6oaW44blpc7l7dZKLQlXEC+xVM/bx p8Rj31JC1nyCKH85sTGCHHqC/UMtpJxHP6ZYyCrJKAEf60bb1atBZwq8rE+EQ6JF Cik3/9s6ny48ismvKLlUiSoMnzioGkaE3r3a1+wuon7KQwl9DzKA5P5UCfWP1zNJ qge2LELZ2kQL4To3tN0XczzIB5EMdgjHJ2tNjr+QZDkH13idgGMQSVDm/l9kdVwf 7ZySN8CwVwji0R0Kisi7ML5lG+cPdlFU2MGirTOBr8DpC9PiF6OA -----END CERTIFICATE-----Generated at Wed May 13 12:01:39 2026 by rpki-client