$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32342d3234203d3e2034383337.roa File: 34332e3234302e302e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: U+h2MvssfN5xo3LOHf/yskz75mgKHf5gKQl6Lq6pE3Y= Subject key identifier: D4:92:73:3C:55:8B:38:E9:39:6E:FE:9E:31:42:F3:F6:3A:66:DF:43 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 213F66A15C7B11610DF70BFE5F17770AE3039691 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32342d3234203d3e2034383337.roa Signing time: Tue 28 Apr 2026 00:57:46 +0000 ROA not before: Tue 28 Apr 2026 00:52:46 +0000 ROA not after: Tue 27 Apr 2027 00:57:46 +0000 asID: 4837 IP address blocks: 43.240.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:3f:66:a1:5c:7b:11:61:0d:f7:0b:fe:5f:17:77:0a:e3:03:96:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 28 00:52:46 2026 GMT Not After : Apr 27 00:57:46 2027 GMT Subject: CN=D492733C558B38E9396EFE9E3142F3F63A66DF43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a1:42:55:79:d2:ae:85:45:0a:df:db:f5:79: c3:04:a8:4f:72:ca:90:16:db:54:56:ce:43:3c:6e: 60:b3:58:f0:85:c0:93:9a:d6:cd:da:d6:15:05:05: e3:a8:55:12:3f:89:74:10:af:80:af:0c:54:d4:21: 27:38:c1:93:02:84:5a:60:a9:43:18:4b:d6:e5:f0: 2c:30:3f:6d:28:7a:cf:61:33:ed:4e:4d:75:23:60: 48:61:d2:4f:48:75:8a:e0:53:5a:10:c5:de:20:90: 47:0a:cd:a7:6e:f3:a7:d3:61:da:6d:89:1f:fd:26: ed:de:53:e6:cf:c0:f2:4f:00:2f:30:54:99:46:04: a3:cb:cc:86:9d:af:12:c5:af:e5:da:f4:4e:5a:5f: 9f:6b:f2:9e:e6:49:04:c9:64:18:fe:f5:0f:61:b2: 33:7d:fc:9d:f4:e6:a6:29:00:40:d3:2f:de:32:6a: 54:02:ff:ea:2a:34:7d:3b:b2:34:5b:13:fc:23:5f: a7:4d:41:cf:bc:4e:27:35:0a:60:32:c6:3f:23:3a: 36:37:a0:e6:00:06:e0:8a:aa:62:13:33:07:1f:8b: 35:55:43:2b:81:77:12:26:d1:f5:81:5b:b3:c1:8b: 99:2d:df:0c:e2:1f:c2:80:49:79:f8:e9:6a:c1:c9: e0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:92:73:3C:55:8B:38:E9:39:6E:FE:9E:31:42:F3:F6:3A:66:DF:43 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/24 Signature Algorithm: sha256WithRSAEncryption 01:d7:35:33:cf:5c:05:b4:aa:c7:b4:29:36:0d:65:f1:8a:96: 86:64:d7:62:66:bf:a2:34:80:af:ac:ad:72:61:f3:e5:42:f3: 02:cd:70:9a:ca:a5:f0:be:4b:f2:65:92:45:06:bf:07:e2:ae: 00:98:d7:87:57:fc:fe:76:09:d8:02:19:a1:e3:b9:cb:b5:0b: 03:4d:b9:c2:81:36:34:ad:34:61:87:dd:63:70:e5:1c:f7:fd: 06:a9:aa:87:f3:08:8f:4a:e8:20:cb:95:07:bb:20:fc:3d:a8: 07:98:9a:fe:47:b4:c1:20:4f:b1:13:67:d6:8a:17:05:ed:e8: 8c:14:38:f1:6c:d8:b5:ba:fa:48:a2:59:67:50:6c:4f:46:ca: 63:83:62:b1:c6:e1:d4:7b:f6:67:04:34:df:73:0c:f0:ec:8c: a7:ce:17:6a:9b:06:98:ab:a4:03:42:c1:73:a8:f9:27:91:11: 3b:b9:78:85:ae:69:10:c7:4b:65:cc:a9:d0:31:70:20:70:86: 4e:3b:07:91:32:95:28:4d:04:26:6b:9f:b6:e6:6e:54:14:f5: 2f:b6:d7:4f:f3:78:d0:16:8f:73:a3:5e:7b:dd:db:1d:36:d3: 52:6a:5b:f0:5c:a6:d6:52:44:f6:c0:30:0c:df:44:3b:dd:9c: e8:3e:59:3d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUIT9moVx7EWEN9wv+Xxd3CuMDlpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MjgwMDUyNDZaFw0yNzA0MjcwMDU3NDZaMDMxMTAvBgNV BAMTKEQ0OTI3MzNDNTU4QjM4RTkzOTZFRkU5RTMxNDJGM0Y2M0E2NkRGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxoUJVedKuhUUK39v1ecMEqE9y ypAW21RWzkM8bmCzWPCFwJOa1s3a1hUFBeOoVRI/iXQQr4CvDFTUISc4wZMChFpg qUMYS9bl8CwwP20oes9hM+1OTXUjYEhh0k9IdYrgU1oQxd4gkEcKzadu86fTYdpt iR/9Ju3eU+bPwPJPAC8wVJlGBKPLzIadrxLFr+Xa9E5aX59r8p7mSQTJZBj+9Q9h sjN9/J305qYpAEDTL94yalQC/+oqNH07sjRbE/wjX6dNQc+8Tic1CmAyxj8jOjY3 oOYABuCKqmITMwcfizVVQyuBdxIm0fWBW7PBi5kt3wziH8KASXn46WrByeDxAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU1JJzPFWLOOk5bv6eMULz9jpm30MwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA K/AAMA0GCSqGSIb3DQEBCwUAA4IBAQAB1zUzz1wFtKrHtCk2DWXxipaGZNdiZr+i NICvrK1yYfPlQvMCzXCayqXwvkvyZZJFBr8H4q4AmNeHV/z+dgnYAhmh47nLtQsD TbnCgTY0rTRhh91jcOUc9/0GqaqH8wiPSuggy5UHuyD8PagHmJr+R7TBIE+xE2fW ihcF7eiMFDjxbNi1uvpIollnUGxPRspjg2KxxuHUe/ZnBDTfcwzw7IynzhdqmwaY q6QDQsFzqPknkRE7uXiFrmkQx0tlzKnQMXAgcIZOOweRMpUoTQQma5+25m5UFPUv ttdP83jQFo9zo1573dsdNtNSalvwXKbWUkT2wDAM30Q73ZzoPlk9 -----END CERTIFICATE-----Generated at Wed May 13 11:03:50 2026 by rpki-client