$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32342d3234203d3e203536303436.roa File: 34332e3234302e302e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: g1rg6XDxDoAWE2rs97WVp8QQU7PlFPIeCQ1HjGz+15s= Subject key identifier: 95:7A:01:A3:EC:56:01:35:2B:C9:5B:DA:C6:3F:C0:AE:54:D6:89:C5 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 079982F3180E8BC65AA168D675A075E76778143C Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32342d3234203d3e203536303436.roa Signing time: Tue 28 Apr 2026 00:57:27 +0000 ROA not before: Tue 28 Apr 2026 00:52:27 +0000 ROA not after: Tue 27 Apr 2027 00:57:27 +0000 asID: 56046 IP address blocks: 43.240.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:99:82:f3:18:0e:8b:c6:5a:a1:68:d6:75:a0:75:e7:67:78:14:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 28 00:52:27 2026 GMT Not After : Apr 27 00:57:27 2027 GMT Subject: CN=957A01A3EC5601352BC95BDAC63FC0AE54D689C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:58:44:ad:55:d4:a2:5a:ea:8c:31:b1:90: ac:ea:a2:80:0e:ba:71:87:52:43:5f:53:55:f4:eb: a8:d3:6a:a2:58:66:7e:48:e3:ac:c3:13:68:8b:8a: 60:be:96:c0:5e:91:da:1d:3b:85:6c:13:89:d8:bf: c4:95:2b:c3:7b:9b:8b:5f:d9:b3:ea:e8:95:e8:af: 3f:f6:12:83:b3:58:8d:be:66:88:e5:3b:2a:34:f8: cf:1e:30:f6:c6:0f:d5:88:d6:a1:69:07:eb:00:b9: bc:61:db:73:a8:8d:37:e6:37:8f:77:8d:83:c5:a8: aa:74:1d:17:82:ee:2b:c6:82:20:2a:62:72:43:29: ba:66:ee:ba:30:50:21:f6:f1:53:87:0b:49:e4:fb: 45:77:84:3a:b9:af:3f:dc:db:47:dc:a5:6a:65:03: 9c:e7:2d:83:c8:24:0e:11:c1:73:11:17:b1:5e:54: 08:bd:78:f9:b7:00:b0:52:18:ed:48:90:64:d3:3a: 82:f9:63:ae:b9:03:5e:69:40:f8:97:29:b0:4f:8e: 79:cd:a0:3f:fd:02:42:c1:c8:98:bd:87:53:df:19: 71:de:d5:7a:23:72:b5:70:71:37:ff:c2:e8:f9:66: b5:aa:4d:32:c4:00:5c:1a:9c:35:9b:ae:22:4e:30: e9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7A:01:A3:EC:56:01:35:2B:C9:5B:DA:C6:3F:C0:AE:54:D6:89:C5 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/24 Signature Algorithm: sha256WithRSAEncryption 09:a2:c6:4a:b0:2d:1d:42:64:51:14:c9:f9:68:25:67:9e:0c: 33:51:56:de:85:8e:11:50:73:ed:45:97:bf:a1:45:f6:60:88: bf:76:a8:ca:41:ac:10:8e:d2:ad:40:d8:ae:e8:9d:58:81:10: a2:39:3c:db:58:05:f5:85:13:ad:b9:7f:d1:e3:17:08:2c:3b: 95:37:5b:a4:ce:38:a8:26:68:04:6b:d2:a8:e8:89:fa:d2:39: 63:25:76:19:81:1a:fe:59:60:7d:50:c7:0a:10:9d:33:f2:f6: 44:6e:61:43:65:32:e6:a6:32:84:b7:23:18:8f:88:16:0f:a8: 80:1d:c8:9a:1f:0e:d8:11:2a:52:af:d3:64:ba:4b:22:b3:32: 62:83:5d:3b:f7:73:c9:a7:8b:79:2d:ba:bc:09:57:24:a2:8b: c6:33:1f:d1:42:e4:fa:29:f6:d9:11:55:35:72:27:1d:cd:de: c8:15:1e:9d:49:c3:72:e7:8c:7a:28:ec:c1:df:80:56:f6:50: f7:6e:ce:fd:5c:1e:f3:61:ed:30:6d:c8:1a:9e:8c:86:78:aa: b7:c5:3d:33:b4:10:25:b5:c0:01:3e:5c:5d:a9:d3:e6:36:c4: 1a:0f:fb:75:4d:4e:a0:e4:d5:62:03:c1:4f:bc:a0:bc:87:e3: 13:b0:49:8e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUB5mC8xgOi8ZaoWjWdaB152d4FDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MjgwMDUyMjdaFw0yNzA0MjcwMDU3MjdaMDMxMTAvBgNV BAMTKDk1N0EwMUEzRUM1NjAxMzUyQkM5NUJEQUM2M0ZDMEFFNTRENjg5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6lhErVXUolrqjDGxkKzqooAO unGHUkNfU1X066jTaqJYZn5I46zDE2iLimC+lsBekdodO4VsE4nYv8SVK8N7m4tf 2bPq6JXorz/2EoOzWI2+ZojlOyo0+M8eMPbGD9WI1qFpB+sAubxh23OojTfmN493 jYPFqKp0HReC7ivGgiAqYnJDKbpm7rowUCH28VOHC0nk+0V3hDq5rz/c20fcpWpl A5znLYPIJA4RwXMRF7FeVAi9ePm3ALBSGO1IkGTTOoL5Y665A15pQPiXKbBPjnnN oD/9AkLByJi9h1PfGXHe1XojcrVwcTf/wuj5ZrWqTTLEAFwanDWbriJOMOk/AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUlXoBo+xWATUryVvaxj/ArlTWicUwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzYzMDM0MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr8AAwDQYJKoZIhvcNAQELBQADggEBAAmixkqwLR1CZFEUyfloJWeeDDNRVt6F jhFQc+1Fl7+hRfZgiL92qMpBrBCO0q1A2K7onViBEKI5PNtYBfWFE625f9HjFwgs O5U3W6TOOKgmaARr0qjoifrSOWMldhmBGv5ZYH1QxwoQnTPy9kRuYUNlMuamMoS3 IxiPiBYPqIAdyJofDtgRKlKv02S6SyKzMmKDXTv3c8mni3kturwJVySii8YzH9FC 5Pop9tkRVTVyJx3N3sgVHp1Jw3LnjHoo7MHfgFb2UPduzv1cHvNh7TBtyBqejIZ4 qrfFPTO0ECW1wAE+XF2p0+Y2xBoP+3VNTqDk1WIDwU+8oLyH4xOwSY4= -----END CERTIFICATE-----Generated at Wed May 13 13:01:01 2026 by rpki-client