$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e203233363530.roa File: 34332e3234302e312e302f32342d3234203d3e203233363530.roa (raw, json) Hash identifier: pUirCpYoTKYKpNYeqrwHzdwrxnXMGg6kdRRTlUD1zNE= Subject key identifier: B3:97:68:AB:2B:9A:2D:B6:88:8E:4F:38:F1:24:F0:8D:55:15:35:8B Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 4A790F2294D16694E0E7E55E7AF1894D5092A878 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e203233363530.roa Signing time: Tue 28 Apr 2026 00:58:09 +0000 ROA not before: Tue 28 Apr 2026 00:53:09 +0000 ROA not after: Tue 27 Apr 2027 00:58:09 +0000 asID: 23650 IP address blocks: 43.240.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:79:0f:22:94:d1:66:94:e0:e7:e5:5e:7a:f1:89:4d:50:92:a8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 28 00:53:09 2026 GMT Not After : Apr 27 00:58:09 2027 GMT Subject: CN=B39768AB2B9A2DB6888E4F38F124F08D5515358B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:00:8a:7a:8c:69:5a:d8:bb:7e:98:23:b1:16: f1:9f:ac:07:1d:16:67:dd:01:ff:50:84:04:8a:f1: 8c:76:2d:23:23:44:a3:e3:c7:8a:b4:df:a3:0c:6b: aa:69:eb:83:9d:90:47:ad:15:53:46:9f:b9:20:0c: 64:b0:b7:a9:6d:f1:f8:89:95:4a:75:1c:8d:c6:67: b5:88:8a:62:36:f2:38:31:f7:1f:ca:d4:b6:ac:b3: 49:bc:7c:0e:4c:bb:c6:c1:1e:9a:63:d9:d4:bf:cc: 00:83:58:25:88:04:4f:cf:6d:c6:2d:7b:f8:d3:57: 52:c8:f5:5c:c2:c0:79:09:53:2d:dc:fb:ca:bc:ac: 3c:06:fc:f4:7f:58:e6:93:2c:79:d1:ce:42:51:c2: bd:24:c5:6d:b8:68:ae:17:0c:d9:92:34:ee:74:13: b1:2f:44:ab:8b:ba:5a:8c:47:48:84:b8:04:d7:ef: 3b:19:75:45:da:f9:56:10:80:26:c9:d8:26:35:1f: be:71:f7:bb:5a:56:64:7f:24:5a:82:f2:7a:63:a5: 26:8b:33:92:84:91:35:68:25:46:04:60:1d:65:4f: 80:f6:4d:4c:ff:86:30:46:67:68:9c:86:ce:0d:0f: eb:ec:2c:7f:ae:44:2c:64:f1:ef:1b:8d:17:6f:33: b1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:97:68:AB:2B:9A:2D:B6:88:8E:4F:38:F1:24:F0:8D:55:15:35:8B X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.1.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:fd:5b:a9:aa:a3:e0:5d:7c:3f:2e:d1:8b:ae:46:c6:7e:b4: 1a:07:f5:ff:81:77:0c:cf:a0:08:ce:48:68:28:9f:4b:4c:ed: 10:7a:02:2d:ad:83:39:49:3c:ec:13:ab:a7:af:92:cb:d4:57: ae:d1:f5:cd:7f:9e:ff:f8:dc:04:cc:14:95:eb:f8:75:f8:7b: 87:98:45:a3:fb:3b:1f:b5:2e:91:c9:b5:aa:3c:61:89:88:19: 78:ab:2b:d1:c6:38:b4:a2:b7:b9:ab:0f:2d:d2:21:eb:c5:2b: ef:1d:e3:2a:f9:77:d9:e3:27:11:f6:3f:e7:f2:1f:d7:1d:b4: 66:da:f4:1d:aa:cf:2c:41:1c:f6:7b:3b:d5:1b:6e:4f:7f:3d: c4:b8:52:53:9e:98:27:f9:a4:6e:11:40:d1:49:1e:03:5c:a0: fe:d0:9d:f4:4c:33:5c:7a:b5:02:aa:cc:1f:d9:62:66:92:55: aa:25:57:37:55:2e:91:4f:3f:a7:b8:0a:6f:4c:e4:23:bf:1a: b4:7d:f5:4c:b5:ee:6f:ae:cd:76:e4:e0:0a:3b:91:f8:28:1e: 03:a6:e1:a4:5e:c4:e1:c3:47:82:54:f5:6f:19:4d:5e:c6:6b: d4:e1:49:24:d0:ee:d3:47:9d:28:6d:d2:f7:a4:ad:6a:ff:b0: 0a:da:85:51 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUSnkPIpTRZpTg5+VeevGJTVCSqHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MjgwMDUzMDlaFw0yNzA0MjcwMDU4MDlaMDMxMTAvBgNV BAMTKEIzOTc2OEFCMkI5QTJEQjY4ODhFNEYzOEYxMjRGMDhENTUxNTM1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUAIp6jGla2Lt+mCOxFvGfrAcd FmfdAf9QhASK8Yx2LSMjRKPjx4q036MMa6pp64OdkEetFVNGn7kgDGSwt6lt8fiJ lUp1HI3GZ7WIimI28jgx9x/K1Lass0m8fA5Mu8bBHppj2dS/zACDWCWIBE/PbcYt e/jTV1LI9VzCwHkJUy3c+8q8rDwG/PR/WOaTLHnRzkJRwr0kxW24aK4XDNmSNO50 E7EvRKuLulqMR0iEuATX7zsZdUXa+VYQgCbJ2CY1H75x97taVmR/JFqC8npjpSaL M5KEkTVoJUYEYB1lT4D2TUz/hjBGZ2ichs4ND+vsLH+uRCxk8e8bjRdvM7HJAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUs5doqyuaLbaIjk848STwjVUVNYswHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzMzNjM1MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr8AEwDQYJKoZIhvcNAQELBQADggEBACv9W6mqo+BdfD8u0YuuRsZ+tBoH9f+B dwzPoAjOSGgon0tM7RB6Ai2tgzlJPOwTq6evksvUV67R9c1/nv/43ATMFJXr+HX4 e4eYRaP7Ox+1LpHJtao8YYmIGXirK9HGOLSit7mrDy3SIevFK+8d4yr5d9njJxH2 P+fyH9cdtGba9B2qzyxBHPZ7O9Ubbk9/PcS4UlOemCf5pG4RQNFJHgNcoP7QnfRM M1x6tQKqzB/ZYmaSVaolVzdVLpFPP6e4Cm9M5CO/GrR99Uy17m+uzXbk4Ao7kfgo HgOm4aRexOHDR4JU9W8ZTV7Ga9ThSSTQ7tNHnSht0vekrWr/sArahVE= -----END CERTIFICATE-----Generated at Wed May 13 13:34:29 2026 by rpki-client