$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e203233363530.roa File: 34332e3234302e312e302f32342d3234203d3e203233363530.roa (raw, json) Hash identifier: aIiHUIt6JlTqVq7Hxz5xQDJF51MzX3Vx+amz2iY0A+k= Subject key identifier: E5:41:38:50:C7:3D:31:5C:2C:F8:4B:7F:56:5D:35:AB:C4:E6:9D:26 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 4DAA16CB8F0F95DD535EE3FD067AA00DF159261B Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e203233363530.roa Signing time: Mon 28 Sep 2026 01:00:39 +0000 ROA not before: Mon 28 Sep 2026 00:55:39 +0000 ROA not after: Mon 27 Sep 2027 01:00:39 +0000 asID: 23650 IP address blocks: 43.240.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:aa:16:cb:8f:0f:95:dd:53:5e:e3:fd:06:7a:a0:0d:f1:59:26:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:39 2026 GMT Not After : Sep 27 01:00:39 2027 GMT Subject: CN=E5413850C73D315C2CF84B7F565D35ABC4E69D26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:b1:78:ca:36:fe:c2:2b:d1:e7:0e:30:cf: 39:4c:2b:df:57:71:df:7d:df:26:8b:ab:79:52:2a: 49:5d:f1:30:59:a4:25:93:69:fd:5f:7d:56:92:67: 17:de:d2:f7:b1:59:7b:80:2f:4b:a0:3e:c4:ea:a7: 37:af:49:14:33:25:40:b2:65:ae:d3:33:80:4a:bb: d4:09:c6:b5:82:ba:0b:39:b5:89:c2:e8:74:07:c2: 54:4b:87:a7:33:2d:85:75:d8:b7:ad:35:6d:2a:bf: 5e:e5:9f:4e:35:ca:e9:3f:0d:b4:df:58:e0:92:87: ce:52:c9:98:d8:7d:d8:89:8d:61:5c:85:20:3c:98: 42:3c:09:4e:90:fd:e8:8f:50:a9:e3:e6:16:9f:ac: 71:4b:2e:a8:a7:cd:5a:9e:31:f5:0d:85:56:8b:12: bc:3c:cc:a0:49:21:05:43:52:a2:4d:d1:32:37:57: 13:6a:bc:81:fc:57:db:05:7d:1c:25:66:a4:9f:39: 3b:2f:1e:4c:b3:fa:a1:cb:96:49:4a:be:05:10:5e: be:b5:1d:ad:37:6b:41:49:7d:de:91:13:fb:b4:44: d1:40:be:67:7d:c4:09:4d:c6:e2:18:af:93:28:e3: 8c:c8:da:4a:7c:68:69:af:17:df:9f:e1:f4:d0:18: 92:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:41:38:50:C7:3D:31:5C:2C:F8:4B:7F:56:5D:35:AB:C4:E6:9D:26 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.1.0/24 Signature Algorithm: sha256WithRSAEncryption 05:7d:e7:2e:e9:8c:36:1c:ca:cb:32:0e:c3:17:f0:54:64:97: 0b:eb:b7:4d:fa:35:bb:81:14:fb:ab:45:97:f7:53:52:8a:d9: 2d:b2:7f:fa:38:4a:24:eb:2c:b1:7a:21:32:34:3c:a9:67:e3: f9:a0:bc:d5:17:b3:de:07:a1:8b:4b:4f:f9:9f:4e:29:1a:21: bd:a9:91:c7:b8:84:97:32:d7:78:f0:67:98:54:14:82:63:a8: 54:70:76:0b:c1:fc:ce:e0:c2:75:2c:36:07:9c:f3:1d:4c:e7: 38:e2:f7:f3:41:cf:d1:e5:be:e7:22:2d:35:7b:62:78:1c:7d: 26:5d:3f:ee:66:9e:a5:1b:08:ad:bc:dc:bc:ef:6d:11:21:f6: 27:02:14:3d:8d:66:2d:03:74:e6:d0:83:d1:3e:ba:57:1b:02: 89:26:b4:97:1e:80:2a:34:83:17:36:ef:70:24:9f:9b:6d:e4: e5:d6:4b:95:2f:e9:3f:44:c9:0d:cd:e9:3b:cd:2b:bf:c8:dd: e1:e7:a5:f9:c2:12:d4:dc:af:ef:a1:c6:68:b3:0b:20:c3:7b: 88:fe:9b:14:82:c6:4e:48:d1:da:97:b6:fb:78:d6:eb:64:d1: 36:95:dd:0f:c7:7a:a6:f6:78:31:cd:c4:af:50:38:f5:9c:76: c3:a6:c0:77 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUTaoWy48Pld1TXuP9BnqgDfFZJhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzlaFw0yNzA5MjcwMTAwMzlaMDMxMTAvBgNV BAMTKEU1NDEzODUwQzczRDMxNUMyQ0Y4NEI3RjU2NUQzNUFCQzRFNjlEMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGq7F4yjb+wivR5w4wzzlMK99X cd993yaLq3lSKkld8TBZpCWTaf1ffVaSZxfe0vexWXuAL0ugPsTqpzevSRQzJUCy Za7TM4BKu9QJxrWCugs5tYnC6HQHwlRLh6czLYV12LetNW0qv17ln041yuk/DbTf WOCSh85SyZjYfdiJjWFchSA8mEI8CU6Q/eiPUKnj5hafrHFLLqinzVqeMfUNhVaL Erw8zKBJIQVDUqJN0TI3VxNqvIH8V9sFfRwlZqSfOTsvHkyz+qHLlklKvgUQXr61 Ha03a0FJfd6RE/u0RNFAvmd9xAlNxuIYr5Mo44zI2kp8aGmvF9+f4fTQGJKPAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU5UE4UMc9MVws+Et/Vl01q8TmnSYwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzMzNjM1MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr8AEwDQYJKoZIhvcNAQELBQADggEBAAV95y7pjDYcyssyDsMX8FRklwvrt036 NbuBFPurRZf3U1KK2S2yf/o4SiTrLLF6ITI0PKln4/mgvNUXs94HoYtLT/mfTika Ib2pkce4hJcy13jwZ5hUFIJjqFRwdgvB/M7gwnUsNgec8x1M5zji9/NBz9Hlvuci LTV7YngcfSZdP+5mnqUbCK283LzvbREh9icCFD2NZi0DdObQg9E+ulcbAokmtJce gCo0gxc273Akn5tt5OXWS5Uv6T9EyQ3N6TvNK7/I3eHnpfnCEtTcr++hxmizCyDD e4j+mxSCxk5I0dqXtvt41utk0TaV3Q/Heqb2eDHNxK9QOPWcdsOmwHc= -----END CERTIFICATE-----Generated at Fri Oct 9 17:19:49 2026 by rpki-client