$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e2034313334.roa File: 34332e3234302e312e302f32342d3234203d3e2034313334.roa (raw, json) Hash identifier: 7oGk7f9QC6dVdlFLKzsn5qlF11PvS23BlbdGJU2tEZc= Subject key identifier: F7:80:F6:EF:17:09:88:96:A4:31:24:D8:31:B2:D2:CF:7F:E0:40:A3 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 47B2BDAE7611262A529AED24D037D7EFDEBE688D Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e2034313334.roa Signing time: Mon 28 Sep 2026 01:00:40 +0000 ROA not before: Mon 28 Sep 2026 00:55:40 +0000 ROA not after: Mon 27 Sep 2027 01:00:40 +0000 asID: 4134 IP address blocks: 43.240.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b2:bd:ae:76:11:26:2a:52:9a:ed:24:d0:37:d7:ef:de:be:68:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:40 2026 GMT Not After : Sep 27 01:00:40 2027 GMT Subject: CN=F780F6EF17098896A43124D831B2D2CF7FE040A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:78:fc:29:5b:16:67:5d:3a:7d:ff:09:5a: 21:4b:21:b8:9c:f2:cb:9d:e5:cb:d0:5d:51:cf:54: a9:86:40:9b:79:55:57:41:ee:c4:77:a3:a8:96:d3: 7a:a9:ca:9e:df:98:50:a7:64:b9:3e:0d:bb:a8:61: 31:97:7b:4b:c1:aa:1f:d1:12:87:a3:24:50:b9:c6: fd:b7:07:08:5d:be:d1:25:7e:ee:64:20:0e:6c:8c: 84:d4:16:4a:72:b6:06:d7:01:f7:e0:e4:61:ab:42: 0f:97:37:de:2c:a7:74:b7:cd:91:ae:a5:2f:6b:0e: f0:bc:3b:89:ce:82:ba:d6:86:18:9d:cf:5e:05:ad: 02:6c:34:08:45:af:5e:ed:53:6d:17:66:c9:e4:80: 31:be:4f:7d:d5:40:f1:de:cf:cb:dc:4a:11:b1:b6: 2a:0f:1a:b8:26:65:c9:a1:cf:8b:2b:a5:c8:8e:d5: ff:b0:cf:d7:df:16:4e:52:fa:2b:0a:bb:f9:19:b9: e9:39:db:50:93:3b:20:c8:43:a1:2a:13:f6:a3:df: 5c:77:1c:c2:54:53:3f:53:29:c2:42:13:06:db:93: 0c:9e:b6:45:88:15:47:41:08:b8:1c:97:26:36:f6: 7f:2e:50:2b:b7:cb:ca:86:5c:b5:38:f5:b1:a7:3f: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:80:F6:EF:17:09:88:96:A4:31:24:D8:31:B2:D2:CF:7F:E0:40:A3 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.1.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:75:e2:2e:22:c6:4f:83:c6:4e:d5:e0:da:94:a8:b0:6b:9d: dd:41:6b:7e:a6:cc:9c:aa:34:d8:db:0b:ee:79:32:8f:77:8f: 23:cb:02:fa:8e:79:66:63:c5:40:d4:48:be:6b:86:a2:21:74: c0:6b:f7:4b:d8:1f:af:72:d1:26:36:44:24:88:0a:9b:6d:e7: 97:9c:d7:61:9f:d6:06:a6:7b:09:66:66:a6:82:80:e2:a0:1c: 19:29:94:fd:63:c2:c7:a5:38:e7:ae:f1:cc:75:9e:59:5c:8e: a1:e8:7b:7a:a3:c3:14:4f:7e:e7:d1:55:88:23:7f:bd:af:93: 22:33:23:4c:2a:47:e4:ca:1b:ab:56:53:67:53:7e:2c:1b:0e: 90:52:9e:1e:e7:17:7c:10:61:c0:6a:34:7a:73:77:5b:d2:93: d4:05:af:12:62:a1:c4:61:64:92:dd:0f:fb:5b:09:f4:54:90: bb:a4:e8:e5:f6:f2:95:64:b5:50:6a:e5:ea:f5:28:bb:35:2b: 85:ad:0f:c2:6b:ac:00:45:2e:2e:fb:3a:b5:07:c8:ab:e1:ec: f4:f5:63:2e:13:17:62:48:21:59:de:8a:2e:e1:44:f3:81:1c: a3:0b:fb:b2:80:da:7e:6b:2f:d4:28:e9:8d:9c:90:91:50:e2: 04:d2:c1:80 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUR7K9rnYRJipSmu0k0DfX796+aI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1NDBaFw0yNzA5MjcwMTAwNDBaMDMxMTAvBgNV BAMTKEY3ODBGNkVGMTcwOTg4OTZBNDMxMjREODMxQjJEMkNGN0ZFMDQwQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vXj8KVsWZ106ff8JWiFLIbic 8sud5cvQXVHPVKmGQJt5VVdB7sR3o6iW03qpyp7fmFCnZLk+DbuoYTGXe0vBqh/R EoejJFC5xv23BwhdvtElfu5kIA5sjITUFkpytgbXAffg5GGrQg+XN94sp3S3zZGu pS9rDvC8O4nOgrrWhhidz14FrQJsNAhFr17tU20XZsnkgDG+T33VQPHez8vcShGx tioPGrgmZcmhz4srpciO1f+wz9ffFk5S+isKu/kZuek521CTOyDIQ6EqE/aj31x3 HMJUUz9TKcJCEwbbkwyetkWIFUdBCLgclyY29n8uUCu3y8qGXLU49bGnP76bAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU94D27xcJiJakMSTYMbLSz3/gQKMwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzEzMzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA K/ABMA0GCSqGSIb3DQEBCwUAA4IBAQBbdeIuIsZPg8ZO1eDalKiwa53dQWt+psyc qjTY2wvueTKPd48jywL6jnlmY8VA1Ei+a4aiIXTAa/dL2B+vctEmNkQkiAqbbeeX nNdhn9YGpnsJZmamgoDioBwZKZT9Y8LHpTjnrvHMdZ5ZXI6h6Ht6o8MUT37n0VWI I3+9r5MiMyNMKkfkyhurVlNnU34sGw6QUp4e5xd8EGHAajR6c3db0pPUBa8SYqHE YWSS3Q/7Wwn0VJC7pOjl9vKVZLVQauXq9Si7NSuFrQ/Ca6wARS4u+zq1B8ir4ez0 9WMuExdiSCFZ3oou4UTzgRyjC/uygNp+ay/UKOmNnJCRUOIE0sGA -----END CERTIFICATE-----Generated at Sun Oct 11 03:43:54 2026 by rpki-client