$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e2034313334.roa File: 34332e3234302e312e302f32342d3234203d3e2034313334.roa (raw, json) Hash identifier: VGLrSdHWIQIWiPM4tbNtk+x2c3MUKHwJw9bKjNUbUgc= Subject key identifier: 70:92:25:DA:46:86:55:5A:6A:8D:F1:0F:98:F9:8D:C0:7B:F3:E9:30 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 6ED214EF8EF37B99F1BDD6AF74CFA42B389C3508 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e2034313334.roa Signing time: Tue 28 Apr 2026 00:58:09 +0000 ROA not before: Tue 28 Apr 2026 00:53:09 +0000 ROA not after: Tue 27 Apr 2027 00:58:09 +0000 asID: 4134 IP address blocks: 43.240.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d2:14:ef:8e:f3:7b:99:f1:bd:d6:af:74:cf:a4:2b:38:9c:35:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 28 00:53:09 2026 GMT Not After : Apr 27 00:58:09 2027 GMT Subject: CN=709225DA4686555A6A8DF10F98F98DC07BF3E930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:64:01:dc:50:8b:a2:91:cb:97:0d:29:25: 77:e1:ea:1a:e4:5d:f0:8f:d6:00:e7:07:76:5a:43: 3f:ec:54:f8:0d:62:07:da:02:fd:09:74:82:4a:a2: bf:5a:7c:c9:c7:d0:90:0a:51:81:2e:40:bc:f4:79: 09:b6:ea:12:be:10:84:c1:de:75:74:42:c4:f5:f7: 76:5e:91:bb:f0:26:37:14:04:34:dd:da:20:6a:44: c2:cd:56:10:f1:c2:11:00:8c:cc:0b:80:cb:de:2b: 8c:1d:1b:ca:d7:a6:7b:b7:f9:a1:8e:e6:8b:db:46: 6d:63:cb:e0:d8:ec:a0:7e:76:08:33:c7:1e:6a:fc: ad:6f:d0:b8:dd:b5:e2:4d:a5:8a:5b:3c:19:35:dd: 18:0b:c9:88:57:7e:32:f4:64:b4:6a:80:dd:41:d6: c0:d1:d7:f6:89:60:b9:d7:d0:4a:45:01:88:e2:84: 46:48:01:2d:99:e0:81:00:1e:55:6d:67:82:9c:f7: 09:03:6a:1f:8c:98:fd:2f:94:c5:9d:43:77:0a:4b: 6a:98:44:69:4f:44:0c:94:cb:de:15:55:41:48:33: 58:b3:56:49:f4:60:83:45:78:5e:3d:dc:bc:7b:45: e7:69:50:da:0c:c7:b1:e0:4a:29:c1:2f:14:ad:53: db:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:92:25:DA:46:86:55:5A:6A:8D:F1:0F:98:F9:8D:C0:7B:F3:E9:30 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.1.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:9c:75:59:73:0e:d5:24:a2:6f:3c:0d:63:39:df:ef:6f:e2: b7:a4:ec:13:d2:f7:54:b4:26:a4:61:00:59:df:fc:53:b5:6d: 65:df:3a:b5:f1:01:bf:02:a2:b9:38:e1:28:c2:aa:cd:c7:b9: 0c:31:dc:5a:a8:41:c2:99:f5:bb:dd:a4:b2:6d:77:11:c9:0a: 3e:00:1b:3f:87:88:0d:f6:df:f0:16:23:a7:22:15:ad:59:b4: fb:81:a1:af:31:2c:bd:d1:bc:86:44:3c:b7:c0:1c:40:5a:e0: 50:bc:8c:77:63:fb:c4:de:14:47:e9:4d:eb:72:c9:a0:f2:57: 80:5f:64:49:92:ed:21:0d:9f:98:af:22:7e:2b:82:eb:bf:98: 00:3f:36:c4:2c:9c:45:05:2e:ec:05:56:f2:52:40:b4:33:9f: 55:db:fe:0e:1c:8b:cb:08:61:19:fc:1a:d4:07:aa:0c:ba:3a: cc:e0:4e:6b:82:aa:68:54:f2:7a:3f:c1:60:9a:52:4f:f1:22: 8b:76:51:49:d4:6c:9f:85:72:e1:b4:4f:11:c0:21:7c:da:db: f3:db:98:06:89:a1:05:81:06:c0:0c:8a:3e:20:f1:be:f5:5d: 97:66:6d:c6:75:7d:d7:a0:75:b2:c3:3b:15:46:cf:fe:50:eb: ec:01:2d:b2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUbtIU747ze5nxvdavdM+kKzicNQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MjgwMDUzMDlaFw0yNzA0MjcwMDU4MDlaMDMxMTAvBgNV BAMTKDcwOTIyNURBNDY4NjU1NUE2QThERjEwRjk4Rjk4REMwN0JGM0U5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbD2QB3FCLopHLlw0pJXfh6hrk XfCP1gDnB3ZaQz/sVPgNYgfaAv0JdIJKor9afMnH0JAKUYEuQLz0eQm26hK+EITB 3nV0QsT193ZekbvwJjcUBDTd2iBqRMLNVhDxwhEAjMwLgMveK4wdG8rXpnu3+aGO 5ovbRm1jy+DY7KB+dggzxx5q/K1v0LjdteJNpYpbPBk13RgLyYhXfjL0ZLRqgN1B 1sDR1/aJYLnX0EpFAYjihEZIAS2Z4IEAHlVtZ4Kc9wkDah+MmP0vlMWdQ3cKS2qY RGlPRAyUy94VVUFIM1izVkn0YINFeF493Lx7RedpUNoMx7HgSinBLxStU9slAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUcJIl2kaGVVpqjfEPmPmNwHvz6TAwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzEzMzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA K/ABMA0GCSqGSIb3DQEBCwUAA4IBAQA6nHVZcw7VJKJvPA1jOd/vb+K3pOwT0vdU tCakYQBZ3/xTtW1l3zq18QG/AqK5OOEowqrNx7kMMdxaqEHCmfW73aSybXcRyQo+ ABs/h4gN9t/wFiOnIhWtWbT7gaGvMSy90byGRDy3wBxAWuBQvIx3Y/vE3hRH6U3r csmg8leAX2RJku0hDZ+YryJ+K4Lrv5gAPzbELJxFBS7sBVbyUkC0M59V2/4OHIvL CGEZ/BrUB6oMujrM4E5rgqpoVPJ6P8FgmlJP8SKLdlFJ1GyfhXLhtE8RwCF82tvz 25gGiaEFgQbADIo+IPG+9V2XZm3GdX3XoHWywzsVRs/+UOvsAS2y -----END CERTIFICATE-----Generated at Wed May 13 11:46:24 2026 by rpki-client