$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e203536303436.roa File: 34332e3234302e312e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: 8APmZC8UnVE5U+NmNYpXSgTMDe92aJx0yeLd0fi1+74= Subject key identifier: 45:A5:49:D4:8D:BA:E5:E1:1E:03:55:EC:F3:66:BF:29:B5:DF:94:03 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 78959261A6D4BFA71452FC1E24156CD1C69AC6E0 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e203536303436.roa Signing time: Tue 28 Apr 2026 00:58:09 +0000 ROA not before: Tue 28 Apr 2026 00:53:09 +0000 ROA not after: Tue 27 Apr 2027 00:58:09 +0000 asID: 56046 IP address blocks: 43.240.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:95:92:61:a6:d4:bf:a7:14:52:fc:1e:24:15:6c:d1:c6:9a:c6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 28 00:53:09 2026 GMT Not After : Apr 27 00:58:09 2027 GMT Subject: CN=45A549D48DBAE5E11E0355ECF366BF29B5DF9403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:b5:f2:cd:d3:23:9b:ff:0f:c0:74:cf:24: d5:25:3c:1f:79:6f:ee:36:ae:36:8c:8d:cf:49:27: 68:90:39:88:2f:47:a0:e2:fe:11:38:22:36:3e:cf: 9b:24:16:3d:ac:7d:80:d9:a3:8c:04:20:29:2c:03: 0f:2a:50:5d:e6:58:07:2d:d6:d6:63:72:d1:bb:c9: 90:4b:07:da:b1:df:f6:9f:b2:f3:81:9b:25:94:0e: c3:21:19:8c:ad:30:9e:37:d1:4c:45:b5:96:40:6a: 35:2b:2b:a9:2a:f9:9e:63:80:c7:eb:bf:98:14:e7: cd:bd:04:13:24:62:04:87:cf:ee:d4:8e:0f:9b:32: 86:cd:34:8b:05:2e:c4:4f:60:b2:e5:98:f9:14:2f: 82:e5:da:43:a3:6d:5b:46:94:7b:a2:1c:44:99:71: 65:81:4d:8b:41:14:41:0f:9e:26:d9:7c:bc:a4:ff: 9b:f6:87:21:c2:55:9d:ff:04:99:ef:c7:11:a1:f0: ca:0f:13:78:a4:32:07:96:69:51:02:c3:50:a3:27: 48:7d:81:4f:a2:18:81:44:84:ee:2f:e3:1b:b8:04: b0:9d:f8:cc:a8:e9:1f:27:bb:30:40:17:62:06:25: a0:32:a0:57:96:7e:15:71:d3:e2:da:e4:f7:c3:69: f3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A5:49:D4:8D:BA:E5:E1:1E:03:55:EC:F3:66:BF:29:B5:DF:94:03 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.1.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:da:5d:d4:2a:e8:0a:2b:37:1b:57:aa:e7:25:60:6b:d7:d5: c4:d4:ff:2d:56:86:f7:51:fa:24:cc:b1:cb:d1:16:9f:0f:1a: 2a:56:1d:ab:0f:43:45:97:a7:24:8c:16:b5:07:4c:84:73:97: 57:59:9d:11:36:81:8c:33:50:8b:9e:ce:44:85:7e:83:c0:af: b5:55:91:e5:a6:58:2c:4b:50:e6:d5:19:45:4a:59:90:4a:ed: af:b7:7d:41:d3:09:d1:b2:4e:5c:b0:41:6b:63:88:46:4c:cb: f8:a1:e6:a6:ec:56:b3:be:17:f4:bd:cc:5a:2b:c3:47:9b:1c: 99:c8:2f:7b:8e:45:af:e0:22:51:5f:88:48:0c:44:ff:95:e8: 1e:35:88:1f:57:a8:59:8c:d6:ea:9a:e4:3f:ef:38:48:29:78: 24:20:60:9f:0b:5b:c6:00:eb:76:70:12:98:b1:63:95:2b:99: 8e:08:32:7e:e5:d5:c4:da:5d:49:db:30:17:4a:90:a7:df:9e: ec:12:05:6d:c1:f2:66:ad:42:8a:f7:9e:a7:71:f1:2e:2e:ac: fc:94:ab:2a:49:0f:62:2c:f3:80:91:f3:c2:bf:a7:b2:88:33: 4d:26:d0:4f:aa:71:66:c3:09:e1:dd:f1:66:57:d5:98:42:ef: aa:11:58:d1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUeJWSYabUv6cUUvweJBVs0caaxuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MjgwMDUzMDlaFw0yNzA0MjcwMDU4MDlaMDMxMTAvBgNV BAMTKDQ1QTU0OUQ0OERCQUU1RTExRTAzNTVFQ0YzNjZCRjI5QjVERjk0MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnwbXyzdMjm/8PwHTPJNUlPB95 b+42rjaMjc9JJ2iQOYgvR6Di/hE4IjY+z5skFj2sfYDZo4wEICksAw8qUF3mWAct 1tZjctG7yZBLB9qx3/afsvOBmyWUDsMhGYytMJ430UxFtZZAajUrK6kq+Z5jgMfr v5gU5829BBMkYgSHz+7Ujg+bMobNNIsFLsRPYLLlmPkUL4Ll2kOjbVtGlHuiHESZ cWWBTYtBFEEPnibZfLyk/5v2hyHCVZ3/BJnvxxGh8MoPE3ikMgeWaVECw1CjJ0h9 gU+iGIFEhO4v4xu4BLCd+Myo6R8nuzBAF2IGJaAyoFeWfhVx0+La5PfDafN/AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQURaVJ1I265eEeA1Xs82a/KbXflAMwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzYzMDM0MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr8AEwDQYJKoZIhvcNAQELBQADggEBAFraXdQq6AorNxtXquclYGvX1cTU/y1W hvdR+iTMscvRFp8PGipWHasPQ0WXpySMFrUHTIRzl1dZnRE2gYwzUIuezkSFfoPA r7VVkeWmWCxLUObVGUVKWZBK7a+3fUHTCdGyTlywQWtjiEZMy/ih5qbsVrO+F/S9 zForw0ebHJnIL3uORa/gIlFfiEgMRP+V6B41iB9XqFmM1uqa5D/vOEgpeCQgYJ8L W8YA63ZwEpixY5UrmY4IMn7l1cTaXUnbMBdKkKffnuwSBW3B8matQor3nqdx8S4u rPyUqypJD2Is84CR88K/p7KIM00m0E+qcWbDCeHd8WZX1ZhC76oRWNE= -----END CERTIFICATE-----Generated at Wed May 13 13:00:11 2026 by rpki-client