$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e203233363530.roa File: 34332e3234302e322e302f32342d3234203d3e203233363530.roa (raw, json) Hash identifier: BlOS0qUi0AD8lOxnKQegmFr0ti2niTH+mAzrC+BSsxI= Subject key identifier: 00:4C:AA:E8:45:8F:38:48:22:20:46:0F:F7:D8:66:FF:69:3F:0B:C3 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 1B533C2F4716E8310C96568BD9C8D1F454CD02D4 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e203233363530.roa Signing time: Tue 28 Apr 2026 00:58:48 +0000 ROA not before: Tue 28 Apr 2026 00:53:48 +0000 ROA not after: Tue 27 Apr 2027 00:58:48 +0000 asID: 23650 IP address blocks: 43.240.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:53:3c:2f:47:16:e8:31:0c:96:56:8b:d9:c8:d1:f4:54:cd:02:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 28 00:53:48 2026 GMT Not After : Apr 27 00:58:48 2027 GMT Subject: CN=004CAAE8458F38482220460FF7D866FF693F0BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9a:0a:95:8d:f1:14:73:89:fd:26:1e:32:8d: b5:c2:0e:75:29:94:a2:33:6c:8c:bf:be:a3:72:82: f5:f7:b2:30:99:95:b8:b1:a0:e9:e2:65:d6:e1:9d: cd:a3:e8:d6:46:ad:9f:d6:d9:fd:6e:84:23:81:91: 1e:54:c2:4a:84:54:e5:28:3f:e8:36:93:59:76:10: 7a:43:ff:88:b5:59:a5:b9:44:dd:0e:72:0d:a2:65: fb:07:3a:9e:9b:12:f1:73:97:8c:fb:2d:e6:94:91: 9e:6a:0e:97:9a:b8:76:70:56:0f:cf:1e:63:15:30: 89:6f:a9:cc:97:71:ec:93:01:fc:61:dd:97:06:af: f8:dd:f9:e2:9d:c0:05:8e:35:ce:52:ef:03:59:4b: b3:44:e7:32:ad:d7:07:5b:16:3e:2d:c9:75:8d:2c: d6:a6:20:52:b5:19:b1:d5:1a:56:5f:cd:29:80:09: 06:dc:19:31:1a:14:c7:23:c4:49:7e:c5:90:4a:0a: 7c:19:89:b8:2f:ed:f4:69:69:44:17:5e:78:32:05: f9:6f:4f:73:da:ba:55:e8:5b:24:1e:85:ed:59:81: c3:b9:96:26:d8:1b:9e:2b:fc:37:d4:d6:ae:79:0b: 77:d3:ae:b5:a0:df:6a:f3:24:18:79:58:ff:22:16: 57:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4C:AA:E8:45:8F:38:48:22:20:46:0F:F7:D8:66:FF:69:3F:0B:C3 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.2.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:ff:5e:a7:82:fb:20:a0:99:8a:6d:f1:17:1d:7b:c0:49:d7: 62:45:44:2b:ae:2d:69:69:a4:e8:24:d0:f6:b7:30:da:85:ad: 05:1e:97:f1:1e:47:de:b8:ae:62:0d:4d:cd:58:2e:0e:97:83: f5:11:90:3f:07:ea:df:5a:79:73:ea:2d:05:36:6f:6a:04:81: 68:71:bf:b1:1d:36:06:b2:e3:a9:5f:37:0a:ac:89:2f:ef:b8: f8:2d:28:7b:2e:1c:12:8d:6a:56:64:8a:e1:5a:83:3f:8a:ce: 09:bf:55:bd:9a:7a:08:d8:fd:3c:13:97:c1:15:93:d2:53:fc: aa:df:ab:75:f4:de:4b:9f:76:b0:22:33:fb:e6:54:ce:b2:55: 04:d4:b5:8a:f4:57:78:8d:48:c4:71:a2:f6:73:e1:61:14:3b: bb:24:33:80:c6:e6:6c:cb:27:b5:44:94:80:d5:85:86:e2:ba: 5c:8c:a2:a7:b3:aa:a6:82:87:7e:93:a4:b6:1a:5c:76:de:b1: ec:36:16:c3:0c:fd:fd:8b:03:b6:32:21:e5:4a:37:34:a0:bb: 28:30:d8:60:25:35:e0:9e:c4:1c:54:fa:24:0d:ee:ea:e0:5a: a1:ad:44:e6:0a:70:82:85:2d:b4:c1:38:74:da:93:87:fc:31: 94:91:b6:47 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUG1M8L0cW6DEMllaL2cjR9FTNAtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MjgwMDUzNDhaFw0yNzA0MjcwMDU4NDhaMDMxMTAvBgNV BAMTKDAwNENBQUU4NDU4RjM4NDgyMjIwNDYwRkY3RDg2NkZGNjkzRjBCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmgqVjfEUc4n9Jh4yjbXCDnUp lKIzbIy/vqNygvX3sjCZlbixoOniZdbhnc2j6NZGrZ/W2f1uhCOBkR5UwkqEVOUo P+g2k1l2EHpD/4i1WaW5RN0Ocg2iZfsHOp6bEvFzl4z7LeaUkZ5qDpeauHZwVg/P HmMVMIlvqcyXceyTAfxh3ZcGr/jd+eKdwAWONc5S7wNZS7NE5zKt1wdbFj4tyXWN LNamIFK1GbHVGlZfzSmACQbcGTEaFMcjxEl+xZBKCnwZibgv7fRpaUQXXngyBflv T3PaulXoWyQehe1ZgcO5libYG54r/DfU1q55C3fTrrWg32rzJBh5WP8iFlfpAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUAEyq6EWPOEgiIEYP99hm/2k/C8MwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzMzNjM1MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr8AIwDQYJKoZIhvcNAQELBQADggEBABz/XqeC+yCgmYpt8Rcde8BJ12JFRCuu LWlppOgk0Pa3MNqFrQUel/EeR964rmINTc1YLg6Xg/URkD8H6t9aeXPqLQU2b2oE gWhxv7EdNgay46lfNwqsiS/vuPgtKHsuHBKNalZkiuFagz+Kzgm/Vb2aegjY/TwT l8EVk9JT/Krfq3X03kufdrAiM/vmVM6yVQTUtYr0V3iNSMRxovZz4WEUO7skM4DG 5mzLJ7VElIDVhYbiulyMoqezqqaCh36TpLYaXHbesew2FsMM/f2LA7YyIeVKNzSg uygw2GAlNeCexBxU+iQN7urgWqGtROYKcIKFLbTBOHTak4f8MZSRtkc= -----END CERTIFICATE-----Generated at Wed May 13 13:42:37 2026 by rpki-client