$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e2034313334.roa File: 34332e3234302e322e302f32342d3234203d3e2034313334.roa (raw, json) Hash identifier: dD0LLPpfep/hMFZAhF3tled7hQyyW08i95e04trQhCk= Subject key identifier: 0E:01:E8:A7:E0:37:BF:91:AC:4E:4A:82:85:3E:DC:83:7A:97:4A:38 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 513EDA462048FB95A337E8C8F9394BFA34A49636 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e2034313334.roa Signing time: Mon 28 Sep 2026 01:00:34 +0000 ROA not before: Mon 28 Sep 2026 00:55:34 +0000 ROA not after: Mon 27 Sep 2027 01:00:34 +0000 asID: 4134 IP address blocks: 43.240.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:3e:da:46:20:48:fb:95:a3:37:e8:c8:f9:39:4b:fa:34:a4:96:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:34 2026 GMT Not After : Sep 27 01:00:34 2027 GMT Subject: CN=0E01E8A7E037BF91AC4E4A82853EDC837A974A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1f:af:8d:60:80:a0:01:ca:bf:05:45:42:71: 59:a0:d8:fc:28:a1:b9:bd:c9:39:88:13:90:1f:5d: fa:40:4b:40:5a:ef:90:40:8d:ab:ac:41:e0:de:a1: ad:ac:ba:67:1d:e6:a0:ee:7f:98:e8:e9:37:06:7a: 72:9b:db:09:53:35:b4:dd:1b:b1:8a:05:a8:47:69: 4a:6f:70:d5:e8:a5:ec:e2:5c:e3:37:96:26:7c:13: 1d:61:df:1b:64:11:16:d5:d0:32:e4:e6:28:4c:cf: c3:c9:15:d2:b7:fa:d9:0a:56:ae:be:fd:ec:1b:58: 88:f6:40:16:66:c3:62:32:39:02:3f:b4:17:61:c8: 46:34:34:12:07:33:5e:ca:c3:04:3a:88:4f:29:7f: a1:69:d5:7e:77:17:22:1e:97:98:c0:61:81:4e:d8: ac:81:28:7b:73:8f:47:3f:0a:84:26:1d:8f:63:2a: e9:f3:c3:b8:b7:97:77:ab:e4:e4:57:d5:04:2d:99: 6b:9d:32:df:95:d8:d4:31:06:25:80:1a:a3:24:94: 53:3c:0b:7a:54:13:0e:2a:f4:eb:03:96:59:51:84: ef:bc:e8:8a:4e:ae:4e:80:87:a0:16:27:f2:ed:01: 20:d3:91:15:a7:01:a6:86:9b:c0:e3:2c:55:cf:54: db:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:01:E8:A7:E0:37:BF:91:AC:4E:4A:82:85:3E:DC:83:7A:97:4A:38 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.2.0/24 Signature Algorithm: sha256WithRSAEncryption 80:1b:89:a4:d0:4f:b5:39:fa:14:d3:61:9b:c7:cf:97:e8:b4: d3:8e:8d:27:5c:23:a7:5c:90:94:b0:44:7e:d2:cd:46:50:0c: 8d:14:3a:5a:d0:fd:42:4a:57:96:0d:ed:93:4c:d5:3f:59:4c: 7d:4d:2d:b5:02:bf:5b:6e:4c:63:90:1b:d3:59:c3:b2:a4:20: 4d:25:55:8d:2a:b3:b1:31:ed:55:70:4d:75:a0:c8:03:78:34: 1c:3f:77:c9:47:1c:0d:5c:18:26:f8:9f:19:5c:e3:10:43:c3: cc:e6:8e:3d:91:7d:40:c2:dd:17:9d:3b:2d:0b:0c:56:a4:43: 99:b9:59:e9:52:14:6e:75:e0:35:35:31:e7:04:13:b8:61:32: 97:e4:14:a9:80:f3:15:d6:4c:3a:da:44:0c:43:84:f9:04:04: 32:35:fe:c5:86:0d:99:8c:5a:b1:25:74:c1:61:bc:d3:ab:79: be:46:2b:bd:e7:6e:65:53:c1:6a:c1:ea:0a:16:54:52:1a:1e: 91:12:a2:db:a8:81:67:f6:42:df:2b:6a:06:26:45:65:aa:04: e4:96:ab:b7:d6:11:df:ae:7c:5d:56:55:23:3d:f0:a3:5f:15: bc:12:e1:9d:f3:7c:24:74:bc:9c:fc:9b:66:eb:e8:3b:63:d3: 31:a6:d4:5f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUUT7aRiBI+5WjN+jI+TlL+jSkljYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzRaFw0yNzA5MjcwMTAwMzRaMDMxMTAvBgNV BAMTKDBFMDFFOEE3RTAzN0JGOTFBQzRFNEE4Mjg1M0VEQzgzN0E5NzRBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRH6+NYICgAcq/BUVCcVmg2Pwo obm9yTmIE5AfXfpAS0Ba75BAjausQeDeoa2sumcd5qDuf5jo6TcGenKb2wlTNbTd G7GKBahHaUpvcNXopeziXOM3liZ8Ex1h3xtkERbV0DLk5ihMz8PJFdK3+tkKVq6+ /ewbWIj2QBZmw2IyOQI/tBdhyEY0NBIHM17KwwQ6iE8pf6Fp1X53FyIel5jAYYFO 2KyBKHtzj0c/CoQmHY9jKunzw7i3l3er5ORX1QQtmWudMt+V2NQxBiWAGqMklFM8 C3pUEw4q9OsDlllRhO+86IpOrk6Ah6AWJ/LtASDTkRWnAaaGm8DjLFXPVNt7AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUDgHop+A3v5GsTkqChT7cg3qXSjgwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzEzMzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA K/ACMA0GCSqGSIb3DQEBCwUAA4IBAQCAG4mk0E+1OfoU02Gbx8+X6LTTjo0nXCOn XJCUsER+0s1GUAyNFDpa0P1CSleWDe2TTNU/WUx9TS21Ar9bbkxjkBvTWcOypCBN JVWNKrOxMe1VcE11oMgDeDQcP3fJRxwNXBgm+J8ZXOMQQ8PM5o49kX1Awt0XnTst CwxWpEOZuVnpUhRudeA1NTHnBBO4YTKX5BSpgPMV1kw62kQMQ4T5BAQyNf7Fhg2Z jFqxJXTBYbzTq3m+Riu9525lU8FqweoKFlRSGh6REqLbqIFn9kLfK2oGJkVlqgTk lqu31hHfrnxdVlUjPfCjXxW8EuGd83wkdLyc/Jtm6+g7Y9MxptRf -----END CERTIFICATE-----Generated at Fri Oct 9 15:54:42 2026 by rpki-client