$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e2034383337.roa File: 34332e3234302e322e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: cE7VYuPrc9PmHkcN65lDBj0tAvp6SXcH8u+pnP2SGSQ= Subject key identifier: 8B:99:3A:3E:9F:9C:98:DC:9A:4A:EF:2D:B0:D8:35:9A:C2:6E:47:05 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 5FE0D0EDA98F351F9D44716160EB44CB9BCFB5A5 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e2034383337.roa Signing time: Mon 28 Sep 2026 01:00:35 +0000 ROA not before: Mon 28 Sep 2026 00:55:35 +0000 ROA not after: Mon 27 Sep 2027 01:00:35 +0000 asID: 4837 IP address blocks: 43.240.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e0:d0:ed:a9:8f:35:1f:9d:44:71:61:60:eb:44:cb:9b:cf:b5:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:35 2026 GMT Not After : Sep 27 01:00:35 2027 GMT Subject: CN=8B993A3E9F9C98DC9A4AEF2DB0D8359AC26E4705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:08:ad:95:8a:aa:46:e6:5c:f1:08:3a:cf:d6: 24:80:4d:a2:cc:cc:3c:c0:48:4c:34:50:da:57:e5: 3a:72:8b:3a:3b:0a:f5:2d:ea:91:95:1a:52:c8:97: 3c:bf:35:d0:65:d8:be:36:17:22:dc:5c:ef:e2:72: 0c:f3:0a:65:6f:6c:53:08:45:5a:bb:25:27:a0:29: eb:45:69:88:78:fe:62:31:48:12:69:b9:30:e2:ca: 27:92:d0:3e:98:4f:d8:4d:85:ca:6c:7a:4c:c2:4d: 0a:6a:9c:27:86:47:9a:8c:f3:64:84:18:21:40:4d: 5e:ac:86:d1:53:39:48:28:2e:65:a9:ec:04:05:8a: d6:d2:e8:a8:91:95:3e:7a:a9:7e:af:7c:a2:ba:21: a4:b2:6e:80:73:fb:74:83:52:a6:44:e6:42:04:4a: d0:8b:e7:00:65:fc:67:22:5b:d0:95:f1:9a:2a:89: 02:1c:62:c2:b5:af:a3:20:a1:53:b3:de:de:b3:7f: b8:5b:4c:51:d7:f7:99:f8:19:e4:90:e4:06:eb:9f: 4e:29:17:28:00:30:c8:3e:83:59:e4:9a:50:e8:ba: 05:48:ff:31:42:6b:87:a4:10:d5:ea:23:05:4c:f6: 4b:b2:1a:e7:c3:8f:16:29:99:31:db:14:31:6d:44: f3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:99:3A:3E:9F:9C:98:DC:9A:4A:EF:2D:B0:D8:35:9A:C2:6E:47:05 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.2.0/24 Signature Algorithm: sha256WithRSAEncryption 75:db:34:d0:b0:29:65:5f:5b:50:75:7f:b1:79:16:97:bb:3c: b9:3b:b4:f5:69:ad:a9:a7:05:59:3c:33:9a:28:4d:a2:ec:24: 3e:f7:12:5c:74:53:92:ab:49:8f:9a:7e:4a:72:c2:c2:50:94: f0:54:b2:c2:9f:2f:29:f1:d9:ea:88:87:b9:9d:da:76:fc:99: 67:27:62:c1:83:1c:a2:cb:5a:c4:28:1e:d0:ad:12:5f:80:6a: a5:52:88:6d:d0:d6:9d:26:82:a0:d7:81:66:11:fc:1f:f8:ba: 8a:68:1a:21:73:f9:f8:18:5a:6e:7e:0a:86:ab:28:52:16:fd: 32:63:42:c8:e5:63:bf:7e:48:c7:e3:5f:bb:31:be:65:da:e8: 6a:fe:44:0b:74:af:56:74:db:aa:43:26:68:79:cc:a0:64:e1: fd:08:91:97:81:ef:bd:08:70:dd:51:12:d8:74:75:0c:9c:58: 84:20:cd:8c:3c:6c:ce:17:a6:25:ae:fe:e9:86:fc:67:c3:19: 09:6c:e8:f1:0b:db:1d:57:eb:44:5e:c5:ee:cb:e6:ca:06:ff: 4b:b7:14:c9:70:a1:8a:1b:a0:75:71:14:90:14:d3:e5:a6:fa: 7c:de:5e:61:3d:33:29:cd:53:8a:e9:49:86:03:23:8a:f1:fc: de:10:c8:4e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUX+DQ7amPNR+dRHFhYOtEy5vPtaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzVaFw0yNzA5MjcwMTAwMzVaMDMxMTAvBgNV BAMTKDhCOTkzQTNFOUY5Qzk4REM5QTRBRUYyREIwRDgzNTlBQzI2RTQ3MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjCK2ViqpG5lzxCDrP1iSATaLM zDzASEw0UNpX5Tpyizo7CvUt6pGVGlLIlzy/NdBl2L42FyLcXO/icgzzCmVvbFMI RVq7JSegKetFaYh4/mIxSBJpuTDiyieS0D6YT9hNhcpsekzCTQpqnCeGR5qM82SE GCFATV6shtFTOUgoLmWp7AQFitbS6KiRlT56qX6vfKK6IaSyboBz+3SDUqZE5kIE StCL5wBl/GciW9CV8ZoqiQIcYsK1r6MgoVOz3t6zf7hbTFHX95n4GeSQ5Abrn04p FygAMMg+g1nkmlDougVI/zFCa4ekENXqIwVM9kuyGufDjxYpmTHbFDFtRPM5AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUi5k6Pp+cmNyaSu8tsNg1msJuRwUwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA K/ACMA0GCSqGSIb3DQEBCwUAA4IBAQB12zTQsCllX1tQdX+xeRaXuzy5O7T1aa2p pwVZPDOaKE2i7CQ+9xJcdFOSq0mPmn5KcsLCUJTwVLLCny8p8dnqiIe5ndp2/Jln J2LBgxyiy1rEKB7QrRJfgGqlUoht0NadJoKg14FmEfwf+LqKaBohc/n4GFpufgqG qyhSFv0yY0LI5WO/fkjH41+7Mb5l2uhq/kQLdK9WdNuqQyZoecygZOH9CJGXge+9 CHDdURLYdHUMnFiEIM2MPGzOF6Ylrv7phvxnwxkJbOjxC9sdV+tEXsXuy+bKBv9L txTJcKGKG6B1cRSQFNPlpvp83l5hPTMpzVOK6UmGAyOK8fzeEMhO -----END CERTIFICATE-----Generated at Fri Oct 9 04:48:11 2026 by rpki-client