$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e203536303436.roa File: 34332e3234302e322e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: 9V9AHreMsiavU8szeC0502kqdPAablPdBYgY4gPwlFw= Subject key identifier: 0F:36:75:CA:C5:9B:AE:50:60:18:1C:69:35:D0:A7:A6:52:0B:11:B0 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 5E50131CE50B1F4CDF117149872B6935E4153EA5 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e203536303436.roa Signing time: Tue 28 Apr 2026 00:58:48 +0000 ROA not before: Tue 28 Apr 2026 00:53:48 +0000 ROA not after: Tue 27 Apr 2027 00:58:48 +0000 asID: 56046 IP address blocks: 43.240.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:50:13:1c:e5:0b:1f:4c:df:11:71:49:87:2b:69:35:e4:15:3e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 28 00:53:48 2026 GMT Not After : Apr 27 00:58:48 2027 GMT Subject: CN=0F3675CAC59BAE5060181C6935D0A7A6520B11B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:28:ae:e4:9e:06:d9:1d:27:c9:71:a0:6b: a0:38:93:27:2e:b7:fb:59:c3:01:c1:4d:74:e3:6b: 07:4b:3a:b0:f0:ad:6b:f5:63:6e:c3:7a:24:83:c6: b2:db:fb:c6:3f:81:67:03:06:bb:9d:b5:05:df:e7: 98:f7:19:5b:02:97:de:0f:4e:cb:c2:f6:69:5f:42: c1:5f:ec:c1:d9:35:25:f8:bc:42:e3:d8:31:e3:45: 7a:8f:48:9f:1d:6c:69:45:d7:e2:43:52:6c:2a:f6: 94:6f:2c:70:81:5b:5b:36:ad:14:59:10:6a:fd:ca: 34:7a:f8:80:e2:ee:2e:bb:3b:f8:dd:b9:90:0f:4d: 02:38:7c:22:51:df:a5:5f:67:ab:e7:e6:13:2d:ad: 9f:1d:3e:d4:19:91:d2:3e:3a:f8:ab:f0:27:10:ed: d8:f5:50:4b:f2:43:8a:5d:d6:a6:6c:59:01:b1:20: ff:b9:f1:3a:24:f1:3b:84:8b:ae:e3:20:11:8f:38: 9b:6e:22:b6:4a:10:64:47:c8:84:6f:fe:57:fa:f2: f8:a3:41:e9:ae:b4:6a:c0:de:00:04:31:ed:e7:be: 14:23:40:9a:1c:fd:ed:e6:05:fb:f8:18:53:af:71: 2c:31:2f:19:87:b7:10:50:2f:15:b2:b2:6e:fe:b8: 12:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:36:75:CA:C5:9B:AE:50:60:18:1C:69:35:D0:A7:A6:52:0B:11:B0 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.2.0/24 Signature Algorithm: sha256WithRSAEncryption 21:a9:63:56:2a:15:a8:32:49:59:40:1e:04:d7:4f:c1:ff:af: 18:47:37:2e:3a:ad:90:6b:33:5d:6c:7c:04:35:c7:62:cc:8e: 68:3b:16:70:7b:ef:8e:df:17:17:16:92:c7:f1:9c:82:6a:ad: e6:af:d4:7a:92:38:37:be:42:ed:6a:f2:31:b9:2a:fe:30:87: d5:12:5c:32:6e:d4:c9:2d:23:af:2a:89:13:6b:87:45:ff:2e: 45:2b:de:04:9a:48:2e:5c:24:e6:ed:5a:0d:64:c8:d6:bf:93: 6f:d8:63:ce:c9:85:ad:cb:df:90:18:8a:86:93:75:42:7f:7e: 63:10:8e:e1:d5:11:4a:5d:a9:57:22:76:a8:9c:5e:28:82:6c: 4c:aa:7b:eb:97:c8:33:54:f2:41:e5:fe:ec:4d:60:6c:a3:76: 42:2e:7d:12:36:a9:57:2a:01:f7:cc:62:28:1d:12:d9:ba:80: f0:a4:67:45:07:c0:fc:2d:f3:92:48:12:fd:9a:32:f3:9a:59: 8e:3c:89:c6:57:6d:f5:f9:01:44:ac:5b:0a:22:d6:d8:40:6b: e6:56:d0:87:92:6d:38:42:f9:94:9a:ad:d2:3f:78:9d:3d:bd: a8:28:65:35:86:75:3f:7a:e4:b8:2d:6b:38:eb:52:67:83:a8: 9f:29:3d:23 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUXlATHOULH0zfEXFJhytpNeQVPqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MjgwMDUzNDhaFw0yNzA0MjcwMDU4NDhaMDMxMTAvBgNV BAMTKDBGMzY3NUNBQzU5QkFFNTA2MDE4MUM2OTM1RDBBN0E2NTIwQjExQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7Siu5J4G2R0nyXGga6A4kycu t/tZwwHBTXTjawdLOrDwrWv1Y27DeiSDxrLb+8Y/gWcDBrudtQXf55j3GVsCl94P TsvC9mlfQsFf7MHZNSX4vELj2DHjRXqPSJ8dbGlF1+JDUmwq9pRvLHCBW1s2rRRZ EGr9yjR6+IDi7i67O/jduZAPTQI4fCJR36VfZ6vn5hMtrZ8dPtQZkdI+Ovir8CcQ 7dj1UEvyQ4pd1qZsWQGxIP+58Tok8TuEi67jIBGPOJtuIrZKEGRHyIRv/lf68vij QemutGrA3gAEMe3nvhQjQJoc/e3mBfv4GFOvcSwxLxmHtxBQLxWysm7+uBI/AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUDzZ1ysWbrlBgGBxpNdCnplILEbAwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzYzMDM0MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr8AIwDQYJKoZIhvcNAQELBQADggEBACGpY1YqFagySVlAHgTXT8H/rxhHNy46 rZBrM11sfAQ1x2LMjmg7FnB7747fFxcWksfxnIJqreav1HqSODe+Qu1q8jG5Kv4w h9USXDJu1MktI68qiRNrh0X/LkUr3gSaSC5cJObtWg1kyNa/k2/YY87Jha3L35AY ioaTdUJ/fmMQjuHVEUpdqVcidqicXiiCbEyqe+uXyDNU8kHl/uxNYGyjdkIufRI2 qVcqAffMYigdEtm6gPCkZ0UHwPwt85JIEv2aMvOaWY48icZXbfX5AUSsWwoi1thA a+ZW0IeSbThC+ZSardI/eJ09vagoZTWGdT965LgtazjrUmeDqJ8pPSM= -----END CERTIFICATE-----Generated at Wed May 13 14:47:53 2026 by rpki-client