$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e332e302f32342d3234203d3e203233363530.roa File: 34332e3234302e332e302f32342d3234203d3e203233363530.roa (raw, json) Hash identifier: tMRNRi43NDLNAj1OZDi/33/CwFk+5oRT6Gu87Sq6Ung= Subject key identifier: 3D:CA:69:93:30:04:82:50:02:97:AA:CB:F0:D0:95:8B:2F:23:F6:D8 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 309DF1427CB9B0C4E9F3DD02056B96B068D4F489 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e332e302f32342d3234203d3e203233363530.roa Signing time: Mon 28 Sep 2026 01:00:35 +0000 ROA not before: Mon 28 Sep 2026 00:55:35 +0000 ROA not after: Mon 27 Sep 2027 01:00:35 +0000 asID: 23650 IP address blocks: 43.240.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:9d:f1:42:7c:b9:b0:c4:e9:f3:dd:02:05:6b:96:b0:68:d4:f4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:35 2026 GMT Not After : Sep 27 01:00:35 2027 GMT Subject: CN=3DCA6993300482500297AACBF0D0958B2F23F6D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:2e:0d:77:3a:c8:0f:15:bb:4d:4e:8a:bb: 04:21:64:f0:ef:6a:3b:c5:b0:3c:53:c8:c8:44:52: b4:ab:7d:c8:49:65:42:df:45:a8:23:64:75:2a:40: 21:6d:1c:1c:93:c0:f7:ce:03:d8:34:79:5b:2f:93: 52:cc:aa:90:d5:a4:d4:98:11:84:84:da:6a:a5:be: 93:81:91:95:40:a3:8c:1e:42:fd:da:b4:ca:6a:fd: b3:c1:9c:e5:aa:d4:8d:ea:27:43:03:98:82:ce:2f: bb:14:18:da:ff:ba:bf:95:1e:99:5c:8d:da:29:ca: 2d:aa:87:06:4d:22:2d:e4:c5:f4:0d:fd:36:fe:67: 79:67:0d:43:56:b3:be:48:1f:61:71:3b:20:af:1f: d1:20:a2:39:77:b3:bb:9e:05:d7:e3:35:01:ea:ae: 92:85:71:71:b4:56:19:0a:83:c8:fd:a8:c1:96:87: 89:2c:a7:78:00:ec:e3:79:27:ea:59:4e:63:40:b3: df:1e:bc:7d:e8:2a:fc:e9:47:46:38:7b:2e:25:2d: 9a:0b:9f:80:09:86:21:69:a8:cc:1d:4f:b7:83:52: 66:44:bc:ec:71:31:a3:10:64:45:fe:83:e5:41:7f: b3:84:86:04:aa:d9:61:41:3b:ef:13:de:12:0e:b2: e7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CA:69:93:30:04:82:50:02:97:AA:CB:F0:D0:95:8B:2F:23:F6:D8 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e332e302f32342d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.3.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:bb:d9:bf:4a:95:3a:d6:5c:68:2b:32:8d:74:06:f1:11:e5: 99:46:d1:8f:9c:b3:02:8b:12:32:dd:eb:29:7a:5a:09:ad:5c: 46:2e:3e:1a:9d:8b:0b:b6:db:d4:1a:c0:22:40:5d:24:d6:a1: fb:84:2d:7c:8e:fb:d8:42:34:ff:36:3b:6a:06:fb:c0:d3:f4: 8e:9b:a0:3f:30:d2:74:17:e0:71:28:50:59:c2:ae:f8:14:91: 65:96:7e:91:0b:71:59:99:3c:0e:aa:fe:91:68:bf:45:f0:78: 0b:9a:2f:4f:7f:7e:b5:a8:c8:fd:7d:6c:e0:7b:71:b9:fd:81: bf:75:b1:91:2f:d7:4c:4b:5a:3c:a7:75:fa:10:95:89:cf:8c: f3:64:76:41:c1:48:bd:13:1f:1a:4e:22:77:b7:b1:2d:2a:85: ab:f3:2e:cf:7d:27:81:be:92:47:cd:c4:a6:ed:aa:47:cc:88: e3:93:e3:31:9e:6e:2d:23:7e:f5:7d:a6:9a:0a:fd:fb:52:1c: be:d8:6d:49:ae:a7:f9:5d:21:49:db:a4:d4:ad:fd:96:e0:0a: 5b:ca:af:53:3f:55:a5:46:84:54:6c:89:8c:61:2a:cc:cc:96: 3a:be:51:9a:29:ff:7b:7a:40:98:0e:89:58:26:40:dc:bc:10: b7:38:db:33 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUMJ3xQny5sMTp890CBWuWsGjU9IkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzVaFw0yNzA5MjcwMTAwMzVaMDMxMTAvBgNV BAMTKDNEQ0E2OTkzMzAwNDgyNTAwMjk3QUFDQkYwRDA5NThCMkYyM0Y2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Yy4NdzrIDxW7TU6KuwQhZPDv ajvFsDxTyMhEUrSrfchJZULfRagjZHUqQCFtHByTwPfOA9g0eVsvk1LMqpDVpNSY EYSE2mqlvpOBkZVAo4weQv3atMpq/bPBnOWq1I3qJ0MDmILOL7sUGNr/ur+VHplc jdopyi2qhwZNIi3kxfQN/Tb+Z3lnDUNWs75IH2FxOyCvH9Egojl3s7ueBdfjNQHq rpKFcXG0VhkKg8j9qMGWh4ksp3gA7ON5J+pZTmNAs98evH3oKvzpR0Y4ey4lLZoL n4AJhiFpqMwdT7eDUmZEvOxxMaMQZEX+g+VBf7OEhgSq2WFBO+8T3hIOsuevAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUPcppkzAEglACl6rL8NCViy8j9tgwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzMzNjM1MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr8AMwDQYJKoZIhvcNAQELBQADggEBACu72b9KlTrWXGgrMo10BvER5ZlG0Y+c swKLEjLd6yl6WgmtXEYuPhqdiwu229QawCJAXSTWofuELXyO+9hCNP82O2oG+8DT 9I6boD8w0nQX4HEoUFnCrvgUkWWWfpELcVmZPA6q/pFov0XweAuaL09/frWoyP19 bOB7cbn9gb91sZEv10xLWjyndfoQlYnPjPNkdkHBSL0THxpOIne3sS0qhavzLs99 J4G+kkfNxKbtqkfMiOOT4zGebi0jfvV9ppoK/ftSHL7YbUmup/ldIUnbpNSt/Zbg ClvKr1M/VaVGhFRsiYxhKszMljq+UZop/3t6QJgOiVgmQNy8ELc42zM= -----END CERTIFICATE-----Generated at Fri Oct 9 23:12:48 2026 by rpki-client