$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e332e302f32342d3234203d3e2034313334.roa File: 34332e3234302e332e302f32342d3234203d3e2034313334.roa (raw, json) Hash identifier: oKz1xn/4U9JlN5CsmHA3ZaUwQ18iTNFo7j/dER8LnEo= Subject key identifier: BA:AB:AB:3A:A7:A0:65:CD:03:35:91:E6:1C:EA:05:33:35:8C:DE:9E Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 1C3E8D3C8B7F25CE60DCCDEBC42BE29E6E3A8280 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e332e302f32342d3234203d3e2034313334.roa Signing time: Mon 28 Sep 2026 01:00:34 +0000 ROA not before: Mon 28 Sep 2026 00:55:34 +0000 ROA not after: Mon 27 Sep 2027 01:00:34 +0000 asID: 4134 IP address blocks: 43.240.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3e:8d:3c:8b:7f:25:ce:60:dc:cd:eb:c4:2b:e2:9e:6e:3a:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:34 2026 GMT Not After : Sep 27 01:00:34 2027 GMT Subject: CN=BAABAB3AA7A065CD033591E61CEA0533358CDE9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:f5:1a:83:9b:93:fe:83:f4:20:91:9f:b4: be:45:3b:5d:11:b5:7d:ad:6e:64:e8:27:db:31:6e: fd:d2:58:3e:ce:7e:c8:86:fe:d8:51:e0:74:92:00: 0e:6c:f9:07:32:ba:f6:34:9b:21:a7:82:ec:58:9a: f0:12:87:2d:8d:a8:13:09:f9:68:e5:bc:42:a2:6d: bf:87:aa:0b:3b:29:18:fa:6d:b3:f9:ab:fc:68:d3: 3b:3d:2f:4e:d8:09:a6:74:be:3a:98:5b:6b:87:01: de:ee:c7:fc:0c:ba:7e:25:53:84:84:b6:a5:41:f9: 59:46:db:29:28:66:59:a1:f3:6c:41:e7:ca:bd:53: 91:fe:75:9a:91:6b:7f:a2:0e:1a:76:6d:0e:da:35: 2d:6b:4a:9d:ee:8f:55:4a:1a:63:26:6a:e2:54:e6: 07:cf:b9:f6:76:41:61:05:20:3e:1c:02:34:d8:48: 1f:84:6f:6a:10:b0:6e:52:66:4b:c4:16:a2:a4:1a: 9b:51:ce:57:90:90:19:eb:39:83:7a:5f:e6:35:1d: 0f:e8:21:27:fa:90:d4:6c:8a:5f:9d:b1:3f:81:b7: 1a:17:b0:a9:84:78:32:2c:95:00:23:3b:2e:ba:bc: 25:6f:2e:11:e1:63:4c:3b:0c:a5:7f:64:e3:55:e0: e9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AB:AB:3A:A7:A0:65:CD:03:35:91:E6:1C:EA:05:33:35:8C:DE:9E X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e332e302f32342d3234203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.3.0/24 Signature Algorithm: sha256WithRSAEncryption a0:4b:00:e2:c1:65:2e:f9:fa:fc:91:fe:60:36:e3:76:77:2d: f8:91:94:7b:66:0f:02:f6:5f:5b:ec:d1:ef:c3:ea:6d:d0:f2: 76:a6:38:8f:c2:66:aa:3c:56:de:0c:5d:9e:4a:d4:e6:ac:81: 54:19:91:d3:fd:e1:db:ca:8a:17:fe:2b:5d:e5:29:54:95:54: c4:20:95:63:1d:c9:a2:e4:0b:ef:3c:64:35:8f:9e:90:05:f1: dd:59:42:92:93:59:27:c4:d5:78:1d:cd:b4:05:15:e7:5d:e9: aa:bd:04:59:c2:28:84:54:df:04:5f:cb:cf:28:0e:f4:5f:60: 8f:1a:63:7d:d8:77:79:9e:55:6b:b6:99:bb:b9:5f:0e:c2:a8: aa:34:65:64:2a:06:67:e9:1a:be:15:c9:52:53:28:96:43:c7: 72:82:a2:a5:ee:67:11:c5:aa:af:91:cc:1a:fd:ac:70:3e:cb: e4:bf:bf:72:75:8e:1c:62:e0:c9:79:4d:1b:ee:ad:b3:37:68: 73:80:32:35:7f:9f:fd:ae:6e:5e:46:6e:d8:1f:0b:9f:6f:23: a9:cd:c5:0a:e0:69:f1:88:aa:a0:d5:a7:cd:f7:22:08:50:b3: 4f:93:81:f8:c9:e1:d0:23:52:cc:30:92:f5:06:c7:a3:f3:77: 27:47:e5:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUHD6NPIt/Jc5g3M3rxCvinm46goAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzRaFw0yNzA5MjcwMTAwMzRaMDMxMTAvBgNV BAMTKEJBQUJBQjNBQTdBMDY1Q0QwMzM1OTFFNjFDRUEwNTMzMzU4Q0RFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZCfUag5uT/oP0IJGftL5FO10R tX2tbmToJ9sxbv3SWD7OfsiG/thR4HSSAA5s+QcyuvY0myGnguxYmvAShy2NqBMJ +WjlvEKibb+Hqgs7KRj6bbP5q/xo0zs9L07YCaZ0vjqYW2uHAd7ux/wMun4lU4SE tqVB+VlG2ykoZlmh82xB58q9U5H+dZqRa3+iDhp2bQ7aNS1rSp3uj1VKGmMmauJU 5gfPufZ2QWEFID4cAjTYSB+Eb2oQsG5SZkvEFqKkGptRzleQkBnrOYN6X+Y1HQ/o ISf6kNRsil+dsT+BtxoXsKmEeDIslQAjOy66vCVvLhHhY0w7DKV/ZONV4OmZAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUuqurOqegZc0DNZHmHOoFMzWM3p4wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzEzMzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA K/ADMA0GCSqGSIb3DQEBCwUAA4IBAQCgSwDiwWUu+fr8kf5gNuN2dy34kZR7Zg8C 9l9b7NHvw+pt0PJ2pjiPwmaqPFbeDF2eStTmrIFUGZHT/eHbyooX/itd5SlUlVTE IJVjHcmi5AvvPGQ1j56QBfHdWUKSk1knxNV4Hc20BRXnXemqvQRZwiiEVN8EX8vP KA70X2CPGmN92Hd5nlVrtpm7uV8OwqiqNGVkKgZn6Rq+FclSUyiWQ8dygqKl7mcR xaqvkcwa/axwPsvkv79ydY4cYuDJeU0b7q2zN2hzgDI1f5/9rm5eRm7YHwufbyOp zcUK4GnxiKqg1afN9yIIULNPk4H4yeHQI1LMMJL1Bsej83cnR+W/ -----END CERTIFICATE-----Generated at Fri Oct 9 17:40:55 2026 by rpki-client