$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e332e302f32342d3234203d3e2034383337.roa File: 34332e3234302e332e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: mDapS0VdaehB67awg0JLsDOFT7aTrRf1tRi7wXcG1Tg= Subject key identifier: 60:E6:63:91:F7:F5:B1:4C:C7:61:2A:0E:1A:46:C5:E0:B3:CD:CD:4E Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 5B95A19D571668F4AC5F482A5FE8B919488AECF1 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e332e302f32342d3234203d3e2034383337.roa Signing time: Mon 28 Sep 2026 01:00:41 +0000 ROA not before: Mon 28 Sep 2026 00:55:41 +0000 ROA not after: Mon 27 Sep 2027 01:00:41 +0000 asID: 4837 IP address blocks: 43.240.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:95:a1:9d:57:16:68:f4:ac:5f:48:2a:5f:e8:b9:19:48:8a:ec:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:41 2026 GMT Not After : Sep 27 01:00:41 2027 GMT Subject: CN=60E66391F7F5B14CC7612A0E1A46C5E0B3CDCD4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:48:90:62:7f:84:5d:2f:6f:2e:d1:2c:81: 0a:44:3f:94:ce:0d:4c:44:fe:c1:0e:c9:8d:82:b2: 0d:01:87:86:0f:e4:e4:38:3b:bb:5c:85:e1:ef:72: ac:79:c7:92:cd:11:58:eb:57:06:39:e7:fa:ae:17: 30:d7:36:64:3a:ec:11:93:1f:b3:09:64:a6:ce:7b: 2c:c0:af:4f:10:4b:e7:30:7d:11:7f:83:9c:13:31: 8b:d9:a9:5b:7c:3b:dd:46:51:4c:bf:9b:b4:c7:4e: d6:c5:11:75:7e:72:4e:5b:71:91:d5:e5:85:92:71: 77:b6:68:4f:05:e3:83:32:9f:c1:c8:1d:b4:4c:54: 29:c8:70:6c:d5:28:95:17:5f:c3:8e:1c:19:62:b8: 2d:c5:75:44:eb:f7:2f:1a:a8:05:37:41:a7:df:25: b9:51:e3:0a:6b:0a:7e:87:d3:27:de:be:68:49:ad: 5c:73:b8:18:a0:a3:8f:5b:6c:e6:f6:0c:f8:87:f0: b9:e0:12:94:2a:cb:13:ac:ca:39:43:30:5d:d9:5f: fe:15:a3:7d:d2:22:fa:65:d0:d0:71:33:19:f1:6b: 69:7c:de:3e:6d:09:89:a5:99:bb:51:c4:11:1e:30: 5d:c4:52:2a:65:e9:25:d0:53:d4:81:f7:55:ea:82: 97:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E6:63:91:F7:F5:B1:4C:C7:61:2A:0E:1A:46:C5:E0:B3:CD:CD:4E X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e332e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.3.0/24 Signature Algorithm: sha256WithRSAEncryption 67:b9:a7:e5:40:06:1e:7c:62:c0:f8:19:84:5f:87:98:d2:e2: a5:6f:a6:60:68:ee:1c:c7:0e:30:b4:af:9f:16:4f:93:ce:29: c4:96:b7:3a:6e:be:98:99:58:e8:46:5a:80:23:39:22:d6:08: 32:6b:1c:3d:cf:3a:b5:86:3d:0f:7d:2c:c0:7f:9c:95:31:58: db:c0:96:55:80:3f:fd:57:70:fb:aa:72:ad:27:e7:85:bc:fd: 43:55:89:89:c9:1b:31:1c:a1:c0:56:2e:7b:60:a4:02:cf:8f: 5e:51:41:1c:c7:5d:35:40:95:97:e7:6c:16:7d:39:5d:43:a5: 88:cd:a9:0f:d4:4b:b5:8e:6d:27:55:7b:77:47:67:28:62:98: 7f:20:da:28:51:1c:96:f0:af:4d:63:d1:05:f3:18:f0:08:f2: 65:8b:c8:b3:bc:67:8d:d8:de:15:d8:8a:64:2d:9b:5f:13:7e: 44:1f:8e:18:0f:c7:d4:a4:c9:40:52:b2:62:27:48:20:d5:9f: 71:39:45:36:57:52:59:7a:63:44:4e:d4:b0:fc:4c:e8:c0:7e: 19:1f:54:4f:ce:ce:e3:4d:be:0d:4d:13:8d:79:b9:d7:c5:8e: 78:6b:7a:2e:b6:7b:c4:1d:7c:b7:84:bc:51:b8:e1:df:f0:db: d6:88:a5:7b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUW5WhnVcWaPSsX0gqX+i5GUiK7PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1NDFaFw0yNzA5MjcwMTAwNDFaMDMxMTAvBgNV BAMTKDYwRTY2MzkxRjdGNUIxNENDNzYxMkEwRTFBNDZDNUUwQjNDRENENEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhUiQYn+EXS9vLtEsgQpEP5TO DUxE/sEOyY2Csg0Bh4YP5OQ4O7tcheHvcqx5x5LNEVjrVwY55/quFzDXNmQ67BGT H7MJZKbOeyzAr08QS+cwfRF/g5wTMYvZqVt8O91GUUy/m7THTtbFEXV+ck5bcZHV 5YWScXe2aE8F44Myn8HIHbRMVCnIcGzVKJUXX8OOHBliuC3FdUTr9y8aqAU3Qaff JblR4wprCn6H0yfevmhJrVxzuBigo49bbOb2DPiH8LngEpQqyxOsyjlDMF3ZX/4V o33SIvpl0NBxMxnxa2l83j5tCYmlmbtRxBEeMF3EUipl6SXQU9SB91XqgpcdAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUYOZjkff1sUzHYSoOGkbF4LPNzU4wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA K/ADMA0GCSqGSIb3DQEBCwUAA4IBAQBnuaflQAYefGLA+BmEX4eY0uKlb6ZgaO4c xw4wtK+fFk+TzinElrc6br6YmVjoRlqAIzki1ggyaxw9zzq1hj0PfSzAf5yVMVjb wJZVgD/9V3D7qnKtJ+eFvP1DVYmJyRsxHKHAVi57YKQCz49eUUEcx101QJWX52wW fTldQ6WIzakP1Eu1jm0nVXt3R2coYph/INooURyW8K9NY9EF8xjwCPJli8izvGeN 2N4V2IpkLZtfE35EH44YD8fUpMlAUrJiJ0gg1Z9xOUU2V1JZemNETtSw/EzowH4Z H1RPzs7jTb4NTRONebnXxY54a3outnvEHXy3hLxRuOHf8NvWiKV7 -----END CERTIFICATE-----Generated at Fri Oct 9 20:33:24 2026 by rpki-client