$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e332e302f32342d3234203d3e203536303436.roa File: 34332e3234302e332e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: ysiiiNBJyug+FPdhJJOo4CQu4exbj/fGyATDCFY8R38= Subject key identifier: 5E:55:22:6E:AE:0D:25:5C:EA:08:BA:E4:7D:07:C9:51:B6:00:CA:42 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 583F6217C25EBC1D63695D35DA3B039CDD80CE6C Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e332e302f32342d3234203d3e203536303436.roa Signing time: Tue 28 Apr 2026 00:59:13 +0000 ROA not before: Tue 28 Apr 2026 00:54:13 +0000 ROA not after: Tue 27 Apr 2027 00:59:13 +0000 asID: 56046 IP address blocks: 43.240.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3f:62:17:c2:5e:bc:1d:63:69:5d:35:da:3b:03:9c:dd:80:ce:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 28 00:54:13 2026 GMT Not After : Apr 27 00:59:13 2027 GMT Subject: CN=5E55226EAE0D255CEA08BAE47D07C951B600CA42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:d8:79:30:8d:f4:bf:97:1e:70:99:c2:6e: a4:e9:bf:bf:47:04:85:82:8f:79:a3:ef:c9:2b:96: 2f:33:62:a3:49:0d:d1:47:66:8d:5a:18:74:a0:d6: 10:eb:4b:6b:3f:f1:c3:14:f0:c0:5c:47:3b:13:fd: 42:d9:0e:3d:b1:27:66:0b:09:e9:1e:fe:0f:5d:19: dd:38:fd:d9:de:dc:23:53:d8:5f:27:d4:9a:c1:9b: f5:f3:bd:d3:2a:c4:0b:be:9c:d5:5b:d8:01:24:6d: 2e:47:a1:b5:5d:d3:9a:71:9c:28:1d:ba:85:26:50: 36:4c:52:35:b1:c6:7e:ed:1c:11:fd:87:8c:0a:bb: 39:55:2e:fd:df:a0:a1:1a:17:5c:58:ba:18:25:86: dd:0b:5b:85:e8:df:f3:ae:8d:3f:b1:4e:fb:5b:38: af:fc:e4:a9:1f:8c:16:80:d6:bd:ad:ee:83:3d:7c: 23:f8:d1:92:9c:17:8e:20:74:1c:87:df:34:99:11: 7e:c8:f8:bf:9b:fd:0d:1a:3d:55:ac:a8:7f:49:68: d1:e0:9a:34:d4:6d:e7:c7:d0:40:77:9f:37:54:1f: 25:be:05:22:8c:83:47:ce:f4:d7:e9:c1:97:44:84: 5c:de:0f:77:4c:7a:02:34:3a:3a:a6:4d:ce:17:b7: 1d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:55:22:6E:AE:0D:25:5C:EA:08:BA:E4:7D:07:C9:51:B6:00:CA:42 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e332e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.3.0/24 Signature Algorithm: sha256WithRSAEncryption 39:b9:cd:28:be:c2:39:ad:d6:c4:b6:fb:ce:5c:e5:c5:b4:85: 61:7c:86:19:b6:da:06:4a:6b:c0:39:90:46:d6:59:ba:20:6e: 0a:1f:1b:11:55:12:6a:a3:eb:14:dc:c8:4d:c7:48:80:3b:24: 32:e0:78:de:79:1e:48:cc:0d:27:70:45:72:30:21:8c:e1:c6: 75:44:27:42:fc:9a:bf:7a:4f:9e:6d:8c:27:d6:74:39:ec:8c: cd:86:dd:3c:f3:de:6b:3f:0d:c5:2c:5c:a3:4a:c2:cc:7c:bf: e2:ea:24:05:e3:ff:68:12:56:a1:41:f5:27:90:31:3f:ee:19: 54:cc:ef:5b:e6:c0:4e:7a:74:eb:6c:45:84:8b:1b:81:05:b6: 5c:93:39:12:7c:6d:67:0a:c8:50:f2:e4:46:41:04:2f:53:2d: 66:b4:1c:44:62:c9:5a:18:3c:ae:ff:c3:bd:24:21:9d:9a:da: 6e:b6:75:39:9e:55:fb:79:e1:59:f7:b7:71:17:80:c2:7d:1d: 64:3f:ba:c5:98:ac:00:d4:50:c0:aa:3d:bd:2e:d5:58:61:ec: 3e:e2:d5:85:43:01:c0:04:a4:7a:3b:b9:1c:dd:0d:b8:03:a5: 73:e2:54:17:44:c2:7f:a4:ff:a5:9b:36:06:fa:86:4a:f7:98: 3e:cf:9c:d6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUWD9iF8JevB1jaV012jsDnN2AzmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MjgwMDU0MTNaFw0yNzA0MjcwMDU5MTNaMDMxMTAvBgNV BAMTKDVFNTUyMjZFQUUwRDI1NUNFQTA4QkFFNDdEMDdDOTUxQjYwMENBNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmnNh5MI30v5cecJnCbqTpv79H BIWCj3mj78krli8zYqNJDdFHZo1aGHSg1hDrS2s/8cMU8MBcRzsT/ULZDj2xJ2YL Ceke/g9dGd04/dne3CNT2F8n1JrBm/XzvdMqxAu+nNVb2AEkbS5HobVd05pxnCgd uoUmUDZMUjWxxn7tHBH9h4wKuzlVLv3foKEaF1xYuhglht0LW4Xo3/OujT+xTvtb OK/85KkfjBaA1r2t7oM9fCP40ZKcF44gdByH3zSZEX7I+L+b/Q0aPVWsqH9JaNHg mjTUbefH0EB3nzdUHyW+BSKMg0fO9NfpwZdEhFzeD3dMegI0OjqmTc4Xtx2bAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUXlUibq4NJVzqCLrkfQfJUbYAykIwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzYzMDM0MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr8AMwDQYJKoZIhvcNAQELBQADggEBADm5zSi+wjmt1sS2+85c5cW0hWF8hhm2 2gZKa8A5kEbWWbogbgofGxFVEmqj6xTcyE3HSIA7JDLgeN55HkjMDSdwRXIwIYzh xnVEJ0L8mr96T55tjCfWdDnsjM2G3Tzz3ms/DcUsXKNKwsx8v+LqJAXj/2gSVqFB 9SeQMT/uGVTM71vmwE56dOtsRYSLG4EFtlyTORJ8bWcKyFDy5EZBBC9TLWa0HERi yVoYPK7/w70kIZ2a2m62dTmeVft54Vn3t3EXgMJ9HWQ/usWYrADUUMCqPb0u1Vhh 7D7i1YVDAcAEpHo7uRzdDbgDpXPiVBdEwn+k/6WbNgb6hkr3mD7PnNY= -----END CERTIFICATE-----Generated at Wed May 13 12:51:52 2026 by rpki-client