$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e2034313334.roa File: 34332e3234312e34382e302f32322d3234203d3e2034313334.roa (raw, json) Hash identifier: 1tHPwyuI/xjoyqm5C0XgVvoiZpoRdtt/r6i8wGwhdRk= Subject key identifier: 64:1F:B0:A2:1A:28:1B:21:0A:77:1B:98:16:42:95:BC:95:5C:9A:AD Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 309CA540DD3EDBD001A9A6C149439079BD2FE037 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e2034313334.roa Signing time: Mon 28 Sep 2026 01:00:39 +0000 ROA not before: Mon 28 Sep 2026 00:55:39 +0000 ROA not after: Mon 27 Sep 2027 01:00:39 +0000 asID: 4134 IP address blocks: 43.241.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:9c:a5:40:dd:3e:db:d0:01:a9:a6:c1:49:43:90:79:bd:2f:e0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:39 2026 GMT Not After : Sep 27 01:00:39 2027 GMT Subject: CN=641FB0A21A281B210A771B98164295BC955C9AAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e1:fc:d7:e0:50:cb:67:e1:9e:a8:79:47:69: 87:82:8f:7d:95:b5:67:cc:1a:2d:dd:ce:f6:7f:11: 17:7c:56:dc:fa:c0:06:a1:94:17:4e:2d:6e:ee:2f: 70:bb:cb:74:f2:da:b0:0e:30:4e:ad:6d:86:e8:ce: be:00:63:b1:ca:fb:4d:ed:69:52:ea:4d:f4:50:29: 03:ac:73:43:12:ac:39:a8:d8:18:f3:55:13:d0:48: 6d:e6:73:81:90:0b:a7:dc:77:d8:5e:8f:db:76:73: 05:b3:77:94:af:eb:99:70:4b:41:c7:85:ea:f8:27: 69:4a:f7:23:df:4d:f7:65:d6:64:68:48:5b:93:55: c4:40:c2:2a:3e:a8:13:b8:e9:37:c3:3e:6c:1c:29: 68:b2:2a:67:84:3b:db:ce:b0:86:3d:0f:2f:33:50: f7:9b:da:5e:55:43:b1:e4:36:cd:07:cc:07:ac:ba: d5:ab:51:32:0d:29:5b:97:86:01:ae:b5:46:03:99: 8b:a0:cc:12:0c:d5:a2:27:c4:9b:ff:d3:5d:ae:a0: 52:94:31:8f:de:1e:19:49:6f:e8:b9:ed:aa:a4:bf: ce:f1:9a:9c:bb:44:56:8a:9b:c2:c6:af:ee:d3:36: cd:11:01:ba:22:f0:cc:d9:06:74:8e:93:55:43:79: 21:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1F:B0:A2:1A:28:1B:21:0A:77:1B:98:16:42:95:BC:95:5C:9A:AD X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.48.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:4e:40:33:10:d4:ae:f1:db:80:6d:84:f0:0e:f1:4c:63:38: 24:80:08:30:38:d1:16:f8:d0:3a:c3:cc:2f:1d:c1:68:b0:1f: f3:b1:89:5d:70:dd:0f:3f:2a:c5:cb:17:c8:a5:69:92:e7:7e: 6d:e1:1d:eb:d2:3e:13:99:d0:fc:57:13:bd:f5:a3:2a:ec:75: 39:24:05:4b:12:e2:1b:d7:29:ff:70:8f:8c:19:01:d6:a8:f1: 24:8d:ba:0d:67:c4:9c:37:77:cb:90:a9:ae:5f:d2:a1:a3:8f: 3d:80:28:e3:50:be:c1:d2:fd:21:03:03:77:cf:f6:6c:2f:0c: 19:2e:33:5d:3a:d9:1c:bf:dc:a6:18:21:6a:ad:11:f6:74:72: 71:2e:25:4c:9b:4f:a2:b5:6f:d7:68:1e:fb:d0:96:02:dc:64: 0f:5f:58:d5:2d:48:40:95:2e:c4:9d:6a:d3:6f:fa:50:45:1b: d2:bc:03:2d:b1:34:98:d9:82:62:ca:0b:1f:db:4e:01:f2:e7: ec:c5:26:b8:9e:9f:91:b6:ac:b2:32:57:00:28:b3:e1:f9:7a: 09:3d:db:f7:0d:b3:21:d3:c8:49:eb:74:f3:60:d5:26:a0:f0: 72:2a:04:77:49:4f:44:82:44:5a:ae:22:dd:66:d5:ba:98:7d: e2:90:b1:f4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUMJylQN0+29ABqabBSUOQeb0v4DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzlaFw0yNzA5MjcwMTAwMzlaMDMxMTAvBgNV BAMTKDY0MUZCMEEyMUEyODFCMjEwQTc3MUI5ODE2NDI5NUJDOTU1QzlBQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD44fzX4FDLZ+GeqHlHaYeCj32V tWfMGi3dzvZ/ERd8Vtz6wAahlBdOLW7uL3C7y3Ty2rAOME6tbYbozr4AY7HK+03t aVLqTfRQKQOsc0MSrDmo2BjzVRPQSG3mc4GQC6fcd9hej9t2cwWzd5Sv65lwS0HH her4J2lK9yPfTfdl1mRoSFuTVcRAwio+qBO46TfDPmwcKWiyKmeEO9vOsIY9Dy8z UPeb2l5VQ7HkNs0HzAesutWrUTINKVuXhgGutUYDmYugzBIM1aInxJv/012uoFKU MY/eHhlJb+i57aqkv87xmpy7RFaKm8LGr+7TNs0RAboi8MzZBnSOk1VDeSH/AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUZB+wohooGyEKdxuYFkKVvJVcmq0wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMx MmUzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzMTMzMzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr8TAwDQYJKoZIhvcNAQELBQADggEBAC1OQDMQ1K7x24BthPAO8UxjOCSACDA4 0Rb40DrDzC8dwWiwH/OxiV1w3Q8/KsXLF8ilaZLnfm3hHevSPhOZ0PxXE731oyrs dTkkBUsS4hvXKf9wj4wZAdao8SSNug1nxJw3d8uQqa5f0qGjjz2AKONQvsHS/SED A3fP9mwvDBkuM1062Ry/3KYYIWqtEfZ0cnEuJUybT6K1b9doHvvQlgLcZA9fWNUt SECVLsSdatNv+lBFG9K8Ay2xNJjZgmLKCx/bTgHy5+zFJrien5G2rLIyVwAos+H5 egk92/cNsyHTyEnrdPNg1Sag8HIqBHdJT0SCRFquIt1m1bqYfeKQsfQ= -----END CERTIFICATE-----Generated at Fri Oct 9 21:14:42 2026 by rpki-client