$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32342d3234203d3e2034383337.roa File: 34332e3234312e34382e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: jCxCE7k4kwKLOCUbOQKlxYRxw/OpPk2ldYDqXI9kheM= Subject key identifier: F4:40:D3:52:6D:51:FF:B4:DF:2A:EA:A2:64:AD:BD:17:A5:20:2D:BA Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 0859C2AF676563CC73A91E59D99E84E7A1E8B851 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32342d3234203d3e2034383337.roa Signing time: Mon 28 Sep 2026 01:00:40 +0000 ROA not before: Mon 28 Sep 2026 00:55:40 +0000 ROA not after: Mon 27 Sep 2027 01:00:40 +0000 asID: 4837 IP address blocks: 43.241.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:59:c2:af:67:65:63:cc:73:a9:1e:59:d9:9e:84:e7:a1:e8:b8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:40 2026 GMT Not After : Sep 27 01:00:40 2027 GMT Subject: CN=F440D3526D51FFB4DF2AEAA264ADBD17A5202DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:ac:59:01:44:3f:ec:4e:5b:52:b6:37:ea: d4:a2:21:ef:56:6d:7d:24:df:d1:06:82:f2:59:84: dc:45:f3:5a:b2:3c:76:68:b1:8f:82:67:d3:1e:3e: 72:aa:50:39:57:e0:79:24:99:f8:4c:cd:31:28:4f: 5f:a5:69:83:bf:35:45:78:a3:04:22:96:2d:e0:d8: 8a:60:a8:b9:fb:90:cf:58:7b:8a:85:5f:95:96:fe: d6:51:bc:90:94:8b:de:d1:c1:53:de:b5:78:03:43: 41:fa:73:d5:a7:76:0c:e8:ae:de:47:79:dd:f2:5a: 5d:c6:99:3e:0d:cc:70:a9:a9:9c:d7:a7:f6:83:37: 25:d7:94:e6:42:6a:81:e1:19:13:e2:61:3c:e4:d6: 60:44:50:95:87:96:76:d1:c9:88:e1:0e:4f:bd:19: 07:50:26:a6:a3:25:df:5f:a8:da:7a:75:5c:97:b6: 9c:8a:04:eb:4f:db:1f:53:e9:58:59:3d:81:07:b9: 23:df:cc:8c:13:0e:2b:65:8f:b1:0f:8f:67:c9:9e: a3:a7:4e:06:2a:19:a7:05:5c:08:d0:7c:b4:55:31: e3:71:3d:69:08:10:9d:b8:a1:60:70:97:b9:bd:0e: 17:0b:27:ba:57:38:0e:f9:a6:57:af:6d:f1:af:bf: d2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:40:D3:52:6D:51:FF:B4:DF:2A:EA:A2:64:AD:BD:17:A5:20:2D:BA X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.48.0/24 Signature Algorithm: sha256WithRSAEncryption 02:ca:a3:b6:05:49:ab:93:d2:eb:0c:bb:91:1f:d4:ca:c7:32: d1:42:0b:ef:43:29:c3:9a:8b:da:29:5f:0c:25:4e:c7:f2:f9: 6a:f4:cc:37:38:eb:09:3a:1c:29:64:1c:33:a2:4c:8c:41:0e: 5d:32:39:88:f2:fc:46:5e:a8:c2:08:d3:57:48:27:eb:b9:51: c1:0b:98:f9:63:8c:bc:3e:25:ea:79:88:8f:71:51:b1:eb:6c: b8:9b:7d:3d:f3:3d:4f:8a:85:d9:a3:71:a9:9c:91:e7:dc:23: e2:da:31:63:45:8d:dc:43:89:46:9b:7d:d7:7c:d0:0f:bf:89: 99:b6:60:9c:04:67:a8:5c:2b:de:a1:63:63:4a:de:46:4a:90: 35:81:44:33:dd:a2:74:fc:14:4e:97:8e:13:97:04:62:40:fe: 07:7c:05:f3:fd:e7:77:90:51:b2:4a:f4:c6:3a:1c:7c:37:46: 94:c1:af:05:d1:bc:c1:7f:a5:4b:33:07:11:87:7b:f3:2d:2b: 98:48:f7:4a:e9:f6:92:c5:0c:8d:9c:ef:29:ed:59:0c:9f:9e: da:bd:32:cd:69:e0:e2:09:cc:5c:9c:dd:3e:fa:13:84:34:5e: c1:60:52:3d:3d:6a:dd:1c:b9:e3:16:08:67:d0:92:63:c3:8e: be:97:3f:a1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUCFnCr2dlY8xzqR5Z2Z6E56HouFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1NDBaFw0yNzA5MjcwMTAwNDBaMDMxMTAvBgNV BAMTKEY0NDBEMzUyNkQ1MUZGQjRERjJBRUFBMjY0QURCRDE3QTUyMDJEQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl9axZAUQ/7E5bUrY36tSiIe9W bX0k39EGgvJZhNxF81qyPHZosY+CZ9MePnKqUDlX4HkkmfhMzTEoT1+laYO/NUV4 owQili3g2IpgqLn7kM9Ye4qFX5WW/tZRvJCUi97RwVPetXgDQ0H6c9Wndgzort5H ed3yWl3GmT4NzHCpqZzXp/aDNyXXlOZCaoHhGRPiYTzk1mBEUJWHlnbRyYjhDk+9 GQdQJqajJd9fqNp6dVyXtpyKBOtP2x9T6VhZPYEHuSPfzIwTDitlj7EPj2fJnqOn TgYqGacFXAjQfLRVMeNxPWkIEJ24oWBwl7m9DhcLJ7pXOA75plevbfGvv9IDAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU9EDTUm1R/7TfKuqiZK29F6UgLbowHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMx MmUzNDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr8TAwDQYJKoZIhvcNAQELBQADggEBAALKo7YFSauT0usMu5Ef1MrHMtFCC+9D KcOai9opXwwlTsfy+Wr0zDc46wk6HClkHDOiTIxBDl0yOYjy/EZeqMII01dIJ+u5 UcELmPljjLw+Jep5iI9xUbHrbLibfT3zPU+KhdmjcamckefcI+LaMWNFjdxDiUab fdd80A+/iZm2YJwEZ6hcK96hY2NK3kZKkDWBRDPdonT8FE6XjhOXBGJA/gd8BfP9 53eQUbJK9MY6HHw3RpTBrwXRvMF/pUszBxGHe/MtK5hI90rp9pLFDI2c7yntWQyf ntq9Ms1p4OIJzFyc3T76E4Q0XsFgUj09at0cueMWCGfQkmPDjr6XP6E= -----END CERTIFICATE-----Generated at Fri Oct 9 17:41:02 2026 by rpki-client