$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34392e302f32342d3234203d3e203233363530.roa File: 34332e3234312e34392e302f32342d3234203d3e203233363530.roa (raw, json) Hash identifier: 5vxqbTbuTs/lnOW6ViOiKBJstT1VY16wTccz1LDNsZM= Subject key identifier: 2B:AF:6B:E8:77:E7:78:E4:94:75:12:31:38:6A:97:0E:32:D3:A7:3F Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 233BBD99B61032F3A22FC2D7E0BF760AD09AC6E1 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34392e302f32342d3234203d3e203233363530.roa Signing time: Mon 28 Sep 2026 01:00:37 +0000 ROA not before: Mon 28 Sep 2026 00:55:37 +0000 ROA not after: Mon 27 Sep 2027 01:00:37 +0000 asID: 23650 IP address blocks: 43.241.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:3b:bd:99:b6:10:32:f3:a2:2f:c2:d7:e0:bf:76:0a:d0:9a:c6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:37 2026 GMT Not After : Sep 27 01:00:37 2027 GMT Subject: CN=2BAF6BE877E778E494751231386A970E32D3A73F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d6:b5:63:0b:67:95:02:fa:aa:2d:a4:d2:6f: cf:8e:dd:5a:b0:6c:b8:40:53:6a:f4:bb:c3:c3:17: 6b:61:62:4a:30:ec:cc:14:3a:07:cc:b0:55:ad:95: 89:e8:91:fc:ec:2f:00:09:46:14:bb:9f:8e:7d:93: 25:d4:7e:9d:23:5b:2b:d7:43:33:1b:ce:8e:58:5a: 44:dd:de:26:5e:13:ff:49:5d:9e:c5:72:38:bf:1c: 1d:e4:18:2b:b6:8a:01:f0:35:c0:0b:2f:97:b4:12: 3a:f1:92:aa:43:50:80:58:fd:36:47:0f:1d:5d:83: 65:7b:75:01:e2:9b:97:fe:1d:c4:a0:e7:3b:80:b4: dd:25:ae:67:a9:bb:f6:eb:e7:ce:e2:dd:c9:9a:b5: f7:ee:da:80:91:9b:d6:4a:80:2a:72:12:ba:90:7b: 15:2e:68:85:e7:76:23:12:24:aa:e3:f7:ba:0b:1a: 90:17:dc:95:af:98:aa:d4:6b:96:6c:35:23:52:7c: b9:61:1a:14:80:f8:b9:38:7b:f5:d0:37:f4:51:f2: 87:d5:f9:3e:eb:9e:8e:42:e7:ef:c3:80:c2:aa:3a: 01:c6:5e:63:b9:c1:77:8f:fc:00:1d:ea:76:8d:28: 83:be:7c:57:3c:aa:25:ae:70:9d:1b:78:d8:f5:ee: e3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AF:6B:E8:77:E7:78:E4:94:75:12:31:38:6A:97:0E:32:D3:A7:3F X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34392e302f32342d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.49.0/24 Signature Algorithm: sha256WithRSAEncryption 72:15:d3:1f:4e:78:c7:64:55:22:3d:c2:9c:c2:a3:1e:aa:d7: cf:1c:cf:7f:3c:53:7d:12:ef:91:70:15:09:6a:b5:c7:9b:4a: 90:fa:93:c5:db:02:85:7f:96:00:05:af:8b:07:3f:a9:40:1a: 1d:ec:1e:16:ef:25:59:e0:f3:1c:ce:90:2e:c9:06:a4:89:10: 88:a4:cc:47:51:05:67:13:b1:73:91:9f:6c:f3:9d:af:57:23: 00:80:3b:f0:0a:2e:9d:dd:8f:69:66:78:db:f6:46:14:86:81: 8c:bd:ab:b8:ef:b7:d1:ed:2c:48:c3:29:5b:bf:6f:8e:1a:d5: a0:65:e0:c5:c5:76:d7:b5:d4:d8:3f:52:67:ec:2d:e7:11:de: a5:8c:5c:1f:4b:e2:d8:23:d7:3a:6e:1b:07:bc:de:bc:a4:af: 67:c5:02:4e:ba:7b:17:81:5f:c2:83:56:ff:c1:ce:ed:17:0d: 9b:b0:8b:47:14:57:40:c4:4a:fa:83:47:2b:da:38:1e:3d:e8: 91:5a:c4:be:d2:13:e3:51:40:7a:13:30:10:3a:5a:9b:95:47: 0c:d2:3e:69:58:a9:90:b6:dd:37:e3:e0:10:f7:1f:ac:d6:72: 6b:7e:1c:e3:c3:3c:4f:91:63:8e:88:f7:42:ce:4a:1f:5d:45: e9:50:14:d7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUIzu9mbYQMvOiL8LX4L92CtCaxuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzdaFw0yNzA5MjcwMTAwMzdaMDMxMTAvBgNV BAMTKDJCQUY2QkU4NzdFNzc4RTQ5NDc1MTIzMTM4NkE5NzBFMzJEM0E3M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS1rVjC2eVAvqqLaTSb8+O3Vqw bLhAU2r0u8PDF2thYkow7MwUOgfMsFWtlYnokfzsLwAJRhS7n459kyXUfp0jWyvX QzMbzo5YWkTd3iZeE/9JXZ7Fcji/HB3kGCu2igHwNcALL5e0EjrxkqpDUIBY/TZH Dx1dg2V7dQHim5f+HcSg5zuAtN0lrmepu/br587i3cmatffu2oCRm9ZKgCpyErqQ exUuaIXndiMSJKrj97oLGpAX3JWvmKrUa5ZsNSNSfLlhGhSA+Lk4e/XQN/RR8ofV +T7rno5C5+/DgMKqOgHGXmO5wXeP/AAd6naNKIO+fFc8qiWucJ0beNj17uO/AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUK69r6HfneOSUdRIxOGqXDjLTpz8wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMx MmUzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACvxMTANBgkqhkiG9w0BAQsFAAOCAQEAchXTH054x2RVIj3CnMKjHqrXzxzP fzxTfRLvkXAVCWq1x5tKkPqTxdsChX+WAAWviwc/qUAaHeweFu8lWeDzHM6QLskG pIkQiKTMR1EFZxOxc5GfbPOdr1cjAIA78Aound2PaWZ42/ZGFIaBjL2ruO+30e0s SMMpW79vjhrVoGXgxcV217XU2D9SZ+wt5xHepYxcH0vi2CPXOm4bB7zevKSvZ8UC Trp7F4FfwoNW/8HO7RcNm7CLRxRXQMRK+oNHK9o4Hj3okVrEvtIT41FAehMwEDpa m5VHDNI+aVipkLbdN+PgEPcfrNZya34c48M8T5Fjjoj3Qs5KH11F6VAU1w== -----END CERTIFICATE-----Generated at Fri Oct 9 18:46:45 2026 by rpki-client