$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34392e302f32342d3234203d3e2034383337.roa File: 34332e3234312e34392e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: hb6yhR263tJhGd7mzgB43qh9+15q8xioPg25//2XB4w= Subject key identifier: 81:B9:C4:69:1C:12:8E:E4:D0:68:B5:0F:FB:DB:FE:F7:FA:D5:7D:D5 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 09BA94AF7CCA8EEF61DCD7BF6FB42ADB2B23F0EF Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34392e302f32342d3234203d3e2034383337.roa Signing time: Mon 28 Sep 2026 01:00:34 +0000 ROA not before: Mon 28 Sep 2026 00:55:34 +0000 ROA not after: Mon 27 Sep 2027 01:00:34 +0000 asID: 4837 IP address blocks: 43.241.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ba:94:af:7c:ca:8e:ef:61:dc:d7:bf:6f:b4:2a:db:2b:23:f0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:34 2026 GMT Not After : Sep 27 01:00:34 2027 GMT Subject: CN=81B9C4691C128EE4D068B50FFBDBFEF7FAD57DD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0c:2d:bb:4f:f8:d8:fd:ac:f9:0c:19:bc:f9: 3d:ba:3c:87:e0:be:a7:ca:20:92:32:7c:74:fc:d0: b0:74:5e:58:57:ce:1b:6e:54:63:e3:b2:dd:93:e4: 69:00:0e:a4:09:d5:1c:fb:d6:f5:1c:95:c9:3f:a4: 9a:d2:02:82:e8:ee:7d:bf:32:de:9b:81:6b:cf:10: aa:00:bd:c0:ce:f4:b2:09:16:03:0f:63:2d:97:93: 75:a6:04:87:cd:54:f1:83:db:f2:c0:8e:7e:10:0f: 8b:85:09:77:31:42:94:b5:ed:d7:38:53:58:2e:7c: de:9b:8a:cb:17:4f:c3:17:f4:dc:3c:96:fb:e1:22: f9:b6:a8:84:7c:aa:33:c9:cd:96:e2:3b:66:47:a4: 49:fc:1d:14:b2:a4:13:14:93:24:81:f3:a8:19:31: f4:05:c5:c5:25:e3:54:71:36:8a:e9:c6:69:61:e9: b9:fc:e7:b7:16:7e:24:85:54:88:ff:2b:2b:c1:e8: 34:56:8e:bb:ef:58:50:41:ff:a0:73:e4:62:ca:18: 29:d8:eb:9d:45:72:db:11:67:2e:b3:4d:a1:56:0c: 7b:27:b9:14:2f:21:de:96:36:26:e2:ef:ae:b1:ec: 00:d0:76:95:3a:d8:6d:60:dd:8b:10:9d:8d:8c:b4: 75:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B9:C4:69:1C:12:8E:E4:D0:68:B5:0F:FB:DB:FE:F7:FA:D5:7D:D5 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34392e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.49.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:08:67:9e:15:a1:22:e5:39:0c:f5:9a:91:f7:65:57:66:5a: a0:36:3a:a2:a1:bd:73:97:c8:66:4e:a2:ee:18:a0:98:72:c2: 22:1d:27:7f:18:f4:23:f7:46:78:b7:19:c3:13:fa:65:bf:8c: 63:fc:49:e0:d5:88:26:7b:b3:7e:a3:e0:c2:4d:d9:6c:9b:23: 9e:f7:10:62:56:27:a6:05:51:83:57:18:b4:56:c3:eb:a3:c4: 45:4c:36:60:1d:26:0b:59:09:f6:22:27:8b:c3:68:ea:b6:2e: 25:00:f5:77:76:41:ef:ac:c6:c8:e4:34:05:19:15:a5:e2:01: 26:29:86:77:c9:63:05:31:9b:58:32:2a:e8:08:31:df:45:bc: 5b:9c:c0:13:db:4a:19:9d:2e:2e:4c:62:27:c7:cd:05:42:4f: de:d7:a4:00:bd:e7:cf:2a:7e:18:26:b0:87:b2:20:9b:11:31: cb:ca:ad:5b:eb:3c:e7:07:23:0c:f1:c3:3a:33:a6:04:a9:c8: 1a:b4:2c:6c:8a:27:ee:3c:ad:ba:ef:11:5a:95:2c:bc:ca:fb: 94:e3:e2:e2:60:c2:42:10:5a:54:be:04:92:6b:31:8f:aa:22: 8d:26:a5:ae:cd:13:5a:55:32:e4:71:41:17:b8:a3:a8:61:12: 3a:5e:05:0d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUCbqUr3zKju9h3Ne/b7Qq2ysj8O8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzRaFw0yNzA5MjcwMTAwMzRaMDMxMTAvBgNV BAMTKDgxQjlDNDY5MUMxMjhFRTREMDY4QjUwRkZCREJGRUY3RkFENTdERDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYDC27T/jY/az5DBm8+T26PIfg vqfKIJIyfHT80LB0XlhXzhtuVGPjst2T5GkADqQJ1Rz71vUclck/pJrSAoLo7n2/ Mt6bgWvPEKoAvcDO9LIJFgMPYy2Xk3WmBIfNVPGD2/LAjn4QD4uFCXcxQpS17dc4 U1gufN6bissXT8MX9Nw8lvvhIvm2qIR8qjPJzZbiO2ZHpEn8HRSypBMUkySB86gZ MfQFxcUl41RxNorpxmlh6bn857cWfiSFVIj/KyvB6DRWjrvvWFBB/6Bz5GLKGCnY 651FctsRZy6zTaFWDHsnuRQvId6WNibi766x7ADQdpU62G1g3YsQnY2MtHWFAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUgbnEaRwSjuTQaLUP+9v+9/rVfdUwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMx MmUzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr8TEwDQYJKoZIhvcNAQELBQADggEBAHwIZ54VoSLlOQz1mpH3ZVdmWqA2OqKh vXOXyGZOou4YoJhywiIdJ38Y9CP3Rni3GcMT+mW/jGP8SeDViCZ7s36j4MJN2Wyb I573EGJWJ6YFUYNXGLRWw+ujxEVMNmAdJgtZCfYiJ4vDaOq2LiUA9Xd2Qe+sxsjk NAUZFaXiASYphnfJYwUxm1gyKugIMd9FvFucwBPbShmdLi5MYifHzQVCT97XpAC9 588qfhgmsIeyIJsRMcvKrVvrPOcHIwzxwzozpgSpyBq0LGyKJ+48rbrvEVqVLLzK +5Tj4uJgwkIQWlS+BJJrMY+qIo0mpa7NE1pVMuRxQRe4o6hhEjpeBQ0= -----END CERTIFICATE-----Generated at Fri Oct 9 11:46:29 2026 by rpki-client