$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35302e302f32342d3234203d3e203233363530.roa File: 34332e3234312e35302e302f32342d3234203d3e203233363530.roa (raw, json) Hash identifier: +7YndBYdT7xbZfleNEMsUSyXt3EfS5VQ20Y8vbcAdbo= Subject key identifier: 40:E7:31:87:8C:FB:5E:2D:B4:B8:91:04:71:46:76:10:3B:A7:97:3E Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 3CC711FA04A2532E1BFF2ED8EBE5ED22F9D17479 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35302e302f32342d3234203d3e203233363530.roa Signing time: Mon 28 Sep 2026 01:00:40 +0000 ROA not before: Mon 28 Sep 2026 00:55:40 +0000 ROA not after: Mon 27 Sep 2027 01:00:40 +0000 asID: 23650 IP address blocks: 43.241.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c7:11:fa:04:a2:53:2e:1b:ff:2e:d8:eb:e5:ed:22:f9:d1:74:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:40 2026 GMT Not After : Sep 27 01:00:40 2027 GMT Subject: CN=40E731878CFB5E2DB4B89104714676103BA7973E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:0a:a9:57:d2:28:2f:5f:cd:32:c8:71:fa: f4:68:96:47:61:cd:b2:dc:eb:52:21:f7:9c:f9:4c: 99:aa:e7:e8:7e:68:63:ad:52:ed:99:8a:bb:99:aa: c3:2c:55:53:99:ad:83:2d:b9:11:db:e8:ec:03:05: 58:89:75:5d:04:93:a7:11:6f:d2:bd:9a:58:c7:5c: 4c:3e:8a:e3:72:2b:9b:c8:e9:df:cd:8e:52:aa:35: 83:1c:b2:dc:77:5a:78:ca:51:1b:e9:0b:a7:a0:32: 58:31:f8:27:c5:0a:de:32:26:9e:cf:9a:21:68:f8: 8a:3a:fd:59:1e:eb:7d:67:a4:0c:a9:ae:4e:fc:2d: 0b:7a:74:93:5c:bc:6e:b3:39:56:3c:44:90:9e:cc: de:f5:1d:bb:e0:36:e6:0b:5e:36:9e:cd:e0:d3:f4: 08:2b:b5:2b:8f:48:d1:d3:43:63:82:a0:49:14:8e: 67:e8:4f:55:38:b3:1a:bd:68:5a:10:43:60:da:f3: d0:f2:c8:56:f4:78:bd:ee:32:5c:89:41:84:e3:31: b7:66:ab:36:c8:d9:5c:68:c7:72:81:bf:0c:99:59: d4:9b:81:4b:d4:2d:b8:0e:7e:aa:d0:cd:a1:d7:21: e8:0a:df:22:af:17:39:a9:eb:5f:d3:f7:cc:b5:48: f7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E7:31:87:8C:FB:5E:2D:B4:B8:91:04:71:46:76:10:3B:A7:97:3E X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35302e302f32342d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.50.0/24 Signature Algorithm: sha256WithRSAEncryption 88:33:80:9b:38:18:fb:e2:ba:fb:3d:05:fd:3a:18:3c:12:63: e8:f3:39:9d:ea:b9:01:cc:c1:67:44:1c:bb:0d:ae:7c:36:0f: 5e:92:94:3e:4f:d4:69:c1:5a:14:a9:1b:41:b4:41:cb:cb:3b: 34:bb:46:2f:88:e8:2f:5d:c7:eb:8c:70:d1:39:d7:91:88:3f: 19:75:fb:52:55:ae:66:6d:e1:35:84:2a:1f:21:68:f1:9c:ff: 40:d7:00:9f:98:41:5b:ef:5a:7c:d6:fa:aa:d7:e7:1e:6e:e3: 82:4a:cd:1d:69:1f:a1:f8:e0:5f:ae:62:24:18:9d:ce:9e:00: 15:78:0a:83:11:6b:ab:05:6a:2f:dc:4c:6b:fa:89:49:df:5d: b5:a4:a2:af:c0:8a:82:99:a4:5d:4a:47:70:49:7c:07:75:77: 98:05:fb:64:da:06:29:ef:59:80:e1:2a:db:57:6f:fe:7b:13: d8:6b:71:b3:4a:07:ff:57:02:42:68:2e:3b:43:bd:85:71:78: b7:47:08:01:d7:fb:30:43:20:69:04:1c:22:de:5c:5b:fb:03: c3:76:88:50:0a:f9:4a:63:88:9a:9d:a7:83:14:2a:4f:cb:c1: 1c:b3:19:f6:b4:99:13:a0:8f:4b:a4:26:45:d5:9d:14:82:d4: 2d:f7:fc:82 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUPMcR+gSiUy4b/y7Y6+XtIvnRdHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1NDBaFw0yNzA5MjcwMTAwNDBaMDMxMTAvBgNV BAMTKDQwRTczMTg3OENGQjVFMkRCNEI4OTEwNDcxNDY3NjEwM0JBNzk3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpgqpV9IoL1/NMshx+vRolkdh zbLc61Ih95z5TJmq5+h+aGOtUu2ZiruZqsMsVVOZrYMtuRHb6OwDBViJdV0Ek6cR b9K9mljHXEw+iuNyK5vI6d/NjlKqNYMcstx3WnjKURvpC6egMlgx+CfFCt4yJp7P miFo+Io6/Vke631npAyprk78LQt6dJNcvG6zOVY8RJCezN71HbvgNuYLXjaezeDT 9AgrtSuPSNHTQ2OCoEkUjmfoT1U4sxq9aFoQQ2Da89DyyFb0eL3uMlyJQYTjMbdm qzbI2Vxox3KBvwyZWdSbgUvULbgOfqrQzaHXIegK3yKvFzmp61/T98y1SPdvAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUQOcxh4z7Xi20uJEEcUZ2EDunlz4wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMx MmUzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACvxMjANBgkqhkiG9w0BAQsFAAOCAQEAiDOAmzgY++K6+z0F/ToYPBJj6PM5 neq5AczBZ0Qcuw2ufDYPXpKUPk/UacFaFKkbQbRBy8s7NLtGL4joL13H64xw0TnX kYg/GXX7UlWuZm3hNYQqHyFo8Zz/QNcAn5hBW+9afNb6qtfnHm7jgkrNHWkfofjg X65iJBidzp4AFXgKgxFrqwVqL9xMa/qJSd9dtaSir8CKgpmkXUpHcEl8B3V3mAX7 ZNoGKe9ZgOEq21dv/nsT2Gtxs0oH/1cCQmguO0O9hXF4t0cIAdf7MEMgaQQcIt5c W/sDw3aIUAr5SmOImp2ngxQqT8vBHLMZ9rSZE6CPS6QmRdWdFILULff8gg== -----END CERTIFICATE-----Generated at Sat Oct 10 10:43:15 2026 by rpki-client