$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35312e302f32342d3234203d3e203233363530.roa File: 34332e3234312e35312e302f32342d3234203d3e203233363530.roa (raw, json) Hash identifier: S3cwMgnSoOVYtFKPZ4ne2joD3KiGVdkBMB4wcFW1X6U= Subject key identifier: 26:EF:66:D7:2B:66:62:A3:20:03:07:68:3E:A8:07:D4:8A:52:4A:3B Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 3FB61B967062A4C143485864607C57C0FCC861FD Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35312e302f32342d3234203d3e203233363530.roa Signing time: Mon 28 Sep 2026 01:00:39 +0000 ROA not before: Mon 28 Sep 2026 00:55:39 +0000 ROA not after: Mon 27 Sep 2027 01:00:39 +0000 asID: 23650 IP address blocks: 43.241.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b6:1b:96:70:62:a4:c1:43:48:58:64:60:7c:57:c0:fc:c8:61:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:39 2026 GMT Not After : Sep 27 01:00:39 2027 GMT Subject: CN=26EF66D72B6662A3200307683EA807D48A524A3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:1f:75:be:ed:b6:6d:ae:e7:49:e2:57:a5: 94:2e:8c:2e:62:fd:e0:d2:d0:7f:44:3a:4a:f8:eb: f6:b5:0f:e0:dc:1a:38:6b:4e:67:6b:e9:b3:3c:df: 55:6d:77:33:e6:58:06:d3:db:d9:5d:72:98:ef:cc: 41:d9:ae:d7:94:4b:00:08:0c:64:bb:d3:41:6b:b9: 4a:ae:dd:8b:48:80:a7:3b:ea:63:7f:24:d1:a5:9a: ae:6a:24:b1:1b:9b:da:a7:c0:ee:e2:8f:cc:84:ac: aa:2b:63:01:be:bd:61:5e:33:10:3b:b5:c9:2c:c2: df:9b:56:a1:cb:8f:f3:c4:58:dd:e2:8b:7a:c2:12: 6a:d3:78:26:21:bd:47:2c:59:e2:ec:47:1b:06:6b: 3b:5b:5a:63:b7:1c:ed:bf:d7:b6:ff:5a:6f:b8:e0: 1f:43:a1:91:9e:b2:df:6c:ef:6e:97:3b:c4:78:56: bd:0f:28:75:46:95:4c:4a:b3:64:4f:70:15:2b:20: 85:82:9b:66:57:9b:d3:be:76:8b:57:ad:f9:e9:7a: 65:15:14:1d:ee:60:d7:ef:4a:6e:5f:f5:8f:66:76: 79:16:6f:87:66:ff:9e:43:71:51:d8:3f:54:99:be: 86:ad:c8:13:e3:42:a2:36:eb:97:31:a0:32:d8:51: fb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EF:66:D7:2B:66:62:A3:20:03:07:68:3E:A8:07:D4:8A:52:4A:3B X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35312e302f32342d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.51.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:7b:e4:4e:8e:4c:1e:8b:f0:d9:c6:c4:0c:56:76:fe:35:fe: e8:0d:d5:bd:ce:4e:b8:a2:f0:69:d6:da:ee:57:92:3a:bc:39: e3:fc:a8:a3:ac:2d:18:33:f5:05:9e:77:b4:20:33:0e:73:d5: fa:43:71:71:8c:7e:6c:e1:bd:dc:46:d9:d6:f7:35:5d:51:be: 3c:78:ce:b2:cd:78:f5:b5:30:c4:d8:48:b0:38:ef:0a:54:48: c3:b3:95:5e:93:20:5e:67:21:6d:10:1f:5b:46:1d:12:8b:31: 77:b4:2b:23:7c:fa:6c:f6:e7:76:e6:3b:24:b5:ec:c2:94:08: 02:1e:36:e9:7e:c6:cb:62:6f:0a:62:89:41:da:e7:72:13:05: 25:87:55:0f:47:51:a0:8d:33:41:8c:c3:40:fb:42:d7:a5:66: 8f:c8:b9:b4:85:34:08:fb:77:66:b2:e7:c4:f4:58:43:43:08: 78:8d:7e:8e:47:57:84:04:61:3d:52:7b:77:58:9c:36:91:fe: 85:9c:4b:e8:5b:b8:af:04:a6:0b:b0:63:65:5f:30:24:2a:ed: 9b:bc:74:c4:55:88:9d:c6:1c:86:35:73:d5:be:87:34:06:8a: 0c:16:03:36:be:81:0b:fd:10:6d:a3:ea:ed:6c:34:13:4a:95: e7:bb:6f:85 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUP7YblnBipMFDSFhkYHxXwPzIYf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzlaFw0yNzA5MjcwMTAwMzlaMDMxMTAvBgNV BAMTKDI2RUY2NkQ3MkI2NjYyQTMyMDAzMDc2ODNFQTgwN0Q0OEE1MjRBM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0R91vu22ba7nSeJXpZQujC5i /eDS0H9EOkr46/a1D+DcGjhrTmdr6bM831VtdzPmWAbT29ldcpjvzEHZrteUSwAI DGS700FruUqu3YtIgKc76mN/JNGlmq5qJLEbm9qnwO7ij8yErKorYwG+vWFeMxA7 tckswt+bVqHLj/PEWN3ii3rCEmrTeCYhvUcsWeLsRxsGaztbWmO3HO2/17b/Wm+4 4B9DoZGest9s726XO8R4Vr0PKHVGlUxKs2RPcBUrIIWCm2ZXm9O+dotXrfnpemUV FB3uYNfvSm5f9Y9mdnkWb4dm/55DcVHYP1SZvoatyBPjQqI265cxoDLYUfsbAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUJu9m1ytmYqMgAwdoPqgH1IpSSjswHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMx MmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACvxMzANBgkqhkiG9w0BAQsFAAOCAQEAG3vkTo5MHovw2cbEDFZ2/jX+6A3V vc5OuKLwadba7leSOrw54/yoo6wtGDP1BZ53tCAzDnPV+kNxcYx+bOG93EbZ1vc1 XVG+PHjOss149bUwxNhIsDjvClRIw7OVXpMgXmchbRAfW0YdEosxd7QrI3z6bPbn duY7JLXswpQIAh426X7Gy2JvCmKJQdrnchMFJYdVD0dRoI0zQYzDQPtC16Vmj8i5 tIU0CPt3ZrLnxPRYQ0MIeI1+jkdXhARhPVJ7d1icNpH+hZxL6Fu4rwSmC7BjZV8w JCrtm7x0xFWIncYchjVz1b6HNAaKDBYDNr6BC/0QbaPq7Ww0E0qV57tvhQ== -----END CERTIFICATE-----Generated at Sun Oct 11 23:12:41 2026 by rpki-client