$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35312e302f32342d3234203d3e2034383337.roa File: 34332e3234312e35312e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: TpE+bfW2lx1Bkst8rkAeRiTw9Xe9tQmO01HEgLNthW8= Subject key identifier: D7:67:80:EC:05:E7:05:97:A6:73:B2:59:0F:A6:00:12:CA:F2:81:09 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 2C561E77AFEAEFF5F3C50EB1F90DE136C992E470 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35312e302f32342d3234203d3e2034383337.roa Signing time: Mon 28 Sep 2026 01:00:41 +0000 ROA not before: Mon 28 Sep 2026 00:55:41 +0000 ROA not after: Mon 27 Sep 2027 01:00:41 +0000 asID: 4837 IP address blocks: 43.241.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:56:1e:77:af:ea:ef:f5:f3:c5:0e:b1:f9:0d:e1:36:c9:92:e4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:41 2026 GMT Not After : Sep 27 01:00:41 2027 GMT Subject: CN=D76780EC05E70597A673B2590FA60012CAF28109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4e:45:ea:10:63:be:cc:ef:c7:3b:95:a7:8f: 98:d8:72:55:6c:9d:1b:71:1b:01:1a:ee:5c:6c:f6: f5:76:fc:ab:a5:01:9d:1e:50:fb:b5:eb:46:d6:28: 46:8b:f6:ee:9c:87:1c:3a:5f:7e:ff:42:46:7e:f8: dc:03:aa:87:27:2e:bc:de:4c:8d:4b:4b:9b:b3:7d: 9a:23:bf:d9:07:11:3f:b1:35:ef:67:50:cd:46:34: 27:3d:14:a1:81:78:94:cd:22:87:2c:02:c0:0c:73: 99:18:bf:1f:25:9c:07:35:e4:d7:dc:2e:9e:9e:77: 78:3d:f3:2a:bc:4e:50:e0:d1:73:a8:fb:2f:db:4d: 1e:f5:90:00:46:b4:65:87:10:08:b0:e5:af:18:f3: ef:8f:d5:b2:79:97:fd:95:e1:de:40:9b:29:3b:5b: 44:28:bc:a7:63:d1:7b:ce:81:cc:4c:0f:81:0e:8c: 0e:27:ab:25:15:d4:5e:29:cb:7e:ec:95:c1:17:f1: a6:a2:56:c0:c0:a6:c0:17:16:df:3f:1d:8b:b4:bf: de:2b:57:35:57:75:c9:c6:6b:b4:7c:4f:73:ba:4e: 69:91:92:da:10:a7:ec:89:b4:59:5c:84:18:5f:7e: 55:19:95:fc:09:83:58:53:03:04:45:d1:63:15:26: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:67:80:EC:05:E7:05:97:A6:73:B2:59:0F:A6:00:12:CA:F2:81:09 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35312e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.51.0/24 Signature Algorithm: sha256WithRSAEncryption 15:42:da:47:65:bf:3a:1e:c8:cc:95:a2:32:5f:b5:9b:fc:8d: 69:fc:86:19:99:99:d7:82:8c:37:9b:34:1f:74:fd:66:57:3b: bb:ec:9a:13:52:51:55:bd:48:f3:35:05:39:44:0c:5f:97:fe: 44:b7:62:7d:3d:15:8f:e1:04:4c:d4:7b:56:ab:d2:ac:16:ee: f0:17:3f:bd:c9:e2:e4:b4:60:e6:7c:21:f8:1d:4c:9e:aa:62: 78:34:80:a7:02:a8:a5:01:92:5a:de:68:fd:fb:b4:da:b2:06: d3:f4:bb:84:fb:bd:23:8e:2e:3a:9a:0f:b8:78:7a:68:59:f6: bc:37:fc:81:21:fe:01:3d:ff:5c:7d:23:17:6f:b9:12:26:6e: e3:82:29:0c:c7:ae:e6:ab:7e:b2:bd:9e:02:88:08:40:fc:83: ad:c9:ed:21:65:4b:5a:19:3f:e5:eb:59:9f:7b:12:ec:f1:da: a5:c4:d4:cb:81:17:56:4c:63:34:55:63:74:66:6c:88:36:f0: 9b:e7:5f:75:a7:44:b6:7c:87:74:0b:c9:c8:6f:8f:ce:81:a5: e2:c1:6d:5d:a4:77:7b:23:b6:6a:8b:58:eb:fb:96:02:be:69: 12:07:73:6e:70:bc:70:17:f2:51:24:10:5a:98:7d:24:5a:2a: c0:e9:e9:3a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIULFYed6/q7/XzxQ6x+Q3hNsmS5HAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1NDFaFw0yNzA5MjcwMTAwNDFaMDMxMTAvBgNV BAMTKEQ3Njc4MEVDMDVFNzA1OTdBNjczQjI1OTBGQTYwMDEyQ0FGMjgxMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0TkXqEGO+zO/HO5Wnj5jYclVs nRtxGwEa7lxs9vV2/KulAZ0eUPu160bWKEaL9u6chxw6X37/QkZ++NwDqocnLrze TI1LS5uzfZojv9kHET+xNe9nUM1GNCc9FKGBeJTNIocsAsAMc5kYvx8lnAc15Nfc Lp6ed3g98yq8TlDg0XOo+y/bTR71kABGtGWHEAiw5a8Y8++P1bJ5l/2V4d5Amyk7 W0QovKdj0XvOgcxMD4EOjA4nqyUV1F4py37slcEX8aaiVsDApsAXFt8/HYu0v94r VzVXdcnGa7R8T3O6TmmRktoQp+yJtFlchBhfflUZlfwJg1hTAwRF0WMVJnMfAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU12eA7AXnBZemc7JZD6YAEsrygQkwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMx MmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr8TMwDQYJKoZIhvcNAQELBQADggEBABVC2kdlvzoeyMyVojJftZv8jWn8hhmZ mdeCjDebNB90/WZXO7vsmhNSUVW9SPM1BTlEDF+X/kS3Yn09FY/hBEzUe1ar0qwW 7vAXP73J4uS0YOZ8IfgdTJ6qYng0gKcCqKUBklreaP37tNqyBtP0u4T7vSOOLjqa D7h4emhZ9rw3/IEh/gE9/1x9IxdvuRImbuOCKQzHruarfrK9ngKICED8g63J7SFl S1oZP+XrWZ97Euzx2qXE1MuBF1ZMYzRVY3RmbIg28JvnX3WnRLZ8h3QLychvj86B peLBbV2kd3sjtmqLWOv7lgK+aRIHc25wvHAX8lEkEFqYfSRaKsDp6To= -----END CERTIFICATE-----Generated at Fri Oct 9 17:40:59 2026 by rpki-client