$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034313334.roa File: 34332e3234382e3138342e302f32312d3231203d3e2034313334.roa (raw, json) Hash identifier: SY4GYa4xX1V35VUVkD4TsAkQpHgh6IXzOnZAvSagT3E= Subject key identifier: 81:88:FC:DB:EB:87:41:44:51:64:6A:C4:B2:2E:D8:6D:E8:BC:76:07 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 7FD735566D755E63C563BAF6AB9389FD47823C49 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034313334.roa Signing time: Mon 28 Sep 2026 01:01:36 +0000 ROA not before: Mon 28 Sep 2026 00:56:36 +0000 ROA not after: Mon 27 Sep 2027 01:01:36 +0000 asID: 4134 IP address blocks: 43.248.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d7:35:56:6d:75:5e:63:c5:63:ba:f6:ab:93:89:fd:47:82:3c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:56:36 2026 GMT Not After : Sep 27 01:01:36 2027 GMT Subject: CN=8188FCDBEB87414451646AC4B22ED86DE8BC7607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:60:0a:6f:5d:ee:26:26:8e:59:a5:7f:1d: 60:77:f1:dc:e4:4a:b8:e9:84:5d:5d:d4:2d:d8:4e: 52:af:50:b8:0b:ee:39:77:11:2c:e8:97:2d:95:d2: ab:77:99:6f:7a:0a:8c:28:86:4a:10:b9:5e:7c:11: 5c:1c:04:48:73:c5:7e:1c:64:b5:53:bd:41:3e:45: 38:2a:01:2a:6c:c3:3f:3b:0f:ca:90:63:8a:26:04: 31:0e:d9:92:c8:3f:e5:fd:d5:d3:f0:77:fd:a0:64: c8:96:ca:61:3e:c4:0a:20:0b:b0:13:9b:5f:a3:c1: a7:c3:65:2c:03:6b:ed:59:8a:73:ab:2b:b1:a2:97: e3:bb:d0:02:da:68:6a:a3:b9:db:3d:71:a7:8a:4d: a2:81:e3:79:d1:20:b1:ef:38:89:77:4c:7a:e2:ad: c0:e3:7d:d3:14:e8:d2:0c:de:5e:a3:fb:49:bb:38: cb:3e:c4:e3:eb:d5:a0:57:65:2c:74:64:e6:9d:b8: c0:e2:2c:1e:16:e1:ac:e6:8b:21:11:de:97:f8:9b: fb:2c:d3:ac:f7:65:ae:1c:7d:eb:75:a9:36:6b:88: f2:dd:ae:34:17:a8:fe:1d:67:01:4d:ac:db:d4:97: 46:3a:2b:98:1b:6d:59:13:79:5b:16:c5:29:7c:40: 73:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:88:FC:DB:EB:87:41:44:51:64:6A:C4:B2:2E:D8:6D:E8:BC:76:07 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:a4:45:2d:13:72:83:e8:c7:07:a4:28:f2:78:9a:d5:c7:3c: 4d:b5:35:c4:40:30:1d:05:9b:2b:85:ff:ec:d9:bd:af:ab:b9: 09:dc:d3:c0:95:ac:6c:28:84:3b:99:ac:75:4b:db:8c:aa:08: 61:bd:4b:23:d4:46:b7:66:15:c4:85:ea:fa:18:a4:17:a2:72: d0:88:e6:49:02:6f:69:63:88:1a:ca:ea:67:b3:15:77:54:44: 40:94:e8:05:cb:0d:46:1a:43:49:52:a2:ba:fe:c8:02:ab:b7: c1:38:79:ec:f9:2c:8e:43:5f:b4:c5:c2:da:90:6e:68:37:7a: 8d:a5:16:8a:93:3b:5f:db:06:b1:9a:b3:98:37:ab:09:57:78: d6:34:97:19:95:d3:6d:26:70:a8:ff:5a:f7:67:4c:54:53:14: ff:df:9f:d3:81:56:4a:48:77:c2:45:c8:fa:0c:cf:8c:da:40: fe:df:bd:50:4f:14:6b:d4:ac:b8:89:db:db:ff:db:b3:19:7d: e6:9a:b1:ce:fc:3d:cd:a0:02:9f:9e:9a:16:c7:1b:16:68:a0: 38:00:70:f1:6e:49:68:c9:34:ff:48:a2:1d:0f:9c:c5:e1:97: 64:25:5c:a9:b6:fb:09:9b:89:de:7e:39:dd:cc:29:f0:92:19: 42:9a:6c:0d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUf9c1Vm11XmPFY7r2q5OJ/UeCPEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU2MzZaFw0yNzA5MjcwMTAxMzZaMDMxMTAvBgNV BAMTKDgxODhGQ0RCRUI4NzQxNDQ1MTY0NkFDNEIyMkVEODZERThCQzc2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+2AKb13uJiaOWaV/HWB38dzk SrjphF1d1C3YTlKvULgL7jl3ESzoly2V0qt3mW96CowohkoQuV58EVwcBEhzxX4c ZLVTvUE+RTgqASpswz87D8qQY4omBDEO2ZLIP+X91dPwd/2gZMiWymE+xAogC7AT m1+jwafDZSwDa+1ZinOrK7Gil+O70ALaaGqjuds9caeKTaKB43nRILHvOIl3THri rcDjfdMU6NIM3l6j+0m7OMs+xOPr1aBXZSx0ZOaduMDiLB4W4azmiyER3pf4m/ss 06z3Za4cfet1qTZriPLdrjQXqP4dZwFNrNvUl0Y6K5gbbVkTeVsWxSl8QHNVAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUgYj82+uHQURRZGrEsi7Ybei8dgcwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMTM4MzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDMxMzMzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyv4uDANBgkqhkiG9w0BAQsFAAOCAQEAiqRFLRNyg+jHB6Qo8nia1cc8TbU1 xEAwHQWbK4X/7Nm9r6u5CdzTwJWsbCiEO5msdUvbjKoIYb1LI9RGt2YVxIXq+hik F6Jy0IjmSQJvaWOIGsrqZ7MVd1REQJToBcsNRhpDSVKiuv7IAqu3wTh57PksjkNf tMXC2pBuaDd6jaUWipM7X9sGsZqzmDerCVd41jSXGZXTbSZwqP9a92dMVFMU/9+f 04FWSkh3wkXI+gzPjNpA/t+9UE8Ua9SsuInb2//bsxl95pqxzvw9zaACn56aFscb FmigOABw8W5JaMk0/0iiHQ+cxeGXZCVcqbb7CZuJ3n453cwp8JIZQppsDQ== -----END CERTIFICATE-----Generated at Sun Oct 11 20:44:56 2026 by rpki-client