$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034383337.roa File: 34332e3234382e3138342e302f32312d3231203d3e2034383337.roa (raw, json) Hash identifier: LJvIAGlbr/PsmA+xHGzY/snwId9CGTFrJGJmT4hcEr4= Subject key identifier: 8D:5E:6C:F2:DB:0D:22:90:43:B6:61:CA:F0:98:92:0B:66:3C:39:12 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 2D47ECB5C9A86905125A9EE023C2B93CDD5A857B Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034383337.roa Signing time: Mon 28 Sep 2026 01:01:36 +0000 ROA not before: Mon 28 Sep 2026 00:56:36 +0000 ROA not after: Mon 27 Sep 2027 01:01:36 +0000 asID: 4837 IP address blocks: 43.248.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:47:ec:b5:c9:a8:69:05:12:5a:9e:e0:23:c2:b9:3c:dd:5a:85:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:56:36 2026 GMT Not After : Sep 27 01:01:36 2027 GMT Subject: CN=8D5E6CF2DB0D229043B661CAF098920B663C3912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:d1:bf:96:d8:b7:69:e3:33:7b:71:2f:2e: c6:a2:ba:8d:7a:c9:4b:db:d6:34:f9:77:4e:e5:48: 47:e9:a9:4a:5a:8b:62:fb:ba:14:3a:40:92:94:7f: c5:4f:37:2f:84:51:ed:ff:f7:d9:3e:6c:45:7c:dc: 13:26:9b:66:5d:bc:db:e6:7f:ba:5b:c9:94:d4:63: 27:28:7b:12:b7:2f:28:61:08:3f:7d:77:10:6d:f3: ea:9e:86:b0:06:c6:9b:09:d1:5e:9e:dc:5f:19:8f: 18:b5:9c:5d:6c:27:7b:1f:55:e8:0e:6b:2c:e2:99: d5:96:23:e7:d9:2a:e3:29:57:35:3c:24:72:f7:45: 99:42:38:78:fd:02:11:db:6c:78:4c:44:a1:a4:d7: 9c:d1:5e:e3:38:d1:27:0d:19:42:70:a2:cd:bc:65: af:98:c8:b9:72:47:b5:0f:9e:6d:17:30:62:c1:70: ae:c9:30:2e:ec:a7:bb:87:cc:b4:e6:dc:95:88:61: 21:f7:b3:31:17:50:8f:ef:5f:8a:bb:02:ab:f4:95: 54:55:a9:22:17:48:46:3f:ca:57:1d:ae:ce:70:19: 73:d8:ad:e5:45:36:d1:f8:d7:5b:6a:b1:fb:f1:ec: e2:7b:58:24:e2:dc:ba:d5:8a:f4:fb:6f:83:56:95: e9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5E:6C:F2:DB:0D:22:90:43:B6:61:CA:F0:98:92:0B:66:3C:39:12 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:70:be:23:a5:b1:33:e0:a7:9a:fd:e8:03:14:ef:23:44:b8: 87:48:5f:4d:5e:fc:c2:86:a3:ba:98:c8:a5:6e:17:1a:a7:87: 1a:47:63:8e:02:3e:5a:29:ac:b4:f4:95:bd:61:c4:f8:16:ad: 57:ef:bb:cd:2c:59:b5:99:4e:8a:a9:ac:f8:f7:21:51:a9:7c: 50:c1:48:fe:4f:57:b6:6c:51:42:6f:db:87:f2:85:df:f4:2b: 14:fa:05:19:7d:78:03:fc:16:dc:36:9d:d6:55:51:8d:24:25: 9a:89:cb:53:db:43:4e:e1:54:74:36:6d:1e:8a:25:76:6e:c2: 04:c5:46:04:42:ce:9f:a2:73:64:0c:a2:3e:ea:73:1e:a9:97: 58:02:fd:e4:ec:3e:a8:fc:b4:f9:13:20:3f:4f:12:85:38:0f: fe:38:88:17:19:1b:d9:40:8a:64:5d:f4:25:3b:70:f4:3f:88: 50:3f:15:02:7c:32:3f:3d:6b:74:04:50:18:32:19:60:39:f3: 8b:24:a8:1c:ee:b1:40:38:28:98:db:54:fd:e4:7e:fa:d4:5e: aa:9f:1d:10:7d:7a:ac:c5:51:e8:f6:1c:d9:05:3d:d0:fa:62: b6:6c:17:d3:68:58:c7:64:24:30:c7:59:67:61:c0:72:78:ba: 8b:1e:ee:f1 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIULUfstcmoaQUSWp7gI8K5PN1ahXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU2MzZaFw0yNzA5MjcwMTAxMzZaMDMxMTAvBgNV BAMTKDhENUU2Q0YyREIwRDIyOTA0M0I2NjFDQUYwOTg5MjBCNjYzQzM5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UNG/lti3aeMze3EvLsaiuo16 yUvb1jT5d07lSEfpqUpai2L7uhQ6QJKUf8VPNy+EUe3/99k+bEV83BMmm2ZdvNvm f7pbyZTUYycoexK3LyhhCD99dxBt8+qehrAGxpsJ0V6e3F8Zjxi1nF1sJ3sfVegO ayzimdWWI+fZKuMpVzU8JHL3RZlCOHj9AhHbbHhMRKGk15zRXuM40ScNGUJwos28 Za+YyLlyR7UPnm0XMGLBcK7JMC7sp7uHzLTm3JWIYSH3szEXUI/vX4q7Aqv0lVRV qSIXSEY/ylcdrs5wGXPYreVFNtH411tqsfvx7OJ7WCTi3LrVivT7b4NWlelbAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUjV5s8tsNIpBDtmHK8JiSC2Y8ORIwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMTM4MzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyv4uDANBgkqhkiG9w0BAQsFAAOCAQEAbnC+I6WxM+Cnmv3oAxTvI0S4h0hf TV78woajupjIpW4XGqeHGkdjjgI+WimstPSVvWHE+BatV++7zSxZtZlOiqms+Pch Ual8UMFI/k9XtmxRQm/bh/KF3/QrFPoFGX14A/wW3Dad1lVRjSQlmonLU9tDTuFU dDZtHooldm7CBMVGBELOn6JzZAyiPupzHqmXWAL95Ow+qPy0+RMgP08ShTgP/jiI Fxkb2UCKZF30JTtw9D+IUD8VAnwyPz1rdARQGDIZYDnziySoHO6xQDgomNtU/eR+ +tReqp8dEH16rMVR6PYc2QU90PpitmwX02hYx2QkMMdZZ2HAcni6ix7u8Q== -----END CERTIFICATE-----Generated at Sat Oct 10 16:01:44 2026 by rpki-client