$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203633353637.roa File: 34332e3234382e3138342e302f32312d3231203d3e203633353637.roa (raw, json) Hash identifier: Anzr+TxEZosfzfR+9lirFnDYJXCpirWnmP8K5NHJ0gA= Subject key identifier: CC:B7:7D:A9:BD:DD:E2:16:08:CB:20:E6:4D:99:C5:AF:E8:A2:D0:EE Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 32F5FC15DAE810977838448E03276CCA8AC6764A Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203633353637.roa Signing time: Mon 28 Sep 2026 01:01:36 +0000 ROA not before: Mon 28 Sep 2026 00:56:36 +0000 ROA not after: Mon 27 Sep 2027 01:01:36 +0000 asID: 63567 IP address blocks: 43.248.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 22:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f5:fc:15:da:e8:10:97:78:38:44:8e:03:27:6c:ca:8a:c6:76:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:56:36 2026 GMT Not After : Sep 27 01:01:36 2027 GMT Subject: CN=CCB77DA9BDDDE21608CB20E64D99C5AFE8A2D0EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:cc:c0:b5:ea:da:02:c0:0c:f1:ad:71:10: 8b:c8:37:a6:65:f5:cd:d3:91:ad:c6:d2:04:47:a0: 89:a5:ba:d1:fc:5f:e5:99:32:63:b4:05:ce:9b:b2: 41:d4:2c:de:7d:d3:39:34:bc:d5:d8:07:4c:df:61: 78:e8:64:c7:35:e1:ef:5f:74:8b:5a:16:a4:e0:e2: 2f:38:69:32:8c:f1:66:8b:97:6f:2c:bb:2b:9d:a7: bf:3f:9c:07:0c:0a:0d:da:cf:ce:82:d0:18:85:63: 26:52:0e:67:2e:00:1c:eb:f5:e2:45:2a:be:b5:41: f8:98:4e:dc:61:80:75:b3:14:5b:c9:32:b0:3b:bc: 4e:15:f0:90:58:b8:8b:80:e9:21:8e:bb:3f:84:31: 7b:50:c5:e8:5a:03:23:39:0d:45:b5:ac:49:6b:38: f4:30:1c:f7:87:02:76:1c:60:3b:35:80:60:b0:b3: a5:af:69:de:f6:cd:82:ad:3a:19:4d:4a:0b:eb:dd: 3c:d2:ef:64:f8:70:8e:6f:65:54:1e:77:2a:66:87: 18:c8:10:50:5b:ff:34:ad:52:54:05:42:0c:55:64: 22:80:b0:21:1c:1d:63:ee:27:9a:91:ae:5d:fc:5f: de:c2:49:fc:0c:90:9e:a0:47:34:61:23:34:45:2d: e8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B7:7D:A9:BD:DD:E2:16:08:CB:20:E6:4D:99:C5:AF:E8:A2:D0:EE X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203633353637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:03:3e:13:9a:f4:47:97:c8:56:66:df:14:cb:ba:0c:18:43: 68:dc:2f:9e:0c:49:fb:b9:94:71:14:c2:1e:af:dc:0f:64:9d: af:18:e5:d8:ed:a7:5a:29:bc:49:25:2b:9f:57:c4:22:6c:79: 5c:7d:11:64:48:32:eb:78:7d:88:0d:1a:9c:36:d5:7a:07:d1: 70:c2:d9:72:1b:fc:1d:73:dc:57:8e:4b:63:a9:67:53:86:b9: 57:17:da:a2:88:bc:20:20:89:ad:3d:c2:d3:90:c2:85:d7:85: cb:60:3c:68:c0:ab:6a:49:b8:46:0c:25:32:2e:89:d3:31:c0: 52:f4:87:0f:b6:b2:3f:29:00:f8:7d:e0:e3:42:a8:1c:c0:09: e5:ff:45:24:fc:47:ed:5b:95:56:2e:f6:2a:87:1a:6f:e5:10: 9f:35:00:bb:e9:c0:3a:46:eb:bb:b0:81:73:5f:1e:c7:b1:59: a9:de:d0:5e:60:f3:c1:ad:2b:67:77:fd:df:36:52:53:b4:5b: 4c:72:41:6c:2a:a9:f5:13:be:f8:1e:fa:2e:0c:83:00:78:c2: 11:94:34:d5:c3:a4:ed:34:36:d1:8f:27:c8:43:d6:bc:8d:4e: 69:4d:95:1d:02:41:57:60:5e:e2:0c:0c:ce:30:7b:e9:79:7f: d8:8c:95:68 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUMvX8FdroEJd4OESOAydsyorGdkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU2MzZaFw0yNzA5MjcwMTAxMzZaMDMxMTAvBgNV BAMTKENDQjc3REE5QkREREUyMTYwOENCMjBFNjREOTlDNUFGRThBMkQwRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrR8zAteraAsAM8a1xEIvIN6Zl 9c3Tka3G0gRHoImlutH8X+WZMmO0Bc6bskHULN590zk0vNXYB0zfYXjoZMc14e9f dItaFqTg4i84aTKM8WaLl28suyudp78/nAcMCg3az86C0BiFYyZSDmcuABzr9eJF Kr61QfiYTtxhgHWzFFvJMrA7vE4V8JBYuIuA6SGOuz+EMXtQxehaAyM5DUW1rElr OPQwHPeHAnYcYDs1gGCws6Wvad72zYKtOhlNSgvr3TzS72T4cI5vZVQedypmhxjI EFBb/zStUlQFQgxVZCKAsCEcHWPuJ5qRrl38X97CSfwMkJ6gRzRhIzRFLegFAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUzLd9qb3d4hYIyyDmTZnFr+ii0O4wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzM0MzMyZTMyMzQz ODJlMzEzODM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzYzMzM1MzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAyv4uDANBgkqhkiG9w0BAQsFAAOCAQEAbAM+E5r0R5fIVmbfFMu6DBhD aNwvngxJ+7mUcRTCHq/cD2Sdrxjl2O2nWim8SSUrn1fEImx5XH0RZEgy63h9iA0a nDbVegfRcMLZchv8HXPcV45LY6lnU4a5Vxfaooi8ICCJrT3C05DChdeFy2A8aMCr akm4RgwlMi6J0zHAUvSHD7ayPykA+H3g40KoHMAJ5f9FJPxH7VuVVi72Kocab+UQ nzUAu+nAOkbru7CBc18ex7FZqd7QXmDzwa0rZ3f93zZSU7RbTHJBbCqp9RO++B76 LgyDAHjCEZQ01cOk7TQ20Y8nyEPWvI1OaU2VHQJBV2Be4gwMzjB76Xl/2IyVaA== -----END CERTIFICATE-----Generated at Tue Oct 13 19:12:07 2026 by rpki-client