$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139322e302f32302d3230203d3e2034383337.roa File: 34332e3234382e3139322e302f32302d3230203d3e2034383337.roa (raw, json) Hash identifier: Kt7Eqq94+8qYuX3kKx5doZQMlGvIK4le8i/lkzus224= Subject key identifier: 38:2A:F2:68:8F:5F:A9:75:57:6C:35:53:2A:DD:29:1E:72:47:09:34 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 55D6C1D08388B3C271DA6CC72E3AD12CBE2F8930 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139322e302f32302d3230203d3e2034383337.roa Signing time: Mon 28 Sep 2026 01:00:36 +0000 ROA not before: Mon 28 Sep 2026 00:55:36 +0000 ROA not after: Mon 27 Sep 2027 01:00:36 +0000 asID: 4837 IP address blocks: 43.248.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d6:c1:d0:83:88:b3:c2:71:da:6c:c7:2e:3a:d1:2c:be:2f:89:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:36 2026 GMT Not After : Sep 27 01:00:36 2027 GMT Subject: CN=382AF2688F5FA975576C35532ADD291E72470934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:46:46:39:a9:ed:ea:a0:30:6f:db:18:17:bf: ed:7c:75:ba:71:ee:be:03:0c:6c:85:b0:f9:a1:71: 7b:05:ff:e5:26:86:8e:a9:3d:c7:c9:23:3f:3d:45: 48:c9:03:61:8a:d6:74:78:f4:9c:93:1e:5d:43:a8: 75:1e:e3:2a:71:55:fc:c6:64:da:41:fd:ad:bd:a0: 2c:ae:2f:b7:35:74:09:b2:24:57:6a:70:ed:00:c2: e0:41:5f:52:36:c6:45:b3:4f:8f:ea:2f:75:dd:3f: 2f:e1:4c:31:1b:cb:d5:a7:7c:f7:39:d8:4f:c7:7c: f4:5f:26:0f:88:18:61:84:86:2f:37:21:b7:33:90: 2e:9f:7f:d2:69:20:ca:1a:41:dd:80:4e:5f:a9:4a: b8:fe:3c:8e:36:fc:74:3d:61:69:c1:25:03:b4:35: e7:94:26:da:3b:15:17:9e:ec:c1:f8:14:93:bc:32: 3a:bb:f2:61:ff:c7:f0:ca:7c:0c:a0:f1:f7:ce:c6: 2d:2e:41:b0:08:46:9d:a0:29:90:c6:ea:69:dd:2e: 4b:fc:c7:e0:7c:ce:c9:15:57:04:b2:39:f0:2d:56: dc:5f:29:81:0d:b4:98:44:97:9a:53:dd:45:1b:f7: 44:c9:45:37:b7:45:01:df:69:6c:f1:f5:fd:76:11: 4c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2A:F2:68:8F:5F:A9:75:57:6C:35:53:2A:DD:29:1E:72:47:09:34 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139322e302f32302d3230203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.192.0/20 Signature Algorithm: sha256WithRSAEncryption 67:b5:61:87:8b:05:95:64:f8:3d:3f:8d:54:11:2e:3c:a8:1a: e4:24:3d:eb:0a:c8:25:47:7d:d4:a9:5a:6a:28:b5:89:9e:f6: 70:ad:68:4a:c3:95:4f:65:5e:51:fd:c9:0e:57:5b:e9:30:1e: 38:b0:d0:12:6b:e8:c2:78:49:0b:eb:e4:06:86:c0:af:3e:d7: 13:0c:ae:4c:26:12:e3:68:02:62:0d:fa:f8:dc:73:df:7d:df: 49:97:15:b2:a1:8e:de:04:08:a3:4d:a0:fd:f3:76:e7:7a:55: 78:f9:25:f5:62:4f:df:13:4a:81:07:b6:78:36:cf:86:ac:7a: 30:5c:bb:17:57:09:55:be:f4:29:47:36:57:af:69:62:32:0b: 4f:20:89:aa:76:f7:5a:6d:a7:23:d6:b0:03:38:13:06:cd:8d: 8a:03:75:9e:b8:0b:0e:d2:23:d3:12:e6:31:84:24:95:09:4e: 2c:e3:16:92:98:3d:29:a4:f9:67:b6:86:b6:2b:34:de:4a:c1: 98:43:16:a1:3f:f4:f5:74:9d:0e:e8:ae:3f:0a:f4:05:22:ce: 75:41:e1:04:99:9d:de:08:00:ea:3a:2c:4d:ca:95:3c:bb:47: e3:23:c1:5f:be:4f:e7:bb:50:83:b4:c2:f0:0f:41:5e:22:d3: f2:73:84:14 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUVdbB0IOIs8Jx2mzHLjrRLL4viTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzZaFw0yNzA5MjcwMTAwMzZaMDMxMTAvBgNV BAMTKDM4MkFGMjY4OEY1RkE5NzU1NzZDMzU1MzJBREQyOTFFNzI0NzA5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcRkY5qe3qoDBv2xgXv+18dbpx 7r4DDGyFsPmhcXsF/+Umho6pPcfJIz89RUjJA2GK1nR49JyTHl1DqHUe4ypxVfzG ZNpB/a29oCyuL7c1dAmyJFdqcO0AwuBBX1I2xkWzT4/qL3XdPy/hTDEby9WnfPc5 2E/HfPRfJg+IGGGEhi83IbczkC6ff9JpIMoaQd2ATl+pSrj+PI42/HQ9YWnBJQO0 NeeUJto7FRee7MH4FJO8Mjq78mH/x/DKfAyg8ffOxi0uQbAIRp2gKZDG6mndLkv8 x+B8zskVVwSyOfAtVtxfKYENtJhEl5pT3UUb90TJRTe3RQHfaWzx9f12EUzbAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUOCryaI9fqXVXbDVTKt0pHnJHCTQwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMTM5MzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBCv4wDANBgkqhkiG9w0BAQsFAAOCAQEAZ7Vhh4sFlWT4PT+NVBEuPKga5CQ9 6wrIJUd91Klaaii1iZ72cK1oSsOVT2VeUf3JDldb6TAeOLDQEmvownhJC+vkBobA rz7XEwyuTCYS42gCYg36+Nxz333fSZcVsqGO3gQIo02g/fN253pVePkl9WJP3xNK gQe2eDbPhqx6MFy7F1cJVb70KUc2V69pYjILTyCJqnb3Wm2nI9awAzgTBs2NigN1 nrgLDtIj0xLmMYQklQlOLOMWkpg9KaT5Z7aGtis03krBmEMWoT/09XSdDuiuPwr0 BSLOdUHhBJmd3ggA6josTcqVPLtH4yPBX75P57tQg7TC8A9BXiLT8nOEFA== -----END CERTIFICATE-----Generated at Sat Oct 10 11:08:39 2026 by rpki-client