$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139362e302f32322d3232203d3e2034383337.roa File: 34332e3234382e3139362e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: cQxGd5/+cBBWcsn46mgKJh0m7YdiGHQ/vQFcH2bnqO8= Subject key identifier: 98:10:E5:C2:67:4A:A7:C3:71:16:BF:B8:4F:97:74:B8:7E:D3:75:45 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 45768E6A507B68C742E872E61265357C48983971 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139362e302f32322d3232203d3e2034383337.roa Signing time: Mon 28 Sep 2026 01:00:41 +0000 ROA not before: Mon 28 Sep 2026 00:55:41 +0000 ROA not after: Mon 27 Sep 2027 01:00:41 +0000 asID: 4837 IP address blocks: 43.248.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:76:8e:6a:50:7b:68:c7:42:e8:72:e6:12:65:35:7c:48:98:39:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:41 2026 GMT Not After : Sep 27 01:00:41 2027 GMT Subject: CN=9810E5C2674AA7C37116BFB84F9774B87ED37545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:9d:86:7b:c0:cc:87:f4:55:a7:6f:3d:b6: 9d:df:73:d6:ae:49:9e:01:eb:cf:d2:0a:c7:4f:e7: 18:03:23:52:c4:30:f1:be:bf:13:4d:02:b8:0f:a5: 6f:0c:1a:36:34:cd:fe:f3:25:b1:ef:80:83:1a:01: b6:f7:41:e9:4f:ea:a7:09:41:34:84:bc:31:6c:79: a1:ec:1f:52:3e:d6:ca:98:e4:31:b9:e2:76:69:1c: 5e:d9:ab:dc:d6:24:36:4d:a6:09:12:9f:e3:34:3c: 61:8e:ed:5f:fa:b4:82:60:ae:33:39:e8:dd:f8:da: 30:ca:c4:40:d8:c6:e3:56:df:e7:e3:9d:54:4d:80: 4a:98:cd:c6:de:80:8e:43:50:b4:38:88:51:6c:df: 27:c8:52:38:ad:82:0a:9a:68:36:99:c6:21:5a:9c: 74:83:c4:88:9e:92:06:24:f4:94:b8:4f:17:ab:ed: 25:b3:65:66:7a:02:b7:f0:ef:f3:07:b9:25:47:68: ff:e3:ad:d6:b8:0a:26:20:5d:e4:3c:57:1e:f3:e1: 7e:6b:a4:f5:6e:c3:b8:c9:5d:82:9a:53:ae:c3:14: de:77:82:25:a2:7a:ed:76:1a:8c:95:74:e7:0f:18: 84:3c:65:79:7f:db:b9:79:7a:a0:32:a9:99:f8:d1: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:10:E5:C2:67:4A:A7:C3:71:16:BF:B8:4F:97:74:B8:7E:D3:75:45 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139362e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.196.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:e9:63:91:28:f3:b3:16:cd:37:b1:51:bf:0a:a3:ca:11:3b: 6a:56:f3:c4:01:99:f4:bf:3e:5a:39:f6:2a:75:de:b0:f2:ad: c9:80:c9:b4:5e:d3:f6:0d:48:a5:9d:f9:80:ad:0f:c0:ba:89: aa:de:a4:41:c6:2f:7d:87:9c:68:7e:66:64:07:28:fd:66:08: 03:2c:c8:f9:2e:2e:7a:83:12:dc:8f:ff:b2:74:98:52:ee:4f: de:9d:d7:a3:37:ca:16:f3:59:23:d3:d8:68:b6:9e:de:27:11: 58:9a:1b:27:f3:9c:27:1d:57:8e:04:e4:c7:a6:6a:4e:e0:c1: f7:3a:9d:5c:e8:ad:cc:2f:87:c5:d5:88:85:44:8e:93:46:f1: 60:5e:00:ba:d1:e2:3d:1b:f7:b7:50:02:92:34:55:5f:bd:51: 53:ca:10:bf:f9:bc:e2:a6:e6:44:4f:a3:f3:10:49:cd:93:de: 8f:b2:26:16:07:ca:41:29:f2:a1:58:de:51:18:ea:ff:ce:c8: 5a:39:b5:96:29:08:8f:34:9d:e2:62:5e:cf:00:50:9f:e8:ac: 3c:67:7b:22:7a:7f:d8:c1:3d:26:73:74:c0:6d:dd:99:25:46: 77:df:ab:ac:30:9d:63:e4:0d:f4:6a:af:a4:1b:3e:ae:d2:0b: ed:8e:57:23 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIURXaOalB7aMdC6HLmEmU1fEiYOXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1NDFaFw0yNzA5MjcwMTAwNDFaMDMxMTAvBgNV BAMTKDk4MTBFNUMyNjc0QUE3QzM3MTE2QkZCODRGOTc3NEI4N0VEMzc1NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0E52Ge8DMh/RVp289tp3fc9au SZ4B68/SCsdP5xgDI1LEMPG+vxNNArgPpW8MGjY0zf7zJbHvgIMaAbb3QelP6qcJ QTSEvDFseaHsH1I+1sqY5DG54nZpHF7Zq9zWJDZNpgkSn+M0PGGO7V/6tIJgrjM5 6N342jDKxEDYxuNW3+fjnVRNgEqYzcbegI5DULQ4iFFs3yfIUjitggqaaDaZxiFa nHSDxIiekgYk9JS4Txer7SWzZWZ6Arfw7/MHuSVHaP/jrda4CiYgXeQ8Vx7z4X5r pPVuw7jJXYKaU67DFN53giWieu12GoyVdOcPGIQ8ZXl/27l5eqAyqZn40SSVAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUmBDlwmdKp8NxFr+4T5d0uH7TdUUwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMTM5MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv4xDANBgkqhkiG9w0BAQsFAAOCAQEADOljkSjzsxbNN7FRvwqjyhE7albz xAGZ9L8+Wjn2KnXesPKtyYDJtF7T9g1IpZ35gK0PwLqJqt6kQcYvfYecaH5mZAco /WYIAyzI+S4ueoMS3I//snSYUu5P3p3XozfKFvNZI9PYaLae3icRWJobJ/OcJx1X jgTkx6ZqTuDB9zqdXOitzC+HxdWIhUSOk0bxYF4AutHiPRv3t1ACkjRVX71RU8oQ v/m84qbmRE+j8xBJzZPej7ImFgfKQSnyoVjeURjq/87IWjm1likIjzSd4mJezwBQ n+isPGd7Inp/2ME9JnN0wG3dmSVGd9+rrDCdY+QN9GqvpBs+rtIL7Y5XIw== -----END CERTIFICATE-----Generated at Sat Oct 10 13:04:33 2026 by rpki-client