$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230302e302f32322d3232203d3e2034383337.roa File: 34332e3234382e3230302e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: zY3NTjww+HgNAaSD282IEfko/nUWJUT/eWuM4VsXiXk= Subject key identifier: C7:32:C1:E8:68:63:76:75:4A:36:44:D9:D8:2A:23:68:E2:23:E6:E7 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 33C40AB0C3993DF9DA17E9129C68D3AC4689644D Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230302e302f32322d3232203d3e2034383337.roa Signing time: Mon 28 Sep 2026 01:00:38 +0000 ROA not before: Mon 28 Sep 2026 00:55:38 +0000 ROA not after: Mon 27 Sep 2027 01:00:38 +0000 asID: 4837 IP address blocks: 43.248.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c4:0a:b0:c3:99:3d:f9:da:17:e9:12:9c:68:d3:ac:46:89:64:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:38 2026 GMT Not After : Sep 27 01:00:38 2027 GMT Subject: CN=C732C1E8686376754A3644D9D82A2368E223E6E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:01:38:d6:c5:a4:4d:c4:11:2b:f2:17:18: 35:30:aa:69:07:2b:f0:db:9c:d5:30:34:e7:67:18: 01:a2:94:78:5e:19:8c:e6:87:5b:36:c5:8e:b4:17: c2:90:f9:8d:de:3a:3e:ef:69:1d:a2:a4:30:94:41: c8:ff:4a:62:03:30:69:03:d1:a1:b6:8b:c4:a6:91: af:86:e1:41:ef:13:18:39:1e:fa:62:fa:6d:a8:ed: 85:c0:b3:6b:e2:a0:f5:96:59:51:18:07:83:db:d4: 25:36:de:0d:b8:87:72:a7:e4:18:89:fb:b5:a3:e4: 59:f1:d8:39:ca:d3:41:51:c7:6d:30:4f:2f:3a:a9: a9:fe:51:90:49:81:bd:e9:7a:bb:38:43:78:b8:79: 79:31:20:1f:02:7b:93:60:fd:34:39:25:54:d2:9a: d3:38:aa:81:28:0c:28:01:52:2e:ae:56:71:28:e4: 7c:9c:24:47:05:8c:6c:54:fd:ea:83:1f:b6:0e:49: ae:58:4a:48:77:df:61:18:a9:1f:d8:f1:a9:c3:22: 60:d1:1a:9f:44:3e:04:c0:7e:35:a6:4e:7b:6a:49: 18:f6:9e:91:e0:1c:ba:e1:66:5f:e5:25:7e:19:07: 45:d4:23:1e:26:58:c0:48:c7:34:65:81:a2:a1:de: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:32:C1:E8:68:63:76:75:4A:36:44:D9:D8:2A:23:68:E2:23:E6:E7 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230302e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.200.0/22 Signature Algorithm: sha256WithRSAEncryption 41:c5:3b:b6:82:9b:aa:c0:e4:7b:d0:0c:57:bf:51:8e:b1:78: e8:54:d4:9c:34:38:02:ab:6a:dd:11:5a:cd:48:76:08:b0:32: e8:68:cf:af:35:f0:35:9a:f0:6d:5d:93:bd:06:c5:b7:6a:8c: 6d:e2:9f:f1:c5:e1:82:5f:bf:cc:74:92:ea:19:9e:a3:88:08: bd:f5:4c:ca:75:dd:78:ae:e6:39:f9:bb:39:04:31:6c:6c:76: ee:a3:54:dd:c2:fb:f5:d5:a8:e5:c4:12:51:18:56:d2:fe:1a: c7:d6:24:e2:e1:fe:f6:89:6c:63:65:59:2a:b1:a1:1f:cc:be: 00:d1:df:40:2b:9c:34:8c:63:be:53:2c:d1:92:ce:fb:cb:1e: 7f:03:d6:ad:f9:3b:e4:a9:bf:e4:20:22:71:77:1c:b8:0c:a9: cc:99:ce:4e:08:65:c4:07:26:0e:75:eb:36:16:b4:5b:20:ff: 5e:64:05:a2:32:77:33:7a:76:af:54:59:03:f9:4c:72:be:9a: 1e:97:b2:ea:57:ff:e4:a5:16:b6:bd:22:3e:3e:41:6a:71:df: 6e:47:f9:94:48:2f:65:0d:58:f2:54:24:c8:91:84:4e:68:42: 40:5f:fe:45:79:f9:32:9d:21:00:7d:9f:5d:40:73:ad:f4:ed: a6:1d:a8:74 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUM8QKsMOZPfnaF+kSnGjTrEaJZE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzhaFw0yNzA5MjcwMTAwMzhaMDMxMTAvBgNV BAMTKEM3MzJDMUU4Njg2Mzc2NzU0QTM2NDREOUQ4MkEyMzY4RTIyM0U2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jAE41sWkTcQRK/IXGDUwqmkH K/DbnNUwNOdnGAGilHheGYzmh1s2xY60F8KQ+Y3eOj7vaR2ipDCUQcj/SmIDMGkD 0aG2i8Smka+G4UHvExg5Hvpi+m2o7YXAs2vioPWWWVEYB4Pb1CU23g24h3Kn5BiJ +7Wj5Fnx2DnK00FRx20wTy86qan+UZBJgb3pers4Q3i4eXkxIB8Ce5Ng/TQ5JVTS mtM4qoEoDCgBUi6uVnEo5HycJEcFjGxU/eqDH7YOSa5YSkh332EYqR/Y8anDImDR Gp9EPgTAfjWmTntqSRj2npHgHLrhZl/lJX4ZB0XUIx4mWMBIxzRlgaKh3k99AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUxzLB6GhjdnVKNkTZ2CojaOIj5ucwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMjMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv4yDANBgkqhkiG9w0BAQsFAAOCAQEAQcU7toKbqsDke9AMV79RjrF46FTU nDQ4Aqtq3RFazUh2CLAy6GjPrzXwNZrwbV2TvQbFt2qMbeKf8cXhgl+/zHSS6hme o4gIvfVMynXdeK7mOfm7OQQxbGx27qNU3cL79dWo5cQSURhW0v4ax9Yk4uH+9ols Y2VZKrGhH8y+ANHfQCucNIxjvlMs0ZLO+8sefwPWrfk75Km/5CAicXccuAypzJnO TghlxAcmDnXrNha0WyD/XmQFojJ3M3p2r1RZA/lMcr6aHpey6lf/5KUWtr0iPj5B anHfbkf5lEgvZQ1Y8lQkyJGETmhCQF/+RXn5Mp0hAH2fXUBzrfTtph2odA== -----END CERTIFICATE-----Generated at Sun Oct 11 17:29:35 2026 by rpki-client