$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230302e302f32322d3232203d3e203536303436.roa File: 34332e3234382e3230302e302f32322d3232203d3e203536303436.roa (raw, json) Hash identifier: le9fRNvKvhFl84MPFhHnVD2xKgYJu9WQj8KrjgPYMAw= Subject key identifier: 8B:BB:42:F2:88:96:34:C7:93:81:77:31:9E:89:88:9C:C9:EE:AF:9C Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 4240E2CB7DDA5141950EEF3A3AA3D46144B34474 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230302e302f32322d3232203d3e203536303436.roa Signing time: Mon 28 Sep 2026 01:00:41 +0000 ROA not before: Mon 28 Sep 2026 00:55:41 +0000 ROA not after: Mon 27 Sep 2027 01:00:41 +0000 asID: 56046 IP address blocks: 43.248.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:40:e2:cb:7d:da:51:41:95:0e:ef:3a:3a:a3:d4:61:44:b3:44:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:41 2026 GMT Not After : Sep 27 01:00:41 2027 GMT Subject: CN=8BBB42F2889634C7938177319E89889CC9EEAF9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:31:29:9b:45:1f:4f:6d:3c:44:ee:44:60: 24:7c:d4:92:f6:df:bb:19:f7:e0:f6:3b:9a:87:c5: f8:74:dc:b5:cc:7b:18:c2:7c:f3:a2:a0:58:81:7c: 4d:4d:bc:78:b3:1c:ba:76:5c:4d:62:1a:4e:05:28: af:23:d9:6a:59:3d:76:fd:7b:1f:39:a6:2f:87:2f: 61:2a:fe:02:df:eb:40:dc:c0:d4:2a:16:06:13:06: 8c:46:02:42:1d:93:a4:c4:8b:2e:46:8b:e2:d2:d2: c1:4b:b5:aa:23:09:43:63:4f:93:2f:85:6d:03:89: 0f:2c:c5:fc:05:01:3f:b8:74:75:20:d4:29:91:09: 4b:26:a0:75:dd:44:04:bb:f4:13:cc:93:1f:3d:86: 66:95:28:88:6c:a1:76:ef:49:f5:1a:70:75:e6:5e: 5e:d0:09:89:0a:46:7e:be:0c:83:3d:47:40:49:3f: bb:33:7a:47:b6:45:b6:bf:71:cd:98:c8:5f:0c:7a: ef:2d:c9:84:26:ca:b9:58:4e:2a:4c:ab:8b:bd:16: 48:e2:b2:19:14:21:6d:74:2f:98:9f:a6:56:c2:f1: 6f:39:c0:95:43:92:b3:35:f1:d7:be:cc:69:6f:0f: 05:fc:d6:27:49:84:7d:7f:5c:72:66:b9:cb:ec:7e: d2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BB:42:F2:88:96:34:C7:93:81:77:31:9E:89:88:9C:C9:EE:AF:9C X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230302e302f32322d3232203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.200.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:d9:1c:d6:49:d1:ce:77:24:93:55:4f:bd:b4:bb:81:77:45: 20:52:be:cc:de:2b:fd:99:92:1e:aa:50:60:c2:d1:87:ca:73: 62:84:3f:f4:07:70:80:da:50:3b:b9:fc:cc:08:c5:4c:ba:2c: e5:8b:af:90:72:5e:a8:b0:ad:8a:00:16:3f:40:f9:74:7f:5e: 2b:81:f7:b1:35:4b:ef:16:25:97:08:b7:fe:52:9b:14:1c:e5: 7e:66:af:95:8f:9b:d8:62:d1:86:9c:d4:71:66:40:0a:11:a2: e5:b8:ef:9b:79:55:01:db:c6:42:e2:00:49:46:2b:b3:c1:11: 8e:45:f8:77:67:0f:93:84:c1:b3:fa:a1:c9:a8:1c:d5:47:8d: b6:36:c2:3b:9e:fc:ca:85:c0:8a:bb:3f:49:53:4f:2e:11:4e: 69:4b:b8:0f:94:85:34:2d:90:95:69:1b:8d:68:d6:22:ed:8e: a3:b6:e5:3b:d3:6f:69:6e:8a:01:2c:a4:2c:cc:56:0d:e8:60: 1c:fb:da:69:ed:6f:d0:13:5b:ad:b2:cf:a1:d2:bc:bd:a3:aa: 2b:79:68:20:a8:df:96:bc:3c:a6:f9:28:92:46:4f:19:7f:8e: 8e:22:3c:60:78:af:41:8f:b4:e1:49:1d:94:2d:fb:0a:0d:56: 3c:ff:6e:1e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQkDiy33aUUGVDu86OqPUYUSzRHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1NDFaFw0yNzA5MjcwMTAwNDFaMDMxMTAvBgNV BAMTKDhCQkI0MkYyODg5NjM0Qzc5MzgxNzczMTlFODk4ODlDQzlFRUFGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCowjEpm0UfT208RO5EYCR81JL2 37sZ9+D2O5qHxfh03LXMexjCfPOioFiBfE1NvHizHLp2XE1iGk4FKK8j2WpZPXb9 ex85pi+HL2Eq/gLf60DcwNQqFgYTBoxGAkIdk6TEiy5Gi+LS0sFLtaojCUNjT5Mv hW0DiQ8sxfwFAT+4dHUg1CmRCUsmoHXdRAS79BPMkx89hmaVKIhsoXbvSfUacHXm Xl7QCYkKRn6+DIM9R0BJP7szeke2Rba/cc2YyF8Meu8tyYQmyrlYTipMq4u9Fkji shkUIW10L5ifplbC8W85wJVDkrM18de+zGlvDwX81idJhH1/XHJmucvsftIHAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUi7tC8oiWNMeTgXcxnomInMnur5wwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzM0MzMyZTMyMzQz ODJlMzIzMDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiv4yDANBgkqhkiG9w0BAQsFAAOCAQEAW9kc1knRznckk1VPvbS7gXdF IFK+zN4r/ZmSHqpQYMLRh8pzYoQ/9AdwgNpQO7n8zAjFTLos5YuvkHJeqLCtigAW P0D5dH9eK4H3sTVL7xYllwi3/lKbFBzlfmavlY+b2GLRhpzUcWZAChGi5bjvm3lV AdvGQuIASUYrs8ERjkX4d2cPk4TBs/qhyagc1UeNtjbCO578yoXAirs/SVNPLhFO aUu4D5SFNC2QlWkbjWjWIu2Oo7blO9NvaW6KASykLMxWDehgHPvaae1v0BNbrbLP odK8vaOqK3loIKjflrw8pvkokkZPGX+OjiI8YHivQY+04UkdlC37Cg1WPP9uHg== -----END CERTIFICATE-----Generated at Sun Oct 11 15:28:12 2026 by rpki-client