$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230302e302f32332d3233203d3e203536303436.roa File: 34332e3234382e3230302e302f32332d3233203d3e203536303436.roa (raw, json) Hash identifier: cy2kipDiPJDhx5yX2NCr9uphkQycMYfdOPo17jaFcOc= Subject key identifier: 62:D8:20:6D:49:B8:D9:8E:EB:94:41:D0:40:98:35:B4:E0:20:E7:8F Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 3ACB12063CD93E0247E09FD60C568C9BF6F91435 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230302e302f32332d3233203d3e203536303436.roa Signing time: Mon 28 Sep 2026 01:00:37 +0000 ROA not before: Mon 28 Sep 2026 00:55:37 +0000 ROA not after: Mon 27 Sep 2027 01:00:37 +0000 asID: 56046 IP address blocks: 43.248.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:cb:12:06:3c:d9:3e:02:47:e0:9f:d6:0c:56:8c:9b:f6:f9:14:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:37 2026 GMT Not After : Sep 27 01:00:37 2027 GMT Subject: CN=62D8206D49B8D98EEB9441D0409835B4E020E78F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:a4:7a:c4:90:98:d0:2c:12:c4:06:27:ff: df:a7:06:88:a7:6d:63:0e:af:80:d1:34:81:6e:f3: 65:f9:ed:77:ac:a8:3d:13:77:18:63:94:9a:86:3b: e3:b9:a7:b7:3d:41:54:1e:2a:3a:c5:21:44:79:50: 74:c1:8b:b3:ed:55:cf:63:95:47:cb:97:b7:3d:16: 78:78:e2:83:83:d0:49:0e:cc:95:41:e7:c1:e8:34: 8d:49:7d:fc:26:da:e8:96:05:01:ea:45:cd:ab:51: 02:0d:c6:1d:60:bf:51:17:34:1e:35:2b:43:5c:0c: 52:dd:9a:d6:f7:b8:62:51:1b:11:fa:7e:26:a1:02: cb:63:56:ab:d2:b0:55:e0:ba:d3:1b:1b:3e:d1:5c: 62:1b:56:04:e2:c6:e0:09:97:ec:84:94:2f:f3:54: 78:32:92:91:49:a8:7d:d9:77:41:1f:4f:55:90:e7: e2:c1:17:e3:54:8c:de:7a:fd:32:0c:aa:a7:a3:8a: eb:d3:f1:c5:b1:71:d5:80:32:7c:f4:43:36:7f:23: 5c:62:57:fc:04:61:9b:86:46:6b:a3:98:c0:27:ac: dd:31:a4:18:c6:83:90:26:8c:b5:31:12:e4:e5:76: 6d:fe:da:4b:eb:b2:e5:2c:11:f5:c3:bf:37:6e:70: 2a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D8:20:6D:49:B8:D9:8E:EB:94:41:D0:40:98:35:B4:E0:20:E7:8F X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230302e302f32332d3233203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.200.0/23 Signature Algorithm: sha256WithRSAEncryption 25:fc:a2:dc:eb:44:b3:37:bb:7e:72:d7:0c:4a:a8:b8:b1:9d: a4:cc:d1:cc:0b:19:4e:cf:ba:59:41:d4:17:c7:76:4b:ad:b5: b9:5d:89:a6:72:5a:d3:9f:b4:1e:25:4c:90:a1:a5:82:10:18: aa:98:13:a1:b5:5e:d9:8e:a8:34:ed:0a:c0:9f:c8:7e:75:9b: 5e:f1:45:05:9f:4f:72:c6:58:5c:25:24:16:0b:9e:48:b1:49: c7:83:a6:60:34:c0:b4:3a:93:bf:7f:15:c4:31:86:7c:10:6c: d2:fe:28:02:f9:14:e3:83:59:c3:87:e2:0e:62:57:ca:94:07: b5:5d:d8:69:23:d0:9f:49:47:03:fb:44:ac:48:20:8f:d4:c4: 3b:80:d7:df:bd:20:b1:09:77:19:3e:af:04:96:86:f4:83:cd: 4f:c9:40:d4:17:a5:2c:d4:40:32:b6:44:50:d9:86:33:03:fc: d2:b3:78:a1:19:ee:ef:54:5c:16:ab:d3:b9:c5:c3:4f:86:ab: ae:3c:63:3b:2c:5e:bd:00:d5:76:f1:70:9e:cc:a9:3f:cc:4d: 65:9c:e8:4f:01:8d:44:11:9c:6c:98:b3:f6:f6:49:6f:24:df: 27:be:33:14:e7:a8:da:48:ff:23:c6:9b:cd:a8:14:f3:c8:03: 7a:bc:9c:d4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOssSBjzZPgJH4J/WDFaMm/b5FDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzdaFw0yNzA5MjcwMTAwMzdaMDMxMTAvBgNV BAMTKDYyRDgyMDZENDlCOEQ5OEVFQjk0NDFEMDQwOTgzNUI0RTAyMEU3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtqR6xJCY0CwSxAYn/9+nBoin bWMOr4DRNIFu82X57XesqD0TdxhjlJqGO+O5p7c9QVQeKjrFIUR5UHTBi7PtVc9j lUfLl7c9Fnh44oOD0EkOzJVB58HoNI1Jffwm2uiWBQHqRc2rUQINxh1gv1EXNB41 K0NcDFLdmtb3uGJRGxH6fiahAstjVqvSsFXgutMbGz7RXGIbVgTixuAJl+yElC/z VHgykpFJqH3Zd0EfT1WQ5+LBF+NUjN56/TIMqqejiuvT8cWxcdWAMnz0QzZ/I1xi V/wEYZuGRmujmMAnrN0xpBjGg5AmjLUxEuTldm3+2kvrsuUsEfXDvzducCoHAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUYtggbUm42Y7rlEHQQJg1tOAg548wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzM0MzMyZTMyMzQz ODJlMzIzMDMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEASv4yDANBgkqhkiG9w0BAQsFAAOCAQEAJfyi3OtEsze7fnLXDEqouLGd pMzRzAsZTs+6WUHUF8d2S621uV2JpnJa05+0HiVMkKGlghAYqpgTobVe2Y6oNO0K wJ/IfnWbXvFFBZ9PcsZYXCUkFgueSLFJx4OmYDTAtDqTv38VxDGGfBBs0v4oAvkU 44NZw4fiDmJXypQHtV3YaSPQn0lHA/tErEggj9TEO4DX370gsQl3GT6vBJaG9IPN T8lA1BelLNRAMrZEUNmGMwP80rN4oRnu71RcFqvTucXDT4arrjxjOyxevQDVdvFw nsypP8xNZZzoTwGNRBGcbJiz9vZJbyTfJ74zFOeo2kj/I8abzagU88gDeryc1A== -----END CERTIFICATE-----Generated at Fri Oct 9 22:38:26 2026 by rpki-client