$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230322e302f32332d3233203d3e2034383337.roa File: 34332e3234382e3230322e302f32332d3233203d3e2034383337.roa (raw, json) Hash identifier: ENEPWklns9BYNXooxlOUGBLBidQfzrr9aza8stu6Mg0= Subject key identifier: 26:58:DD:B4:9E:00:9A:99:90:7F:53:6B:FD:E1:DC:CB:B9:39:46:AA Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 2E696BCD6766B41FEAFAF34FAFDFA4D36A2A47F3 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230322e302f32332d3233203d3e2034383337.roa Signing time: Mon 28 Sep 2026 01:00:41 +0000 ROA not before: Mon 28 Sep 2026 00:55:41 +0000 ROA not after: Mon 27 Sep 2027 01:00:41 +0000 asID: 4837 IP address blocks: 43.248.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:69:6b:cd:67:66:b4:1f:ea:fa:f3:4f:af:df:a4:d3:6a:2a:47:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:41 2026 GMT Not After : Sep 27 01:00:41 2027 GMT Subject: CN=2658DDB49E009A99907F536BFDE1DCCBB93946AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:b9:54:3b:4c:bc:83:0c:2b:18:53:91:4b: ed:1b:06:a4:f4:62:ac:d3:de:15:96:7d:fb:0a:f4: ba:f3:7d:57:62:9e:cb:a2:69:41:5c:c5:13:b1:f7: d5:e1:a1:f4:8d:60:4a:3f:e8:2d:8a:4c:e1:73:de: 46:93:a0:8a:8e:97:3b:00:55:68:31:f4:13:96:26: 58:d4:88:20:5e:f3:cd:20:79:17:9c:66:45:e3:94: 0f:06:98:e8:04:1e:17:71:db:4e:21:8b:ff:e9:27: b2:9a:45:ad:4e:29:36:8b:c7:ab:ea:f9:dc:91:01: 1d:ef:2d:a4:d8:20:da:12:31:68:0a:10:34:2e:61: 53:b7:59:ea:0a:06:58:ec:f8:8b:9e:74:6a:31:df: 94:36:f1:2f:8f:8c:59:8e:78:94:8f:e7:7d:cf:b1: 78:0c:ab:0e:4b:d3:74:46:00:95:f8:b3:98:a4:a8: be:6e:d8:f4:93:8f:83:14:78:01:3e:36:33:a2:b7: 0b:1c:ae:ae:f1:aa:1f:b4:91:a4:1e:35:8d:ae:47: 51:bf:f0:81:b7:18:f8:3d:4b:64:16:36:3d:d1:c4: d8:3a:d0:f4:3a:9a:2f:ff:9e:3f:eb:49:6a:8e:42: 34:20:3d:f3:0b:ad:61:49:19:78:89:0b:28:70:65: be:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:58:DD:B4:9E:00:9A:99:90:7F:53:6B:FD:E1:DC:CB:B9:39:46:AA X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230322e302f32332d3233203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.202.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:83:b7:0c:04:17:99:1f:3f:a8:b3:01:0b:d0:32:6d:04:7d: 86:f6:8d:8b:4b:1a:ed:db:20:77:74:09:44:88:ab:84:d0:9f: ed:df:ed:5a:8d:5a:34:34:ba:d6:96:39:42:09:08:3f:c2:be: be:72:35:a6:7b:a3:ae:99:16:75:95:07:e4:59:db:09:12:01: d0:58:ea:ff:c7:b1:67:4f:fd:2c:3c:a3:1e:59:fa:9c:52:44: a7:b4:c1:f0:85:26:e4:ba:e6:a4:11:98:ad:6a:8b:1b:90:64: c5:d3:09:24:09:3c:e9:4d:a0:0d:c3:f3:55:b6:73:6f:71:ac: 90:28:a7:96:bc:6f:e6:40:28:3c:96:a0:c8:0f:b5:79:15:1c: 88:fb:77:06:6b:57:df:14:f7:2f:50:d9:79:be:38:be:1f:58: f3:46:37:7f:b6:04:18:5b:80:24:1f:77:a3:96:79:13:11:9b: b5:c2:80:a7:3f:23:82:22:6c:24:9d:c8:38:29:f5:ca:bf:25: 5a:64:36:f3:cc:9c:1d:cd:48:c6:7a:9f:6e:af:62:6e:52:e4: b2:47:e9:cd:80:78:b9:74:16:ab:97:95:1d:af:e5:fd:87:6a: a2:b7:91:47:f5:7c:cc:88:31:2c:83:9e:41:87:54:2b:db:48: 12:69:b7:7e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIULmlrzWdmtB/q+vNPr9+k02oqR/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1NDFaFw0yNzA5MjcwMTAwNDFaMDMxMTAvBgNV BAMTKDI2NThEREI0OUUwMDlBOTk5MDdGNTM2QkZERTFEQ0NCQjkzOTQ2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15LlUO0y8gwwrGFORS+0bBqT0 YqzT3hWWffsK9LrzfVdinsuiaUFcxROx99XhofSNYEo/6C2KTOFz3kaToIqOlzsA VWgx9BOWJljUiCBe880geRecZkXjlA8GmOgEHhdx204hi//pJ7KaRa1OKTaLx6vq +dyRAR3vLaTYINoSMWgKEDQuYVO3WeoKBljs+IuedGox35Q28S+PjFmOeJSP533P sXgMqw5L03RGAJX4s5ikqL5u2PSTj4MUeAE+NjOitwscrq7xqh+0kaQeNY2uR1G/ 8IG3GPg9S2QWNj3RxNg60PQ6mi//nj/rSWqOQjQgPfMLrWFJGXiJCyhwZb6fAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUJljdtJ4AmpmQf1Nr/eHcy7k5RqowHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMjMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEASv4yjANBgkqhkiG9w0BAQsFAAOCAQEAaoO3DAQXmR8/qLMBC9AybQR9hvaN i0sa7dsgd3QJRIirhNCf7d/tWo1aNDS61pY5QgkIP8K+vnI1pnujrpkWdZUH5Fnb CRIB0Fjq/8exZ0/9LDyjHln6nFJEp7TB8IUm5LrmpBGYrWqLG5BkxdMJJAk86U2g DcPzVbZzb3GskCinlrxv5kAoPJagyA+1eRUciPt3BmtX3xT3L1DZeb44vh9Y80Y3 f7YEGFuAJB93o5Z5ExGbtcKApz8jgiJsJJ3IOCn1yr8lWmQ288ycHc1Ixnqfbq9i blLkskfpzYB4uXQWq5eVHa/l/YdqoreRR/V8zIgxLIOeQYdUK9tIEmm3fg== -----END CERTIFICATE-----Generated at Sat Oct 10 13:47:30 2026 by rpki-client