$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230342e302f32322d3232203d3e203536303436.roa File: 34332e3234382e3230342e302f32322d3232203d3e203536303436.roa (raw, json) Hash identifier: ZOjV0jc0gBKz8XBHXuOqb8jXeK2Ssw22JLya5gUCo04= Subject key identifier: 7E:31:1A:55:46:8E:9A:C4:11:5E:88:7E:C4:BD:A0:A0:F2:77:AE:FE Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 6BC5A79B1C7A036A829E02D5195034CDA4FD0B6E Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230342e302f32322d3232203d3e203536303436.roa Signing time: Mon 28 Sep 2026 01:00:39 +0000 ROA not before: Mon 28 Sep 2026 00:55:39 +0000 ROA not after: Mon 27 Sep 2027 01:00:39 +0000 asID: 56046 IP address blocks: 43.248.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c5:a7:9b:1c:7a:03:6a:82:9e:02:d5:19:50:34:cd:a4:fd:0b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:39 2026 GMT Not After : Sep 27 01:00:39 2027 GMT Subject: CN=7E311A55468E9AC4115E887EC4BDA0A0F277AEFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:2e:58:8b:2d:1d:09:49:86:af:ed:d5:fe: c0:d3:0c:a4:e5:05:c2:d9:b8:3c:b1:e2:9f:43:12: 79:0e:17:58:c6:7a:51:69:77:b8:85:bf:88:6f:d6: 16:34:05:69:f2:08:ce:7f:4f:4f:c3:11:59:ee:a8: 8d:61:20:42:b0:b9:5c:a6:59:e5:fe:6e:ab:b8:99: 46:ce:12:61:2e:16:4a:a8:b4:4a:67:7e:e0:4b:42: 94:fa:19:fb:08:6d:9f:ff:05:a6:07:5d:2c:14:fe: 5f:f0:19:d3:58:68:66:03:92:80:d0:50:f0:a2:d9: f3:8d:88:68:53:56:c2:1d:90:13:4f:47:ec:40:91: ae:0c:33:29:1a:e3:39:59:c1:42:7c:b0:1a:e2:c9: 3b:ed:4f:10:e9:f0:88:be:27:2f:85:71:b1:73:d7: 37:75:16:6b:77:c6:f5:91:d6:d1:a5:37:5d:8a:0c: fc:7c:48:23:4a:e5:ab:84:68:88:36:f6:6a:1a:a7: 42:09:36:6c:33:8e:48:49:7a:21:b6:6c:3e:12:36: c8:68:52:d0:54:4f:e4:89:1c:07:ef:ea:db:2c:d1: a8:70:0c:11:e6:a8:27:ca:ad:d8:92:f0:24:64:71: ec:7e:b3:e3:3a:63:97:32:64:f7:dd:ab:7f:7c:e8: f2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:31:1A:55:46:8E:9A:C4:11:5E:88:7E:C4:BD:A0:A0:F2:77:AE:FE X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230342e302f32322d3232203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.204.0/22 Signature Algorithm: sha256WithRSAEncryption 23:fa:0d:1c:9b:dd:a1:d0:38:08:fd:bb:a1:e5:1e:47:5e:3e: 4a:25:91:f8:51:3e:cc:55:93:b2:96:e2:8a:61:d3:5f:89:af: 60:aa:eb:0e:93:95:04:4e:54:61:b9:16:13:cd:42:b7:78:30: 1b:9e:57:1c:b0:d5:ca:66:cb:c7:1d:66:51:df:1f:85:c7:6a: 26:75:4a:14:12:9a:32:ee:50:f7:e5:32:1e:63:e4:97:d7:f9: 06:f7:b8:9c:07:e7:51:71:f4:04:13:8a:fd:d6:e8:28:c1:46: b6:69:98:73:a3:5d:7b:03:f0:2b:43:25:09:9e:73:a4:fd:5e: b6:d1:43:54:dd:8e:7f:e0:1a:3d:24:a3:80:59:3f:6b:4a:28: a6:c2:b2:0f:1b:a7:67:6e:ad:27:c1:39:c8:3f:26:06:ee:85: 1e:79:c1:95:4d:9d:aa:5a:fd:bc:78:f9:4d:ac:69:cb:26:88: 34:5b:90:40:17:b3:27:cc:ce:2c:45:0e:4e:93:a9:25:75:47: 13:0a:fc:48:3d:58:cd:52:3b:10:b5:d6:33:a0:5b:a4:03:9d: 1d:74:de:fc:4e:78:8d:dd:8b:3b:48:99:d2:da:f9:a4:2a:65: d5:d4:b1:de:7d:61:63:72:ce:cb:4c:42:f6:53:34:49:07:ae: 23:10:83:c7 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUa8Wnmxx6A2qCngLVGVA0zaT9C24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzlaFw0yNzA5MjcwMTAwMzlaMDMxMTAvBgNV BAMTKDdFMzExQTU1NDY4RTlBQzQxMTVFODg3RUM0QkRBMEEwRjI3N0FFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjvC5Yiy0dCUmGr+3V/sDTDKTl BcLZuDyx4p9DEnkOF1jGelFpd7iFv4hv1hY0BWnyCM5/T0/DEVnuqI1hIEKwuVym WeX+bqu4mUbOEmEuFkqotEpnfuBLQpT6GfsIbZ//BaYHXSwU/l/wGdNYaGYDkoDQ UPCi2fONiGhTVsIdkBNPR+xAka4MMyka4zlZwUJ8sBriyTvtTxDp8Ii+Jy+FcbFz 1zd1Fmt3xvWR1tGlN12KDPx8SCNK5auEaIg29moap0IJNmwzjkhJeiG2bD4SNsho UtBUT+SJHAfv6tss0ahwDBHmqCfKrdiS8CRkcex+s+M6Y5cyZPfdq3986PL1AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUfjEaVUaOmsQRXoh+xL2goPJ3rv4wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzM0MzMyZTMyMzQz ODJlMzIzMDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiv4zDANBgkqhkiG9w0BAQsFAAOCAQEAI/oNHJvdodA4CP27oeUeR14+ SiWR+FE+zFWTspbiimHTX4mvYKrrDpOVBE5UYbkWE81Ct3gwG55XHLDVymbLxx1m Ud8fhcdqJnVKFBKaMu5Q9+UyHmPkl9f5Bve4nAfnUXH0BBOK/dboKMFGtmmYc6Nd ewPwK0MlCZ5zpP1ettFDVN2Of+AaPSSjgFk/a0oopsKyDxunZ26tJ8E5yD8mBu6F HnnBlU2dqlr9vHj5TaxpyyaINFuQQBezJ8zOLEUOTpOpJXVHEwr8SD1YzVI7ELXW M6BbpAOdHXTe/E54jd2LO0iZ0tr5pCpl1dSx3n1hY3LOy0xC9lM0SQeuIxCDxw== -----END CERTIFICATE-----Generated at Sun Oct 11 10:03:57 2026 by rpki-client