$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e2034383337.roa File: 3130332e34302e31322e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: 3zellDvCgnmFpM+09BHhEE01WMHcmkQ6DgHc4UTOv9M= Subject key identifier: 29:4F:F2:3D:95:F4:8E:A5:B2:48:C7:21:BD:B2:6A:A3:6D:2D:35:30 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 335FBF906C0F5DAD4985DBC0F2A93F9DFD927A8E Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e2034383337.roa Signing time: Mon 28 Sep 2026 01:00:38 +0000 ROA not before: Mon 28 Sep 2026 00:55:38 +0000 ROA not after: Mon 27 Sep 2027 01:00:38 +0000 asID: 4837 IP address blocks: 103.40.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:5f:bf:90:6c:0f:5d:ad:49:85:db:c0:f2:a9:3f:9d:fd:92:7a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:38 2026 GMT Not After : Sep 27 01:00:38 2027 GMT Subject: CN=294FF23D95F48EA5B248C721BDB26AA36D2D3530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:02:c7:f8:84:73:37:34:9d:02:d3:a5:15: ed:02:6e:5e:59:0c:68:d4:61:81:0b:56:fb:72:b0: 73:49:79:39:a2:f0:8f:7c:c6:22:9a:7d:76:94:55: c1:77:99:03:96:25:b4:4e:84:81:a3:b5:0d:be:9e: ae:79:02:b8:22:65:c5:14:bf:c5:2f:7c:5d:dc:05: aa:d1:04:08:4f:a8:e8:14:09:ae:e4:cd:8e:0a:da: cd:ec:34:c3:42:14:9d:66:65:a1:1f:3e:db:da:6a: eb:c1:70:67:b5:b6:ec:9a:c5:81:58:3c:d7:77:b5: da:10:e0:7c:b7:ec:47:01:52:1c:2e:8d:a9:7e:00: 15:fe:4a:3d:5d:28:b7:23:4a:11:14:a8:9f:70:f3: 2c:e2:4d:b8:b0:f1:46:72:8c:61:22:3b:5f:28:5a: c6:f0:e0:e5:a3:0d:e7:b1:2d:65:1d:66:dd:4e:94: f7:32:21:ed:86:fd:41:e2:2a:95:d2:28:9b:7e:ca: 73:74:71:3b:1a:52:df:8e:c7:0b:6b:9b:b3:0d:fb: 9a:2f:69:4d:23:9e:39:d7:69:e0:4c:f7:6c:85:ff: ab:f7:85:f4:fa:23:a4:21:65:a7:22:2e:e8:ca:20: 93:30:0e:a6:53:93:2a:01:7c:ac:c6:6f:56:8e:04: 38:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4F:F2:3D:95:F4:8E:A5:B2:48:C7:21:BD:B2:6A:A3:6D:2D:35:30 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.40.12.0/22 Signature Algorithm: sha256WithRSAEncryption 29:44:40:55:df:7e:9e:b8:ce:9d:53:92:50:92:2c:39:84:57: d0:04:d3:e9:94:4a:14:2d:2b:c3:db:d1:50:32:96:ed:88:ce: 27:c5:e7:c9:53:9d:40:7b:06:06:05:11:6d:46:84:62:01:d3: 0b:a9:90:b4:85:ff:67:07:5f:0b:49:cb:4a:22:ec:fa:89:13: 8b:46:30:87:77:da:05:07:f1:47:76:13:59:9a:1f:64:75:3b: 07:a6:58:54:1d:9c:2e:2b:2e:60:10:ac:d5:f6:3f:60:5c:34: 61:6a:76:f8:0a:3b:c3:12:54:65:16:82:b4:f0:ea:57:9d:c7: 76:93:9b:32:77:ac:f0:41:a7:c5:9d:1a:81:1c:42:49:0f:9e: 18:d1:ca:f8:67:5b:69:cc:79:86:e5:8d:15:88:20:3e:0e:ed: a0:2d:f0:e6:bd:37:62:ed:f9:97:51:e3:b9:41:3a:7d:13:df: 3a:82:84:c0:77:4a:15:eb:15:e3:47:88:c9:79:c3:fc:dd:d2: e8:af:a3:75:da:96:e5:ac:71:4d:2d:ef:40:12:b2:1c:5a:44: d3:97:3b:6d:68:c9:90:7d:88:59:19:50:3f:f8:cc:a6:f3:02: 23:6b:5b:d2:9e:2b:59:57:5e:79:03:be:6e:dd:c7:07:ed:11: 8d:09:95:18 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUM1+/kGwPXa1JhdvA8qk/nf2Seo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzhaFw0yNzA5MjcwMTAwMzhaMDMxMTAvBgNV BAMTKDI5NEZGMjNEOTVGNDhFQTVCMjQ4QzcyMUJEQjI2QUEzNkQyRDM1MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVwLH+IRzNzSdAtOlFe0Cbl5Z DGjUYYELVvtysHNJeTmi8I98xiKafXaUVcF3mQOWJbROhIGjtQ2+nq55ArgiZcUU v8UvfF3cBarRBAhPqOgUCa7kzY4K2s3sNMNCFJ1mZaEfPtvaauvBcGe1tuyaxYFY PNd3tdoQ4Hy37EcBUhwujal+ABX+Sj1dKLcjShEUqJ9w8yziTbiw8UZyjGEiO18o Wsbw4OWjDeexLWUdZt1OlPcyIe2G/UHiKpXSKJt+ynN0cTsaUt+Oxwtrm7MN+5ov aU0jnjnXaeBM92yF/6v3hfT6I6QhZaciLujKIJMwDqZTkyoBfKzGb1aOBDilAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUKU/yPZX0jqWySMchvbJqo20tNTAwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzEzMDMzMmUzNDMw MmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnKAwwDQYJKoZIhvcNAQELBQADggEBAClEQFXffp64zp1TklCSLDmEV9AE0+mU ShQtK8Pb0VAylu2IzifF58lTnUB7BgYFEW1GhGIB0wupkLSF/2cHXwtJy0oi7PqJ E4tGMId32gUH8Ud2E1maH2R1OwemWFQdnC4rLmAQrNX2P2BcNGFqdvgKO8MSVGUW grTw6ledx3aTmzJ3rPBBp8WdGoEcQkkPnhjRyvhnW2nMeYbljRWIID4O7aAt8Oa9 N2Lt+ZdR47lBOn0T3zqChMB3ShXrFeNHiMl5w/zd0uivo3XaluWscU0t70ASshxa RNOXO21oyZB9iFkZUD/4zKbzAiNrW9KeK1lXXnkDvm7dxwftEY0JlRg= -----END CERTIFICATE-----Generated at Sat Oct 10 16:15:09 2026 by rpki-client