$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e203233363530.roa File: 34332e3234302e302e302f32322d3234203d3e203233363530.roa (raw, json) Hash identifier: y4NPzCm2uvwIWaT064ElJh9uC+KGl5pzRMIUjJfxw4g= Subject key identifier: 40:7D:AC:51:A3:63:05:6D:AF:DF:6C:93:02:5A:09:FB:4D:24:56:08 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 2805D7BA0EDBB1817B702E097B97639E84731AA1 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e203233363530.roa Signing time: Mon 28 Sep 2026 01:00:35 +0000 ROA not before: Mon 28 Sep 2026 00:55:35 +0000 ROA not after: Mon 27 Sep 2027 01:00:35 +0000 asID: 23650 IP address blocks: 43.240.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:05:d7:ba:0e:db:b1:81:7b:70:2e:09:7b:97:63:9e:84:73:1a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:35 2026 GMT Not After : Sep 27 01:00:35 2027 GMT Subject: CN=407DAC51A363056DAFDF6C93025A09FB4D245608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:ff:c5:df:a5:10:36:84:7e:a7:66:b5:6d: f7:6d:39:b6:dc:53:c7:0f:95:ff:b5:91:19:10:a5: d0:5f:0f:34:0a:ea:cf:c8:3e:15:99:e1:0a:27:1c: 58:5a:ca:1f:c3:a9:e3:92:4d:d6:c5:96:b4:f3:60: bc:93:20:c8:5a:80:86:5c:7c:94:53:09:30:5e:f5: 27:4c:a6:54:08:d7:64:f0:3f:6f:e9:6b:d2:0c:54: 3c:de:42:db:4c:94:16:97:0f:68:5a:b0:9d:33:d0: 73:3f:db:25:c3:5f:7d:c0:7c:99:e8:cf:16:27:c7: 8d:15:cc:87:5e:98:e1:e6:cc:1b:c9:c6:ea:db:8c: 25:52:16:f2:f7:7e:a4:3e:e0:c0:51:bb:77:5b:9d: 68:6f:83:7b:9e:08:0c:f9:a9:c6:c6:cb:e5:58:bd: 3b:29:be:f2:b1:f1:c6:e1:3f:e7:a4:a3:f1:6c:85: 43:4f:62:2e:dd:02:82:0c:da:22:53:c6:e2:f6:6d: b4:2b:94:f5:ab:e5:24:db:2c:2c:05:49:f7:7b:19: c9:34:23:8e:51:aa:33:fd:83:c3:25:d6:49:93:74: 74:23:98:84:11:4e:43:8e:88:25:4d:5c:31:a7:a0: 26:1a:bc:1f:51:16:7f:cd:32:34:1f:fc:5b:74:cb: e8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7D:AC:51:A3:63:05:6D:AF:DF:6C:93:02:5A:09:FB:4D:24:56:08 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 Signature Algorithm: sha256WithRSAEncryption 93:84:94:97:dc:d0:a1:0d:dd:cd:72:e5:07:f7:8c:84:b2:82: 81:73:e4:62:f7:f1:cb:da:2b:7d:6a:94:b9:42:b6:63:4e:ee: 2c:35:18:a3:4a:d5:09:f2:c1:ec:86:0f:04:b5:c7:9c:c3:89: e7:5f:9b:49:8c:95:6e:df:8b:17:00:5e:17:51:38:33:32:7f: 24:f3:19:3e:81:a5:31:ad:14:ef:fa:fe:d3:86:17:66:58:bb: e4:76:79:ef:7b:48:8b:2c:46:48:7a:ae:0e:f3:62:10:9c:53: 73:53:a0:22:b8:b3:ff:44:f6:53:51:78:5a:b0:2a:fc:ca:6f: 65:fa:43:26:2d:80:eb:8a:d1:98:19:e0:95:e0:5a:d6:1b:10: 20:db:c0:fe:28:ac:df:34:b9:57:67:8d:a2:74:55:81:d7:d2: 6f:23:9b:c8:7e:36:05:77:5b:83:8a:8c:92:60:42:f8:cc:fa: 42:e1:c9:02:0f:51:6f:5c:7a:96:5b:19:08:e9:8f:77:5e:f7: 4b:40:49:b3:7a:09:6d:35:a1:dc:64:a3:f2:d5:ed:b1:33:ad: 31:78:18:2e:de:72:cc:d1:50:c1:8b:06:b9:9d:fa:b4:de:91: 80:3c:59:75:bc:6b:05:82:54:0c:9e:75:c8:33:1f:fe:a1:31: 57:30:94:18 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUKAXXug7bsYF7cC4Je5djnoRzGqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzVaFw0yNzA5MjcwMTAwMzVaMDMxMTAvBgNV BAMTKDQwN0RBQzUxQTM2MzA1NkRBRkRGNkM5MzAyNUEwOUZCNEQyNDU2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwA//F36UQNoR+p2a1bfdtObbc U8cPlf+1kRkQpdBfDzQK6s/IPhWZ4QonHFhayh/DqeOSTdbFlrTzYLyTIMhagIZc fJRTCTBe9SdMplQI12TwP2/pa9IMVDzeQttMlBaXD2hasJ0z0HM/2yXDX33AfJno zxYnx40VzIdemOHmzBvJxurbjCVSFvL3fqQ+4MBRu3dbnWhvg3ueCAz5qcbGy+VY vTspvvKx8cbhP+eko/FshUNPYi7dAoIM2iJTxuL2bbQrlPWr5STbLCwFSfd7Gck0 I45RqjP9g8Ml1kmTdHQjmIQRTkOOiCVNXDGnoCYavB9RFn/NMjQf/Ft0y+ghAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUQH2sUaNjBW2v32yTAloJ+00kVggwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzMzNjM1MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr8AAwDQYJKoZIhvcNAQELBQADggEBAJOElJfc0KEN3c1y5Qf3jISygoFz5GL3 8cvaK31qlLlCtmNO7iw1GKNK1QnyweyGDwS1x5zDiedfm0mMlW7fixcAXhdRODMy fyTzGT6BpTGtFO/6/tOGF2ZYu+R2ee97SIssRkh6rg7zYhCcU3NToCK4s/9E9lNR eFqwKvzKb2X6QyYtgOuK0ZgZ4JXgWtYbECDbwP4orN80uVdnjaJ0VYHX0m8jm8h+ NgV3W4OKjJJgQvjM+kLhyQIPUW9cepZbGQjpj3de90tASbN6CW01odxko/LV7bEz rTF4GC7ecszRUMGLBrmd+rTekYA8WXW8awWCVAyedcgzH/6hMVcwlBg= -----END CERTIFICATE-----Generated at Sun Oct 11 10:15:26 2026 by rpki-client