$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e2034383337.roa File: 34332e3234302e312e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: GgToLH+JeZzg0mpWE1XWwKGiE6s8eO8gCigv2osTnJI= Subject key identifier: 12:C1:EF:F8:0B:19:4E:EC:0F:CF:E9:E5:1A:31:00:AB:A1:52:AF:06 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 4C2477266EDB57F4B2C05CE700C0250CA7C1A055 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e2034383337.roa Signing time: Mon 28 Sep 2026 01:00:37 +0000 ROA not before: Mon 28 Sep 2026 00:55:37 +0000 ROA not after: Mon 27 Sep 2027 01:00:37 +0000 asID: 4837 IP address blocks: 43.240.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 22:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:24:77:26:6e:db:57:f4:b2:c0:5c:e7:00:c0:25:0c:a7:c1:a0:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:37 2026 GMT Not After : Sep 27 01:00:37 2027 GMT Subject: CN=12C1EFF80B194EEC0FCFE9E51A3100ABA152AF06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:14:9f:e8:5a:f2:d5:f4:0c:c2:72:9c:af:b8: ab:f6:3b:c6:f8:79:ec:97:6d:3f:4c:1e:e6:9f:0b: a7:10:0f:13:4a:8c:24:10:f3:55:af:25:28:ad:53: 78:4a:01:82:c5:1d:8f:31:bc:31:43:dd:1e:f3:4c: 15:4d:0a:93:82:a7:26:13:d5:98:54:04:c0:8e:75: 85:e3:9d:b3:9d:99:cd:d6:ce:51:c9:02:41:fe:3f: e3:6d:eb:68:af:0f:ce:96:d7:70:06:cc:53:0e:7f: 98:90:09:e1:9c:15:87:bd:45:b8:66:4e:e7:a8:6e: 3f:23:92:9e:dd:aa:38:77:a7:3d:cd:ec:13:98:02: b0:eb:a3:f1:cf:7e:ae:ef:a1:12:db:ed:5a:ed:01: 09:7e:c3:20:04:86:41:30:b9:8d:cd:0b:14:f0:ad: ba:5e:ce:f2:69:31:bc:ad:c5:81:3e:91:85:5f:72: e7:07:49:f6:59:eb:60:6a:64:56:3a:1b:d7:23:c8: 39:32:35:d3:90:6f:8d:16:ae:43:95:49:83:b2:fb: e9:fa:d8:a8:6e:9a:20:4f:23:46:86:67:42:83:a7: 2e:42:bc:79:e1:00:a9:d3:87:72:ff:68:e0:6b:9f: 90:4e:37:5a:09:bd:1b:45:f9:5b:bf:3b:ef:77:70: 87:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C1:EF:F8:0B:19:4E:EC:0F:CF:E9:E5:1A:31:00:AB:A1:52:AF:06 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.1.0/24 Signature Algorithm: sha256WithRSAEncryption 97:5f:f0:8e:a1:37:c9:d5:52:e2:e3:57:73:99:ca:33:0a:68: 79:f8:8b:88:a6:1c:82:af:d6:46:c0:8d:d5:95:c3:c5:b0:4d: d6:3e:29:06:4c:2b:14:a3:fb:3b:45:c3:cc:65:d5:99:4b:7c: 9c:7b:09:33:ed:bd:d1:11:9e:84:33:16:d1:f3:76:76:8f:42: c3:63:01:4f:33:b9:49:86:87:b1:07:cb:66:60:73:6b:f1:c1: 8a:61:be:3c:19:e6:ee:c6:ec:56:79:8a:93:a3:55:54:f7:71: 2e:8a:81:85:8d:a7:7e:04:af:59:c0:65:f8:1f:62:3f:7a:c8: af:f6:10:de:57:02:f3:0f:7f:a6:c8:f5:8c:ac:a9:d3:86:74: 95:4b:c5:5b:5a:b9:b4:bc:be:f8:27:95:06:4a:89:97:aa:47: 63:88:a0:bd:cb:07:bd:bf:9c:1d:8f:c3:c0:28:9b:aa:3b:56: f2:e2:7c:26:5b:8b:b4:40:75:22:33:f4:cb:ef:30:79:d5:72: 5a:c5:9f:2a:01:25:3f:68:29:65:94:9e:fd:bc:70:6e:27:6b: 0c:9e:f8:30:b6:72:ad:df:20:ea:67:d8:93:61:11:23:13:99: 10:6d:f2:24:db:7f:0c:a1:7f:aa:fe:92:d2:a9:38:2c:72:a5: c7:26:b7:03 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUTCR3Jm7bV/SywFznAMAlDKfBoFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzdaFw0yNzA5MjcwMTAwMzdaMDMxMTAvBgNV BAMTKDEyQzFFRkY4MEIxOTRFRUMwRkNGRTlFNTFBMzEwMEFCQTE1MkFGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsFJ/oWvLV9AzCcpyvuKv2O8b4 eeyXbT9MHuafC6cQDxNKjCQQ81WvJSitU3hKAYLFHY8xvDFD3R7zTBVNCpOCpyYT 1ZhUBMCOdYXjnbOdmc3WzlHJAkH+P+Nt62ivD86W13AGzFMOf5iQCeGcFYe9Rbhm Tueobj8jkp7dqjh3pz3N7BOYArDro/HPfq7voRLb7VrtAQl+wyAEhkEwuY3NCxTw rbpezvJpMbytxYE+kYVfcucHSfZZ62BqZFY6G9cjyDkyNdOQb40WrkOVSYOy++n6 2KhumiBPI0aGZ0KDpy5CvHnhAKnTh3L/aOBrn5BON1oJvRtF+Vu/O+93cIcxAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUEsHv+AsZTuwPz+nlGjEAq6FSrwYwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA K/ABMA0GCSqGSIb3DQEBCwUAA4IBAQCXX/COoTfJ1VLi41dzmcozCmh5+IuIphyC r9ZGwI3VlcPFsE3WPikGTCsUo/s7RcPMZdWZS3ycewkz7b3REZ6EMxbR83Z2j0LD YwFPM7lJhoexB8tmYHNr8cGKYb48GebuxuxWeYqTo1VU93EuioGFjad+BK9ZwGX4 H2I/esiv9hDeVwLzD3+myPWMrKnThnSVS8VbWrm0vL74J5UGSomXqkdjiKC9ywe9 v5wdj8PAKJuqO1by4nwmW4u0QHUiM/TL7zB51XJaxZ8qASU/aClllJ79vHBuJ2sM nvgwtnKt3yDqZ9iTYREjE5kQbfIk238MoX+q/pLSqTgscqXHJrcD -----END CERTIFICATE-----Generated at Tue Oct 13 04:31:31 2026 by rpki-client