$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e203536303436.roa File: 34332e3234302e312e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: y4gmZaGn0uiLN7XP3Dqo2Tp0ZV3tgxXIYBO2K9BBsvY= Subject key identifier: 92:B1:4D:35:9C:46:93:35:BD:30:1C:7E:D7:D2:11:8D:6D:69:84:84 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 331DBFA5D4891ED5912CD1F2233F1D9E32630B33 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e203536303436.roa Signing time: Mon 28 Sep 2026 01:00:36 +0000 ROA not before: Mon 28 Sep 2026 00:55:36 +0000 ROA not after: Mon 27 Sep 2027 01:00:36 +0000 asID: 56046 IP address blocks: 43.240.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1d:bf:a5:d4:89:1e:d5:91:2c:d1:f2:23:3f:1d:9e:32:63:0b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:36 2026 GMT Not After : Sep 27 01:00:36 2027 GMT Subject: CN=92B14D359C469335BD301C7ED7D2118D6D698484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7f:dd:87:ee:85:f7:b6:0a:92:70:38:8f:4b: 7f:ee:04:7d:20:f3:88:65:6c:8d:d3:ee:d9:70:53: ec:35:78:a5:c6:79:3c:71:a1:fe:e0:d5:1e:f9:c2: 03:4b:12:27:28:20:15:df:83:60:6e:b3:84:dc:7c: 9a:b7:18:fa:ca:9a:db:51:58:99:4f:34:06:ea:1d: 35:fc:cf:35:64:25:72:00:b4:dd:9a:4a:a7:28:11: 9a:91:10:e1:f2:18:52:71:7d:ac:de:30:6e:ce:a7: 1c:82:c4:b9:89:c3:3d:84:66:41:b2:e6:f8:9f:00: 7a:ef:26:73:06:6d:8d:af:75:ea:13:d5:76:97:74: d9:31:a7:5b:31:37:54:5f:1b:eb:8d:a9:c7:70:30: f9:bd:75:cc:69:f2:0f:24:7b:89:e0:ce:c9:e5:0c: 48:b3:20:0a:25:0e:6b:f1:77:ed:98:fa:31:ba:aa: 90:c4:e9:73:54:85:1a:50:31:21:4a:89:f5:35:9d: 42:bc:a3:bf:10:5b:80:4d:7f:74:51:1b:73:12:23: f5:30:80:34:d1:09:42:ee:3a:c6:10:fd:b8:62:65: a1:ef:89:84:22:b0:cc:99:33:34:49:bc:17:a5:dc: 3f:64:ca:db:e0:74:02:46:b5:7b:5f:96:b4:31:00: 46:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B1:4D:35:9C:46:93:35:BD:30:1C:7E:D7:D2:11:8D:6D:69:84:84 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e312e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.1.0/24 Signature Algorithm: sha256WithRSAEncryption 65:aa:f7:0e:30:72:ce:cb:63:0c:16:42:f9:c7:2b:24:38:66: fb:a4:d6:e5:e8:ec:24:66:b7:10:35:85:35:96:be:85:ad:0f: 5e:cb:33:ad:52:90:90:2d:b2:13:e9:fe:2d:5f:5f:f0:8a:85: 49:1a:e1:70:39:81:3f:fd:e5:7f:6f:d9:6b:68:9e:50:e3:49: 94:42:b2:35:1d:f9:40:2c:03:44:c9:02:de:8a:50:94:13:bd: 40:fd:ba:bd:fa:5a:4e:ff:4f:45:24:f2:e3:3c:8f:64:4d:e6: 94:cc:ce:47:01:4e:78:57:4c:e5:3b:e7:5f:d0:07:c1:7a:0f: 60:f9:1f:a4:d7:fc:a5:57:c1:78:19:1c:54:fa:de:98:9a:bb: de:ca:39:d9:7b:f3:5c:7b:ab:85:06:de:31:ca:00:a9:f0:63: f7:70:c0:ee:f6:2f:1c:ae:96:22:26:31:12:e4:fb:2e:c1:db: 06:3d:51:11:56:24:23:24:7f:9d:64:57:26:ef:4d:73:7d:df: 47:1f:7b:82:d9:f6:6d:24:0e:0f:85:7b:14:55:fb:08:e6:7f: a1:4a:1b:b8:c2:43:85:42:1b:bb:1b:8c:ca:db:ff:75:5d:0f: ae:e8:d4:ed:39:a8:7c:09:7e:a5:59:17:c3:1c:4f:2f:1f:8f: d3:87:62:ba -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUMx2/pdSJHtWRLNHyIz8dnjJjCzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzZaFw0yNzA5MjcwMTAwMzZaMDMxMTAvBgNV BAMTKDkyQjE0RDM1OUM0NjkzMzVCRDMwMUM3RUQ3RDIxMThENkQ2OTg0ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+f92H7oX3tgqScDiPS3/uBH0g 84hlbI3T7tlwU+w1eKXGeTxxof7g1R75wgNLEicoIBXfg2Bus4TcfJq3GPrKmttR WJlPNAbqHTX8zzVkJXIAtN2aSqcoEZqREOHyGFJxfazeMG7OpxyCxLmJwz2EZkGy 5vifAHrvJnMGbY2vdeoT1XaXdNkxp1sxN1RfG+uNqcdwMPm9dcxp8g8ke4ngzsnl DEizIAolDmvxd+2Y+jG6qpDE6XNUhRpQMSFKifU1nUK8o78QW4BNf3RRG3MSI/Uw gDTRCULuOsYQ/bhiZaHviYQisMyZMzRJvBel3D9kytvgdAJGtXtflrQxAEaNAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUkrFNNZxGkzW9MBx+19IRjW1phIQwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzYzMDM0MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr8AEwDQYJKoZIhvcNAQELBQADggEBAGWq9w4wcs7LYwwWQvnHKyQ4Zvuk1uXo 7CRmtxA1hTWWvoWtD17LM61SkJAtshPp/i1fX/CKhUka4XA5gT/95X9v2WtonlDj SZRCsjUd+UAsA0TJAt6KUJQTvUD9ur36Wk7/T0Uk8uM8j2RN5pTMzkcBTnhXTOU7 51/QB8F6D2D5H6TX/KVXwXgZHFT63piau97KOdl781x7q4UG3jHKAKnwY/dwwO72 LxyuliImMRLk+y7B2wY9URFWJCMkf51kVybvTXN930cfe4LZ9m0kDg+FexRV+wjm f6FKG7jCQ4VCG7sbjMrb/3VdD67o1O05qHwJfqVZF8McTy8fj9OHYro= -----END CERTIFICATE-----Generated at Sun Oct 11 08:47:58 2026 by rpki-client