$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e203233363530.roa File: 34332e3234302e322e302f32342d3234203d3e203233363530.roa (raw, json) Hash identifier: KntoWkwBMEzM2TPYObxUQHYZJRLWcVrVWf8mlnwgvPg= Subject key identifier: 56:4B:87:22:9D:CC:67:FE:7B:41:42:27:1D:97:15:49:AB:9E:73:82 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 6BF887DF7407BCE6C3A6824A22F29B7163BD6890 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e203233363530.roa Signing time: Mon 28 Sep 2026 01:00:35 +0000 ROA not before: Mon 28 Sep 2026 00:55:35 +0000 ROA not after: Mon 27 Sep 2027 01:00:35 +0000 asID: 23650 IP address blocks: 43.240.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f8:87:df:74:07:bc:e6:c3:a6:82:4a:22:f2:9b:71:63:bd:68:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:35 2026 GMT Not After : Sep 27 01:00:35 2027 GMT Subject: CN=564B87229DCC67FE7B4142271D971549AB9E7382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f5:f3:cd:2a:38:5e:a0:ab:c8:dd:47:5b:68: 06:32:ef:fc:1a:84:4b:c6:6e:ed:11:de:a6:30:a0: 59:0b:c9:06:c3:6e:38:b2:11:b2:7d:b4:79:5a:19: 24:b6:e3:a5:29:5b:51:16:ab:c0:4e:0c:ec:99:1c: 43:5a:eb:45:80:bd:9e:4b:b7:d6:11:a3:e5:6d:be: 8a:21:c7:af:9e:de:81:f6:e3:0c:e8:08:d3:eb:d5: 4c:e7:2e:c8:7b:12:b5:ef:c8:81:18:a9:b4:5e:7e: 1f:5c:7e:00:a0:37:d9:19:6f:d0:75:bf:fb:87:d8: a9:a0:dd:7e:94:1c:b3:47:eb:6e:76:38:86:39:74: a5:92:10:dd:85:b9:93:3a:9f:2c:34:71:66:ed:30: 41:6e:8b:43:9b:16:8d:ea:51:a5:65:a3:60:c4:29: c3:66:20:59:7f:18:32:81:08:b4:f9:51:19:a7:3b: 9c:2e:6d:3b:2e:27:41:0d:02:9c:51:b5:65:bf:8e: f6:7b:58:66:cb:4d:8c:15:3f:74:4c:4a:6b:ec:82: 0f:9a:20:c0:8c:fb:ec:56:23:e3:ba:57:bc:d6:59: 1d:e4:45:46:8c:f5:6e:51:d0:4a:3f:19:c5:48:76: 0b:b3:54:b5:0e:6d:89:ed:96:63:53:90:4f:11:2a: a1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4B:87:22:9D:CC:67:FE:7B:41:42:27:1D:97:15:49:AB:9E:73:82 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.2.0/24 Signature Algorithm: sha256WithRSAEncryption 63:41:a9:68:67:5c:c4:97:34:65:73:c0:bc:ac:45:a8:fa:67: 09:80:d2:eb:4b:0f:c4:4e:4b:da:96:2e:82:bd:b2:84:d5:e0: 56:1c:23:74:9b:a7:e1:f2:e6:17:a3:fb:9d:f7:dc:ae:49:cf: 94:02:68:c4:fa:af:d0:2a:e5:3b:ed:ef:5e:e5:51:62:20:87: 65:a4:96:92:d2:a5:e9:d4:34:45:41:b6:05:5d:12:a4:12:24: 5f:a9:94:6b:88:ca:83:80:b7:b4:f8:04:49:e8:50:8b:02:2d: eb:68:1d:73:ba:11:65:7b:f0:b5:0e:d7:0c:26:85:bd:39:bf: 1b:7f:04:b8:d4:5f:b1:bd:39:47:b3:c9:43:db:97:86:28:a3: 66:48:3a:52:9d:e8:2b:7c:be:ab:ae:c6:df:24:c8:74:d9:59: d0:3a:2f:d4:ca:46:1b:01:73:1b:4e:33:49:f3:22:c3:7a:76: b1:fd:bb:12:b7:71:5b:93:c5:f5:bc:23:6f:2b:ac:cf:af:c2: 61:9a:a4:d9:26:e9:22:b8:62:a6:23:69:53:5e:a8:cc:13:5a: b4:b1:fb:45:fc:3c:bd:10:89:ba:1f:0a:6e:a2:32:57:cf:48: 67:df:53:b3:93:c0:e0:33:a3:e1:5d:6d:11:ab:25:79:63:7d: 15:c5:0b:1c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUa/iH33QHvObDpoJKIvKbcWO9aJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzVaFw0yNzA5MjcwMTAwMzVaMDMxMTAvBgNV BAMTKDU2NEI4NzIyOURDQzY3RkU3QjQxNDIyNzFEOTcxNTQ5QUI5RTczODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU9fPNKjheoKvI3UdbaAYy7/wa hEvGbu0R3qYwoFkLyQbDbjiyEbJ9tHlaGSS246UpW1EWq8BODOyZHENa60WAvZ5L t9YRo+Vtvoohx6+e3oH24wzoCNPr1UznLsh7ErXvyIEYqbRefh9cfgCgN9kZb9B1 v/uH2Kmg3X6UHLNH6252OIY5dKWSEN2FuZM6nyw0cWbtMEFui0ObFo3qUaVlo2DE KcNmIFl/GDKBCLT5URmnO5wubTsuJ0ENApxRtWW/jvZ7WGbLTYwVP3RMSmvsgg+a IMCM++xWI+O6V7zWWR3kRUaM9W5R0Eo/GcVIdguzVLUObYntlmNTkE8RKqETAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUVkuHIp3MZ/57QUInHZcVSauec4IwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzMzNjM1MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr8AIwDQYJKoZIhvcNAQELBQADggEBAGNBqWhnXMSXNGVzwLysRaj6ZwmA0utL D8ROS9qWLoK9soTV4FYcI3Sbp+Hy5hej+5333K5Jz5QCaMT6r9Aq5Tvt717lUWIg h2WklpLSpenUNEVBtgVdEqQSJF+plGuIyoOAt7T4BEnoUIsCLetoHXO6EWV78LUO 1wwmhb05vxt/BLjUX7G9OUezyUPbl4Yoo2ZIOlKd6Ct8vquuxt8kyHTZWdA6L9TK RhsBcxtOM0nzIsN6drH9uxK3cVuTxfW8I28rrM+vwmGapNkm6SK4YqYjaVNeqMwT WrSx+0X8PL0QibofCm6iMlfPSGffU7OTwOAzo+FdbRGrJXljfRXFCxw= -----END CERTIFICATE-----Generated at Sat Oct 10 16:58:57 2026 by rpki-client