$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e203536303436.roa File: 34332e3234302e322e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: 6WAlgd270dLg2ZJk8Exa45M+Vdz67za+P4zzM69h4pU= Subject key identifier: 47:4B:37:55:AB:C2:11:5A:B2:CE:DB:D8:1C:2F:77:3A:8D:99:28:7A Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 70DC6665F8312AC36A61A38CF17D74FA0657CCBF Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e203536303436.roa Signing time: Mon 28 Sep 2026 01:00:41 +0000 ROA not before: Mon 28 Sep 2026 00:55:41 +0000 ROA not after: Mon 27 Sep 2027 01:00:41 +0000 asID: 56046 IP address blocks: 43.240.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 22:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:dc:66:65:f8:31:2a:c3:6a:61:a3:8c:f1:7d:74:fa:06:57:cc:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:41 2026 GMT Not After : Sep 27 01:00:41 2027 GMT Subject: CN=474B3755ABC2115AB2CEDBD81C2F773A8D99287A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2f:05:72:8f:ba:9d:d4:d0:3d:ce:59:64:96: 94:28:83:2c:e8:d9:0b:89:87:ab:ab:c0:55:7e:06: 8f:14:58:88:f1:57:7b:c4:4f:29:50:f3:2b:a9:05: ac:a3:6f:79:eb:46:da:46:23:62:e7:19:53:99:ab: 8c:e3:4d:70:12:4f:4d:63:76:61:17:18:39:b7:47: f2:f3:51:c1:ae:08:d3:b2:0c:fd:9f:80:c5:90:02: b9:36:fd:70:3b:82:8c:b3:48:3b:97:28:8c:a3:08: 10:1d:da:ea:d3:97:32:6b:f7:65:b3:20:52:b0:a8: f1:de:3e:43:e2:9a:94:95:d6:96:bb:e2:dc:14:9f: 9d:22:83:a7:d9:a1:c6:19:65:44:c0:67:91:46:79: 23:c7:83:a3:fc:ec:05:be:41:f3:6a:84:66:e5:68: 26:31:20:bd:90:72:27:af:f5:4c:e5:9b:35:71:cc: 51:88:8e:de:2c:be:51:d2:d8:91:78:ff:d4:e8:a5: 5a:2c:59:bc:07:96:e5:a1:0b:e2:17:86:70:d1:d0: 9d:74:0e:f6:5d:55:58:2c:9b:b5:58:21:df:77:00: 08:c8:88:a8:dd:0e:f4:0e:b8:6a:17:6a:5c:18:d1: dd:9c:a2:e1:9c:5a:40:56:58:1a:f2:0a:a8:f1:a5: 8c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4B:37:55:AB:C2:11:5A:B2:CE:DB:D8:1C:2F:77:3A:8D:99:28:7A X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e322e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.2.0/24 Signature Algorithm: sha256WithRSAEncryption 77:93:1c:a9:7a:86:78:db:01:95:6e:a9:2a:e5:8a:18:91:42: 10:69:3b:7d:79:53:15:db:36:c8:8c:58:fe:f6:c8:35:d3:df: 4d:a1:80:30:89:60:d0:2a:bb:93:d1:46:8e:38:43:e6:29:f2: 7d:12:3f:d0:33:18:c4:36:61:3a:4b:07:38:a4:32:94:dd:3a: 2f:49:d2:dd:1e:70:08:7f:43:56:56:91:84:a3:a9:dd:fc:72: 76:ab:41:d2:d2:c8:16:ab:60:75:23:2c:2b:ed:ff:64:a3:1c: dd:f7:b1:4c:1b:2b:e4:76:fa:39:59:2b:ec:45:a5:e4:eb:d8: ab:8b:0f:6e:1f:ce:3f:f3:1c:bf:cc:12:ff:5d:37:bf:64:06: cb:21:52:bc:c1:10:c0:12:88:c1:cb:30:7b:53:85:02:65:7d: eb:89:6b:c1:95:f0:e3:18:c4:bd:d6:0b:98:a6:7f:a4:8f:76: 5e:cf:86:83:b3:db:c2:d8:35:2d:d1:b6:fd:63:a6:5b:7f:c8: df:c8:84:6c:53:4b:da:b3:e0:4e:8e:45:77:01:bc:c5:8f:0e: d2:a5:b6:05:ad:47:b0:26:26:0b:53:00:64:3a:aa:da:e3:75: df:fe:e7:56:14:fe:62:53:eb:9d:c8:7b:59:ed:09:5b:c0:6e: e3:54:a6:5a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUcNxmZfgxKsNqYaOM8X10+gZXzL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1NDFaFw0yNzA5MjcwMTAwNDFaMDMxMTAvBgNV BAMTKDQ3NEIzNzU1QUJDMjExNUFCMkNFREJEODFDMkY3NzNBOEQ5OTI4N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLwVyj7qd1NA9zllklpQogyzo 2QuJh6urwFV+Bo8UWIjxV3vETylQ8yupBayjb3nrRtpGI2LnGVOZq4zjTXAST01j dmEXGDm3R/LzUcGuCNOyDP2fgMWQArk2/XA7goyzSDuXKIyjCBAd2urTlzJr92Wz IFKwqPHePkPimpSV1pa74twUn50ig6fZocYZZUTAZ5FGeSPHg6P87AW+QfNqhGbl aCYxIL2Qciev9UzlmzVxzFGIjt4svlHS2JF4/9TopVosWbwHluWhC+IXhnDR0J10 DvZdVVgsm7VYId93AAjIiKjdDvQOuGoXalwY0d2couGcWkBWWBryCqjxpYyhAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUR0s3VavCEVqyztvYHC93Oo2ZKHowHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzYzMDM0MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr8AIwDQYJKoZIhvcNAQELBQADggEBAHeTHKl6hnjbAZVuqSrlihiRQhBpO315 UxXbNsiMWP72yDXT302hgDCJYNAqu5PRRo44Q+Yp8n0SP9AzGMQ2YTpLBzikMpTd Oi9J0t0ecAh/Q1ZWkYSjqd38cnarQdLSyBarYHUjLCvt/2SjHN33sUwbK+R2+jlZ K+xFpeTr2KuLD24fzj/zHL/MEv9dN79kBsshUrzBEMASiMHLMHtThQJlfeuJa8GV 8OMYxL3WC5imf6SPdl7PhoOz28LYNS3Rtv1jplt/yN/IhGxTS9qz4E6ORXcBvMWP DtKltgWtR7AmJgtTAGQ6qtrjdd/+51YU/mJT653Ie1ntCVvAbuNUplo= -----END CERTIFICATE-----Generated at Mon Oct 12 22:53:52 2026 by rpki-client