$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e203133333738.roa File: 34332e3234312e34382e302f32322d3234203d3e203133333738.roa (raw, json) Hash identifier: vABFrrcp9mY7jyc4GEvRy1GX6MflbAZ5L1m/97oVfY0= Subject key identifier: D7:0E:B4:62:90:00:54:C4:ED:84:2A:28:C8:F7:04:8C:8E:2F:34:21 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 2C07EF8EE804BC2830E2E8B37A292734F7225CE0 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e203133333738.roa Signing time: Fri 17 Apr 2026 01:38:16 +0000 ROA not before: Fri 17 Apr 2026 01:33:16 +0000 ROA not after: Fri 16 Apr 2027 01:38:16 +0000 asID: 13378 IP address blocks: 43.241.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:07:ef:8e:e8:04:bc:28:30:e2:e8:b3:7a:29:27:34:f7:22:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 17 01:33:16 2026 GMT Not After : Apr 16 01:38:16 2027 GMT Subject: CN=D70EB462900054C4ED842A28C8F7048C8E2F3421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:84:d2:13:ca:79:dc:44:e9:36:4e:c0:7d:f5: 08:a3:42:8b:6b:78:f4:ae:75:51:31:40:d8:d1:d1: 0f:c4:ab:ca:51:90:73:f6:d5:18:4f:fc:83:79:82: d4:53:9a:95:2e:91:70:74:36:1a:35:a9:5d:3c:46: 20:e4:8c:07:35:fe:f4:39:ec:15:51:30:04:b5:7d: 50:18:b3:da:b3:9e:c9:de:72:15:fb:66:3b:a2:c5: be:37:4b:e5:84:a3:bb:ab:ad:02:dd:3b:b6:76:0b: a0:aa:8d:b5:a9:cc:25:fa:20:02:5e:de:56:8d:00: b6:42:b2:d0:c8:8e:d9:0b:6c:3e:41:d3:84:b8:ab: c9:81:f9:ff:be:36:8a:1d:67:a5:91:7b:2c:79:fc: 34:7b:a9:47:26:47:32:ce:6d:91:45:f8:a4:41:c2: 08:68:2a:ed:dc:f3:c2:b2:f9:6b:90:05:1d:d1:e5: 83:9d:2e:8f:73:ba:26:b7:43:2b:cf:fc:15:07:91: 59:51:ad:6b:23:8b:b9:7e:6c:10:2e:65:4a:19:0d: 81:dd:34:a7:7d:18:af:67:22:8d:4b:a3:13:d6:98: a6:12:c7:b6:22:d3:b5:88:17:6f:0c:32:ef:cd:4b: df:1e:62:a8:3d:d4:3a:d0:7f:12:cc:d7:c3:c9:a0: 23:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0E:B4:62:90:00:54:C4:ED:84:2A:28:C8:F7:04:8C:8E:2F:34:21 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e203133333738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.48.0/22 Signature Algorithm: sha256WithRSAEncryption 58:5e:59:3d:db:37:6c:2d:a4:ee:8a:85:a7:3a:3d:1c:7b:e0: 2f:49:03:c1:53:8d:40:35:91:5d:7f:c9:22:ec:f0:28:41:53: 4f:e3:ae:44:2a:bc:6d:19:60:28:7f:32:c6:00:3e:e5:74:b0: 63:64:16:ee:45:e4:e6:56:94:29:f8:14:9f:49:06:ac:ac:d8: f6:de:e2:2f:f4:27:09:32:c0:92:a4:9b:90:cb:22:7f:cb:d7: cf:61:3a:e2:0f:15:55:63:59:6b:f9:c9:a3:34:3f:66:09:17: 20:7c:b8:7d:5c:29:f6:eb:95:06:5f:ab:3d:d3:ff:b6:33:11: 25:c2:d1:ed:92:6c:51:85:f6:77:fe:53:77:0f:64:41:45:50: f1:cd:b9:b6:11:43:3b:93:62:34:a0:12:f1:a3:72:20:64:4f: c0:fd:f6:ca:28:18:ee:4b:3f:e9:cf:2f:ea:98:4a:1f:50:61: 0d:90:11:14:4b:03:9e:de:60:ce:be:8d:e9:77:fe:ba:26:10: bf:c4:ae:07:a5:0f:9c:ef:76:98:2d:be:f6:7d:4d:38:a8:fc: bb:07:e6:cd:2b:21:89:f5:17:0c:96:29:8b:8c:d7:b6:eb:4f: 6b:29:75:3e:e0:07:c5:6c:ea:33:c5:26:ad:1e:e7:a2:1c:9a: 7b:21:c1:47 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIULAfvjugEvCgw4uizeiknNPciXOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTcwMTMzMTZaFw0yNzA0MTYwMTM4MTZaMDMxMTAvBgNV BAMTKEQ3MEVCNDYyOTAwMDU0QzRFRDg0MkEyOEM4RjcwNDhDOEUyRjM0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhNITynncROk2TsB99QijQotr ePSudVExQNjR0Q/Eq8pRkHP21RhP/IN5gtRTmpUukXB0Nho1qV08RiDkjAc1/vQ5 7BVRMAS1fVAYs9qznsnechX7Zjuixb43S+WEo7urrQLdO7Z2C6CqjbWpzCX6IAJe 3laNALZCstDIjtkLbD5B04S4q8mB+f++NoodZ6WReyx5/DR7qUcmRzLObZFF+KRB wghoKu3c88Ky+WuQBR3R5YOdLo9zuia3QyvP/BUHkVlRrWsji7l+bBAuZUoZDYHd NKd9GK9nIo1LoxPWmKYSx7Yi07WIF28MMu/NS98eYqg91DrQfxLM18PJoCOFAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU1w60YpAAVMTthCooyPcEjI4vNCEwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMx MmUzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMzMzMzczOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAivxMDANBgkqhkiG9w0BAQsFAAOCAQEAWF5ZPds3bC2k7oqFpzo9HHvgL0kD wVONQDWRXX/JIuzwKEFTT+OuRCq8bRlgKH8yxgA+5XSwY2QW7kXk5laUKfgUn0kG rKzY9t7iL/QnCTLAkqSbkMsif8vXz2E64g8VVWNZa/nJozQ/ZgkXIHy4fVwp9uuV Bl+rPdP/tjMRJcLR7ZJsUYX2d/5Tdw9kQUVQ8c25thFDO5NiNKAS8aNyIGRPwP32 yigY7ks/6c8v6phKH1BhDZARFEsDnt5gzr6N6Xf+uiYQv8SuB6UPnO92mC2+9n1N OKj8uwfmzSshifUXDJYpi4zXtutPayl1PuAHxWzqM8UmrR7nohyaeyHBRw== -----END CERTIFICATE-----Generated at Sat Apr 18 01:00:42 2026 by rpki-client