$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203133333738.roa File: 34332e3234382e3138342e302f32312d3231203d3e203133333738.roa (raw, json) Hash identifier: tminhqXu/fJwhxBekByOtsSKZYY8LIb03rBk4eUmp0Y= Subject key identifier: D8:1F:64:72:75:7C:01:1D:C7:66:C4:E1:08:CE:57:7A:4A:A7:FE:14 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 2EE72A44600C23BEB0F03C198BCCF7E2F7F505BC Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203133333738.roa Signing time: Fri 17 Apr 2026 01:47:34 +0000 ROA not before: Fri 17 Apr 2026 01:42:34 +0000 ROA not after: Fri 16 Apr 2027 01:47:34 +0000 asID: 13378 IP address blocks: 43.248.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e7:2a:44:60:0c:23:be:b0:f0:3c:19:8b:cc:f7:e2:f7:f5:05:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 17 01:42:34 2026 GMT Not After : Apr 16 01:47:34 2027 GMT Subject: CN=D81F6472757C011DC766C4E108CE577A4AA7FE14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:7d:c6:d0:bc:ca:99:a8:c8:39:62:e4:90: 80:81:29:90:a3:ee:5a:4b:de:c4:64:1a:e7:a5:b6: dc:b7:d8:4a:2c:2e:d2:a6:ef:c9:3d:3c:7b:f3:7d: 32:61:b0:68:d3:62:1b:9f:44:65:5e:6e:a1:9e:fe: c9:ff:37:5f:0e:82:14:d9:23:f2:cd:94:34:87:6b: 3d:6f:78:60:1a:20:e4:75:ec:42:36:88:ff:c0:32: 7b:1d:19:f7:88:73:59:45:b3:1b:fd:e7:51:8d:e9: 32:59:b1:ce:29:69:45:fe:e6:44:0e:01:1a:68:e0: a8:e9:6b:2e:51:82:91:44:bd:7e:52:d0:09:99:7e: 3b:5f:70:5a:8c:61:1e:6a:be:6f:c6:fc:26:e3:55: 1b:34:66:ad:aa:e5:2d:72:60:d7:65:08:f6:a5:b0: e4:5b:43:04:f7:54:80:ed:08:53:54:0a:28:48:0a: 03:ad:14:c8:2c:6d:53:b3:76:d4:35:32:c4:7c:a7: 63:de:3d:cf:52:ad:fd:16:07:1b:b3:c9:39:f7:f9: ac:88:42:c9:84:ae:6d:f6:07:05:51:f9:94:44:8e: c3:f6:76:b9:44:80:16:bd:aa:60:c2:fb:15:1b:fd: ab:81:5d:83:f7:47:60:f9:98:b1:da:26:02:20:7c: 09:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1F:64:72:75:7C:01:1D:C7:66:C4:E1:08:CE:57:7A:4A:A7:FE:14 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203133333738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption 24:16:f1:86:3d:83:ab:2d:a0:4c:66:6d:0e:f8:37:e1:61:4b: 24:95:56:01:55:de:0e:aa:65:4e:d1:bf:01:21:b8:a4:84:28: e6:99:e2:34:6d:29:95:83:03:38:32:64:eb:7c:c8:0e:0e:94: 1f:94:a4:b2:8e:25:53:63:ad:2a:40:e2:95:b1:dd:b0:27:d2: 99:c1:16:33:f0:5d:a3:1d:ae:d7:48:c2:ec:2e:49:0d:a2:e6: a1:98:09:47:35:a2:18:5f:9c:e7:93:d7:13:e9:7b:e7:21:44: da:d3:bf:0b:27:17:0a:9e:41:9f:77:cb:2e:3b:08:bf:b6:15: fa:92:60:ad:99:9d:31:2b:e0:3d:3c:5a:5c:ed:72:3d:53:a1: 2e:3e:ab:4c:8f:f8:2e:e7:51:69:94:a1:3a:e5:2d:4c:2b:7a: 9f:2b:92:84:ac:7e:a7:ba:4c:9e:75:43:08:a1:de:1d:c4:73: 1b:70:de:bc:93:38:03:25:f2:73:c3:c8:ca:e8:a9:7e:a6:29: a6:f7:fd:50:5c:4c:a6:4e:9a:74:40:26:72:6b:7c:41:bb:4d: 35:f8:5a:aa:72:b5:cd:d3:f2:a3:fe:b0:fa:9b:29:a9:e0:c9: 33:b3:b1:dc:85:86:4e:5c:3b:22:06:a1:c8:3a:3e:bb:66:22: 7e:1f:eb:6f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIULucqRGAMI76w8DwZi8z34vf1BbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTcwMTQyMzRaFw0yNzA0MTYwMTQ3MzRaMDMxMTAvBgNV BAMTKEQ4MUY2NDcyNzU3QzAxMURDNzY2QzRFMTA4Q0U1NzdBNEFBN0ZFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42X3G0LzKmajIOWLkkICBKZCj 7lpL3sRkGueltty32EosLtKm78k9PHvzfTJhsGjTYhufRGVebqGe/sn/N18OghTZ I/LNlDSHaz1veGAaIOR17EI2iP/AMnsdGfeIc1lFsxv951GN6TJZsc4paUX+5kQO ARpo4Kjpay5RgpFEvX5S0AmZfjtfcFqMYR5qvm/G/CbjVRs0Zq2q5S1yYNdlCPal sORbQwT3VIDtCFNUCihICgOtFMgsbVOzdtQ1MsR8p2PePc9Srf0WBxuzyTn3+ayI QsmErm32BwVR+ZREjsP2drlEgBa9qmDC+xUb/auBXYP3R2D5mLHaJgIgfAkJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU2B9kcnV8AR3HZsThCM5Xekqn/hQwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzM0MzMyZTMyMzQz ODJlMzEzODM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzEzMzMzMzczOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAyv4uDANBgkqhkiG9w0BAQsFAAOCAQEAJBbxhj2Dqy2gTGZtDvg34WFL JJVWAVXeDqplTtG/ASG4pIQo5pniNG0plYMDODJk63zIDg6UH5Skso4lU2OtKkDi lbHdsCfSmcEWM/Bdox2u10jC7C5JDaLmoZgJRzWiGF+c55PXE+l75yFE2tO/CycX Cp5Bn3fLLjsIv7YV+pJgrZmdMSvgPTxaXO1yPVOhLj6rTI/4LudRaZShOuUtTCt6 nyuShKx+p7pMnnVDCKHeHcRzG3DevJM4AyXyc8PIyuipfqYppvf9UFxMpk6adEAm cmt8QbtNNfhaqnK1zdPyo/6w+pspqeDJM7Ox3IWGTlw7IgahyDo+u2Yifh/rbw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:30:40 2026 by rpki-client