$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203233363530.roa File: 34332e3234382e3138342e302f32312d3231203d3e203233363530.roa (raw, json) Hash identifier: kNpIWKA6VOssNpTa0PC8e784PqKwNX3+PhAfVyoBo+o= Subject key identifier: B0:36:10:B3:1D:95:CF:99:2B:36:41:EF:23:D4:4E:38:98:CF:9A:8C Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 5FB507A2530AB47FE7BF23197583E89027A7CB72 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203233363530.roa Signing time: Mon 28 Sep 2026 01:01:36 +0000 ROA not before: Mon 28 Sep 2026 00:56:36 +0000 ROA not after: Mon 27 Sep 2027 01:01:36 +0000 asID: 23650 IP address blocks: 43.248.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b5:07:a2:53:0a:b4:7f:e7:bf:23:19:75:83:e8:90:27:a7:cb:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:56:36 2026 GMT Not After : Sep 27 01:01:36 2027 GMT Subject: CN=B03610B31D95CF992B3641EF23D44E3898CF9A8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:55:8f:f1:f0:f8:75:d9:eb:54:7d:ab:2b:4e: 58:50:c2:24:6d:68:22:f7:8c:10:c4:a9:29:79:9c: 2b:68:ee:05:8c:1b:d5:75:09:73:8c:08:fa:10:71: f7:23:c8:8e:d7:51:ae:fd:dc:28:9d:b0:78:be:d1: 60:c6:8f:51:54:72:31:ae:7b:df:c7:40:1b:65:27: 90:13:10:4d:ec:0a:33:30:38:21:f4:92:ac:86:04: 14:ac:c1:1a:ff:ae:b8:24:55:78:85:32:6b:c4:72: 2d:e9:06:63:6a:68:86:10:3c:bb:70:ba:43:5f:f0: 80:c2:c0:e0:62:8f:b3:51:52:cf:8e:4f:f5:8b:1b: d8:f7:25:69:5d:3a:12:07:fd:9f:76:d7:e3:32:8e: e5:56:19:12:35:42:83:aa:0d:12:f5:42:15:72:b2: 61:7d:43:f9:b2:dc:f1:d9:f0:8b:20:60:af:69:32: 14:ed:38:b2:fa:93:46:cc:8b:be:0f:13:95:14:ba: cd:3a:20:fa:ac:f2:93:eb:02:14:e4:3d:e4:e2:56: 98:44:15:c4:cf:ba:8b:96:9b:5a:46:f5:f2:aa:f8: ce:b0:2c:fe:e4:c0:6a:c6:47:e1:e7:93:dd:bb:fc: ef:4b:fe:38:ba:11:91:fc:3d:d9:7b:44:2f:0e:3d: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:36:10:B3:1D:95:CF:99:2B:36:41:EF:23:D4:4E:38:98:CF:9A:8C X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption 6a:83:ff:44:dc:3f:ad:f8:ec:03:54:a9:b6:a9:9d:31:cd:42: c5:1c:46:ab:bf:2e:ec:48:4f:d7:81:e0:81:5a:3c:e2:79:24: 51:af:e1:93:62:ba:ff:ab:0a:05:89:17:36:bf:21:dc:f2:4e: 63:04:ca:08:ac:27:fd:0b:97:3e:0c:6a:2d:d2:10:d0:ab:3d: 78:d9:29:10:e4:da:3e:c1:c9:d2:49:a1:7d:c6:15:84:32:10: 7b:32:54:45:bf:d0:87:44:56:25:2f:0d:ec:e4:ba:77:ea:c5: b6:7c:4c:fa:0e:ba:d0:e7:5f:ef:41:b1:ed:13:52:43:39:0e: a0:75:df:47:16:71:c0:98:6d:61:6e:2f:ae:61:25:25:19:1e: d6:94:30:c2:06:36:3b:f8:03:dc:67:2a:3c:e6:a9:e1:c8:0b: 61:ba:02:13:5f:b9:6c:d8:c9:d4:8f:52:67:19:0b:f3:0c:b9: b4:06:47:0d:7c:e1:58:bb:8d:58:ab:0e:24:af:9d:f0:d1:2e: a1:2a:7a:26:75:42:df:84:a1:f4:60:6a:b7:8b:c1:5b:4d:33: 08:19:1f:14:dd:1d:ce:0e:af:e2:fb:f2:e3:bb:37:19:cb:19: 04:fc:39:7d:65:85:ec:be:5c:91:cd:fe:d5:8d:0b:28:d8:31: dc:2c:20:95 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUX7UHolMKtH/nvyMZdYPokCeny3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU2MzZaFw0yNzA5MjcwMTAxMzZaMDMxMTAvBgNV BAMTKEIwMzYxMEIzMUQ5NUNGOTkyQjM2NDFFRjIzRDQ0RTM4OThDRjlBOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcVY/x8Ph12etUfasrTlhQwiRt aCL3jBDEqSl5nCto7gWMG9V1CXOMCPoQcfcjyI7XUa793CidsHi+0WDGj1FUcjGu e9/HQBtlJ5ATEE3sCjMwOCH0kqyGBBSswRr/rrgkVXiFMmvEci3pBmNqaIYQPLtw ukNf8IDCwOBij7NRUs+OT/WLG9j3JWldOhIH/Z921+MyjuVWGRI1QoOqDRL1QhVy smF9Q/my3PHZ8IsgYK9pMhTtOLL6k0bMi74PE5UUus06IPqs8pPrAhTkPeTiVphE FcTPuouWm1pG9fKq+M6wLP7kwGrGR+Hnk927/O9L/ji6EZH8Pdl7RC8OPT4rAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUsDYQsx2Vz5krNkHvI9ROOJjPmowwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzM0MzMyZTMyMzQz ODJlMzEzODM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzMzM2MzUzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAyv4uDANBgkqhkiG9w0BAQsFAAOCAQEAaoP/RNw/rfjsA1SptqmdMc1C xRxGq78u7EhP14HggVo84nkkUa/hk2K6/6sKBYkXNr8h3PJOYwTKCKwn/QuXPgxq LdIQ0Ks9eNkpEOTaPsHJ0kmhfcYVhDIQezJURb/Qh0RWJS8N7OS6d+rFtnxM+g66 0Odf70Gx7RNSQzkOoHXfRxZxwJhtYW4vrmElJRke1pQwwgY2O/gD3GcqPOap4cgL YboCE1+5bNjJ1I9SZxkL8wy5tAZHDXzhWLuNWKsOJK+d8NEuoSp6JnVC34Sh9GBq t4vBW00zCBkfFN0dzg6v4vvy47s3GcsZBPw5fWWF7L5ckc3+1Y0LKNgx3CwglQ== -----END CERTIFICATE-----Generated at Sat Oct 10 18:36:09 2026 by rpki-client