$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034383337.roa File: 34332e3234382e3138342e302f32312d3231203d3e2034383337.roa (raw, json) Hash identifier: P1+3axQuuT06NUWGfw3psgSrp1XuqcqOXeL7p6v/4O4= Subject key identifier: DF:DA:CB:9D:65:7E:0A:2E:86:70:E3:AB:46:B3:E0:AC:31:3B:B2:59 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 2A0C30A68AB01433B9ED96A7A85B18FFAED6825C Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034383337.roa Signing time: Fri 17 Apr 2026 01:47:34 +0000 ROA not before: Fri 17 Apr 2026 01:42:34 +0000 ROA not after: Fri 16 Apr 2027 01:47:34 +0000 asID: 4837 IP address blocks: 43.248.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0c:30:a6:8a:b0:14:33:b9:ed:96:a7:a8:5b:18:ff:ae:d6:82:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 17 01:42:34 2026 GMT Not After : Apr 16 01:47:34 2027 GMT Subject: CN=DFDACB9D657E0A2E8670E3AB46B3E0AC313BB259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:95:75:06:a4:d2:69:a7:73:1e:37:38:fc: 3e:e3:ac:59:cd:0a:0f:b2:4d:bd:fb:4f:25:8d:b7: cc:c6:90:5e:5b:2c:9a:11:e0:fd:74:82:32:84:b9: 7a:d4:61:80:6f:a6:72:0e:03:5c:8d:43:80:fc:9e: cc:8b:91:86:b8:d4:76:71:b7:a5:af:2c:12:7b:f7: 2f:a9:43:03:cd:e0:f1:8e:3a:00:e1:9f:8c:8f:c5: 0f:33:97:ba:90:cb:b9:72:58:22:54:cb:47:5b:16: e1:4b:b9:f2:d0:60:64:e2:97:b4:a9:63:0c:e2:41: f5:82:c4:33:0e:09:ff:fa:98:9f:1f:b0:88:be:80: 8f:ce:37:55:dc:86:85:6b:f6:11:1a:19:19:8d:22: 04:f9:e4:63:b2:7c:67:38:50:04:59:f3:20:10:ef: 4a:1f:71:ca:61:60:32:1e:50:cd:12:e1:97:85:c3: 8f:2a:67:e4:d0:d9:e6:2a:3c:71:02:00:c3:f8:a1: d9:6a:a2:09:c3:ed:49:34:9c:1a:77:15:d2:a0:7a: 20:ef:fd:01:23:d1:54:96:b1:e2:90:05:3b:8b:d0: 58:96:ca:33:9e:5a:93:29:c7:19:d6:9b:0b:a3:c5: 67:b6:fe:37:9f:60:b8:1e:74:78:9e:4a:14:cf:b0: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DA:CB:9D:65:7E:0A:2E:86:70:E3:AB:46:B3:E0:AC:31:3B:B2:59 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption 8e:1f:74:ad:61:e0:db:2b:cf:8b:11:79:89:f2:0d:1f:87:ab: 3f:22:cc:95:0f:39:c4:06:5c:54:dc:8b:11:3a:81:4d:82:3b: da:d1:38:77:88:14:e1:e1:3d:2d:e8:38:49:9e:aa:6c:9a:b7: 55:e2:31:4f:1d:5a:7e:61:86:6f:30:2b:0e:be:16:27:44:f5: c0:68:56:99:35:9b:ce:5c:c0:99:ed:f9:43:bc:73:7c:0b:8a: 2e:fe:1d:72:ab:ff:8c:e4:e5:df:9f:c6:42:94:de:0c:29:6a: d5:49:6a:a7:35:66:28:7e:83:a7:a5:7e:f4:d1:3b:09:df:ff: bd:cb:c7:eb:bf:b4:83:8b:ef:41:b7:f6:04:a1:3d:46:e7:0a: 25:4c:aa:4b:48:b6:3c:4e:75:66:56:74:82:d2:27:f3:63:53: 3f:8d:32:8a:89:b0:a3:6c:48:85:95:2f:03:10:9d:6e:50:f0: 37:a0:f0:a0:98:24:6e:7e:38:27:5c:77:4f:be:0a:bf:95:2e: ff:f9:30:75:a1:29:82:3c:a7:12:02:8e:84:21:18:25:d0:4b: 94:80:53:7e:8d:a1:d6:01:76:d8:ee:4b:8b:54:23:48:85:ad: 86:be:75:81:64:0e:40:de:56:44:9c:f2:41:dd:fe:80:5e:84: b9:15:ef:5f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUKgwwpoqwFDO57ZanqFsY/67WglwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTcwMTQyMzRaFw0yNzA0MTYwMTQ3MzRaMDMxMTAvBgNV BAMTKERGREFDQjlENjU3RTBBMkU4NjcwRTNBQjQ2QjNFMEFDMzEzQkIyNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyGZV1BqTSaadzHjc4/D7jrFnN Cg+yTb37TyWNt8zGkF5bLJoR4P10gjKEuXrUYYBvpnIOA1yNQ4D8nsyLkYa41HZx t6WvLBJ79y+pQwPN4PGOOgDhn4yPxQ8zl7qQy7lyWCJUy0dbFuFLufLQYGTil7Sp YwziQfWCxDMOCf/6mJ8fsIi+gI/ON1XchoVr9hEaGRmNIgT55GOyfGc4UARZ8yAQ 70ofccphYDIeUM0S4ZeFw48qZ+TQ2eYqPHECAMP4odlqognD7Uk0nBp3FdKgeiDv /QEj0VSWseKQBTuL0FiWyjOeWpMpxxnWmwujxWe2/jefYLgedHieShTPsDJlAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU39rLnWV+Ci6GcOOrRrPgrDE7slkwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMTM4MzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyv4uDANBgkqhkiG9w0BAQsFAAOCAQEAjh90rWHg2yvPixF5ifINH4erPyLM lQ85xAZcVNyLETqBTYI72tE4d4gU4eE9Leg4SZ6qbJq3VeIxTx1afmGGbzArDr4W J0T1wGhWmTWbzlzAme35Q7xzfAuKLv4dcqv/jOTl35/GQpTeDClq1UlqpzVmKH6D p6V+9NE7Cd//vcvH67+0g4vvQbf2BKE9RucKJUyqS0i2PE51ZlZ0gtIn82NTP40y iomwo2xIhZUvAxCdblDwN6DwoJgkbn44J1x3T74Kv5Uu//kwdaEpgjynEgKOhCEY JdBLlIBTfo2h1gF22O5Li1QjSIWthr51gWQOQN5WRJzyQd3+gF6EuRXvXw== -----END CERTIFICATE-----Generated at Sat Apr 18 03:25:37 2026 by rpki-client