$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203536303436.roa File: 34332e3234382e3138342e302f32312d3231203d3e203536303436.roa (raw, json) Hash identifier: UDEltzivmtouKeAbB1l3ZSOVpijLw/17bFpzSe/HtIs= Subject key identifier: D8:D7:CE:66:AD:66:87:66:90:E9:CE:15:64:54:AF:79:1B:50:85:ED Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 68167C51B8318640540AC100731DB54691BBE1C4 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203536303436.roa Signing time: Mon 28 Sep 2026 01:01:36 +0000 ROA not before: Mon 28 Sep 2026 00:56:36 +0000 ROA not after: Mon 27 Sep 2027 01:01:36 +0000 asID: 56046 IP address blocks: 43.248.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:16:7c:51:b8:31:86:40:54:0a:c1:00:73:1d:b5:46:91:bb:e1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:56:36 2026 GMT Not After : Sep 27 01:01:36 2027 GMT Subject: CN=D8D7CE66AD66876690E9CE156454AF791B5085ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7c:10:50:e3:7a:95:ea:a9:3a:7e:e2:a5:06: c6:2f:5a:62:26:dd:1e:38:bc:96:9f:79:12:87:a7: 7b:51:42:c4:d6:6a:fe:05:da:03:37:a2:82:58:6e: 51:9e:e7:e9:b1:07:e9:cb:66:1e:14:3d:83:7e:43: a8:2d:1a:4c:63:43:6d:ed:23:48:0c:83:b0:1f:44: b0:1b:b6:dc:c1:e6:45:28:0f:98:30:8e:9d:b4:38: 6c:2e:0b:87:db:38:dc:bb:1d:79:a9:d7:d7:1c:13: 3e:b8:28:be:98:7a:15:57:2d:fe:d5:9c:3a:03:3a: 0b:6f:0c:5e:e8:e9:48:75:e6:e9:6f:64:33:0b:6f: c2:52:60:0f:0a:c9:14:ee:bc:14:5c:fa:5f:39:63: 7b:b9:f5:e2:70:42:29:8b:73:9b:b5:68:a1:41:47: be:bd:71:a2:f2:04:54:81:2f:66:f0:e7:4e:9a:31: 24:4f:38:59:19:3e:14:92:3f:4e:0c:63:c8:42:ed: a1:11:c9:3c:79:ef:88:6a:7a:93:60:98:c9:b9:fc: f6:0a:9e:5c:e2:d4:97:b0:36:65:32:da:2b:88:fa: ae:5c:96:51:c7:d9:42:00:08:a7:64:9c:3e:33:8c: 9a:17:49:b1:2c:a2:0a:e0:0a:6a:a0:be:a0:1e:dc: 5e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D7:CE:66:AD:66:87:66:90:E9:CE:15:64:54:AF:79:1B:50:85:ED X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption 20:f9:9e:48:5b:99:9b:47:74:ae:86:7f:b7:d8:0a:15:4f:ac: 5e:a9:a1:ef:43:e7:24:00:ef:2e:de:94:8e:04:d3:75:e4:ab: 05:cc:2e:a5:b3:34:d1:69:96:0e:d0:b0:f9:5b:54:35:15:50: ef:30:f3:56:d7:80:b5:69:33:69:35:58:9c:49:dc:16:8d:ea: 6b:97:26:08:78:39:7d:91:8a:77:41:3b:cb:18:3e:84:20:f5: 1a:c5:d4:97:ba:50:42:b5:b6:23:88:aa:7b:6c:28:1e:55:46: d7:0c:67:0d:86:3d:90:54:11:86:1c:dc:6e:30:e4:d9:1b:d5: 15:28:14:d5:e4:a8:54:65:52:f1:d7:e8:fd:60:d1:33:d9:ba: 9d:33:5d:34:ed:ff:46:27:e7:aa:6d:69:e0:a6:77:e7:09:af: fc:5d:22:7d:de:10:0d:aa:e4:dc:90:f4:a3:50:bd:85:31:2b: 89:82:e3:d6:83:f7:43:ee:dc:48:b3:90:27:d0:71:ac:f6:f5: 33:08:05:f3:43:c4:8b:0d:e6:2b:bd:7f:76:db:a7:7a:72:44: ea:cf:9e:f5:c8:16:a5:f7:61:85:c6:5c:14:50:98:b3:8a:04: 03:6e:d5:c4:29:51:04:cc:e2:b0:02:c7:d6:e7:87:be:93:5c: a4:cc:0c:43 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUaBZ8UbgxhkBUCsEAcx21RpG74cQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU2MzZaFw0yNzA5MjcwMTAxMzZaMDMxMTAvBgNV BAMTKEQ4RDdDRTY2QUQ2Njg3NjY5MEU5Q0UxNTY0NTRBRjc5MUI1MDg1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjfBBQ43qV6qk6fuKlBsYvWmIm 3R44vJafeRKHp3tRQsTWav4F2gM3ooJYblGe5+mxB+nLZh4UPYN+Q6gtGkxjQ23t I0gMg7AfRLAbttzB5kUoD5gwjp20OGwuC4fbONy7HXmp19ccEz64KL6YehVXLf7V nDoDOgtvDF7o6Uh15ulvZDMLb8JSYA8KyRTuvBRc+l85Y3u59eJwQimLc5u1aKFB R769caLyBFSBL2bw506aMSRPOFkZPhSSP04MY8hC7aERyTx574hqepNgmMm5/PYK nlzi1JewNmUy2iuI+q5cllHH2UIACKdknD4zjJoXSbEsogrgCmqgvqAe3F4BAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU2NfOZq1mh2aQ6c4VZFSveRtQhe0wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzM0MzMyZTMyMzQz ODJlMzEzODM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAyv4uDANBgkqhkiG9w0BAQsFAAOCAQEAIPmeSFuZm0d0roZ/t9gKFU+s Xqmh70PnJADvLt6UjgTTdeSrBcwupbM00WmWDtCw+VtUNRVQ7zDzVteAtWkzaTVY nEncFo3qa5cmCHg5fZGKd0E7yxg+hCD1GsXUl7pQQrW2I4iqe2woHlVG1wxnDYY9 kFQRhhzcbjDk2RvVFSgU1eSoVGVS8dfo/WDRM9m6nTNdNO3/Rifnqm1p4KZ35wmv /F0ifd4QDark3JD0o1C9hTEriYLj1oP3Q+7cSLOQJ9BxrPb1MwgF80PEiw3mK71/ dtunenJE6s+e9cgWpfdhhcZcFFCYs4oEA27VxClRBMzisALH1ueHvpNcpMwMQw== -----END CERTIFICATE-----Generated at Sun Oct 11 08:28:39 2026 by rpki-client