$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2039383038.roa File: 34332e3234382e3138342e302f32312d3231203d3e2039383038.roa (raw, json) Hash identifier: KO6/QQO9xzMhx17j9gR6jv0vTKRObkwBUbmYxd/Xrec= Subject key identifier: 55:00:83:F7:AC:A5:E2:AC:FB:61:6E:43:A8:3D:F4:0B:72:35:FA:9C Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 7EB3059EB6D9EDF191498A403447C21869E2CA37 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2039383038.roa Signing time: Mon 28 Sep 2026 01:01:36 +0000 ROA not before: Mon 28 Sep 2026 00:56:36 +0000 ROA not after: Mon 27 Sep 2027 01:01:36 +0000 asID: 9808 IP address blocks: 43.248.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b3:05:9e:b6:d9:ed:f1:91:49:8a:40:34:47:c2:18:69:e2:ca:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:56:36 2026 GMT Not After : Sep 27 01:01:36 2027 GMT Subject: CN=550083F7ACA5E2ACFB616E43A83DF40B7235FA9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8f:3d:51:75:f4:f1:18:d7:03:8e:34:a2:27: 4c:19:7d:3a:43:e7:7f:1e:73:83:e3:bf:25:ee:93: b1:18:99:c1:15:09:4c:4d:63:d9:1c:89:26:47:bc: 54:6b:8f:47:a6:da:b4:32:4f:81:f8:92:ab:1a:17: 9f:e5:3d:a3:58:de:b7:d9:d9:d0:20:82:96:b7:4e: 1c:13:e0:d4:16:53:09:27:3f:5e:7c:c8:98:b1:54: b1:fb:ad:1e:61:c4:14:38:dc:03:36:6a:9f:2f:11: 07:1c:16:df:66:e3:7a:ed:0e:55:f5:2f:27:dc:aa: 44:37:8c:a0:37:2e:42:8f:96:b6:0f:40:1c:27:6e: 46:30:a4:01:c7:56:74:a1:20:4d:6b:0b:ca:75:e5: 64:6d:9b:5b:fe:2b:53:df:c7:6c:cc:2a:da:0a:e5: cd:1c:ea:3b:08:4a:65:10:9e:9e:4e:e1:07:a3:87: 19:0e:29:1a:67:d5:33:79:50:48:c1:a1:24:1d:b4: 95:59:76:e8:e5:db:77:6b:07:0c:03:f6:22:b3:99: b0:83:74:ab:2b:8a:ad:fb:8c:d3:2a:f5:1e:45:2d: 00:10:cb:10:d2:bd:2b:b8:e9:09:81:b7:2f:9d:e8: 15:0b:88:54:7e:de:90:64:b1:cf:89:7f:3e:e4:55: b6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:00:83:F7:AC:A5:E2:AC:FB:61:6E:43:A8:3D:F4:0B:72:35:FA:9C X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:1b:78:dd:bc:55:b5:f3:b4:a8:60:92:2b:e3:2d:ec:9c:b0: f4:1a:1b:c5:3f:42:9c:4a:1d:5f:c4:2c:d0:ee:05:ae:af:27: a7:d0:fe:28:ae:f3:ed:a3:bc:cb:f3:46:35:bf:51:4a:19:56: 2b:b1:50:a3:e3:a4:a3:70:e1:88:85:a4:07:ff:34:a0:7f:95: c0:bc:00:f3:e7:52:3c:0a:e6:06:f9:3f:1a:1e:8a:dd:ab:a2: e3:38:3c:3c:6e:e0:e2:07:2e:ad:1b:d3:4e:07:06:32:00:e5: b1:7b:3f:73:44:ba:95:35:fe:0d:18:c2:f5:21:99:66:a3:3a: 10:e7:02:25:f0:29:9b:a5:80:81:79:9d:36:7e:ea:1a:e8:61: 31:ab:1c:53:e9:83:8e:33:dc:ea:17:02:38:d7:3f:b8:ac:60: 3f:e0:70:b0:3b:19:e2:07:7a:66:e5:bd:bf:63:7f:37:e2:28: c2:7d:9b:7f:eb:4f:1c:c4:20:a6:b1:b2:35:99:41:ac:35:a9: 6d:81:e6:a6:8e:a9:5f:af:67:7c:ee:2b:d3:d9:89:91:ed:61: ca:4d:e6:bd:4d:5c:ee:ac:9a:90:53:8a:b4:74:0b:db:be:c1: 22:04:0d:b8:9d:19:60:e8:3c:8d:70:a1:04:cb:4f:95:4f:49: 36:a0:16:c2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUfrMFnrbZ7fGRSYpANEfCGGniyjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU2MzZaFw0yNzA5MjcwMTAxMzZaMDMxMTAvBgNV BAMTKDU1MDA4M0Y3QUNBNUUyQUNGQjYxNkU0M0E4M0RGNDBCNzIzNUZBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWjz1RdfTxGNcDjjSiJ0wZfTpD 538ec4PjvyXuk7EYmcEVCUxNY9kciSZHvFRrj0em2rQyT4H4kqsaF5/lPaNY3rfZ 2dAggpa3ThwT4NQWUwknP158yJixVLH7rR5hxBQ43AM2ap8vEQccFt9m43rtDlX1 LyfcqkQ3jKA3LkKPlrYPQBwnbkYwpAHHVnShIE1rC8p15WRtm1v+K1Pfx2zMKtoK 5c0c6jsISmUQnp5O4QejhxkOKRpn1TN5UEjBoSQdtJVZdujl23drBwwD9iKzmbCD dKsriq37jNMq9R5FLQAQyxDSvSu46QmBty+d6BULiFR+3pBksc+Jfz7kVbZTAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUVQCD96yl4qz7YW5DqD30C3I1+pwwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMTM4MzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzOTM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyv4uDANBgkqhkiG9w0BAQsFAAOCAQEAjBt43bxVtfO0qGCSK+Mt7Jyw9Bob xT9CnEodX8Qs0O4Frq8np9D+KK7z7aO8y/NGNb9RShlWK7FQo+Oko3DhiIWkB/80 oH+VwLwA8+dSPArmBvk/Gh6K3aui4zg8PG7g4gcurRvTTgcGMgDlsXs/c0S6lTX+ DRjC9SGZZqM6EOcCJfApm6WAgXmdNn7qGuhhMascU+mDjjPc6hcCONc/uKxgP+Bw sDsZ4gd6ZuW9v2N/N+Iown2bf+tPHMQgprGyNZlBrDWpbYHmpo6pX69nfO4r09mJ ke1hyk3mvU1c7qyakFOKtHQL277BIgQNuJ0ZYOg8jXChBMtPlU9JNqAWwg== -----END CERTIFICATE-----Generated at Sun Oct 11 10:42:53 2026 by rpki-client