$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139322e302f32302d3230203d3e2034383337.roa File: 34332e3234382e3139322e302f32302d3230203d3e2034383337.roa (raw, json) Hash identifier: fBlN2ZUy8SvdQO7jeJ9/XioxIZYnAVn11gd/g/An5eE= Subject key identifier: 4A:E3:23:64:62:87:BE:F3:70:4F:C7:2A:5E:62:51:46:20:7A:37:A0 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 3AA57C34DCE38CAE0D28A6574578AF27B3F9D756 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139322e302f32302d3230203d3e2034383337.roa Signing time: Tue 14 Apr 2026 07:39:54 +0000 ROA not before: Tue 14 Apr 2026 07:34:54 +0000 ROA not after: Tue 13 Apr 2027 07:39:54 +0000 asID: 4837 IP address blocks: 43.248.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 02:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a5:7c:34:dc:e3:8c:ae:0d:28:a6:57:45:78:af:27:b3:f9:d7:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 14 07:34:54 2026 GMT Not After : Apr 13 07:39:54 2027 GMT Subject: CN=4AE323646287BEF3704FC72A5E625146207A37A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:06:d1:7a:92:5d:22:fc:ee:88:f2:49:e4:08: f7:c0:e9:bf:4c:a9:b7:33:e3:84:f9:d1:1f:9c:51: 29:61:00:62:95:1d:24:23:0b:dc:7f:8b:c4:48:de: e4:5d:58:e0:d2:28:00:ed:bd:c6:c9:57:38:93:c0: e3:84:da:c1:45:12:3f:c8:55:56:bc:3f:c5:c5:84: a1:d6:59:07:be:42:3a:d2:58:1b:7a:1b:fe:b9:36: 96:80:eb:a4:e7:01:2a:18:c7:fc:02:0b:00:9f:07: 82:75:28:b2:d9:f2:17:cc:61:0f:66:ca:4a:44:5a: 08:3a:b2:a6:96:97:67:b9:be:f9:2a:3d:97:77:dd: 3b:f2:9b:1f:96:d1:65:fb:7d:67:8f:b0:53:a0:62: 5b:82:e4:31:35:54:9f:4d:3c:a2:4a:94:f2:e5:19: b0:1f:45:27:f2:e1:a1:b7:04:d8:d8:38:d4:33:76: 9f:34:2c:19:84:34:a4:6b:d5:7e:a4:5c:fb:7b:57: e6:be:c1:ec:88:a7:ab:0a:b5:43:ba:f2:8e:85:89: 6c:a1:e1:a3:02:3d:48:da:46:47:66:f6:79:64:06: 49:7a:f7:6d:e3:5e:ff:f0:3d:54:c1:8d:79:99:9a: bc:e4:a6:92:f8:8d:ef:b0:ab:cd:c3:c3:1c:98:9b: 09:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E3:23:64:62:87:BE:F3:70:4F:C7:2A:5E:62:51:46:20:7A:37:A0 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139322e302f32302d3230203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.192.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:0b:22:76:58:e5:96:18:51:1f:50:df:85:ce:fe:ff:62:3c: da:f3:2c:0d:a7:36:6c:22:79:79:0b:70:5f:d1:56:05:53:cd: 0a:7b:a6:e9:4e:11:3d:64:f8:62:84:1d:10:58:9c:6f:48:4b: 9a:ae:e3:01:a7:ed:eb:ab:4f:21:27:db:24:1f:3a:6c:db:5d: 7f:25:33:0a:bd:9e:5c:df:7e:92:47:04:b7:94:96:92:41:56: e6:b0:4a:03:a5:41:99:ed:53:39:4f:22:bc:cf:5c:14:45:47: f1:25:08:5e:ce:e4:a5:bb:25:27:8a:61:69:50:68:b8:ec:95: 0c:0f:b5:b0:41:1d:62:bd:35:0f:19:49:35:0a:c9:89:cb:74: 54:0d:0b:cc:2b:b8:51:61:33:06:a6:e1:c8:b8:bb:58:93:48: 1c:f9:b8:a2:a2:ad:85:8e:01:a7:6c:77:58:7d:0e:d8:76:97: 4d:b6:37:ef:f8:5d:10:5e:52:86:9c:e2:e4:28:fc:2e:48:f2: 09:c5:df:08:8f:13:68:29:6c:dd:c1:20:55:75:6f:3c:e3:80: f1:8a:1b:51:61:b6:d7:c5:97:8f:16:b2:8b:bc:d5:a1:9d:76: 63:af:5f:f3:14:e7:42:53:b9:24:d5:18:24:2b:4a:e2:c5:b5: bf:8a:a6:39 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUOqV8NNzjjK4NKKZXRXivJ7P511YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTQwNzM0NTRaFw0yNzA0MTMwNzM5NTRaMDMxMTAvBgNV BAMTKDRBRTMyMzY0NjI4N0JFRjM3MDRGQzcyQTVFNjI1MTQ2MjA3QTM3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBtF6kl0i/O6I8knkCPfA6b9M qbcz44T50R+cUSlhAGKVHSQjC9x/i8RI3uRdWODSKADtvcbJVziTwOOE2sFFEj/I VVa8P8XFhKHWWQe+QjrSWBt6G/65NpaA66TnASoYx/wCCwCfB4J1KLLZ8hfMYQ9m ykpEWgg6sqaWl2e5vvkqPZd33Tvymx+W0WX7fWePsFOgYluC5DE1VJ9NPKJKlPLl GbAfRSfy4aG3BNjYONQzdp80LBmENKRr1X6kXPt7V+a+weyIp6sKtUO68o6FiWyh 4aMCPUjaRkdm9nlkBkl6923jXv/wPVTBjXmZmrzkppL4je+wq83DwxyYmwnnAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUSuMjZGKHvvNwT8cqXmJRRiB6N6AwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMTM5MzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBCv4wDANBgkqhkiG9w0BAQsFAAOCAQEACwsidljllhhRH1Dfhc7+/2I82vMs Dac2bCJ5eQtwX9FWBVPNCnum6U4RPWT4YoQdEFicb0hLmq7jAaft66tPISfbJB86 bNtdfyUzCr2eXN9+kkcEt5SWkkFW5rBKA6VBme1TOU8ivM9cFEVH8SUIXs7kpbsl J4phaVBouOyVDA+1sEEdYr01DxlJNQrJict0VA0LzCu4UWEzBqbhyLi7WJNIHPm4 oqKthY4Bp2x3WH0O2HaXTbY37/hdEF5Shpzi5Cj8LkjyCcXfCI8TaCls3cEgVXVv POOA8YobUWG218WXjxayi7zVoZ12Y69f8xTnQlO5JNUYJCtK4sW1v4qmOQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:07:13 2026 by rpki-client