$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139362e302f32322d3232203d3e2034313334.roa File: 34332e3234382e3139362e302f32322d3232203d3e2034313334.roa (raw, json) Hash identifier: ImRtRm7cGB3Sk0vxLc70OLWPNL9QsyJp9YwzrYgD0qA= Subject key identifier: 6A:25:53:9C:7B:91:0F:74:DD:E9:48:F3:53:1F:1B:7D:8D:A2:3C:DE Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 12E926D068069A907AA726D7BCDFE3B5418522D9 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139362e302f32322d3232203d3e2034313334.roa Signing time: Mon 28 Sep 2026 01:00:38 +0000 ROA not before: Mon 28 Sep 2026 00:55:38 +0000 ROA not after: Mon 27 Sep 2027 01:00:38 +0000 asID: 4134 IP address blocks: 43.248.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e9:26:d0:68:06:9a:90:7a:a7:26:d7:bc:df:e3:b5:41:85:22:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:38 2026 GMT Not After : Sep 27 01:00:38 2027 GMT Subject: CN=6A25539C7B910F74DDE948F3531F1B7D8DA23CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:9c:bf:45:cf:87:4a:95:8a:f4:3b:3b:86: 63:1b:a9:14:78:f2:9c:99:09:d2:55:40:05:ea:51: 7b:2c:dc:16:5f:be:9a:31:8d:6a:f2:38:f0:35:49: c4:19:e2:fb:01:84:88:87:15:d4:80:70:d3:3e:14: 59:6c:37:cb:3b:e7:b5:2f:c8:ef:ec:2a:60:aa:18: a0:01:b1:49:c5:e6:ad:c5:b0:9e:3b:b8:f1:c1:41: 5f:41:c7:3b:1a:24:3b:b1:2b:c6:35:03:77:b2:a5: c1:16:eb:0b:c2:d3:8d:43:5d:c7:f1:1f:f8:63:a2: 9a:b8:21:95:38:17:91:66:87:53:ba:55:cb:b8:4c: 83:4e:34:f9:ce:fe:40:ed:35:25:6f:95:a9:3f:04: 4a:e5:2a:ab:20:b1:82:66:41:d8:04:19:5e:04:b7: 39:f5:dc:30:81:ef:5c:7d:e3:a7:0f:89:75:20:4a: 72:f3:fa:ea:72:d5:cf:f5:c5:eb:54:3c:c4:8d:50: 01:13:40:63:0c:95:2e:5a:99:20:08:ce:79:3f:29: bc:6a:eb:99:26:92:71:42:72:62:d2:dc:a3:52:fb: f4:b5:a9:cf:76:80:06:fa:2d:5b:2f:39:93:cb:7d: 8b:b3:b6:82:23:c3:4e:ac:21:83:f5:99:33:22:ff: a3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:25:53:9C:7B:91:0F:74:DD:E9:48:F3:53:1F:1B:7D:8D:A2:3C:DE X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139362e302f32322d3232203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.196.0/22 Signature Algorithm: sha256WithRSAEncryption 86:94:be:4b:b5:44:43:c8:4e:e2:3e:59:6e:26:51:63:89:95: dc:90:0e:f6:85:28:50:97:bd:11:8d:84:f2:ca:0f:9e:b9:c0: 21:a3:32:3b:8d:dd:58:bf:f5:b1:1e:71:e1:3f:3d:5b:a5:4f: 91:1b:b4:51:62:44:08:5f:d7:b0:89:9b:d0:d6:a5:53:cc:97: fd:28:e7:37:23:6f:32:f6:c5:34:1e:9f:a5:35:fe:5e:e2:ee: f7:1c:e9:cf:87:34:40:f0:b4:e1:49:57:b1:1a:b8:46:5b:24: 58:ff:d2:7d:ac:23:d6:46:63:81:4b:9c:a7:0f:cb:17:cf:34: 5b:c4:ab:67:a9:af:37:39:67:08:24:28:ae:e2:9e:ae:2f:28: 5a:b4:c7:43:0a:3d:df:7d:5a:44:aa:2f:11:88:41:5c:74:b7: 99:a4:51:36:62:a8:8a:3d:ab:b3:1b:61:ce:53:65:a8:80:78: 36:fa:cc:5c:96:65:bc:a1:1c:90:4b:88:69:ad:db:47:b1:4a: c3:0c:d6:8f:4c:ff:fe:73:d1:00:59:b2:fb:6d:e3:b8:07:2d: 95:cb:15:e8:ae:f8:a6:d4:29:44:7d:ce:da:11:54:e4:f0:ea: cf:26:5a:1b:a4:1e:56:68:50:51:72:c6:d0:60:90:78:36:1e: 03:21:f4:bc -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUEukm0GgGmpB6pybXvN/jtUGFItkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzhaFw0yNzA5MjcwMTAwMzhaMDMxMTAvBgNV BAMTKDZBMjU1MzlDN0I5MTBGNzREREU5NDhGMzUzMUYxQjdEOERBMjNDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcd5y/Rc+HSpWK9Ds7hmMbqRR4 8pyZCdJVQAXqUXss3BZfvpoxjWryOPA1ScQZ4vsBhIiHFdSAcNM+FFlsN8s757Uv yO/sKmCqGKABsUnF5q3FsJ47uPHBQV9BxzsaJDuxK8Y1A3eypcEW6wvC041DXcfx H/hjopq4IZU4F5Fmh1O6Vcu4TINONPnO/kDtNSVvlak/BErlKqsgsYJmQdgEGV4E tzn13DCB71x946cPiXUgSnLz+upy1c/1xetUPMSNUAETQGMMlS5amSAIznk/Kbxq 65kmknFCcmLS3KNS+/S1qc92gAb6LVsvOZPLfYuztoIjw06sIYP1mTMi/6OjAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUaiVTnHuRD3Td6UjzUx8bfY2iPN4wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMTM5MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDMxMzMzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv4xDANBgkqhkiG9w0BAQsFAAOCAQEAhpS+S7VEQ8hO4j5ZbiZRY4mV3JAO 9oUoUJe9EY2E8soPnrnAIaMyO43dWL/1sR5x4T89W6VPkRu0UWJECF/XsImb0Nal U8yX/SjnNyNvMvbFNB6fpTX+XuLu9xzpz4c0QPC04UlXsRq4RlskWP/Sfawj1kZj gUucpw/LF880W8SrZ6mvNzlnCCQoruKeri8oWrTHQwo9331aRKovEYhBXHS3maRR NmKoij2rsxthzlNlqIB4NvrMXJZlvKEckEuIaa3bR7FKwwzWj0z//nPRAFmy+23j uActlcsV6K74ptQpRH3O2hFU5PDqzyZaG6QeVmhQUXLG0GCQeDYeAyH0vA== -----END CERTIFICATE-----Generated at Sun Oct 11 10:43:08 2026 by rpki-client