$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230302e302f32322d3232203d3e2034383337.roa File: 34332e3234382e3230302e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: odcC5eCkv3DJawsbATotb63f7Y4BDNcpfI1OMXh/wlM= Subject key identifier: E1:E4:77:BD:5F:B9:30:56:2A:23:E5:D2:D6:DA:71:F2:BD:31:EF:E6 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 0876FE2D8FED8E04ACADDA81FEAA77825B05B782 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230302e302f32322d3232203d3e2034383337.roa Signing time: Tue 14 Apr 2026 07:39:54 +0000 ROA not before: Tue 14 Apr 2026 07:34:54 +0000 ROA not after: Tue 13 Apr 2027 07:39:54 +0000 asID: 4837 IP address blocks: 43.248.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 15:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:76:fe:2d:8f:ed:8e:04:ac:ad:da:81:fe:aa:77:82:5b:05:b7:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 14 07:34:54 2026 GMT Not After : Apr 13 07:39:54 2027 GMT Subject: CN=E1E477BD5FB930562A23E5D2D6DA71F2BD31EFE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:96:11:9e:c6:4c:73:50:4a:06:d1:ee:b5: 43:19:b1:98:e5:5e:18:7d:6a:66:ab:e8:e1:e8:51: b1:57:68:e5:c1:14:91:2c:6a:2b:fc:3e:04:55:cf: 6a:a5:f0:df:ad:e7:df:3e:83:55:0e:96:6a:5e:9e: 74:8b:82:98:6c:e9:5f:ff:83:cb:b6:99:f7:f1:d4: 5d:cb:fd:31:36:1e:04:2b:5a:86:51:64:d6:94:1c: 1a:d2:e6:7a:9d:dc:6d:1b:47:25:a0:9f:a4:8b:58: ad:5c:93:72:e9:47:7f:89:71:73:a7:ca:08:09:b9: ff:14:b7:09:dd:b4:54:a1:9d:37:59:23:44:61:b0: f4:00:d0:86:7d:93:72:c9:98:a1:14:eb:f0:fb:9b: 13:61:c8:04:b0:0c:5b:89:ac:43:b1:1f:64:54:01: b1:2e:7d:7b:58:f9:09:a4:b4:fe:e5:8d:02:62:c2: 98:d9:92:1e:bd:d6:6a:24:b6:30:2c:92:ae:3e:68: 67:c3:92:70:9b:14:b2:55:85:7d:5e:0b:d8:52:51: 87:62:db:0d:33:ce:14:65:71:fd:a6:89:58:64:19: 7e:88:38:85:c1:23:44:70:d7:49:a5:81:a6:0c:8f: cd:fd:37:87:23:bc:1a:aa:66:e6:44:62:0e:21:8c: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E4:77:BD:5F:B9:30:56:2A:23:E5:D2:D6:DA:71:F2:BD:31:EF:E6 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230302e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.200.0/22 Signature Algorithm: sha256WithRSAEncryption 68:52:69:6e:5e:77:39:9d:e8:71:da:51:3e:15:c8:eb:d0:be: fe:45:52:47:e4:a4:20:0f:36:78:1d:53:43:2d:f3:e5:71:91: fe:99:98:81:7f:da:01:9a:cc:a3:f3:6a:2c:2b:d5:e2:10:35: d6:d4:69:a0:93:49:88:a9:0a:ef:b5:a6:29:bd:5c:5f:a5:b8: fa:92:e5:5a:67:d0:a2:98:1f:47:5d:04:e7:63:73:b7:7c:e8: b1:be:c1:1e:d2:8c:84:c2:98:c3:5b:e4:c9:13:a2:39:be:fe: b3:da:76:a7:8c:e9:b2:5f:68:f7:e4:c1:c4:21:32:a6:69:6f: 80:cf:10:e4:79:6e:97:42:75:18:a0:a4:f6:22:7d:69:c2:8a: 00:12:f7:08:a7:4b:95:07:5a:b5:82:7b:e2:b6:70:82:a6:8c: 9f:84:4d:84:c9:7e:44:25:59:c7:bc:12:90:7a:29:59:0e:30: d1:cc:df:7b:f8:74:dd:20:71:ec:7b:65:5a:0d:78:c2:f7:71: 61:6c:59:d9:71:70:ad:53:f9:6d:88:07:54:6c:ca:fe:03:e2: 8e:e6:e5:bf:5e:82:62:c5:cc:c5:56:23:69:63:11:69:d0:42: 11:8f:9f:1f:81:f0:cb:6c:45:da:30:05:8c:45:9b:ab:76:64: 7a:9c:1b:a5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUCHb+LY/tjgSsrdqB/qp3glsFt4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTQwNzM0NTRaFw0yNzA0MTMwNzM5NTRaMDMxMTAvBgNV BAMTKEUxRTQ3N0JENUZCOTMwNTYyQTIzRTVEMkQ2REE3MUYyQkQzMUVGRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjpYRnsZMc1BKBtHutUMZsZjl Xhh9amar6OHoUbFXaOXBFJEsaiv8PgRVz2ql8N+t598+g1UOlmpennSLgphs6V// g8u2mffx1F3L/TE2HgQrWoZRZNaUHBrS5nqd3G0bRyWgn6SLWK1ck3LpR3+JcXOn yggJuf8UtwndtFShnTdZI0RhsPQA0IZ9k3LJmKEU6/D7mxNhyASwDFuJrEOxH2RU AbEufXtY+QmktP7ljQJiwpjZkh691moktjAskq4+aGfDknCbFLJVhX1eC9hSUYdi 2w0zzhRlcf2miVhkGX6IOIXBI0Rw10mlgaYMj839N4cjvBqqZuZEYg4hjNhhAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU4eR3vV+5MFYqI+XS1tpx8r0x7+YwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMjMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv4yDANBgkqhkiG9w0BAQsFAAOCAQEAaFJpbl53OZ3ocdpRPhXI69C+/kVS R+SkIA82eB1TQy3z5XGR/pmYgX/aAZrMo/NqLCvV4hA11tRpoJNJiKkK77WmKb1c X6W4+pLlWmfQopgfR10E52Nzt3zosb7BHtKMhMKYw1vkyROiOb7+s9p2p4zpsl9o 9+TBxCEypmlvgM8Q5Hlul0J1GKCk9iJ9acKKABL3CKdLlQdatYJ74rZwgqaMn4RN hMl+RCVZx7wSkHopWQ4w0czfe/h03SBx7HtlWg14wvdxYWxZ2XFwrVP5bYgHVGzK /gPijublv16CYsXMxVYjaWMRadBCEY+fH4Hwy2xF2jAFjEWbq3ZkepwbpQ== -----END CERTIFICATE-----Generated at Fri Apr 17 01:49:23 2026 by rpki-client