$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230322e302f32332d3233203d3e2034383337.roa File: 34332e3234382e3230322e302f32332d3233203d3e2034383337.roa (raw, json) Hash identifier: FM9x1/zF/sQsVrTCIWBUJB4Hh+Zs1Uk8+8jtmLgujnE= Subject key identifier: 72:F1:B3:13:5E:EC:E8:FA:B4:87:60:FD:6C:30:9E:E5:A0:9B:8D:9A Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 4B6463366B78D1D4EE67D80E0773F76CDA2DF24A Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230322e302f32332d3233203d3e2034383337.roa Signing time: Tue 14 Apr 2026 07:39:55 +0000 ROA not before: Tue 14 Apr 2026 07:34:55 +0000 ROA not after: Tue 13 Apr 2027 07:39:55 +0000 asID: 4837 IP address blocks: 43.248.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:64:63:36:6b:78:d1:d4:ee:67:d8:0e:07:73:f7:6c:da:2d:f2:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 14 07:34:55 2026 GMT Not After : Apr 13 07:39:55 2027 GMT Subject: CN=72F1B3135EECE8FAB48760FD6C309EE5A09B8D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9b:88:ee:2a:f9:e1:a8:f4:40:bf:89:0a:c7: df:9a:7c:91:62:e7:f3:06:a1:8e:7c:88:d2:59:cd: df:ea:85:bc:72:bc:e0:79:73:b9:0a:5e:b9:96:50: 2f:40:c0:76:fe:2d:75:8d:9c:2f:ea:dd:dc:e9:4a: d8:b3:0d:1c:50:02:e9:89:d2:d2:28:14:be:c6:5c: dd:19:60:49:66:14:ff:db:a8:26:2f:92:35:50:23: 78:d3:5d:e5:86:01:e3:ff:7d:05:c5:3f:3b:7d:2c: 44:b8:47:92:bc:ea:24:84:66:43:e6:8c:0a:3a:9e: ec:fb:25:ed:54:da:6e:3d:76:61:da:00:41:a3:01: 7d:81:d3:30:7c:c7:9a:fd:1a:2c:9d:fa:c2:04:83: e5:f4:b4:9d:b1:dc:43:af:00:72:18:92:14:12:06: ed:8a:c2:57:cb:e1:46:1b:b8:d3:7d:d2:3a:53:ca: 25:55:c3:7a:58:ce:38:b0:f3:78:e7:b6:26:7f:26: 2a:04:96:0d:7d:4f:94:14:b3:36:c2:58:fe:99:b0: 3f:01:31:0c:2f:33:82:4e:92:12:e1:c1:e5:0f:69: ee:07:6d:b3:08:fc:9a:2f:50:bd:4d:31:7a:53:f2: e2:06:b1:fd:0d:71:b5:dc:b2:3b:51:c7:5e:d1:9d: 08:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F1:B3:13:5E:EC:E8:FA:B4:87:60:FD:6C:30:9E:E5:A0:9B:8D:9A X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230322e302f32332d3233203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.202.0/23 Signature Algorithm: sha256WithRSAEncryption 93:fa:96:84:3f:54:f4:e4:3e:e6:57:cb:24:f7:41:7a:cb:03: 78:50:cc:7f:ab:3d:a7:11:63:30:58:ee:7f:73:ab:14:24:ff: bd:13:39:54:09:83:7f:68:45:7a:49:cc:16:28:40:bb:33:12: 23:35:77:3e:b0:35:31:3b:f6:05:d4:95:02:5e:1e:fa:ee:3c: 78:e8:f5:65:93:be:40:79:74:6d:4b:d8:c3:f3:41:c7:78:ac: 67:5d:ca:e1:09:bb:48:32:40:9e:ac:48:d5:6d:6b:ff:3e:2f: 21:bb:e7:37:16:bd:ca:88:27:0b:26:ea:6f:e7:3a:3d:6b:d9: 64:11:23:d4:9d:8c:28:f6:72:2d:c1:c3:23:06:a1:0a:e4:35: 7f:8a:e0:80:d1:c6:71:a5:2b:f0:60:0e:91:78:4f:ac:c6:cd: 37:3f:84:d0:7b:fa:82:a6:77:e0:e3:ec:41:99:b3:19:a9:31: d1:f5:e4:f3:2a:13:96:db:08:81:f7:9b:3c:fa:06:ff:a2:fc: 4c:91:50:c0:79:bf:07:54:cd:94:a4:75:8b:50:0e:b6:f7:c5: b3:f5:d7:6e:02:b8:8c:e8:bb:2a:19:6c:a0:65:64:9a:48:96: 51:71:a0:73:bd:50:7a:6c:a2:b1:f6:c8:eb:e5:0c:7d:c2:bc: 45:d2:9e:8f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUS2RjNmt40dTuZ9gOB3P3bNot8kowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTQwNzM0NTVaFw0yNzA0MTMwNzM5NTVaMDMxMTAvBgNV BAMTKDcyRjFCMzEzNUVFQ0U4RkFCNDg3NjBGRDZDMzA5RUU1QTA5QjhEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMm4juKvnhqPRAv4kKx9+afJFi 5/MGoY58iNJZzd/qhbxyvOB5c7kKXrmWUC9AwHb+LXWNnC/q3dzpStizDRxQAumJ 0tIoFL7GXN0ZYElmFP/bqCYvkjVQI3jTXeWGAeP/fQXFPzt9LES4R5K86iSEZkPm jAo6nuz7Je1U2m49dmHaAEGjAX2B0zB8x5r9Giyd+sIEg+X0tJ2x3EOvAHIYkhQS Bu2KwlfL4UYbuNN90jpTyiVVw3pYzjiw83jntiZ/JioElg19T5QUszbCWP6ZsD8B MQwvM4JOkhLhweUPae4HbbMI/JovUL1NMXpT8uIGsf0NcbXcsjtRx17RnQjBAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUcvGzE17s6Pq0h2D9bDCe5aCbjZowHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMjMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEASv4yjANBgkqhkiG9w0BAQsFAAOCAQEAk/qWhD9U9OQ+5lfLJPdBessDeFDM f6s9pxFjMFjuf3OrFCT/vRM5VAmDf2hFeknMFihAuzMSIzV3PrA1MTv2BdSVAl4e +u48eOj1ZZO+QHl0bUvYw/NBx3isZ13K4Qm7SDJAnqxI1W1r/z4vIbvnNxa9yogn Cybqb+c6PWvZZBEj1J2MKPZyLcHDIwahCuQ1f4rggNHGcaUr8GAOkXhPrMbNNz+E 0Hv6gqZ34OPsQZmzGakx0fXk8yoTltsIgfebPPoG/6L8TJFQwHm/B1TNlKR1i1AO tvfFs/XXbgK4jOi7KhlsoGVkmkiWUXGgc71QemyisfbI6+UMfcK8RdKejw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:24:17 2026 by rpki-client