$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230342e302f32322d3232203d3e2034383337.roa File: 34332e3234382e3230342e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: u/e/+mSCyP45jftKKS144itBdDy0CgSJDBZCA7/Gkls= Subject key identifier: 8E:BD:68:FF:86:BC:40:F1:5D:A6:76:91:62:D1:8C:CA:6C:F3:8E:0A Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 3039E0D254B2A11189425C51FD5D5B60706A531A Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230342e302f32322d3232203d3e2034383337.roa Signing time: Tue 14 Apr 2026 07:41:14 +0000 ROA not before: Tue 14 Apr 2026 07:36:14 +0000 ROA not after: Tue 13 Apr 2027 07:41:14 +0000 asID: 4837 IP address blocks: 43.248.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 15:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:39:e0:d2:54:b2:a1:11:89:42:5c:51:fd:5d:5b:60:70:6a:53:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 14 07:36:14 2026 GMT Not After : Apr 13 07:41:14 2027 GMT Subject: CN=8EBD68FF86BC40F15DA6769162D18CCA6CF38E0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c0:1d:66:5e:9c:20:bb:31:eb:03:73:32:00: ad:10:50:f2:8c:6e:67:37:88:a9:ba:ea:2b:6d:f6: 96:80:e5:8d:f9:5e:0b:f0:90:10:fc:46:e6:7f:c1: cf:34:3b:75:94:60:68:ab:2b:70:e3:d7:63:8a:0c: 30:00:b6:92:1b:6c:c5:bf:7a:31:6b:e4:ac:e3:14: 92:98:3f:59:fe:3e:5a:e3:a3:e5:d5:89:e4:ee:57: 3b:4d:4e:cd:bf:da:d9:f2:cc:2b:f2:1d:8a:93:c7: 3d:8a:9c:78:9e:96:97:90:d5:a5:02:c8:4b:49:67: c7:48:55:0f:3e:ae:78:a4:0c:fc:be:04:c8:54:7c: 23:eb:75:63:8c:41:b0:eb:dc:19:ad:27:e9:de:fc: aa:63:eb:69:bf:12:4a:39:05:74:2c:fb:b5:e1:ee: 89:5d:0c:95:24:7b:80:00:22:e7:02:cd:2f:af:42: 55:09:d9:78:a9:8b:ed:97:aa:78:68:f4:97:31:b4: 80:65:a6:d2:7a:c8:41:0a:dd:70:43:85:d7:1d:1d: 20:66:80:4a:76:0c:d9:cb:1b:e9:f1:32:7c:e9:82: cc:bb:a8:d5:60:de:4a:79:7c:8e:8d:ab:e8:f4:0b: 51:5e:d4:17:5c:15:46:62:5f:7c:30:3d:67:2d:e6: 98:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BD:68:FF:86:BC:40:F1:5D:A6:76:91:62:D1:8C:CA:6C:F3:8E:0A X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3230342e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.204.0/22 Signature Algorithm: sha256WithRSAEncryption 18:79:9f:ed:9b:23:f2:e9:08:6e:d6:78:e2:bb:d4:10:e8:d1: 8d:d6:04:d7:da:8d:c7:58:bc:6a:f9:07:48:70:2b:2b:a3:15: 47:c2:8c:72:5a:97:5e:ed:45:86:1f:5d:dc:8a:64:fb:0e:3c: 99:15:3c:55:9c:9b:07:d9:f7:ee:7a:b8:13:05:c3:ba:04:b8: 9b:a8:7f:19:f4:f7:42:8f:41:52:fa:8a:06:32:e0:22:16:fb: f9:8d:2c:1d:d6:2e:4f:93:82:54:36:a1:a7:81:3b:63:7b:74: 70:cd:24:b7:c6:ae:90:a8:d0:2b:7f:ed:25:10:8a:52:54:af: a5:56:8e:e6:23:b8:14:59:d3:dc:31:12:80:ee:6d:b4:8b:60: 6a:46:61:b5:e8:10:2b:b2:10:b1:2a:c3:90:67:a9:33:82:bc: 42:59:75:57:bc:5c:fe:ad:26:06:36:e7:3d:f2:31:6b:f8:b6: ae:c9:85:93:37:d0:9f:fc:30:19:e8:ed:56:34:8d:31:b0:33: 65:37:3d:9d:cf:ba:f6:9a:83:cc:48:11:8c:0e:d6:1a:d5:33: d1:00:f6:95:4e:fb:fd:2d:97:57:01:f1:35:f1:49:7f:49:62: 49:a2:67:48:cf:f1:ec:12:8a:c1:5d:62:9e:a8:85:d6:de:3c: 2d:f6:2c:a3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUMDng0lSyoRGJQlxR/V1bYHBqUxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTQwNzM2MTRaFw0yNzA0MTMwNzQxMTRaMDMxMTAvBgNV BAMTKDhFQkQ2OEZGODZCQzQwRjE1REE2NzY5MTYyRDE4Q0NBNkNGMzhFMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdwB1mXpwguzHrA3MyAK0QUPKM bmc3iKm66itt9paA5Y35XgvwkBD8RuZ/wc80O3WUYGirK3Dj12OKDDAAtpIbbMW/ ejFr5KzjFJKYP1n+Plrjo+XVieTuVztNTs2/2tnyzCvyHYqTxz2KnHielpeQ1aUC yEtJZ8dIVQ8+rnikDPy+BMhUfCPrdWOMQbDr3BmtJ+ne/Kpj62m/Eko5BXQs+7Xh 7oldDJUke4AAIucCzS+vQlUJ2Xipi+2Xqnho9JcxtIBlptJ6yEEK3XBDhdcdHSBm gEp2DNnLG+nxMnzpgsy7qNVg3kp5fI6Nq+j0C1Fe1BdcFUZiX3wwPWct5phvAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUjr1o/4a8QPFdpnaRYtGMymzzjgowHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMjMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv4zDANBgkqhkiG9w0BAQsFAAOCAQEAGHmf7Zsj8ukIbtZ44rvUEOjRjdYE 19qNx1i8avkHSHArK6MVR8KMclqXXu1Fhh9d3Ipk+w48mRU8VZybB9n37nq4EwXD ugS4m6h/GfT3Qo9BUvqKBjLgIhb7+Y0sHdYuT5OCVDahp4E7Y3t0cM0kt8aukKjQ K3/tJRCKUlSvpVaO5iO4FFnT3DESgO5ttItgakZhtegQK7IQsSrDkGepM4K8Qll1 V7xc/q0mBjbnPfIxa/i2rsmFkzfQn/wwGejtVjSNMbAzZTc9nc+69pqDzEgRjA7W GtUz0QD2lU77/S2XVwHxNfFJf0liSaJnSM/x7BKKwV1inqiF1t48LfYsow== -----END CERTIFICATE-----Generated at Fri Apr 17 01:49:18 2026 by rpki-client