$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e38302e302f32302d3230203d3e2030.roa File: 34332e3234382e38302e302f32302d3230203d3e2030.roa (raw, json) Hash identifier: nmXfdyhKlzJBCYYVWK/1ep/+p8dJumVz1G49thQgz/k= Subject key identifier: 7C:78:24:E1:77:27:64:66:E4:A1:A9:A4:9F:1B:AB:C4:06:88:78:D1 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 0766468E515A13CC59861A0027482CAFF938E585 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e38302e302f32302d3230203d3e2030.roa Signing time: Tue 14 Apr 2026 07:10:33 +0000 ROA not before: Tue 14 Apr 2026 07:05:33 +0000 ROA not after: Tue 13 Apr 2027 07:10:33 +0000 asID: 0 IP address blocks: 43.248.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 15:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:66:46:8e:51:5a:13:cc:59:86:1a:00:27:48:2c:af:f9:38:e5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 14 07:05:33 2026 GMT Not After : Apr 13 07:10:33 2027 GMT Subject: CN=7C7824E177276466E4A1A9A49F1BABC4068878D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a6:a1:52:40:44:99:1b:fc:b4:9d:dd:8d:98: 5b:fb:5b:64:bf:41:0d:46:01:87:b5:13:29:5d:95: 5c:79:0d:3f:cd:95:7d:9f:38:41:62:f9:74:eb:c3: 4c:9d:c3:57:26:9d:60:40:a7:85:84:70:d8:f2:4c: db:f0:bb:f5:ca:74:68:16:ef:3d:91:9b:8b:5c:c0: 88:c0:b2:1b:e0:e8:0e:03:1f:c8:a6:9d:27:fe:9d: 9a:14:6c:52:c8:50:30:bd:8e:59:e3:fa:d9:59:03: 51:93:5a:3b:af:de:b4:74:08:d2:f1:43:29:88:26: 96:64:98:cd:fe:d2:c9:b1:43:ed:9d:c1:93:12:31: 41:55:31:93:83:30:ff:c1:6d:72:08:48:01:22:e5: 1e:30:4b:85:ad:5f:f8:af:c3:6f:4f:ea:fc:e5:03: cd:ac:2d:7e:10:52:83:b5:52:b0:e9:a4:0d:48:4b: 80:34:75:54:90:14:6c:28:7c:cb:c8:30:cd:c5:3d: dd:86:09:0f:90:7d:43:f4:cc:89:da:62:d1:1c:9b: bc:9c:31:a1:7f:63:67:74:b4:88:7a:74:19:9f:41: bb:e9:6d:5a:2e:a1:48:53:21:fa:d1:f2:1c:b9:67: f2:97:98:98:5e:f8:e6:ba:d6:dd:80:83:b9:f3:81: 08:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:78:24:E1:77:27:64:66:E4:A1:A9:A4:9F:1B:AB:C4:06:88:78:D1 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e38302e302f32302d3230203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.80.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:b8:8a:f4:50:73:4c:d8:f7:e4:32:28:0f:22:72:1e:68:e8: 08:e4:52:75:a1:d3:32:40:df:e1:1d:10:a1:5d:ce:b8:27:5a: 08:b3:20:88:85:d7:97:e2:fa:77:f2:a0:f3:4c:64:97:92:ba: 01:8c:fe:10:ec:c0:a6:42:fd:29:24:fe:2a:4e:c4:f7:52:c3: 60:7c:1e:f9:20:32:af:d5:a6:02:3c:f1:59:87:e9:be:99:24: 41:51:77:f2:3c:8c:1d:48:29:08:8e:d6:51:ee:ac:e0:88:a7: d2:9d:20:ac:b5:f1:95:92:59:aa:43:7e:78:8c:8d:c0:01:e3: 96:9a:c9:db:6f:b7:22:83:cb:4d:af:f2:c8:15:90:9d:bf:a6: 82:45:98:a0:87:47:96:0e:68:8f:0b:eb:29:3f:10:06:b6:c1: dd:5c:24:1b:ab:72:0a:8d:56:26:55:d4:7c:e7:05:e2:65:49: 2e:b9:7f:1c:38:a8:6d:f4:ae:bc:db:ba:f7:f1:98:aa:70:af: f7:5e:05:b0:de:bd:aa:48:a3:ee:2a:49:ea:df:2c:ec:4a:a4: 4a:82:31:b8:8a:f8:2b:fd:fc:37:53:b7:d4:23:d2:fb:7a:13: a0:2b:1a:c1:cd:8d:cf:7a:d6:f0:16:d1:ad:36:c1:61:0f:b5: 7d:62:49:ca -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUB2ZGjlFaE8xZhhoAJ0gsr/k45YUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTQwNzA1MzNaFw0yNzA0MTMwNzEwMzNaMDMxMTAvBgNV BAMTKDdDNzgyNEUxNzcyNzY0NjZFNEExQTlBNDlGMUJBQkM0MDY4ODc4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQpqFSQESZG/y0nd2NmFv7W2S/ QQ1GAYe1EyldlVx5DT/NlX2fOEFi+XTrw0ydw1cmnWBAp4WEcNjyTNvwu/XKdGgW 7z2Rm4tcwIjAshvg6A4DH8imnSf+nZoUbFLIUDC9jlnj+tlZA1GTWjuv3rR0CNLx QymIJpZkmM3+0smxQ+2dwZMSMUFVMZODMP/BbXIISAEi5R4wS4WtX/ivw29P6vzl A82sLX4QUoO1UrDppA1IS4A0dVSQFGwofMvIMM3FPd2GCQ+QfUP0zInaYtEcm7yc MaF/Y2d0tIh6dBmfQbvpbVouoUhTIfrR8hy5Z/KXmJhe+Oa61t2Ag7nzgQgDAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUfHgk4XcnZGbkoamknxurxAaIeNEwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzODMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQr+FAw DQYJKoZIhvcNAQELBQADggEBAAu4ivRQc0zY9+QyKA8ich5o6AjkUnWh0zJA3+Ed EKFdzrgnWgizIIiF15fi+nfyoPNMZJeSugGM/hDswKZC/Skk/ipOxPdSw2B8Hvkg Mq/VpgI88VmH6b6ZJEFRd/I8jB1IKQiO1lHurOCIp9KdIKy18ZWSWapDfniMjcAB 45aaydtvtyKDy02v8sgVkJ2/poJFmKCHR5YOaI8L6yk/EAa2wd1cJBurcgqNViZV 1HznBeJlSS65fxw4qG30rrzbuvfxmKpwr/deBbDevapIo+4qSerfLOxKpEqCMbiK +Cv9/DdTt9Qj0vt6E6ArGsHNjc961vAW0a02wWEPtX1iSco= -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:41 2026 by rpki-client