$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3232362e39362e302f32302d3230203d3e2030.roa File: 34332e3232362e39362e302f32302d3230203d3e2030.roa (raw, json) Hash identifier: fMEE2hMhlGsLQKs/2mBQXh5bVOXZSSO/KvEEOb8UET4= Subject key identifier: E2:28:10:55:9B:70:AA:FE:33:D9:7B:B5:48:8D:BE:1F:23:84:E3:27 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 742D23FADAD9EB726AAB396D405104A70F4961DC Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3232362e39362e302f32302d3230203d3e2030.roa Signing time: Mon 28 Sep 2026 01:00:34 +0000 ROA not before: Mon 28 Sep 2026 00:55:34 +0000 ROA not after: Mon 27 Sep 2027 01:00:34 +0000 asID: 0 IP address blocks: 43.226.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 14:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2d:23:fa:da:d9:eb:72:6a:ab:39:6d:40:51:04:a7:0f:49:61:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:34 2026 GMT Not After : Sep 27 01:00:34 2027 GMT Subject: CN=E22810559B70AAFE33D97BB5488DBE1F2384E327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b8:60:05:f8:90:cd:fb:59:2f:22:90:1f:43: 4f:40:cc:a4:14:84:d4:89:5f:bd:ca:64:b6:17:09: 13:55:d2:3b:7b:a8:8e:7e:23:1c:b5:4c:96:21:b5: 00:6c:2c:d3:ed:dc:df:f1:c2:74:46:1f:22:7c:e3: cd:be:ca:47:b4:d1:bb:0a:e0:f5:c8:bd:ed:d7:36: d2:41:ad:6f:27:f0:02:0a:0d:94:f9:0e:d1:99:7e: 89:d9:2f:27:69:b9:b4:c8:f9:0e:43:e5:4b:73:41: a0:79:49:d4:b0:e1:02:59:6c:64:9c:50:f3:df:d9: a6:e0:cc:d3:f4:d5:8a:86:97:43:c4:04:58:f4:9d: 74:65:2d:1e:37:d8:1d:96:53:92:1d:e4:a2:69:90: a4:ab:05:4b:42:28:87:21:c2:8d:34:ff:42:55:b8: 11:7e:6b:c5:36:4a:79:5d:0f:cd:4f:e6:4f:46:a9: 0d:0e:94:9a:23:25:b4:ea:09:fa:b8:e5:52:46:ab: b7:39:22:f3:4f:a8:c7:50:99:14:b7:bd:a2:b7:d2: ae:c3:10:34:2d:0d:49:00:8b:38:93:12:53:1a:f5: 5b:0c:9d:0c:7f:30:95:71:fa:f2:3a:99:d3:75:16: 24:5f:34:7f:bc:44:39:6d:4f:7a:17:b0:10:89:2c: 62:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:28:10:55:9B:70:AA:FE:33:D9:7B:B5:48:8D:BE:1F:23:84:E3:27 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3232362e39362e302f32302d3230203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.96.0/20 Signature Algorithm: sha256WithRSAEncryption 9d:20:53:ca:ef:5e:f5:d9:14:b5:62:8a:e0:ad:86:88:e6:88: 88:1b:b9:b0:3a:04:e1:78:09:cc:2f:83:d0:7f:78:58:fb:9c: 26:42:82:f7:e9:bd:49:6e:2b:70:40:bf:af:9c:1e:ec:04:5b: 48:fa:56:71:72:db:35:77:55:da:9d:d9:43:a9:ca:45:13:6c: a8:bf:51:8a:31:f1:ae:7a:57:f7:31:ac:7d:7c:ce:da:dc:cc: 61:7c:28:d9:9b:b6:63:93:d5:d9:5c:f6:d0:78:30:e8:00:a9: 54:0e:41:5c:2f:cd:08:48:7f:c2:73:5f:69:26:9e:36:87:08: ff:bd:71:27:c0:bc:6f:39:79:44:61:d1:23:5b:ba:70:7a:f9: 5c:e4:7b:3c:dc:b6:40:51:ae:89:92:b3:9f:5f:20:97:bb:3f: 34:4d:ef:46:6d:46:09:89:96:9a:21:cc:74:56:c9:50:4d:ad: c4:f2:8e:6c:ac:65:e0:a8:ee:cb:34:69:ef:50:e9:79:11:93: e6:8a:d2:c7:ec:fb:07:e2:e2:c1:93:15:a8:ec:69:a1:de:e3: 95:79:0d:0e:b6:87:1f:f9:4e:5c:42:15:87:3d:8b:98:78:71: a9:38:32:80:46:cd:74:a4:03:54:d5:79:18:a1:87:82:09:e1: d0:0d:0a:ca -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUdC0j+trZ63JqqzltQFEEpw9JYdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzRaFw0yNzA5MjcwMTAwMzRaMDMxMTAvBgNV BAMTKEUyMjgxMDU1OUI3MEFBRkUzM0Q5N0JCNTQ4OERCRTFGMjM4NEUzMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnuGAF+JDN+1kvIpAfQ09AzKQU hNSJX73KZLYXCRNV0jt7qI5+Ixy1TJYhtQBsLNPt3N/xwnRGHyJ8482+yke00bsK 4PXIve3XNtJBrW8n8AIKDZT5DtGZfonZLydpubTI+Q5D5UtzQaB5SdSw4QJZbGSc UPPf2abgzNP01YqGl0PEBFj0nXRlLR432B2WU5Id5KJpkKSrBUtCKIchwo00/0JV uBF+a8U2SnldD81P5k9GqQ0OlJojJbTqCfq45VJGq7c5IvNPqMdQmRS3vaK30q7D EDQtDUkAiziTElMa9VsMnQx/MJVx+vI6mdN1FiRfNH+8RDltT3oXsBCJLGJ3AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU4igQVZtwqv4z2Xu1SI2+HyOE4ycwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzMjM2 MmUzOTM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQr4mAw DQYJKoZIhvcNAQELBQADggEBAJ0gU8rvXvXZFLViiuCthojmiIgbubA6BOF4Ccwv g9B/eFj7nCZCgvfpvUluK3BAv6+cHuwEW0j6VnFy2zV3Vdqd2UOpykUTbKi/UYox 8a56V/cxrH18ztrczGF8KNmbtmOT1dlc9tB4MOgAqVQOQVwvzQhIf8JzX2kmnjaH CP+9cSfAvG85eURh0SNbunB6+VzkezzctkBRromSs59fIJe7PzRN70ZtRgmJlpoh zHRWyVBNrcTyjmysZeCo7ss0ae9Q6XkRk+aK0sfs+wfi4sGTFajsaaHe45V5DQ62 hx/5TlxCFYc9i5h4cak4MoBGzXSkA1TVeRihh4IJ4dANCso= -----END CERTIFICATE-----Generated at Tue Oct 6 15:41:20 2026 by rpki-client