$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e203536303436.roa File: 34332e3234302e302e302f32322d3234203d3e203536303436.roa (raw, json) Hash identifier: mXNrA8yk/sOzxuSm+kUOKWIUzEIa4q4+V6ysa4NCLFk= Subject key identifier: 70:72:1E:EF:3A:7C:46:6C:AE:99:D0:98:49:44:3C:45:09:49:06:A9 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 5B2C8797F91BBB72F9022DBA34CF0EC86078749D Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e203536303436.roa Signing time: Fri 17 Apr 2026 01:39:19 +0000 ROA not before: Fri 17 Apr 2026 01:34:19 +0000 ROA not after: Fri 16 Apr 2027 01:39:19 +0000 asID: 56046 IP address blocks: 43.240.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 16:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2c:87:97:f9:1b:bb:72:f9:02:2d:ba:34:cf:0e:c8:60:78:74:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 17 01:34:19 2026 GMT Not After : Apr 16 01:39:19 2027 GMT Subject: CN=70721EEF3A7C466CAE99D09849443C45094906A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:9b:22:86:44:ee:02:49:26:d7:ea:4d:dd: 7d:e0:4a:b6:af:7e:d1:82:e8:b9:0b:41:54:43:eb: fc:30:7f:c1:95:71:91:93:9f:12:69:b2:5a:43:0b: 5c:b7:92:26:50:54:5f:c8:b1:8d:b2:70:a1:4d:8e: c7:cb:a0:11:09:49:71:74:8d:42:22:ec:2e:a8:e5: 71:31:e3:8e:c8:be:70:cb:5c:05:a3:8d:a3:a2:2d: fd:d9:f3:e6:e0:13:aa:87:9a:90:76:90:a0:70:b7: 85:45:6e:84:7e:db:9b:6f:de:e4:85:c0:67:3d:90: 0a:db:c1:27:a4:2e:e9:76:04:43:91:b9:cb:d5:ce: e1:e5:38:be:c5:53:c3:9a:b1:ba:db:65:f4:df:df: 3d:74:4c:b3:8b:f6:bd:bb:f8:08:69:95:d1:f3:b0: ac:16:1f:c3:af:47:8e:88:97:8b:2c:fd:6e:9d:25: 71:a5:f2:de:ac:eb:ea:24:60:80:fa:78:ba:e3:22: b9:cc:32:ba:60:cf:80:66:b2:9e:41:ce:d2:c8:81: 05:ba:82:6c:eb:76:37:45:c9:f9:8c:df:7e:42:65: d9:40:b1:25:a1:22:77:99:24:0c:7d:cc:0f:f7:e9: 9d:33:6e:08:4b:26:4a:aa:78:60:94:a5:eb:ec:59: 1d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:72:1E:EF:3A:7C:46:6C:AE:99:D0:98:49:44:3C:45:09:49:06:A9 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234302e302e302f32322d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 Signature Algorithm: sha256WithRSAEncryption 43:9d:48:8e:90:a7:0b:c5:72:50:63:12:fb:65:4e:25:b8:4a: 19:84:9c:3d:c0:4b:11:a7:a9:0d:05:46:8b:86:53:30:1c:98: 2e:8a:74:53:3b:9f:54:4c:ef:39:b5:54:d9:a2:1b:75:01:d1: 22:0a:1b:f6:66:82:90:d8:f3:75:bf:3d:58:97:ca:44:de:a9: ff:73:96:5f:99:51:b1:87:dd:68:7d:0a:72:09:02:ac:29:74: 11:e1:df:06:6e:14:9a:7f:9b:77:4c:ec:97:b3:63:a6:91:27: 9c:c9:83:17:5d:ea:5e:56:74:b2:38:98:61:75:fd:10:1c:d7: 84:6d:30:35:11:e4:da:38:55:3b:e2:a6:ca:d0:46:c3:0f:27: 9d:76:59:41:51:79:c6:10:69:b1:65:e3:57:ea:fa:e0:17:77: 27:91:15:2a:45:b4:8f:d7:3f:4c:45:31:ed:ca:74:fb:d1:ea: 30:96:a5:74:f4:1a:55:66:eb:29:27:ef:68:26:74:f1:93:e6: c4:a1:9c:88:07:ee:f5:5f:de:3c:70:9d:4e:24:df:da:e9:91: 35:be:4a:1e:56:c5:dc:34:5a:cc:2f:55:b1:8e:56:e1:4b:64: 46:97:b9:95:91:23:77:08:a2:4f:49:b9:89:af:26:0f:a4:fd: 20:b6:b5:08 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUWyyHl/kbu3L5Ai26NM8OyGB4dJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTcwMTM0MTlaFw0yNzA0MTYwMTM5MTlaMDMxMTAvBgNV BAMTKDcwNzIxRUVGM0E3QzQ2NkNBRTk5RDA5ODQ5NDQzQzQ1MDk0OTA2QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBZsihkTuAkkm1+pN3X3gSrav ftGC6LkLQVRD6/wwf8GVcZGTnxJpslpDC1y3kiZQVF/IsY2ycKFNjsfLoBEJSXF0 jUIi7C6o5XEx447IvnDLXAWjjaOiLf3Z8+bgE6qHmpB2kKBwt4VFboR+25tv3uSF wGc9kArbwSekLul2BEORucvVzuHlOL7FU8OasbrbZfTf3z10TLOL9r27+AhpldHz sKwWH8OvR46Il4ss/W6dJXGl8t6s6+okYID6eLrjIrnMMrpgz4Bmsp5BztLIgQW6 gmzrdjdFyfmM335CZdlAsSWhIneZJAx9zA/36Z0zbghLJkqqeGCUpevsWR1lAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUcHIe7zp8RmyumdCYSUQ8RQlJBqkwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMw MmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzYzMDM0MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr8AAwDQYJKoZIhvcNAQELBQADggEBAEOdSI6QpwvFclBjEvtlTiW4ShmEnD3A SxGnqQ0FRouGUzAcmC6KdFM7n1RM7zm1VNmiG3UB0SIKG/ZmgpDY83W/PViXykTe qf9zll+ZUbGH3Wh9CnIJAqwpdBHh3wZuFJp/m3dM7JezY6aRJ5zJgxdd6l5WdLI4 mGF1/RAc14RtMDUR5No4VTvipsrQRsMPJ512WUFRecYQabFl41fq+uAXdyeRFSpF tI/XP0xFMe3KdPvR6jCWpXT0GlVm6ykn72gmdPGT5sShnIgH7vVf3jxwnU4k39rp kTW+Sh5Wxdw0WswvVbGOVuFLZEaXuZWRI3cIok9JuYmvJg+k/SC2tQg= -----END CERTIFICATE-----Generated at Tue Apr 21 22:52:31 2026 by rpki-client