$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e2034313334.roa File: 34332e3234312e34382e302f32322d3234203d3e2034313334.roa (raw, json) Hash identifier: 8PGjma4ECyS22L6aEhLPJUiTeyQ2MWUE3OOv8c8YcPY= Subject key identifier: 9F:D4:52:BC:8F:CA:6E:32:0C:BD:D2:D6:DF:14:D6:A5:06:CC:11:9E Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 5388ABAE9074AA14EA185B98D4B7C31FC6DFAA88 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e2034313334.roa Signing time: Fri 17 Apr 2026 01:38:15 +0000 ROA not before: Fri 17 Apr 2026 01:33:15 +0000 ROA not after: Fri 16 Apr 2027 01:38:15 +0000 asID: 4134 IP address blocks: 43.241.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:88:ab:ae:90:74:aa:14:ea:18:5b:98:d4:b7:c3:1f:c6:df:aa:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 17 01:33:15 2026 GMT Not After : Apr 16 01:38:15 2027 GMT Subject: CN=9FD452BC8FCA6E320CBDD2D6DF14D6A506CC119E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:02:25:27:5f:91:6a:ba:b5:4b:f6:b7:98: 6b:ed:d1:b7:12:c1:d7:cc:8b:23:ef:2f:81:a7:95: 1a:0d:fe:4b:e2:ec:7b:7c:f3:43:49:50:c3:76:5f: 5a:df:a3:5f:2a:b1:da:4a:79:f1:45:7b:95:d1:7a: 9c:14:34:9d:94:57:37:f0:f3:e9:53:29:f3:e4:25: 3f:73:af:ef:82:04:cb:ee:3c:fb:18:84:f7:03:f4: ab:03:a5:d9:9a:d5:e3:52:8e:a2:df:18:10:14:b7: a2:1a:bf:94:2f:81:b5:40:e7:6c:fd:44:ad:07:14: 1d:b6:61:db:6c:2c:13:14:19:75:4f:66:9c:1e:5d: 98:9f:dc:fd:d1:0f:c8:11:72:37:2d:0c:6d:7c:bd: 8c:c4:0c:c1:4d:56:bd:b6:73:9b:4d:b6:cb:a0:8b: 95:44:8f:83:65:64:88:8b:1e:71:b0:ee:c0:b3:c8: 7c:ba:87:27:be:f1:32:52:2e:54:59:f1:6e:f6:b5: e2:60:b2:68:2f:04:b9:60:84:59:95:dc:bf:4f:01: b8:87:aa:c7:f8:b8:ab:1f:5f:74:eb:dd:ee:fd:0b: 3d:6e:43:5a:1f:ca:e4:be:e3:24:0b:ee:57:61:7e: d3:3c:e5:dc:2c:2e:2f:9a:c5:44:7a:22:42:b2:e6: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D4:52:BC:8F:CA:6E:32:0C:BD:D2:D6:DF:14:D6:A5:06:CC:11:9E X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.48.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:ca:5d:bf:18:5e:83:02:fb:76:de:24:ba:75:f1:91:97:df: ba:1b:3d:64:f7:b6:11:75:a0:92:85:fa:ac:e0:84:da:12:ad: ab:cd:bf:88:f3:04:52:60:61:63:db:89:9d:eb:49:19:71:a0: 19:bc:25:93:8f:a0:a5:65:99:95:eb:37:e4:c4:f6:a0:52:03: 48:71:aa:6b:63:c0:08:a9:fa:ee:46:74:5b:1b:ee:7c:01:f0: d1:69:d2:cb:3a:55:0c:0b:7d:df:36:4c:1a:89:d6:7a:ce:42: 21:b6:48:f1:98:c1:5f:cd:cf:6c:48:c5:9e:76:26:f8:61:69: af:14:54:69:ba:18:5d:f9:53:bb:6f:c5:a9:e3:1b:c0:d3:f6: 63:b9:27:90:6c:3e:99:9b:12:5a:c1:c4:1e:7f:67:69:b8:4e: df:a2:61:80:f2:b6:c9:a5:1d:a7:cf:1d:df:aa:f5:91:38:ff: 35:f7:01:39:7e:f4:01:a1:94:38:c7:86:84:a7:b8:84:8e:13: 30:1f:55:31:8b:86:d5:28:dd:ae:cd:39:1c:45:df:b2:bd:12: 39:e8:84:81:57:46:71:43:de:df:2f:3c:b1:7d:ff:b6:4b:c3: 83:69:cb:66:4e:ff:1f:f5:dc:10:3a:a4:41:c8:06:84:fd:45: a8:2f:6c:88 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUU4irrpB0qhTqGFuY1LfDH8bfqogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTcwMTMzMTVaFw0yNzA0MTYwMTM4MTVaMDMxMTAvBgNV BAMTKDlGRDQ1MkJDOEZDQTZFMzIwQ0JERDJENkRGMTRENkE1MDZDQzExOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAeAIlJ1+Rarq1S/a3mGvt0bcS wdfMiyPvL4GnlRoN/kvi7Ht880NJUMN2X1rfo18qsdpKefFFe5XRepwUNJ2UVzfw 8+lTKfPkJT9zr++CBMvuPPsYhPcD9KsDpdma1eNSjqLfGBAUt6Iav5QvgbVA52z9 RK0HFB22YdtsLBMUGXVPZpweXZif3P3RD8gRcjctDG18vYzEDMFNVr22c5tNtsug i5VEj4NlZIiLHnGw7sCzyHy6hye+8TJSLlRZ8W72teJgsmgvBLlghFmV3L9PAbiH qsf4uKsfX3Tr3e79Cz1uQ1ofyuS+4yQL7ldhftM85dwsLi+axUR6IkKy5nM9AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUn9RSvI/KbjIMvdLW3xTWpQbMEZ4wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDMx MmUzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzMTMzMzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr8TAwDQYJKoZIhvcNAQELBQADggEBAI7KXb8YXoMC+3beJLp18ZGX37obPWT3 thF1oJKF+qzghNoSravNv4jzBFJgYWPbiZ3rSRlxoBm8JZOPoKVlmZXrN+TE9qBS A0hxqmtjwAip+u5GdFsb7nwB8NFp0ss6VQwLfd82TBqJ1nrOQiG2SPGYwV/Nz2xI xZ52Jvhhaa8UVGm6GF35U7tvxanjG8DT9mO5J5BsPpmbElrBxB5/Z2m4Tt+iYYDy tsmlHafPHd+q9ZE4/zX3ATl+9AGhlDjHhoSnuISOEzAfVTGLhtUo3a7NORxF37K9 EjnohIFXRnFD3t8vPLF9/7ZLw4Npy2ZO/x/13BA6pEHIBoT9RagvbIg= -----END CERTIFICATE-----Generated at Mon Apr 27 13:50:48 2026 by rpki-client