$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234372e39322e302f32322d3232203d3e2030.roa File: 34332e3234372e39322e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: 4rBFfHTNBLlcwhRq0CSXMB3HGFeldhQef1jIxpKHzeQ= Subject key identifier: CA:DE:C7:DD:7C:27:D1:DD:6C:22:12:D9:F1:19:D0:2C:FB:72:BA:B2 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 19243D3593F99AB94FAB40EA9AC6AEB79AC1D03E Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234372e39322e302f32322d3232203d3e2030.roa Signing time: Mon 28 Sep 2026 01:00:40 +0000 ROA not before: Mon 28 Sep 2026 00:55:40 +0000 ROA not after: Mon 27 Sep 2027 01:00:40 +0000 asID: 0 IP address blocks: 43.247.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 22:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:24:3d:35:93:f9:9a:b9:4f:ab:40:ea:9a:c6:ae:b7:9a:c1:d0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:40 2026 GMT Not After : Sep 27 01:00:40 2027 GMT Subject: CN=CADEC7DD7C27D1DD6C2212D9F119D02CFB72BAB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:ae:e1:ea:50:ab:a8:38:b8:4e:12:d9:a0: 6a:1c:a2:ea:7c:d1:3c:dc:f6:6f:69:d5:d6:6e:62: c9:ec:d3:23:b1:4b:3d:c5:ca:17:59:33:58:66:d6: 2c:44:82:c1:2e:ea:02:74:29:d8:c8:31:4b:35:fc: 72:c5:d1:3f:23:ae:10:b5:a2:ad:4c:a5:53:08:c7: 16:90:3b:bc:ae:25:e6:63:c2:05:9a:44:fe:00:fe: 13:18:48:c5:ff:71:a5:4b:ba:fc:27:dc:20:f8:19: 2d:de:ef:0d:02:c3:32:e4:f9:cf:0b:28:73:25:f2: c0:53:94:bd:d0:a4:f9:ce:23:d2:33:72:74:e9:d1: 67:3e:bd:b2:d8:3b:28:de:50:9d:0d:0b:d7:84:6f: 98:ff:8a:4d:e8:9d:5e:75:6b:29:5c:1d:a6:08:9e: a1:35:3c:4c:88:5e:ac:3d:cb:15:73:24:71:c8:dc: 5c:25:c9:c7:dd:e0:d0:76:61:c5:b2:42:b3:58:16: 6b:0b:73:91:2d:57:89:51:f5:ce:27:a1:a3:92:e7: bd:c9:ac:ac:ac:91:ce:f9:75:62:cd:4c:c2:24:46: 96:19:da:5b:ad:2d:90:6d:8c:60:86:59:5d:b2:ac: 5a:73:82:9c:7f:2e:c2:e7:26:d5:50:c2:d3:fc:60: 87:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DE:C7:DD:7C:27:D1:DD:6C:22:12:D9:F1:19:D0:2C:FB:72:BA:B2 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234372e39322e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.92.0/22 Signature Algorithm: sha256WithRSAEncryption 75:ff:27:fb:83:0c:62:1d:ec:35:02:01:2c:03:ca:26:bb:6c: f2:66:62:ae:74:dd:7c:ee:2e:a0:b4:d7:ac:cf:67:79:fe:df: b9:07:67:0d:d0:14:75:8e:d4:4c:da:04:85:bd:9a:3c:4c:cb: 1c:f6:ea:f2:b6:a1:99:c5:ff:0c:a0:31:69:0c:45:4c:78:2f: b0:e2:aa:72:bf:68:72:65:4c:aa:5b:11:4b:d8:f4:70:63:b3: b9:9a:cd:17:0e:c8:89:f4:43:02:f4:6f:34:ef:33:e1:f2:20: 0f:16:50:c1:bf:2e:b3:bc:34:95:3f:78:a8:ae:37:32:b1:32: 6b:9f:1c:ed:ff:7c:a6:5c:ff:07:52:10:87:c7:83:37:e3:b9: af:1d:65:b9:0a:c6:2c:96:11:86:d5:09:b4:02:f7:36:e6:dc: 86:dd:64:4e:40:91:62:53:27:de:ef:ce:de:f8:b0:b4:29:94: 94:06:ab:36:22:3e:8b:e6:8d:74:d8:3e:18:65:65:e2:86:32: 86:bb:99:62:7c:1f:b5:37:48:5e:e5:b7:23:50:a4:d4:25:03: 0e:56:eb:ab:8f:9c:85:9a:df:75:37:a9:83:47:1d:57:d3:6d: c8:7b:a3:a7:e0:8a:7f:8f:d8:2c:a5:24:ec:81:0f:0f:c7:bb: 60:10:11:94 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUGSQ9NZP5mrlPq0Dqmsaut5rB0D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1NDBaFw0yNzA5MjcwMTAwNDBaMDMxMTAvBgNV BAMTKENBREVDN0REN0MyN0QxREQ2QzIyMTJEOUYxMTlEMDJDRkI3MkJBQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fa7h6lCrqDi4ThLZoGocoup8 0Tzc9m9p1dZuYsns0yOxSz3FyhdZM1hm1ixEgsEu6gJ0KdjIMUs1/HLF0T8jrhC1 oq1MpVMIxxaQO7yuJeZjwgWaRP4A/hMYSMX/caVLuvwn3CD4GS3e7w0CwzLk+c8L KHMl8sBTlL3QpPnOI9IzcnTp0Wc+vbLYOyjeUJ0NC9eEb5j/ik3onV51aylcHaYI nqE1PEyIXqw9yxVzJHHI3Fwlycfd4NB2YcWyQrNYFmsLc5EtV4lR9c4noaOS573J rKyskc75dWLNTMIkRpYZ2lutLZBtjGCGWV2yrFpzgpx/LsLnJtVQwtP8YIcVAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUyt7H3Xwn0d1sIhLZ8RnQLPtyurIwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM3 MmUzOTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr91ww DQYJKoZIhvcNAQELBQADggEBAHX/J/uDDGId7DUCASwDyia7bPJmYq503XzuLqC0 16zPZ3n+37kHZw3QFHWO1EzaBIW9mjxMyxz26vK2oZnF/wygMWkMRUx4L7DiqnK/ aHJlTKpbEUvY9HBjs7mazRcOyIn0QwL0bzTvM+HyIA8WUMG/LrO8NJU/eKiuNzKx MmufHO3/fKZc/wdSEIfHgzfjua8dZbkKxiyWEYbVCbQC9zbm3IbdZE5AkWJTJ97v zt74sLQplJQGqzYiPovmjXTYPhhlZeKGMoa7mWJ8H7U3SF7ltyNQpNQlAw5W66uP nIWa33U3qYNHHVfTbch7o6fgin+P2CylJOyBDw/Hu2AQEZQ= -----END CERTIFICATE-----Generated at Wed Oct 7 02:44:22 2026 by rpki-client