$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3137362e302f32302d3230203d3e2030.roa File: 34332e3234382e3137362e302f32302d3230203d3e2030.roa (raw, json) Hash identifier: d1gU0AOXfbjugcm5hzFkQpH/PfdgFAzbk70ayimV77w= Subject key identifier: 62:B8:6E:80:CE:E5:E3:53:B6:E0:3E:7C:BC:47:5A:10:91:0C:17:F0 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 38F45F4990426128FA83F8EDD127F877CA4F6AE2 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3137362e302f32302d3230203d3e2030.roa Signing time: Fri 17 Apr 2026 01:47:46 +0000 ROA not before: Fri 17 Apr 2026 01:42:46 +0000 ROA not after: Fri 16 Apr 2027 01:47:46 +0000 asID: 0 IP address blocks: 43.248.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f4:5f:49:90:42:61:28:fa:83:f8:ed:d1:27:f8:77:ca:4f:6a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 17 01:42:46 2026 GMT Not After : Apr 16 01:47:46 2027 GMT Subject: CN=62B86E80CEE5E353B6E03E7CBC475A10910C17F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:b4:51:1b:f9:07:8d:99:c5:80:4a:5a:1d: ac:e2:19:52:4d:b2:52:8b:0d:c2:2e:17:ee:22:7a: 2a:96:ce:27:6a:80:3c:16:7b:5c:90:96:af:bd:b1: 56:72:47:be:d4:3b:4e:83:fa:cb:ff:41:8b:a4:6a: 30:8a:89:e3:da:51:52:8e:b7:f6:7b:a6:2b:93:e8: 22:bb:38:0f:97:d5:05:16:36:2b:ec:20:32:aa:8f: 97:27:89:bd:8d:22:06:ae:5f:d6:99:7c:c5:60:0b: b9:03:75:33:01:c8:29:64:15:0c:36:86:03:5b:70: ec:6b:53:89:83:5d:a3:d0:f8:3c:12:a5:b0:03:83: cf:a4:5a:52:39:92:60:15:ff:a8:ae:e0:17:a9:80: a4:13:f4:1a:9f:bf:d8:49:c7:f1:7f:ea:66:0c:36: 55:ef:0a:d1:b1:b6:36:6e:33:3d:55:88:4a:bd:5f: 29:bb:fe:0a:84:5c:a4:ea:c0:66:a7:13:0c:dd:3a: 41:9d:60:b7:0c:6b:e2:93:0a:9c:53:ed:58:e7:54: 12:86:ac:e2:e6:ce:27:6e:00:a8:9d:21:a5:5d:08: 72:c3:19:43:80:24:ef:74:7d:41:79:b0:91:52:89: 2d:c6:93:2e:a8:af:6a:fd:a2:53:e8:cd:70:3d:02: a4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B8:6E:80:CE:E5:E3:53:B6:E0:3E:7C:BC:47:5A:10:91:0C:17:F0 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3137362e302f32302d3230203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.176.0/20 Signature Algorithm: sha256WithRSAEncryption 09:10:d8:c2:89:a8:c6:1c:3d:0c:03:74:ce:9a:f2:eb:4f:3e: eb:5c:4d:86:96:bf:35:3f:cb:a0:3d:73:ad:99:c3:16:2c:a7: b4:75:30:6a:f5:82:0e:46:c9:1b:ad:45:ca:00:00:08:41:95: d4:b1:94:9f:21:8a:4e:bd:3f:39:95:83:08:2f:84:d6:6b:aa: b4:1d:6e:8f:a4:e1:de:ab:41:66:a6:94:06:a7:8d:b3:9d:24: 81:6b:48:ca:cf:dc:55:a0:79:58:4e:5b:f1:fc:e9:84:a5:7f: 51:3a:d8:de:e6:10:e2:78:71:94:7e:ac:ec:f8:2d:97:66:b1: ab:9a:39:91:08:08:16:f0:95:31:2b:f6:59:f8:54:96:c8:f4: 08:c8:30:08:3f:ba:0a:16:9e:3d:b5:cd:e9:30:cd:1e:a6:85: 73:2e:5f:bf:3a:44:a5:e3:2e:d1:43:e9:40:3b:7a:fb:20:48: b7:1b:a0:0f:4b:34:f3:e8:5b:fa:56:99:b6:0c:fd:56:38:7f: 6c:64:12:c6:06:a9:d6:17:a7:c5:90:92:0a:15:4c:72:49:25: bb:2e:ce:fd:16:b3:7b:eb:b7:a2:3d:94:de:cf:4a:24:0d:0f: f0:39:99:b9:75:71:73:90:74:fb:71:26:7b:be:be:02:88:27: 71:ef:82:0e -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUOPRfSZBCYSj6g/jt0Sf4d8pPauIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTcwMTQyNDZaFw0yNzA0MTYwMTQ3NDZaMDMxMTAvBgNV BAMTKDYyQjg2RTgwQ0VFNUUzNTNCNkUwM0U3Q0JDNDc1QTEwOTEwQzE3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9srRRG/kHjZnFgEpaHaziGVJN slKLDcIuF+4ieiqWzidqgDwWe1yQlq+9sVZyR77UO06D+sv/QYukajCKiePaUVKO t/Z7piuT6CK7OA+X1QUWNivsIDKqj5cnib2NIgauX9aZfMVgC7kDdTMByClkFQw2 hgNbcOxrU4mDXaPQ+DwSpbADg8+kWlI5kmAV/6iu4BepgKQT9Bqfv9hJx/F/6mYM NlXvCtGxtjZuMz1ViEq9Xym7/gqEXKTqwGanEwzdOkGdYLcMa+KTCpxT7VjnVBKG rOLmziduAKidIaVdCHLDGUOAJO90fUF5sJFSiS3Gky6or2r9olPozXA9AqS5AgMB AAGjggILMIICBzAdBgNVHQ4EFgQUYrhugM7l41O24D58vEdaEJEMF/AwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMTM3MzYyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBCv4 sDANBgkqhkiG9w0BAQsFAAOCAQEACRDYwomoxhw9DAN0zpry608+61xNhpa/NT/L oD1zrZnDFiyntHUwavWCDkbJG61FygAACEGV1LGUnyGKTr0/OZWDCC+E1muqtB1u j6Th3qtBZqaUBqeNs50kgWtIys/cVaB5WE5b8fzphKV/UTrY3uYQ4nhxlH6s7Pgt l2axq5o5kQgIFvCVMSv2WfhUlsj0CMgwCD+6ChaePbXN6TDNHqaFcy5fvzpEpeMu 0UPpQDt6+yBItxugD0s08+hb+laZtgz9Vjh/bGQSxgap1henxZCSChVMckkluy7O /Raze+u3oj2U3s9KJA0P8DmZuXVxc5B0+3Eme76+Aognce+CDg== -----END CERTIFICATE-----Generated at Mon Apr 27 17:22:18 2026 by rpki-client