$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203233363530.roa File: 34332e3234382e3138342e302f32312d3231203d3e203233363530.roa (raw, json) Hash identifier: uW7s/xaMcX5UTxqekVgau/O1BYNwmdOOW3RtgxORwHA= Subject key identifier: 81:AA:F3:9A:FD:1A:0B:CD:9B:96:35:49:1D:CC:1D:7F:A4:AB:D4:27 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 69FA1A99AD9FE1D139D6716D996CC601F1DA4F1C Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203233363530.roa Signing time: Fri 17 Apr 2026 01:47:34 +0000 ROA not before: Fri 17 Apr 2026 01:42:34 +0000 ROA not after: Fri 16 Apr 2027 01:47:34 +0000 asID: 23650 IP address blocks: 43.248.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:fa:1a:99:ad:9f:e1:d1:39:d6:71:6d:99:6c:c6:01:f1:da:4f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 17 01:42:34 2026 GMT Not After : Apr 16 01:47:34 2027 GMT Subject: CN=81AAF39AFD1A0BCD9B9635491DCC1D7FA4ABD427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:83:20:16:40:13:48:6c:4d:9f:25:da:c5:e8: 61:d7:64:68:3d:1d:41:2e:de:7e:79:ab:80:f2:56: 40:34:ac:d7:e1:4d:5d:87:e5:dd:71:d0:9f:d7:7f: 34:f5:c0:5e:70:33:e5:71:66:08:0d:cb:68:cd:44: 31:07:4a:74:59:dd:d3:71:0e:59:53:ba:6b:f7:80: b0:76:26:f7:84:fe:a7:72:cb:75:13:a5:0f:1b:5c: df:ab:6e:5d:3a:58:01:9d:22:57:8b:85:50:61:cd: 4b:b5:f7:6f:b6:3b:c3:b9:36:4e:da:40:12:41:c9: 59:9b:32:e9:f8:6e:1e:5f:0c:8b:4d:a9:0c:15:73: 64:1a:c1:2d:a8:33:ad:68:4d:7b:1a:12:72:3d:8a: d9:23:b7:76:92:20:d8:41:e3:99:c7:da:e0:f8:03: 11:b8:5d:38:85:06:7d:57:dc:bb:93:12:14:46:82: 80:96:6f:69:8b:06:d9:2b:11:0e:12:11:b0:44:3f: 93:d7:18:ad:18:cc:3f:18:14:dd:99:90:98:6b:8d: 84:b1:b3:ab:f4:bf:88:d0:21:7e:b6:4f:a0:70:19: 7d:23:f2:4d:9a:1a:48:14:4c:61:9d:bf:8a:4f:66: f3:4d:36:df:14:64:58:2c:31:60:ae:a3:ac:2d:ef: e9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AA:F3:9A:FD:1A:0B:CD:9B:96:35:49:1D:CC:1D:7F:A4:AB:D4:27 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:35:37:7a:d4:b6:bd:ea:4b:75:41:ad:42:c4:e1:6d:ca:1b: ef:9e:08:c5:16:79:a7:3a:29:25:8c:c9:e5:93:05:d4:0f:ff: f2:30:fa:db:da:f6:aa:70:ce:72:fa:b3:db:cf:ff:f6:c2:3a: 5e:bf:a7:36:cf:c2:84:90:25:06:b0:c1:64:62:cc:f8:42:98: cc:db:cc:19:82:f5:cd:c5:ca:7a:09:3b:90:30:e7:28:a7:69: e3:eb:59:ca:57:8b:07:26:26:53:57:47:67:f7:30:7f:9e:9a: 66:16:7c:7c:57:22:a8:72:63:91:ce:cc:e9:35:b8:77:79:6a: 94:5d:77:86:e4:5c:6a:2d:0a:8b:63:e4:a0:f1:1b:f9:a7:85: 04:40:2d:b7:89:a6:ee:e7:80:88:12:f5:48:1a:79:84:32:e7: b5:e6:23:29:5f:29:ae:a9:58:6c:49:b8:bb:24:5b:64:10:77: 06:b1:05:5f:63:a4:e0:f0:6c:a4:bf:f0:38:fa:b3:11:e3:9e: 87:28:38:a2:c3:45:eb:9f:5c:b4:99:e4:c9:ca:75:24:03:22: 5d:19:7a:f6:cb:c5:1a:89:a9:34:ed:fe:d3:08:0c:ec:6b:70: d1:18:77:eb:59:e1:fa:66:72:53:59:28:7d:c1:87:39:e4:1c: 9a:1b:ab:38 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUafoama2f4dE51nFtmWzGAfHaTxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTcwMTQyMzRaFw0yNzA0MTYwMTQ3MzRaMDMxMTAvBgNV BAMTKDgxQUFGMzlBRkQxQTBCQ0Q5Qjk2MzU0OTFEQ0MxRDdGQTRBQkQ0MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgyAWQBNIbE2fJdrF6GHXZGg9 HUEu3n55q4DyVkA0rNfhTV2H5d1x0J/XfzT1wF5wM+VxZggNy2jNRDEHSnRZ3dNx DllTumv3gLB2JveE/qdyy3UTpQ8bXN+rbl06WAGdIleLhVBhzUu192+2O8O5Nk7a QBJByVmbMun4bh5fDItNqQwVc2QawS2oM61oTXsaEnI9itkjt3aSINhB45nH2uD4 AxG4XTiFBn1X3LuTEhRGgoCWb2mLBtkrEQ4SEbBEP5PXGK0YzD8YFN2ZkJhrjYSx s6v0v4jQIX62T6BwGX0j8k2aGkgUTGGdv4pPZvNNNt8UZFgsMWCuo6wt7+mLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUgarzmv0aC82bljVJHcwdf6Sr1CcwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzM0MzMyZTMyMzQz ODJlMzEzODM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzMzM2MzUzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAyv4uDANBgkqhkiG9w0BAQsFAAOCAQEAijU3etS2vepLdUGtQsThbcob 754IxRZ5pzopJYzJ5ZMF1A//8jD629r2qnDOcvqz28//9sI6Xr+nNs/ChJAlBrDB ZGLM+EKYzNvMGYL1zcXKegk7kDDnKKdp4+tZyleLByYmU1dHZ/cwf56aZhZ8fFci qHJjkc7M6TW4d3lqlF13huRcai0Ki2PkoPEb+aeFBEAtt4mm7ueAiBL1SBp5hDLn teYjKV8prqlYbEm4uyRbZBB3BrEFX2Ok4PBspL/wOPqzEeOehyg4osNF659ctJnk ycp1JAMiXRl69svFGompNO3+0wgM7Gtw0Rh361nh+mZyU1kofcGHOeQcmhurOA== -----END CERTIFICATE-----Generated at Mon Apr 27 13:51:44 2026 by rpki-client