$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034313334.roa File: 34332e3234382e3138342e302f32312d3231203d3e2034313334.roa (raw, json) Hash identifier: 3A3uu0FjflyMrRpaYHZJ9vAW1Hpbdj+fI8aiwwTFHXU= Subject key identifier: DA:FA:C7:5A:93:CF:B3:67:57:0B:AA:9F:84:DE:81:F7:B3:63:14:13 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 477CD6899957117E400C24F7C55ABE847464EB8D Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034313334.roa Signing time: Fri 17 Apr 2026 01:47:34 +0000 ROA not before: Fri 17 Apr 2026 01:42:34 +0000 ROA not after: Fri 16 Apr 2027 01:47:34 +0000 asID: 4134 IP address blocks: 43.248.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7c:d6:89:99:57:11:7e:40:0c:24:f7:c5:5a:be:84:74:64:eb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 17 01:42:34 2026 GMT Not After : Apr 16 01:47:34 2027 GMT Subject: CN=DAFAC75A93CFB367570BAA9F84DE81F7B3631413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:c0:12:3a:aa:8e:15:18:92:b7:dc:f7:ae: 03:27:bc:72:a2:84:05:7b:49:2e:fa:80:4d:65:1b: 77:25:98:a2:30:31:2d:12:f6:9c:3a:45:c4:a2:92: 92:f6:06:ef:b3:f1:6f:de:5e:d3:c9:da:b6:09:59: 9d:1f:bf:80:0d:c9:a9:e2:9c:04:02:c4:8f:81:f2: ef:7f:23:f7:98:57:8c:02:1c:9f:b5:2e:dd:70:7d: 4a:b5:ee:6a:33:22:f4:a9:91:ee:b1:1b:b9:79:ab: 31:c2:28:db:c8:76:48:a8:76:52:ec:6c:4e:cf:c5: 52:d9:e8:df:02:e6:5c:87:5a:09:b1:31:70:5c:0d: 32:05:9d:d3:25:ae:8b:d7:e6:ba:36:5d:a9:e8:29: 0d:0f:1b:d5:8a:14:97:5c:aa:89:f2:5c:69:0f:db: 7a:f1:3e:59:89:2a:30:82:55:f2:ed:69:6e:c6:eb: c4:9f:bd:cc:9e:b2:8a:76:4a:04:a8:5d:b3:f5:a0: e9:da:fc:85:d6:23:4c:ed:44:8d:ba:d7:da:fc:d3: 65:b6:e9:80:11:12:13:f4:bb:31:19:f8:ad:c6:9d: 50:ef:7e:d2:c9:63:96:73:7a:0a:54:9a:a3:a4:b5: b7:c0:4a:de:1b:14:af:a5:21:26:89:0c:09:9a:6b: b2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FA:C7:5A:93:CF:B3:67:57:0B:AA:9F:84:DE:81:F7:B3:63:14:13 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:36:81:38:69:ed:b3:a2:09:da:71:4e:51:03:64:dd:f4:52: b1:c2:34:c4:a8:3e:03:9f:05:59:b8:f1:a4:50:ca:7f:08:c3: 81:83:6a:bd:51:e8:bb:bf:38:71:d6:34:64:ba:2e:bd:89:9b: b2:94:23:42:de:40:02:26:b7:65:3a:f0:5b:e0:c8:19:99:b9: 62:7e:a6:9b:77:42:a8:47:71:8d:d0:48:91:54:f0:e3:28:3b: a1:f4:9d:d0:fd:5f:ec:ee:96:97:f4:0f:33:a5:05:52:2f:15: 80:85:32:d7:a9:59:e4:0c:40:0e:e3:89:c3:69:37:f1:89:d4: 6e:01:27:a6:2c:ac:51:f5:6a:a5:8e:57:b3:68:84:fb:07:83: 5e:9f:d7:df:75:10:a4:64:76:c8:da:67:7f:63:07:0d:81:f3: 03:c5:fb:68:b9:61:a4:8c:a7:fb:6c:94:8d:45:e4:de:d4:02: 21:6e:f4:e6:4c:4e:97:ca:a4:c3:af:f1:9e:bd:f8:ba:b5:c5: 62:38:2e:57:34:86:31:bf:a4:f1:55:ab:18:5b:e8:da:74:3b: 33:fe:66:72:ee:00:5b:5a:d5:81:70:9f:1e:4c:90:a2:8b:9e: 9b:f4:92:3e:b8:ff:22:02:06:33:e8:e1:85:b4:95:df:df:dd: e1:20:ed:53 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUR3zWiZlXEX5ADCT3xVq+hHRk640wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTcwMTQyMzRaFw0yNzA0MTYwMTQ3MzRaMDMxMTAvBgNV BAMTKERBRkFDNzVBOTNDRkIzNjc1NzBCQUE5Rjg0REU4MUY3QjM2MzE0MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5X8ASOqqOFRiSt9z3rgMnvHKi hAV7SS76gE1lG3clmKIwMS0S9pw6RcSikpL2Bu+z8W/eXtPJ2rYJWZ0fv4ANyani nAQCxI+B8u9/I/eYV4wCHJ+1Lt1wfUq17mozIvSpke6xG7l5qzHCKNvIdkiodlLs bE7PxVLZ6N8C5lyHWgmxMXBcDTIFndMlrovX5ro2XanoKQ0PG9WKFJdcqonyXGkP 23rxPlmJKjCCVfLtaW7G68Sfvcyesop2SgSoXbP1oOna/IXWI0ztRI2619r802W2 6YAREhP0uzEZ+K3GnVDvftLJY5ZzegpUmqOktbfASt4bFK+lISaJDAmaa7JnAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU2vrHWpPPs2dXC6qfhN6B97NjFBMwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzMTM4MzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDMxMzMzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyv4uDANBgkqhkiG9w0BAQsFAAOCAQEATzaBOGnts6IJ2nFOUQNk3fRSscI0 xKg+A58FWbjxpFDKfwjDgYNqvVHou784cdY0ZLouvYmbspQjQt5AAia3ZTrwW+DI GZm5Yn6mm3dCqEdxjdBIkVTw4yg7ofSd0P1f7O6Wl/QPM6UFUi8VgIUy16lZ5AxA DuOJw2k38YnUbgEnpiysUfVqpY5Xs2iE+weDXp/X33UQpGR2yNpnf2MHDYHzA8X7 aLlhpIyn+2yUjUXk3tQCIW705kxOl8qkw6/xnr34urXFYjguVzSGMb+k8VWrGFvo 2nQ7M/5mcu4AW1rVgXCfHkyQoouem/SSPrj/IgIGM+jhhbSV39/d4SDtUw== -----END CERTIFICATE-----Generated at Mon Apr 27 13:51:45 2026 by rpki-client