$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203536303436.roa File: 34332e3234382e3138342e302f32312d3231203d3e203536303436.roa (raw, json) Hash identifier: 8VHZiBoE5NNRU7GW77hgu6Jo1+fostDk48JJ5O9Fvwk= Subject key identifier: 87:25:A1:A6:AF:37:C8:39:8B:0D:BB:F7:E7:76:D0:01:6E:87:CB:E5 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 0701787FB22B9BF9079BF817DB565CE991171D38 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203536303436.roa Signing time: Fri 17 Apr 2026 01:47:35 +0000 ROA not before: Fri 17 Apr 2026 01:42:35 +0000 ROA not after: Fri 16 Apr 2027 01:47:35 +0000 asID: 56046 IP address blocks: 43.248.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 16:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:01:78:7f:b2:2b:9b:f9:07:9b:f8:17:db:56:5c:e9:91:17:1d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 17 01:42:35 2026 GMT Not After : Apr 16 01:47:35 2027 GMT Subject: CN=8725A1A6AF37C8398B0DBBF7E776D0016E87CBE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:45:1d:57:a1:2f:ee:c9:ce:13:53:91:ad:c9: a9:33:6f:13:55:5e:7e:aa:2b:56:82:bd:15:dc:74: b4:26:4d:95:76:fd:0c:30:4a:dd:ad:c8:0f:49:6f: 6a:56:77:ad:f8:1f:bc:4a:d3:8c:24:69:35:b4:75: 2b:48:19:67:ac:17:a7:7d:3e:f1:28:a4:c0:2b:5b: ca:60:5d:2d:a6:36:f7:11:83:77:5e:81:6d:d3:07: c1:1b:db:1c:22:95:24:a2:18:e4:3d:1e:fd:1d:47: b1:ce:28:51:06:4e:af:f6:e1:21:46:a9:61:31:16: 2d:18:bf:98:a8:1e:eb:59:49:ce:bc:bd:93:74:86: 36:2b:50:5a:e3:66:17:fc:4a:a3:4a:d5:bc:f2:b4: ae:ad:38:5c:6a:e9:3f:1f:71:eb:62:d0:8a:fe:3b: 13:1a:61:6c:7b:db:f3:82:31:c1:57:f0:e9:c2:4c: 83:86:63:c8:fd:e8:02:f7:45:81:94:f1:3b:30:b0: f2:fb:16:26:9c:24:ef:4d:82:60:8e:87:be:f9:71: 80:9e:df:db:8e:eb:cc:e9:a1:50:1b:11:d4:be:1c: af:3b:8c:28:10:8d:a4:1f:b4:7d:73:5f:dd:34:03: a7:04:78:5f:55:71:56:01:15:04:72:2f:c9:08:9e: 60:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:25:A1:A6:AF:37:C8:39:8B:0D:BB:F7:E7:76:D0:01:6E:87:CB:E5 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3138342e302f32312d3231203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.184.0/21 Signature Algorithm: sha256WithRSAEncryption af:25:db:41:b9:c7:a1:db:bb:22:f2:ac:7f:1f:81:1a:bb:2a: f4:5c:94:e2:25:12:3d:dc:08:c7:41:24:a1:d1:63:c2:b5:b4: ed:a8:0b:de:46:d1:ef:a2:64:a4:83:9d:96:be:91:2f:a7:96: b5:2f:30:46:4b:4c:f4:6f:a6:03:03:de:f7:6c:d9:b7:20:87: 86:dc:b0:0d:9b:3b:09:c9:7c:e6:70:43:fd:e0:2b:01:9c:d3: bf:d5:60:18:68:b2:4f:fb:82:72:9f:fe:cd:2d:e5:20:2b:bb: 73:bf:9b:81:00:a3:d4:45:1d:a7:56:7d:38:c3:c6:68:55:89: 66:fd:13:91:08:1f:ab:f8:e6:b3:3e:38:50:3e:5e:45:2a:7c: bc:65:c7:44:a5:e5:ce:15:a7:18:43:10:55:52:cb:53:31:ce: b2:72:b4:96:fb:6e:ed:19:4c:0f:ab:cd:4d:60:0b:f3:08:a7: 0d:bc:e4:05:27:6a:d4:4f:88:4a:57:42:7d:ba:52:96:73:a0: e9:ec:ce:b8:91:4a:48:24:37:33:07:f9:6d:87:ab:49:70:02: 5e:ec:22:6a:1d:64:df:2f:cc:1a:87:08:87:62:7d:54:8c:5a: ac:37:8d:08:2c:e3:ed:16:da:25:c7:f0:bc:b0:3c:23:2a:56: 7a:e4:b9:de -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUBwF4f7Irm/kHm/gX21Zc6ZEXHTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTcwMTQyMzVaFw0yNzA0MTYwMTQ3MzVaMDMxMTAvBgNV BAMTKDg3MjVBMUE2QUYzN0M4Mzk4QjBEQkJGN0U3NzZEMDAxNkU4N0NCRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRR1XoS/uyc4TU5GtyakzbxNV Xn6qK1aCvRXcdLQmTZV2/QwwSt2tyA9Jb2pWd634H7xK04wkaTW0dStIGWesF6d9 PvEopMArW8pgXS2mNvcRg3degW3TB8Eb2xwilSSiGOQ9Hv0dR7HOKFEGTq/24SFG qWExFi0Yv5ioHutZSc68vZN0hjYrUFrjZhf8SqNK1bzytK6tOFxq6T8fceti0Ir+ OxMaYWx72/OCMcFX8OnCTIOGY8j96AL3RYGU8TswsPL7FiacJO9NgmCOh775cYCe 39uO68zpoVAbEdS+HK87jCgQjaQftH1zX900A6cEeF9VcVYBFQRyL8kInmC9AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUhyWhpq83yDmLDbv353bQAW6Hy+UwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzM0MzMyZTMyMzQz ODJlMzEzODM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAyv4uDANBgkqhkiG9w0BAQsFAAOCAQEAryXbQbnHodu7IvKsfx+BGrsq 9FyU4iUSPdwIx0EkodFjwrW07agL3kbR76JkpIOdlr6RL6eWtS8wRktM9G+mAwPe 92zZtyCHhtywDZs7Ccl85nBD/eArAZzTv9VgGGiyT/uCcp/+zS3lICu7c7+bgQCj 1EUdp1Z9OMPGaFWJZv0TkQgfq/jmsz44UD5eRSp8vGXHRKXlzhWnGEMQVVLLUzHO snK0lvtu7RlMD6vNTWAL8winDbzkBSdq1E+ISldCfbpSlnOg6ezOuJFKSCQ3Mwf5 bYerSXACXuwiah1k3y/MGocIh2J9VIxarDeNCCzj7RbaJcfwvLA8IypWeuS53g== -----END CERTIFICATE-----Generated at Tue Apr 21 22:52:24 2026 by rpki-client