$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e38302e302f32302d3230203d3e2030.roa File: 34332e3234382e38302e302f32302d3230203d3e2030.roa (raw, json) Hash identifier: FpugXaMVVqHsfa4lHBU3Y2G511Fc3Ny4/UmXoEjUiVw= Subject key identifier: 1F:AD:AD:DF:3C:13:D6:C3:8E:72:5F:65:42:5D:27:31:57:75:2C:BD Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 5D61A9A5075DF9F7AAF4058A0D309F27CFAD3B26 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e38302e302f32302d3230203d3e2030.roa Signing time: Mon 28 Sep 2026 01:00:34 +0000 ROA not before: Mon 28 Sep 2026 00:55:34 +0000 ROA not after: Mon 27 Sep 2027 01:00:34 +0000 asID: 0 IP address blocks: 43.248.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 14:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:61:a9:a5:07:5d:f9:f7:aa:f4:05:8a:0d:30:9f:27:cf:ad:3b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:34 2026 GMT Not After : Sep 27 01:00:34 2027 GMT Subject: CN=1FADADDF3C13D6C38E725F65425D273157752CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:af:de:bb:ad:45:e1:6b:72:76:2a:67:17:fc: ea:16:43:ed:6e:3f:71:7e:f5:a3:01:33:1c:32:4c: 75:1c:df:e6:c3:74:e8:17:37:6b:2d:b4:80:d3:c7: 72:59:ea:70:d2:24:e6:12:7f:3e:4f:3c:23:ef:3a: 27:eb:ab:cb:ad:9a:b8:ad:42:07:05:8b:24:2c:98: 9c:9b:49:07:5f:89:5c:85:ab:2e:a8:72:92:a6:41: 22:c3:5c:68:d9:7f:d2:ad:4e:ae:7e:38:3b:e1:66: a1:4f:a4:cd:e9:a1:5e:4a:5e:93:3b:b3:59:45:c4: ff:be:9e:7f:a1:db:c2:ec:2a:56:6f:9e:7d:89:a4: a0:e6:3e:7e:21:7a:16:09:e5:8f:94:aa:b1:c3:20: 75:e7:b7:18:49:d2:da:d7:12:09:f5:27:7a:30:04: e5:20:77:fd:1b:58:24:2e:48:73:e9:a6:b3:ce:e7: 9f:18:38:44:ef:4b:6f:98:85:17:c8:cd:d7:64:c6: e4:64:0a:02:46:84:4a:e1:25:88:aa:8e:5c:65:d2: 3a:61:f3:83:bc:9f:02:e2:0e:3e:b0:85:b7:72:ac: f6:f8:f6:d8:a1:36:c0:e2:cb:f8:d5:44:03:d5:66: 50:82:12:55:3e:42:e4:0f:8e:7b:c6:49:39:ad:8d: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AD:AD:DF:3C:13:D6:C3:8E:72:5F:65:42:5D:27:31:57:75:2C:BD X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e38302e302f32302d3230203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.80.0/20 Signature Algorithm: sha256WithRSAEncryption 6b:e5:c6:74:4e:f9:80:44:58:6c:e1:50:02:7a:e3:4e:75:00: 15:b4:0d:41:a4:49:14:44:4b:bc:47:b4:b3:90:5f:b6:55:56: c9:89:7b:0a:27:a9:dd:18:00:66:fa:e4:72:94:51:e0:71:70: f0:c7:65:dc:b7:2a:ad:ec:fd:7b:fb:e3:18:dd:1d:89:09:32: cd:c8:49:81:18:55:16:8e:a1:63:e8:d7:0a:9e:53:82:ad:26: 85:6d:91:f8:33:a3:f3:ba:a6:8d:35:b9:79:e8:ac:a9:ab:6e: 96:f0:ff:5f:42:df:9c:ff:cd:ee:43:08:a1:02:06:ef:39:9a: c5:46:72:18:df:4f:8e:71:84:c0:d6:a9:de:da:38:f0:ca:be: 86:7c:0d:bc:92:2c:c1:89:a3:72:82:c3:9a:50:b1:75:a0:d6: b7:84:6f:cf:6f:a0:73:07:1f:c4:f5:47:9b:c1:92:e1:12:ac: 16:49:e4:74:e6:03:35:42:b8:e8:8b:b6:2f:07:ba:eb:7c:46: 40:09:27:05:02:72:51:f5:fa:2f:d5:e6:9a:38:48:ea:6c:2a: 20:eb:84:4f:07:05:25:51:76:58:44:72:39:c5:aa:33:2c:3e: 18:c1:b2:a9:f6:44:54:3a:61:fb:9f:f5:fa:d4:eb:6a:1b:e5: 10:db:f3:3f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUXWGppQdd+feq9AWKDTCfJ8+tOyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzRaFw0yNzA5MjcwMTAwMzRaMDMxMTAvBgNV BAMTKDFGQURBRERGM0MxM0Q2QzM4RTcyNUY2NTQyNUQyNzMxNTc3NTJDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPr967rUXha3J2KmcX/OoWQ+1u P3F+9aMBMxwyTHUc3+bDdOgXN2sttIDTx3JZ6nDSJOYSfz5PPCPvOifrq8utmrit QgcFiyQsmJybSQdfiVyFqy6ocpKmQSLDXGjZf9KtTq5+ODvhZqFPpM3poV5KXpM7 s1lFxP++nn+h28LsKlZvnn2JpKDmPn4hehYJ5Y+UqrHDIHXntxhJ0trXEgn1J3ow BOUgd/0bWCQuSHPpprPO558YOETvS2+YhRfIzddkxuRkCgJGhErhJYiqjlxl0jph 84O8nwLiDj6whbdyrPb49tihNsDiy/jVRAPVZlCCElU+QuQPjnvGSTmtjQhFAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUH62t3zwT1sOOcl9lQl0nMVd1LL0wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzQzMzJlMzIzNDM4 MmUzODMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQr+FAw DQYJKoZIhvcNAQELBQADggEBAGvlxnRO+YBEWGzhUAJ64051ABW0DUGkSRRES7xH tLOQX7ZVVsmJewonqd0YAGb65HKUUeBxcPDHZdy3Kq3s/Xv74xjdHYkJMs3ISYEY VRaOoWPo1wqeU4KtJoVtkfgzo/O6po01uXnorKmrbpbw/19C35z/ze5DCKECBu85 msVGchjfT45xhMDWqd7aOPDKvoZ8DbySLMGJo3KCw5pQsXWg1reEb89voHMHH8T1 R5vBkuESrBZJ5HTmAzVCuOiLti8Huut8RkAJJwUCclH1+i/V5po4SOpsKiDrhE8H BSVRdlhEcjnFqjMsPhjBsqn2RFQ6Yfuf9frU62ob5RDb8z8= -----END CERTIFICATE-----Generated at Tue Oct 6 14:57:29 2026 by rpki-client