$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4134.roa File: AS4134.roa (raw, json) Hash identifier: qJmaYUSzzl1e7DrOLsrw65l02TjwTX3YXEESbotuPNo= Subject key identifier: CD:77:C5:D8:A5:9B:09:01:6F:F2:FF:5D:D9:D3:8F:3C:59:DC:A9:FF Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 3A7797AB733ED2400520F2460D886D32AAFA84BB Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4134.roa Signing time: Wed 12 Aug 2026 15:35:42 +0000 ROA not before: Wed 12 Aug 2026 15:30:42 +0000 ROA not after: Wed 11 Aug 2027 15:35:42 +0000 asID: 4134 IP address blocks: 43.240.0.0/22 maxlen: 24 43.240.1.0/24 maxlen: 24 43.240.2.0/24 maxlen: 24 43.240.3.0/24 maxlen: 24 43.241.48.0/22 maxlen: 24 43.241.50.0/24 maxlen: 24 43.248.184.0/21 maxlen: 21 43.248.196.0/22 maxlen: 22 103.37.44.0/24 maxlen: 24 103.37.45.0/24 maxlen: 24 103.37.46.0/24 maxlen: 24 103.37.47.0/24 maxlen: 24 103.40.12.0/22 maxlen: 22 103.45.160.0/22 maxlen: 24 103.205.252.0/22 maxlen: 22 103.239.244.0/22 maxlen: 24 111.223.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:77:97:ab:73:3e:d2:40:05:20:f2:46:0d:88:6d:32:aa:fa:84:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Aug 12 15:30:42 2026 GMT Not After : Aug 11 15:35:42 2027 GMT Subject: CN=CD77C5D8A59B09016FF2FF5DD9D38F3C59DCA9FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:07:ac:59:58:7d:f5:d1:f0:37:ae:3c:c8:7f: fe:ae:13:b8:f8:a2:fe:20:af:e3:7c:df:1c:4b:0a: 8c:a1:82:5b:fd:2e:c5:08:85:48:58:15:a0:20:df: 7e:32:1e:7e:42:c9:df:c7:d8:1a:cf:72:a8:57:2a: e0:a7:1a:75:e2:3b:d3:7b:1b:92:90:95:bc:d3:b4: 56:a8:bb:13:af:53:18:c0:3d:2a:b1:8f:ad:78:4d: f3:4f:80:34:48:43:01:de:37:fd:d4:cc:1d:6e:af: 28:02:71:4a:b1:20:68:fd:1d:e4:7c:33:66:f8:7c: 9c:1a:ed:e6:5d:7d:02:d7:85:c8:1f:b0:62:ba:cc: bf:81:de:4e:8b:e1:eb:25:9a:39:9f:d8:b7:34:32: 9e:e1:33:6c:ae:42:4e:f1:b6:6b:c5:af:37:0e:e1: ce:bf:ed:f0:84:4a:b8:ab:89:34:72:b3:b8:d6:44: 71:c0:9f:40:8b:e1:70:81:28:be:a3:38:a7:51:08: 6d:f8:55:90:06:90:53:ab:f5:41:36:9a:e1:d8:c8: 13:57:e7:c9:51:f2:41:92:8b:e1:59:6c:34:da:1c: 92:16:9a:fb:d3:42:17:5c:71:6b:23:ea:6a:ea:3c: 95:3b:ef:af:54:a8:cf:bb:1a:80:61:24:5d:8e:12: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:77:C5:D8:A5:9B:09:01:6F:F2:FF:5D:D9:D3:8F:3C:59:DC:A9:FF X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS4134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.0.0/22 43.241.48.0/22 43.248.184.0/21 43.248.196.0/22 103.37.44.0/22 103.40.12.0/22 103.45.160.0/22 103.205.252.0/22 103.239.244.0/22 111.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption 26:83:65:72:e8:84:95:e6:76:4b:f4:39:37:3a:31:bd:3c:0c: 36:64:3e:8d:ac:ca:bc:ba:6a:07:b3:20:b9:27:bd:e4:d3:1c: cd:ff:45:1b:b7:bd:7c:e2:60:34:06:18:50:1e:ce:2b:d0:74: 3c:01:c1:d6:e2:3f:3c:e9:ea:84:bf:2e:d1:48:4c:83:d0:68: 0f:73:49:9b:67:63:7c:d8:a4:1a:ca:d2:0d:66:0a:53:ec:ef: 1b:ac:7d:9e:91:b0:12:49:89:e5:df:84:bf:d1:f4:6e:50:ac: 38:35:25:cb:f1:b5:40:9b:ac:66:57:e3:50:6a:bc:2c:72:b1: d6:90:76:54:f2:34:fb:a8:aa:e7:f4:6c:01:93:0a:c5:82:91: 12:26:b0:b2:34:9c:5f:9f:ca:59:cb:20:d4:10:a5:e2:22:f0: 81:93:1c:39:fc:40:91:fc:07:d3:e5:17:56:98:18:47:49:fe: 65:fa:92:0f:06:b7:15:c8:7b:df:7b:67:48:50:70:1a:25:90: ee:aa:bc:dd:44:6f:5e:1b:dc:68:24:8c:4b:41:70:4b:06:f2: 56:8c:e2:c2:7c:7c:91:45:0f:14:8b:3d:39:3c:c5:a7:d4:17: 5e:51:68:99:6a:26:1f:d4:ed:04:f6:5e:a2:a6:9e:0f:a4:32: 62:92:b1:7d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUOneXq3M+0kAFIPJGDYhtMqr6hLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA4MTIxNTMwNDJaFw0yNzA4MTExNTM1NDJaMDMxMTAvBgNV BAMTKENENzdDNUQ4QTU5QjA5MDE2RkYyRkY1REQ5RDM4RjNDNTlEQ0E5RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZB6xZWH310fA3rjzIf/6uE7j4 ov4gr+N83xxLCoyhglv9LsUIhUhYFaAg334yHn5Cyd/H2BrPcqhXKuCnGnXiO9N7 G5KQlbzTtFaouxOvUxjAPSqxj614TfNPgDRIQwHeN/3UzB1urygCcUqxIGj9HeR8 M2b4fJwa7eZdfQLXhcgfsGK6zL+B3k6L4eslmjmf2Lc0Mp7hM2yuQk7xtmvFrzcO 4c6/7fCESririTRys7jWRHHAn0CL4XCBKL6jOKdRCG34VZAGkFOr9UE2muHYyBNX 58lR8kGSi+FZbDTaHJIWmvvTQhdccWsj6mrqPJU7769UqM+7GoBhJF2OElcxAgMB AAGjggIYMIICFDAdBgNVHQ4EFgQUzXfF2KWbCQFv8v9d2dOPPFncqf8wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzQxMzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVQYIKwYBBQUHAQcBAf8ERjBEMEIEAgAB MDwDBAIr8AADBAIr8TADBAMr+LgDBAIr+MQDBAJnJSwDBAJnKAwDBAJnLaADBAJn zfwDBAJn7/QDBAJv3wwwDQYJKoZIhvcNAQELBQADggEBACaDZXLohJXmdkv0OTc6 Mb08DDZkPo2syry6agezILknveTTHM3/RRu3vXziYDQGGFAezivQdDwBwdbiPzzp 6oS/LtFITIPQaA9zSZtnY3zYpBrK0g1mClPs7xusfZ6RsBJJieXfhL/R9G5QrDg1 JcvxtUCbrGZX41BqvCxysdaQdlTyNPuoquf0bAGTCsWCkRImsLI0nF+fylnLINQQ peIi8IGTHDn8QJH8B9PlF1aYGEdJ/mX6kg8GtxXIe997Z0hQcBolkO6qvN1Eb14b 3GgkjEtBcEsG8laM4sJ8fJFFDxSLPTk8xafUF15RaJlqJh/U7QT2XqKmng+kMmKS sX0= -----END CERTIFICATE-----Generated at Thu Sep 10 18:12:28 2026 by rpki-client