$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20313532313739.roa File: 35382e36372e302e302f31372d3234203d3e20313532313739.roa (raw, json) Hash identifier: 0RvT+eBLIoqf9gwG324UPJfTV21T29nvCD4xoMYtUA8= Subject key identifier: CA:11:35:2B:3C:B5:52:CF:D6:1F:24:E4:1D:5C:69:71:67:67:68:4A Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 3C0D5CF805DC30B0DF238F20020BE26C699DA0D0 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20313532313739.roa Signing time: Fri 11 Sep 2026 12:26:41 +0000 ROA not before: Fri 11 Sep 2026 12:21:41 +0000 ROA not after: Fri 10 Sep 2027 12:26:41 +0000 asID: 152179 IP address blocks: 58.67.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0d:5c:f8:05:dc:30:b0:df:23:8f:20:02:0b:e2:6c:69:9d:a0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Sep 11 12:21:41 2026 GMT Not After : Sep 10 12:26:41 2027 GMT Subject: CN=CA11352B3CB552CFD61F24E41D5C69716767684A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1e:cb:a8:b7:6e:14:1c:bb:29:f4:fc:da:0a: 7a:ff:89:8d:a0:41:68:a6:b0:75:cd:7c:d5:6f:bb: 09:7c:66:7b:42:4b:d4:65:4e:93:d3:21:0a:0b:ad: ef:18:f3:7e:8c:95:cb:45:ad:4f:c3:ed:9a:33:c6: f3:fb:96:bf:55:2b:8c:7d:e6:46:3c:86:49:c5:8f: 78:6d:b1:b8:cf:6c:cd:f9:29:0a:70:17:e7:17:6c: 4b:4f:79:1f:57:d5:ad:70:ca:6a:84:9c:ae:9b:c7: 5f:80:b6:6a:72:21:09:81:53:f3:90:c5:f9:ea:f4: 2c:2d:34:4e:20:06:a0:99:f1:72:6c:7e:a4:b0:02: 4f:fd:1d:12:75:14:ea:c8:57:d8:02:16:8b:ed:5c: fd:4e:7a:7b:d4:47:72:84:c3:39:9d:50:64:ff:20: 0b:75:3c:23:14:27:32:45:65:67:23:7c:af:f7:e5: 87:d0:af:78:b2:4e:82:b0:ad:19:00:be:a0:6d:d0: 8a:72:90:41:05:6f:08:03:4e:20:3b:dd:1f:82:37: f5:2f:94:5f:35:bf:05:41:a7:be:9c:f0:16:6f:a2: 06:f2:9c:6a:18:12:f6:55:11:2b:49:dc:5c:ac:11: f8:da:40:f7:c8:2d:c6:e9:c3:eb:48:3a:0b:05:d0: 85:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:11:35:2B:3C:B5:52:CF:D6:1F:24:E4:1D:5C:69:71:67:67:68:4A X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.67.0.0/17 Signature Algorithm: sha256WithRSAEncryption a4:49:6d:48:93:09:40:ef:be:97:d2:d4:06:88:43:d0:57:ee: 3a:00:92:db:74:ce:72:8d:b8:45:c8:4a:de:ae:7f:88:31:1b: 7a:4f:b5:ea:d9:68:1b:a0:2c:46:f5:e9:26:69:b9:26:8f:b8: f4:7a:14:22:82:36:95:db:db:3a:99:c0:89:8e:e0:b7:e6:cc: 51:97:1c:ed:8b:74:94:96:72:a0:93:55:d1:11:2c:9d:21:06: 94:0a:60:52:c7:68:69:48:ab:28:5a:74:a2:f4:f4:95:79:ad: e8:f5:0a:81:49:18:96:d2:bf:fa:d6:07:26:98:d8:e1:6d:d6: 1f:71:d7:d8:0f:d2:da:fc:9e:bd:2b:94:5f:ff:bd:65:88:86: 24:7a:e0:3d:08:77:b6:a5:49:ed:c5:9c:b4:76:3d:fe:fa:46: 33:28:3a:ea:79:26:c4:6b:01:02:ae:dc:59:cf:73:0a:fb:28: 66:13:06:c0:0c:6e:c5:ac:ff:a3:50:df:13:69:73:d5:3d:0e: 69:67:2e:eb:ec:a9:3f:63:13:86:02:60:65:80:8d:e4:dd:6c: 0c:1c:c0:1e:1e:62:dc:e8:a9:61:80:47:e7:62:9b:c5:46:0c: da:50:6c:68:48:e8:c0:ab:20:30:bb:22:cc:02:de:48:58:10: 49:c6:21:e6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUPA1c+AXcMLDfI48gAgvibGmdoNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA5MTExMjIxNDFaFw0yNzA5MTAxMjI2NDFaMDMxMTAvBgNV BAMTKENBMTEzNTJCM0NCNTUyQ0ZENjFGMjRFNDFENUM2OTcxNjc2NzY4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTHsuot24UHLsp9PzaCnr/iY2g QWimsHXNfNVvuwl8ZntCS9RlTpPTIQoLre8Y836MlctFrU/D7ZozxvP7lr9VK4x9 5kY8hknFj3htsbjPbM35KQpwF+cXbEtPeR9X1a1wymqEnK6bx1+AtmpyIQmBU/OQ xfnq9CwtNE4gBqCZ8XJsfqSwAk/9HRJ1FOrIV9gCFovtXP1OenvUR3KEwzmdUGT/ IAt1PCMUJzJFZWcjfK/35YfQr3iyToKwrRkAvqBt0IpykEEFbwgDTiA73R+CN/Uv lF81vwVBp76c8BZvogbynGoYEvZVEStJ3FysEfjaQPfILcbpw+tIOgsF0IXFAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUyhE1Kzy1Us/WHyTkHVxpcWdnaEowHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzODJlMzYzNzJl MzAyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMTM1MzIzMTM3Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAc6QwAwDQYJKoZIhvcNAQELBQADggEBAKRJbUiTCUDvvpfS1AaIQ9BX7joAktt0 znKNuEXISt6uf4gxG3pPterZaBugLEb16SZpuSaPuPR6FCKCNpXb2zqZwImO4Lfm zFGXHO2LdJSWcqCTVdERLJ0hBpQKYFLHaGlIqyhadKL09JV5rej1CoFJGJbSv/rW ByaY2OFt1h9x19gP0tr8nr0rlF//vWWIhiR64D0Id7alSe3FnLR2Pf76RjMoOup5 JsRrAQKu3FnPcwr7KGYTBsAMbsWs/6NQ3xNpc9U9DmlnLuvsqT9jE4YCYGWAjeTd bAwcwB4eYtzoqWGAR+dim8VGDNpQbGhI6MCrIDC7IswC3khYEEnGIeY= -----END CERTIFICATE-----Generated at Sat Sep 26 16:18:12 2026 by rpki-client