$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20323037353530.roa File: 35382e36372e302e302f31372d3234203d3e20323037353530.roa (raw, json) Hash identifier: DS1dbHB3c3Xp7MzhGo9/zm3NEC8Y0vjfgLqioiTa4m4= Subject key identifier: FD:43:21:F2:0B:BA:2B:80:18:CD:E8:B9:91:3E:D8:0F:8E:99:7B:FA Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 7F95B46B06AC120CDE4D07209A3E2849D7B8BB52 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20323037353530.roa Signing time: Fri 11 Sep 2026 12:26:41 +0000 ROA not before: Fri 11 Sep 2026 12:21:41 +0000 ROA not after: Fri 10 Sep 2027 12:26:41 +0000 asID: 207550 IP address blocks: 58.67.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 08:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:95:b4:6b:06:ac:12:0c:de:4d:07:20:9a:3e:28:49:d7:b8:bb:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Sep 11 12:21:41 2026 GMT Not After : Sep 10 12:26:41 2027 GMT Subject: CN=FD4321F20BBA2B8018CDE8B9913ED80F8E997BFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:87:2d:5c:09:46:02:e7:fe:db:f7:58:54:91: a5:6a:7f:f2:6b:21:38:8b:16:ff:92:7c:b2:1d:ac: db:54:ba:5b:f8:05:eb:fb:ec:08:a0:b0:b5:0e:e0: 9c:01:fd:13:30:d5:d2:31:a8:d0:80:99:5b:7d:18: f2:57:dc:04:c2:9b:3e:c1:a5:58:47:7c:39:c1:72: d1:70:c5:21:59:af:d9:95:b9:e6:8a:21:23:35:2e: bf:ee:9b:0f:54:9a:bc:58:55:ec:14:1d:7c:cf:4e: 60:e2:54:1c:1c:14:3d:ca:39:69:0a:42:3a:3d:9e: b3:6b:4c:56:84:68:ff:dc:d3:01:af:06:b4:ef:cf: 78:f4:ce:88:fc:47:1a:05:1a:69:26:03:8c:79:7f: af:5f:d2:91:80:6c:f4:58:67:0d:ce:87:a6:41:1c: de:f2:15:20:04:f0:07:8f:df:d4:a3:c3:c3:e8:4e: a1:dd:f7:d5:39:17:74:a7:61:a0:98:ad:d0:e5:0b: 0f:ff:2a:2d:b2:fc:de:19:73:1a:9c:0e:7a:ab:36: b9:1a:98:ae:1f:e4:08:4f:a7:94:1a:c5:9b:ea:11: 84:14:05:c6:b8:c8:a1:d9:0e:3d:ea:67:3a:ef:09: 39:b4:4e:ba:20:ee:dd:85:8c:61:6c:f9:0c:f4:7b: ce:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:43:21:F2:0B:BA:2B:80:18:CD:E8:B9:91:3E:D8:0F:8E:99:7B:FA X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20323037353530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.67.0.0/17 Signature Algorithm: sha256WithRSAEncryption 37:e8:98:10:81:5b:20:d2:d1:76:02:b4:8e:78:c9:63:c9:48: 13:11:64:68:a2:94:e8:5b:04:b1:a0:6b:d7:86:ad:ba:d6:1b: f7:97:f4:66:36:9a:a0:79:4c:09:ba:db:41:e0:f4:80:ab:bf: 4f:d5:a6:9e:87:17:e9:c1:bd:0d:8b:2d:6f:8b:0c:5a:4f:00: c6:3b:6b:dc:d8:41:63:99:86:23:fd:34:1e:c7:e5:55:85:3e: d3:42:3b:a1:33:98:25:d2:76:80:e5:60:5e:29:d2:e7:0a:e8: 80:53:44:b2:06:1b:a4:fe:ee:eb:a6:97:4c:c5:58:22:22:0b: 3b:49:e1:a9:e2:0b:9f:17:8b:43:c3:e4:e1:77:6d:7e:a5:70: cf:2b:dc:ad:33:2a:dc:03:f4:15:79:0b:78:96:a3:57:b4:50: bb:e8:bd:44:66:22:8e:c5:c5:4a:d7:8b:9f:10:04:40:40:bc: d8:a2:95:71:3d:3b:47:15:26:36:cd:09:69:7e:a6:54:f8:db: b4:a1:81:91:23:7a:1a:a9:8d:c9:94:6b:4f:10:67:95:22:af: ae:e1:f5:a6:51:ba:2e:18:b4:23:cb:86:25:a2:78:c1:a8:75: 0e:8e:a7:c6:14:3f:8f:1f:e8:98:20:73:74:94:24:74:2e:e8: 1d:83:bc:50 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUf5W0awasEgzeTQcgmj4oSde4u1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA5MTExMjIxNDFaFw0yNzA5MTAxMjI2NDFaMDMxMTAvBgNV BAMTKEZENDMyMUYyMEJCQTJCODAxOENERThCOTkxM0VEODBGOEU5OTdCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkhy1cCUYC5/7b91hUkaVqf/Jr ITiLFv+SfLIdrNtUulv4Bev77AigsLUO4JwB/RMw1dIxqNCAmVt9GPJX3ATCmz7B pVhHfDnBctFwxSFZr9mVueaKISM1Lr/umw9UmrxYVewUHXzPTmDiVBwcFD3KOWkK Qjo9nrNrTFaEaP/c0wGvBrTvz3j0zoj8RxoFGmkmA4x5f69f0pGAbPRYZw3Oh6ZB HN7yFSAE8AeP39Sjw8PoTqHd99U5F3SnYaCYrdDlCw//Ki2y/N4ZcxqcDnqrNrka mK4f5AhPp5QaxZvqEYQUBca4yKHZDj3qZzrvCTm0Trog7t2FjGFs+Qz0e86DAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU/UMh8gu6K4AYzei5kT7YD46Ze/owHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzODJlMzYzNzJl MzAyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMjMwMzczNTM1MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAc6QwAwDQYJKoZIhvcNAQELBQADggEBADfomBCBWyDS0XYCtI54yWPJSBMRZGii lOhbBLGga9eGrbrWG/eX9GY2mqB5TAm620Hg9ICrv0/Vpp6HF+nBvQ2LLW+LDFpP AMY7a9zYQWOZhiP9NB7H5VWFPtNCO6EzmCXSdoDlYF4p0ucK6IBTRLIGG6T+7uum l0zFWCIiCztJ4aniC58Xi0PD5OF3bX6lcM8r3K0zKtwD9BV5C3iWo1e0ULvovURm Io7FxUrXi58QBEBAvNiilXE9O0cVJjbNCWl+plT427ShgZEjehqpjcmUa08QZ5Ui r67h9aZRui4YtCPLhiWieMGodQ6Op8YUP48f6Jggc3SUJHQu6B2DvFA= -----END CERTIFICATE-----Generated at Thu Sep 24 10:02:52 2026 by rpki-client