$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2039333034.roa File: 35382e36372e302e302f31372d3234203d3e2039333034.roa (raw, json) Hash identifier: OS8JyvfCLVJ3XyPD4a3GlLEqM0Wmi3FsnfG6IxVUaRY= Subject key identifier: 5D:9B:B8:E4:9E:27:63:9A:EF:32:EB:04:B9:2B:3B:2E:A9:3D:42:CA Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 3474BAB96C8D2B5427DFAE4F727087610D4225EF Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2039333034.roa Signing time: Fri 11 Sep 2026 12:26:41 +0000 ROA not before: Fri 11 Sep 2026 12:21:41 +0000 ROA not after: Fri 10 Sep 2027 12:26:41 +0000 asID: 9304 IP address blocks: 58.67.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 08:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:74:ba:b9:6c:8d:2b:54:27:df:ae:4f:72:70:87:61:0d:42:25:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Sep 11 12:21:41 2026 GMT Not After : Sep 10 12:26:41 2027 GMT Subject: CN=5D9BB8E49E27639AEF32EB04B92B3B2EA93D42CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2b:53:e4:9b:e0:24:60:b6:a5:e6:e6:b3:78: bb:00:cc:dd:c4:6b:4a:88:c6:5d:e8:1f:43:6f:3f: 0d:e3:a6:3d:09:eb:cc:06:22:da:a7:3b:3a:c8:a6: 5e:a4:ca:7c:d2:b9:b1:8a:24:32:0a:65:15:8c:a8: 07:79:89:d7:e6:3f:cd:90:de:b9:de:8c:b3:9e:c4: f2:3b:2c:ba:5f:bd:11:eb:67:94:7a:b1:9f:36:b8: b8:7d:d5:2a:74:46:c4:34:ae:02:5f:b1:c4:08:31: 80:0a:c6:cd:37:71:fa:33:2a:31:ba:9f:4f:1e:48: 1c:ad:ac:f6:09:61:c5:87:9c:58:6a:f4:eb:a7:ca: 59:0d:69:b9:05:a0:ab:6a:c1:35:95:9d:1f:3f:42: 43:44:8a:06:14:84:8a:39:04:a8:81:4b:85:55:56: 23:c5:c7:ec:43:2d:d5:9b:12:25:e6:dc:af:6f:d8: f6:f3:06:f3:47:bd:39:43:93:75:93:33:45:cd:a8: 15:b9:55:6e:87:bb:c5:d9:bb:56:b3:82:a5:d1:08: 7b:4f:48:fd:36:0b:7f:18:e1:2b:b3:89:8e:a9:a5: 07:c8:60:22:72:7b:e0:3c:9b:2b:e5:ca:bb:33:e7: d6:10:a8:db:89:ff:6f:8e:7d:0a:f0:62:e2:cd:8b: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9B:B8:E4:9E:27:63:9A:EF:32:EB:04:B9:2B:3B:2E:A9:3D:42:CA X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.67.0.0/17 Signature Algorithm: sha256WithRSAEncryption 9a:66:03:35:be:26:c7:40:a2:f2:0f:1a:de:09:95:b0:48:a1: 47:82:3a:a9:11:cb:cb:e8:7b:38:32:02:a7:01:a7:38:a1:43: 5e:65:ba:bb:be:46:68:9f:77:b4:6e:72:87:fd:33:82:e1:60: 42:a7:97:4c:a5:70:a7:2d:c4:b3:17:9b:b1:d3:cf:7d:d0:e7: b8:82:b5:25:71:3d:80:2e:cd:88:b0:23:23:b1:2b:8d:fd:8d: 9b:ef:9d:a0:3d:34:c1:c7:f1:1f:72:20:4f:76:5d:7e:3c:07: 17:20:c8:d6:b0:46:9b:0b:c6:1a:57:4b:56:2d:46:e0:64:98: 7f:93:b0:3a:51:6d:09:5c:bf:9d:46:71:50:cc:6a:4d:eb:bc: fd:67:35:fb:10:5a:5a:da:6b:db:bc:6f:b6:3f:c0:ea:f9:46: e4:a6:f1:69:70:2f:2f:cc:c9:2e:80:a5:ba:e1:1e:ae:1d:3a: a9:6b:5c:74:40:9b:72:05:4f:32:86:d8:b1:52:8c:41:32:2a: a7:9c:b9:51:f7:f8:91:0f:d2:3c:b1:25:ef:ed:7c:83:71:02: 7c:33:80:fa:5a:db:2d:c6:4c:53:d2:dd:62:1b:c5:3f:6d:96: 18:bc:2a:60:ae:84:b8:eb:91:af:5b:5c:f5:11:61:94:18:98: f6:12:78:d5 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUNHS6uWyNK1Qn365PcnCHYQ1CJe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA5MTExMjIxNDFaFw0yNzA5MTAxMjI2NDFaMDMxMTAvBgNV BAMTKDVEOUJCOEU0OUUyNzYzOUFFRjMyRUIwNEI5MkIzQjJFQTkzRDQyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZK1Pkm+AkYLal5uazeLsAzN3E a0qIxl3oH0NvPw3jpj0J68wGItqnOzrIpl6kynzSubGKJDIKZRWMqAd5idfmP82Q 3rnejLOexPI7LLpfvRHrZ5R6sZ82uLh91Sp0RsQ0rgJfscQIMYAKxs03cfozKjG6 n08eSBytrPYJYcWHnFhq9OunylkNabkFoKtqwTWVnR8/QkNEigYUhIo5BKiBS4VV ViPFx+xDLdWbEiXm3K9v2PbzBvNHvTlDk3WTM0XNqBW5VW6Hu8XZu1azgqXRCHtP SP02C38Y4SuziY6ppQfIYCJye+A8myvlyrsz59YQqNuJ/2+OfQrwYuLNizYRAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUXZu45J4nY5rvMusEuSs7Lqk9QsowHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzODJlMzYzNzJl MzAyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzpD ADANBgkqhkiG9w0BAQsFAAOCAQEAmmYDNb4mx0Ci8g8a3gmVsEihR4I6qRHLy+h7 ODICpwGnOKFDXmW6u75GaJ93tG5yh/0zguFgQqeXTKVwpy3EsxebsdPPfdDnuIK1 JXE9gC7NiLAjI7Erjf2Nm++doD00wcfxH3IgT3ZdfjwHFyDI1rBGmwvGGldLVi1G 4GSYf5OwOlFtCVy/nUZxUMxqTeu8/Wc1+xBaWtpr27xvtj/A6vlG5KbxaXAvL8zJ LoCluuEerh06qWtcdECbcgVPMobYsVKMQTIqp5y5Uff4kQ/SPLEl7+18g3ECfDOA +lrbLcZMU9LdYhvFP22WGLwqYK6EuOuRr1tc9RFhlBiY9hJ41Q== -----END CERTIFICATE-----Generated at Thu Sep 24 19:02:25 2026 by rpki-client