$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e20313532313739.roa File: 35392e3130372e3132382e302f31372d3234203d3e20313532313739.roa (raw, json) Hash identifier: O4vAn5qZTpT8hSl+bHIm1dabZi4AAmZ82/Acu34dsKg= Subject key identifier: A9:A4:1D:27:E0:F5:B1:BB:27:BA:50:C7:2F:F7:B9:5F:09:32:1E:32 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 6124792D573A0FC1293AFF645253C1F0A97EAC86 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e20313532313739.roa Signing time: Fri 11 Sep 2026 12:25:25 +0000 ROA not before: Fri 11 Sep 2026 12:20:25 +0000 ROA not after: Fri 10 Sep 2027 12:25:25 +0000 asID: 152179 IP address blocks: 59.107.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:24:79:2d:57:3a:0f:c1:29:3a:ff:64:52:53:c1:f0:a9:7e:ac:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Sep 11 12:20:25 2026 GMT Not After : Sep 10 12:25:25 2027 GMT Subject: CN=A9A41D27E0F5B1BB27BA50C72FF7B95F09321E32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8b:46:e6:0e:2f:3e:28:d1:f8:fb:a2:e1:b2: 22:1f:a6:78:0d:1b:2c:4f:6a:92:d9:25:32:0b:92: 44:73:9a:4f:f6:7d:40:a8:c2:45:4f:73:0b:c8:d7: e2:61:4b:85:8c:56:81:bf:89:19:63:a6:74:2e:82: eb:66:76:32:a9:cb:61:1d:4e:5c:15:c5:b1:ae:e5: 49:80:42:17:d0:0c:73:ac:47:de:10:51:69:78:85: c8:56:fc:39:0f:9e:1e:b2:b0:f5:1e:de:aa:94:1a: a6:02:f1:60:9f:75:b0:9e:ff:f7:69:3a:58:44:3b: ba:74:55:2c:9e:3a:d6:84:d9:a0:3d:47:2c:d8:34: 31:00:f4:f1:9d:6f:d0:80:dd:72:87:ff:b2:ad:b8: d3:54:2b:51:93:93:f8:7b:d8:53:c6:0c:14:6e:40: 1f:c8:9f:6f:d0:73:5a:c6:11:da:63:1c:8f:ba:63: 6c:89:59:f7:41:b2:00:50:ae:94:c6:c4:7b:5e:60: b8:34:0e:cd:dd:29:70:b8:7a:3e:49:8b:cf:e1:f7: 86:72:f5:1d:9a:04:7b:77:ed:05:4d:b4:95:7a:b7: 38:dc:64:fe:78:b9:68:f5:9e:84:d1:6e:e0:35:c2: d5:56:12:71:39:86:f6:ec:02:2a:10:ca:65:d5:19: da:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A4:1D:27:E0:F5:B1:BB:27:BA:50:C7:2F:F7:B9:5F:09:32:1E:32 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.107.128.0/17 Signature Algorithm: sha256WithRSAEncryption bb:76:07:e2:27:bd:f2:0a:e7:8a:c8:bf:a7:3d:de:dc:e5:77: 31:dd:39:7d:97:f0:b6:1d:30:41:89:c8:bb:5d:4c:bd:2a:55: 01:b2:dc:c3:6d:ec:2f:9e:da:96:7b:8d:49:e3:88:a3:c9:4a: 15:f4:81:f7:b7:9a:f3:6e:7c:ca:a6:a8:88:15:4a:9e:70:53: 45:c8:99:ad:dd:59:c3:dd:05:71:22:d2:b8:c4:ce:40:73:4c: a7:a5:fb:b2:e0:67:07:13:7f:a5:5d:1a:07:89:ac:e0:e7:bf: 91:cb:3d:55:3e:db:0c:49:47:67:3d:fa:a2:96:1d:01:af:cb: 80:38:c2:44:74:4d:1f:8c:2a:11:43:88:71:4f:85:74:00:ae: db:7b:81:3c:49:8a:ec:4b:cb:d7:c7:96:be:32:99:b0:18:f9: bb:d9:89:ec:d0:c3:30:06:c0:85:8a:72:8a:14:e6:99:4b:a7: ff:b3:8c:17:13:de:6e:ab:cd:07:07:43:0f:14:a5:48:d4:37: ba:c8:10:15:10:02:80:3f:0f:5d:cd:d1:5a:1d:7c:96:06:55: 63:7a:3d:84:a9:48:d9:3e:6d:90:a1:8a:52:a9:d3:db:02:a0: 7a:0b:79:65:7b:b6:12:ef:6c:49:0b:e3:eb:6b:ce:dc:d3:fd: 0c:e8:4d:4f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYSR5LVc6D8EpOv9kUlPB8Kl+rIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA5MTExMjIwMjVaFw0yNzA5MTAxMjI1MjVaMDMxMTAvBgNV BAMTKEE5QTQxRDI3RTBGNUIxQkIyN0JBNTBDNzJGRjdCOTVGMDkzMjFFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXi0bmDi8+KNH4+6LhsiIfpngN GyxPapLZJTILkkRzmk/2fUCowkVPcwvI1+JhS4WMVoG/iRljpnQugutmdjKpy2Ed TlwVxbGu5UmAQhfQDHOsR94QUWl4hchW/DkPnh6ysPUe3qqUGqYC8WCfdbCe//dp OlhEO7p0VSyeOtaE2aA9RyzYNDEA9PGdb9CA3XKH/7KtuNNUK1GTk/h72FPGDBRu QB/In2/Qc1rGEdpjHI+6Y2yJWfdBsgBQrpTGxHteYLg0Ds3dKXC4ej5Ji8/h94Zy 9R2aBHt37QVNtJV6tzjcZP54uWj1noTRbuA1wtVWEnE5hvbsAioQymXVGdrTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUqaQdJ+D1sbsnulDHL/e5XwkyHjIwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC8zNTM5MmUzMTMw MzcyZTMxMzIzODJlMzAyZjMxMzcyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzczOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBztrgDANBgkqhkiG9w0BAQsFAAOCAQEAu3YH4ie98grnisi/pz3e 3OV3Md05fZfwth0wQYnIu11MvSpVAbLcw23sL57alnuNSeOIo8lKFfSB97ea8258 yqaoiBVKnnBTRciZrd1Zw90FcSLSuMTOQHNMp6X7suBnBxN/pV0aB4ms4Oe/kcs9 VT7bDElHZz36opYdAa/LgDjCRHRNH4wqEUOIcU+FdACu23uBPEmK7EvL18eWvjKZ sBj5u9mJ7NDDMAbAhYpyihTmmUun/7OMFxPebqvNBwdDDxSlSNQ3usgQFRACgD8P Xc3RWh18lgZVY3o9hKlI2T5tkKGKUqnT2wKgegt5ZXu2Eu9sSQvj62vO3NP9DOhN Tw== -----END CERTIFICATE-----Generated at Sat Oct 10 17:15:55 2026 by rpki-client