$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e20323037353530.roa File: 35392e3130372e3132382e302f31372d3234203d3e20323037353530.roa (raw, json) Hash identifier: GgJ4kzdfl++BdxjWvB5QzX6qU+rhe+A5sVTrFbf6ukI= Subject key identifier: D9:DB:D6:2D:49:D0:78:57:89:23:07:A4:04:FD:DD:A3:BB:1C:D4:34 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 71803F57295B73B7D1FFD7B8E25912C0AFABBFAA Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e20323037353530.roa Signing time: Fri 11 Sep 2026 12:25:26 +0000 ROA not before: Fri 11 Sep 2026 12:20:26 +0000 ROA not after: Fri 10 Sep 2027 12:25:26 +0000 asID: 207550 IP address blocks: 59.107.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 22:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:80:3f:57:29:5b:73:b7:d1:ff:d7:b8:e2:59:12:c0:af:ab:bf:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Sep 11 12:20:26 2026 GMT Not After : Sep 10 12:25:26 2027 GMT Subject: CN=D9DBD62D49D07857892307A404FDDDA3BB1CD434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:2b:b9:25:8c:61:fb:6e:be:2b:17:f2:62: f0:36:76:22:c9:3f:c2:6f:84:a1:8e:62:56:f8:b2: 3d:4b:b9:37:57:47:91:08:da:bd:98:f4:97:e6:48: a0:8c:bf:44:41:4b:0d:86:33:ea:29:aa:ae:38:75: 1b:4d:f0:6c:03:20:31:60:2e:95:09:cb:d6:a9:32: 2e:d3:cc:86:09:4d:77:0e:0f:ae:2f:18:20:76:1d: f9:0b:ed:69:1a:7d:70:c2:9a:8e:3b:64:bb:57:62: 0e:d8:84:36:b8:60:86:7d:1c:53:0e:69:3d:eb:ea: fb:8a:f0:68:e8:10:ab:57:e7:5a:f4:bf:80:41:9b: 38:48:23:84:f6:20:79:ed:10:55:6c:b0:d8:d3:8b: 9d:ed:55:98:64:64:bf:0b:f2:8f:b4:f0:63:5d:11: 4d:05:17:4d:be:d6:d1:27:fc:6a:27:f6:9c:e1:f6: ce:99:53:49:ae:2c:4a:b1:11:2f:e4:e9:0b:c7:d3: ca:f9:e2:e0:e3:35:5d:2b:6e:0c:0c:6f:b9:f1:e1: 46:7c:22:38:3d:83:5f:87:c3:ff:9e:cb:63:8d:56: 81:3d:45:73:0e:8d:a1:93:f6:22:20:8e:a6:ce:ad: 04:4f:a7:2c:a6:77:8b:ec:60:3e:a4:df:d6:38:3c: 05:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DB:D6:2D:49:D0:78:57:89:23:07:A4:04:FD:DD:A3:BB:1C:D4:34 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e20323037353530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.107.128.0/17 Signature Algorithm: sha256WithRSAEncryption a3:bb:a7:7b:97:60:2d:46:2e:c7:33:26:cd:80:00:8e:cc:5a: e3:29:48:54:bd:d7:32:05:c7:0f:e7:c7:35:67:35:b0:3a:38: 85:d7:43:6a:17:b0:45:c2:2d:71:48:8d:93:94:53:19:eb:8b: 00:78:16:14:29:0e:21:8a:ea:23:a1:85:e5:30:a8:53:a0:a2: bc:11:f1:9b:61:69:89:29:a5:dd:61:0a:15:32:ca:95:e0:c5: 74:67:34:39:c8:a2:f2:5f:be:9e:ed:b3:9c:8d:c7:8b:36:4f: e2:92:8d:c0:b3:8c:b6:0d:c1:6f:a1:5c:bd:5c:bc:b1:ca:02: 7d:3f:ee:a5:cb:9c:c4:db:34:7f:4a:5a:97:8b:67:8d:31:d4: dd:35:2b:0f:c6:b4:0d:4e:91:26:a3:ea:f5:e9:70:d6:1e:a1: 3b:12:ab:f3:e5:e1:af:33:aa:b6:a1:9f:5f:52:5a:2d:15:e0: 1f:20:2c:00:72:12:97:a5:32:b9:4a:40:4d:da:75:c4:c3:4a: d9:83:54:ca:04:44:3b:ff:13:69:da:9d:93:11:09:21:fa:a6: 34:99:cd:93:5c:ec:02:75:06:81:b1:2f:0f:c5:c8:d9:b7:bc: f6:11:a5:71:3c:87:27:27:82:b4:0a:9f:17:e3:5e:7c:7d:1a: a3:27:14:c4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcYA/Vylbc7fR/9e44lkSwK+rv6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA5MTExMjIwMjZaFw0yNzA5MTAxMjI1MjZaMDMxMTAvBgNV BAMTKEQ5REJENjJENDlEMDc4NTc4OTIzMDdBNDA0RkREREEzQkIxQ0Q0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCysyu5JYxh+26+KxfyYvA2diLJ P8JvhKGOYlb4sj1LuTdXR5EI2r2Y9JfmSKCMv0RBSw2GM+opqq44dRtN8GwDIDFg LpUJy9apMi7TzIYJTXcOD64vGCB2HfkL7WkafXDCmo47ZLtXYg7YhDa4YIZ9HFMO aT3r6vuK8GjoEKtX51r0v4BBmzhII4T2IHntEFVssNjTi53tVZhkZL8L8o+08GNd EU0FF02+1tEn/Gon9pzh9s6ZU0muLEqxES/k6QvH08r54uDjNV0rbgwMb7nx4UZ8 Ijg9g1+Hw/+ey2ONVoE9RXMOjaGT9iIgjqbOrQRPpyymd4vsYD6k39Y4PAUFAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU2dvWLUnQeFeJIwekBP3do7sc1DQwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC8zNTM5MmUzMTMw MzcyZTMxMzIzODJlMzAyZjMxMzcyZDMyMzQyMDNkM2UyMDMyMzAzNzM1MzUzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBztrgDANBgkqhkiG9w0BAQsFAAOCAQEAo7une5dgLUYuxzMmzYAA jsxa4ylIVL3XMgXHD+fHNWc1sDo4hddDahewRcItcUiNk5RTGeuLAHgWFCkOIYrq I6GF5TCoU6CivBHxm2FpiSml3WEKFTLKleDFdGc0Ocii8l++nu2znI3HizZP4pKN wLOMtg3Bb6FcvVy8scoCfT/upcucxNs0f0pal4tnjTHU3TUrD8a0DU6RJqPq9elw 1h6hOxKr8+XhrzOqtqGfX1JaLRXgHyAsAHISl6UyuUpATdp1xMNK2YNUygREO/8T adqdkxEJIfqmNJnNk1zsAnUGgbEvD8XI2be89hGlcTyHJyeCtAqfF+NefH0aoycU xA== -----END CERTIFICATE-----Generated at Sun Oct 4 19:07:44 2026 by rpki-client